Privacy Policy

gim99 (accessible at https://gim99.cam) is the data controller responsible for the personal information of Members who register and use the Platform. As data controller, gim99 determines the purposes for which personal data is processed and the manner in which that processing takes place.

This Privacy Policy applies to all personal data collected through your use of the gim99 website, any related mobile browser experience, and all communications between you and gim99's support team. It does not apply to third-party websites or services that may be linked to or from the Platform; gim99 accepts no responsibility for the privacy practices of such third parties.

The categories of personal data gim99 collects depend on how you interact with the Platform. The table below summarises each category, the specific data points it encompasses, and the primary reason we collect it.

gim99 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data used for identification, or health data) unless expressly required by law or with your explicit consent.

gim99 collects personal data through three primary channels:

• Directly from you: when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically from your device: through cookies, web beacons, server logs, and similar tracking technologies as you navigate and interact with the Platform. See Section 10 for full details on our cookies policy.
• From third parties: including identity verification service providers, payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), fraud-prevention databases, and publicly available sanctions screening lists. gim99 only requests data from third parties where it has a legitimate legal or contractual basis to do so.

You are under no obligation to provide personal data to gim99; however, failure to provide certain mandatory information (such as identity details for KYC) will prevent gim99 from opening or maintaining your Account or processing your withdrawal requests.

gim99 processes your personal data only for clearly defined, lawful purposes. The specific purposes for which we use your data are as follows:

• Account creation and management: to register your Account, verify your identity, maintain your account settings, and communicate account-related information to you.
• Provision of betting and gaming services: to accept and settle your wagers, manage your Account balance, and provide access to the full range of products on the Platform.
• Payment processing: to facilitate deposits and withdrawals via your chosen bank or e-wallet channel, and to reconcile transaction records.
• Legal and regulatory compliance: to meet our obligations under anti-money laundering (AML) regulations, counter-terrorism financing (CTF) requirements, Know Your Customer (KYC) standards, and any applicable data protection laws.
• Responsible gaming: to monitor gaming behaviour for signs of problem gambling, enforce self-imposed limits, and intervene where appropriate under our Responsible Gaming framework.
• Fraud and security: to detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other security threats.
• Customer support: to respond to your enquiries, resolve disputes, and maintain records of our communications with you.
• Platform improvement: to analyse aggregate usage patterns, identify technical issues, and develop new features — always using anonymised or aggregated data where possible.
• Marketing communications: to send you promotional offers, bonus notifications, and product updates, but only where you have given consent or where we have a legitimate interest and you have not opted out. You may opt out of marketing communications at any time by contacting support.

gim99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing that is required to perform the contract between you and gim99 — including account registration, payment processing, and the provision of betting services.
• Legal obligation: processing required to comply with applicable laws and regulations, including AML/CTF obligations, KYC requirements, and data retention mandates imposed by our operating licence.
• Legitimate interests: processing carried out for gim99's legitimate business interests (such as fraud prevention, platform security, and service improvement) where those interests are not overridden by your privacy rights.
• Consent: processing for purposes such as marketing communications, where your freely given, specific, informed, and unambiguous consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

gim99 does not share your personal data with third parties except in the following circumstances:

• Payment service providers: your financial data is shared with the relevant bank or e-wallet operator (e.g., BCA, BRI, OVO, DANA) solely to the extent necessary to process your deposit or withdrawal transaction.
• Identity and fraud verification providers: your identity data may be shared with third-party KYC and AML screening services to verify your identity and check your details against sanctions and watchlists.
• Game studio providers: technical session data (such as your player ID and wager records) is shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — for the purpose of delivering and auditing game outcomes. These studios operate under their own independent privacy and data-handling standards.
• Legal and regulatory authorities: gim99 will disclose personal data to competent courts, regulators, law enforcement agencies, or other governmental bodies where required to do so by law, legal process, or our operating licence conditions.
• Corporate transactions: in the event of a merger, acquisition, or sale of all or part of gim99's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

gim99 operates infrastructure and engages service providers that may be located outside Indonesia. Where your personal data is transferred to a country outside your jurisdiction, gim99 takes steps to ensure that an adequate level of protection applies to that data, including:

• Using service providers that are bound by contractual data processing agreements containing standard data protection clauses;
• Verifying that any recipient country offers an adequate level of personal data protection consistent with internationally recognised standards; and
• Applying additional safeguards (such as encryption and access controls) to data transferred to jurisdictions that do not benefit from an adequacy determination.

Game studios and payment processors engaged by gim99 are required, as a condition of their engagement, to handle personal data in accordance with standards at least equivalent to those described in this Privacy Policy.

gim99 retains your personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category.

Where retention beyond these periods is required due to an ongoing investigation, legal proceedings, or regulatory instruction, gim99 will retain the relevant data until such matters are fully resolved.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

gim99 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit TLS/SSL encryption applied to all data in transit between your browser and gim99's servers — every page, every API call, every file upload.
• Encryption at rest for all personally identifiable information and financial data stored in our databases.
• Geographically redundant data centres with physical access controls, biometric entry restrictions, and 24/7 on-site security monitoring.
• Role-based access controls ensuring that gim99 staff can only access personal data that is strictly necessary for their job function.
• Two-factor authentication (2FA) available for all Member accounts and mandatory for all gim99 internal administrative access.
• Regular penetration testing and vulnerability scanning conducted by independent third-party security firms.
• Incident response procedures that require gim99 to notify affected Members and relevant authorities in the event of a data breach that is likely to result in a risk to individual rights, within the timeframes required by applicable law.

While gim99 takes every reasonable precaution to protect your data, no security system is entirely impenetrable. You are responsible for maintaining the confidentiality of your account credentials and for notifying gim99 immediately if you suspect unauthorised access to your account.

gim99 uses cookies and similar web technologies (including web beacons, pixel tags, and local storage objects) to deliver, maintain, and improve the Platform. The following cookie categories are in use:

• Strictly necessary cookies: essential for the Platform to function. These include session authentication tokens, security tokens, and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Functional cookies: remember your preferences such as language settings, preferred deposit method, and last-visited game category, enabling a more personalised experience on subsequent visits.
• Analytical cookies: collect anonymised or aggregated data on how Members navigate the Platform — page views, session duration, most-visited sections — to help gim99 identify performance bottlenecks and improve usability.
• Security cookies: assist in detecting and preventing fraudulent logins, unusual session behaviour, and bot traffic.

gim99 does not use third-party advertising cookies or serve behavioural advertising based on your Platform activity. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

Depending on your location and the applicable data protection framework, you may hold one or more of the following rights in relation to the personal data gim99 holds about you. To exercise any of these rights, please contact our Data Privacy team at the address in Section 14.

gim99 will not charge a fee for handling data rights requests made in good faith. We reserve the right to request reasonable identity verification before processing any such request to protect against unauthorised access to personal data.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on gim99, please contact us immediately at [email protected] so that we can take prompt corrective action. We encourage parents and guardians to make use of parental control tools and to maintain awareness of their children's online activities.

gim99 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — affecting how we collect, use, or share your personal data in a way that may impact your rights — we will notify active Members via the email address registered on their Account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how gim99 protects your information. Your continued use of the Platform following any such update constitutes acceptance of the revised Privacy Policy.

Previous versions of this Privacy Policy are available on request by contacting our Data Privacy team.

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by gim99, please contact our Data Privacy team through the following channel:

Please include your registered Account email address and a clear description of your request. Where a request concerns access, rectification, or erasure of personal data, gim99 may request documentary proof of identity before processing the request, in order to safeguard your data against unauthorised third-party access.