Summary: desa99 collects only the personal data necessary to operate our platform, verify your identity, process your transactions, and comply with applicable regulations. We do not sell your personal information to third parties for marketing purposes — ever. This policy tells you precisely what we collect, why, and what rights you have over your data.
01 Introduction
This Privacy Policy applies to all personal data processed by desa99 (referred to throughout as "we", "us", or "our") in connection with the operation of the online gaming platform accessible at https://desa99.cam (the "Platform"). It applies to all registered players, prospective users who interact with our Platform without registering, and anyone who contacts us via our support channels.
By accessing or using the desa99 Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Platform.
desa99 serves players primarily in Indonesia — including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and beyond — and handles all personal data in accordance with internationally recognized data protection principles. We process your data lawfully, fairly, and transparently.
02 Definitions
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, contact details, financial data, device identifiers, and behavioral data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, and transmission. |
| "Data Controller" | desa99, which determines the purposes and means of processing your personal data. |
| "Data Processor" | A third-party service provider that processes personal data on desa99's behalf under a binding data processing agreement. |
| "Player" / "You" | Any individual who registers for, accesses, or interacts with the desa99 Platform. |
| "KYC" | Know Your Customer — identity and age verification procedures applied during account registration and prior to withdrawal processing. |
| "Cookie" | A small text file stored on your device by the Platform to enable functionality, remember preferences, and support analytics. |
03 Data We Collect
desa99 collects personal data across several categories depending on how you interact with the Platform. Below is a comprehensive breakdown of the data we may hold about you:
3.1 Identity & Registration Data
When you register for a desa99 Account, we collect:
- Full legal name
- Date of birth (used to verify you are 21 or older)
- Gender (optional)
- Indonesian National Identity Card number (KTP) or passport number
- Residential address (city, province, postal code)
- Email address
- Indonesian mobile phone number
- Username and encrypted password
3.2 Financial Data
To process deposits and withdrawals, we collect:
- Indonesian bank account details (bank name, account number, account holder name) — applicable for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, and other supported banks
- USDT cryptocurrency wallet addresses
- Transaction history (deposit amounts, withdrawal amounts, dates, and reference numbers)
- Bonus and promotional activity records
3.3 KYC Verification Data
As part of our identity verification process, we may collect:
- Scanned copies or photographs of government-issued identity documents
- Proof of address documents (utility bills, bank statements)
- Selfie photographs for liveness verification
- Source of funds declarations and supporting documentation
3.4 Technical & Device Data
We automatically collect the following data when you access the Platform:
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Session timestamps, page views, and navigation paths
- Cookie identifiers and session tokens
3.5 Behavioral & Gaming Data
- Bet history, game selections, wager amounts, and outcomes
- Sports markets accessed (including BRI Liga 1, EPL, and other leagues)
- Game categories played (slots, live dealer, togel — Indonesia's traditional numbers lottery — and other products)
- Responsible gaming tool usage (deposit limits set, self-exclusion requests)
3.6 Communications Data
- Support chat transcripts and email correspondence
- Feedback and complaint records
- Responses to surveys or promotions (where applicable)
04 How We Collect Data
desa99 collects your personal data through the following channels:
- Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
- Automatically: When you browse or use the Platform, our servers and analytics tools collect technical and behavioral data passively via cookies, server logs, and similar tracking technologies.
- From third-party service providers: Our KYC verification partners, payment processors, and fraud detection services may provide us with data about you as part of their contracted services — for example, identity verification results or transaction risk scores.
- From public sources: We may cross-reference publicly available information (such as sanctions lists or politically exposed persons registers) as part of our anti-money laundering compliance obligations.
05 How We Use Your Data
desa99 uses your personal data only for the purposes for which it was collected or for compatible purposes that you would reasonably expect. The primary uses are:
| Purpose | Data Used |
|---|---|
| Account creation & management | Identity data, contact details, login credentials |
| Identity & age verification (KYC) | Identity documents, selfie photos, date of birth |
| Payment processing | Bank account details, USDT wallet addresses, transaction records |
| Fraud prevention & security | IP address, device data, behavioral patterns, transaction history |
| Regulatory & AML compliance | Identity data, financial data, source of funds documentation |
| Customer support | Account data, communications history, game/transaction records |
| Responsible gaming monitoring | Gaming behavior data, deposit history, limit settings |
| Platform improvement & analytics | Technical data, behavioral data (aggregated and anonymized) |
| Promotional communications | Contact details, gaming preferences (only with your consent) |
desa99 does not use your personal data for automated decision-making that produces significant legal effects, except where required for identity verification, fraud screening, or responsible gaming interventions — in which case you have the right to request human review of the decision.
06 Legal Basis for Processing
desa99 processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and game operation.
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and reporting duties to regulatory authorities.
- Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where those interests are not overridden by your privacy rights.
- Consent: Processing for optional marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw this consent at any time by contacting our support team.
07 Data Sharing & Disclosure
desa99 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:
7.1 Service Providers (Data Processors)
We engage carefully vetted third-party processors to support our operations. These include:
- Payment processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and cryptocurrency infrastructure providers for USDT transactions.
