Privacy Policy — sl99k Data Protection Commitment

sl99k ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the sl99k website at https://sl99k.cam. This Privacy Policy describes our data collection and processing practices in relation to Account Holders, prospective registrants, and visitors to the Platform.

This Policy applies to all personal data collected through your use of the Platform, including data provided during registration, identity verification, deposits, withdrawals, gameplay, customer support interactions, and any marketing communications you choose to receive from us.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. Where this Policy conflicts with any other document on a privacy matter, this Policy takes precedence.

The following terms carry the meanings assigned below throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data — including name, date of birth, email address, identity document numbers, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means sl99k, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party organization that processes Personal Data on behalf of sl99k under a written data processing agreement.
• "Account Holder" / "You" means any natural person who has created and maintains a registered player account on the Platform.
• "KYC Data" means identity and address verification documents submitted by an Account Holder as part of the Know Your Customer verification process, including government-issued photo ID, proof of address, and payment method ownership evidence.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and analytical data.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including data relating to health, religious beliefs, political opinions, biometric identifiers, and financial position beyond basic payment details.

sl99k collects only the data necessary to operate the Platform, verify player identity, process financial transactions, deliver support, and fulfill our legal and regulatory obligations. The categories of Personal Data we collect are set out below:

sl99k does not intentionally collect Sensitive Data beyond what is strictly required for age and identity verification. KYC documents are handled with heightened security controls and access restrictions.

We collect Personal Data through the following channels:

• Direct submission — data you provide actively when completing the registration form, the KYC submission process, depositing or withdrawing funds, contacting support, or responding to a promotional survey.
• Automated collection — data gathered automatically as you navigate the Platform, including session cookies, server logs recording your IP address and browser fingerprint, and analytics tools that track page-level interaction patterns.
• Third