- KYC & identity verification providers: Specialized services that verify the authenticity of identity documents and conduct liveness checks.
- Fraud detection & cybersecurity services: Providers that analyze transactional and behavioral patterns to detect and prevent fraudulent activity.
- Cloud hosting & infrastructure: Secure server infrastructure providers that host Platform data under strict contractual data protection obligations.
- Game software providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, and others receive anonymized session tokens necessary for game delivery — they do not receive your full identity data.
All data processors are bound by contractual data protection agreements that restrict their use of your data to the specific purposes for which it was shared.
7.2 Regulatory & Legal Disclosure
desa99 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or binding regulatory direction. In such cases, we disclose only the minimum data required to satisfy the legal obligation and will notify you of any such disclosure where permitted by law.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of substantially all of desa99's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the successor's privacy practices before any change to how your data is handled takes effect.
No Sale of Data: desa99 has never sold player personal data to a third party and has no intention to do so. Any arrangement with a third party involves only the minimum data necessary and is governed by a binding data processing agreement.
08 Data Retention
desa99 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | AML regulatory obligation |
| KYC documents | Duration of account + 5 years post-closure | AML regulatory obligation |
| Financial transaction records | Duration of account + 5 years post-closure | AML / financial recordkeeping |
| Gaming history | Duration of account + 2 years post-closure | Dispute resolution, regulatory audit |
| Support communications | 3 years from date of communication | Customer service & dispute records |
| Technical & device logs | 12 months on a rolling basis | Security & fraud monitoring |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent audit trail |
Once a retention period expires, personal data is securely deleted or anonymized so that it can no longer be linked to any identifiable individual.
09 Data Security
desa99 implements a multi-layered security framework to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our key security measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- Encryption at rest for sensitive personal data and financial records stored on our infrastructure.
- Access controls: Strict role-based access ensures that only authorized desa99 personnel with a legitimate need can access player data.
- Two-factor authentication (2FA) available for all player accounts to prevent unauthorized access.
- Regular penetration testing and security audits conducted by independent cybersecurity specialists.
- Fraud detection systems that continuously monitor for suspicious login attempts, unusual transaction patterns, and multi-account activity.
Despite our robust security measures, no online platform can guarantee absolute security against all threats. If you suspect unauthorized access to your desa99 Account, contact our support team immediately at [email protected].
10 Cookies & Tracking Technologies
desa99 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyze how the Platform is used. The types of cookies we use are:
| Cookie Type | Purpose | Essential? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | Yes — cannot be disabled |
| Functional | Remembering language preference, display settings, game state | No — disabled without affecting core access |
| Analytics | Aggregate traffic analysis, page performance monitoring (anonymized) | No — requires consent |
| Fraud Detection | Device fingerprinting and behavioral anomaly detection | Yes — required for platform security |
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or fraud detection cookies may prevent core Platform features from functioning correctly. desa99 does not use third-party advertising or retargeting cookies.
11 Your Rights
As a player on the desa99 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all verified requests within 30 days.
Right of Access
Request a copy of all personal data we hold about you, including the categories, sources, and purposes of processing.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal retention requirements.
Right to Object
Object to processing based on legitimate interests, including any direct marketing communications.
Right to Restriction
Request that we restrict processing of your data while a correction request or objection is being evaluated.
Right to Portability
Receive a structured, machine-readable copy of the data you have provided to us for transfer to another service.
Note on Regulatory Retention: Some rights — particularly erasure and portability — may be limited where desa99 is legally required to retain your data under AML regulations or for the purpose of resolving active disputes. We will always explain any such limitation clearly when responding to your request.
12 Minors & Age Restriction
The desa99 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe your child has registered on our Platform, please contact us immediately at [email protected]. We will investigate and, if confirmed, delete all data associated with the underage account without delay.
desa99 applies age verification as a mandatory step during the KYC process. Any Account where the verified age of the holder is found to be below 21 will be permanently closed and all associated funds forfeited in accordance with our Terms & Conditions.
13 Third-Party Services
The desa99 Platform may reference or integrate with third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) whose software is delivered through our Platform. While these providers operate under data processing agreements with desa99, they maintain their own privacy and data security practices governing data processed within their game engines.
desa99 is not responsible for the privacy practices of any third-party service that operates independently of our Platform. We encourage you to review the privacy policies of any third-party services you interact with. Our Terms & Conditions contain further detail on the scope of third-party involvement in game delivery.
14 Policy Changes
desa99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect your rights, notify you via the email address registered to your Account.
We encourage you to review this Privacy Policy periodically. Continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any update, you should cease using the Platform and request Account closure.
15 Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the desa99 data team through the following channel:
- Email: [email protected]
- Response Time: Within 30 days of a verified written request
- Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)
- Languages Supported: English and Indonesian
If you believe your data protection rights have been violated and our response does not resolve your concern to your satisfaction, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.
When contacting us about a data subject request, please include your registered Account username and a clear description of your request to enable us to locate your records and respond efficiently. All privacy-related correspondence is handled confidentially by our dedicated support team.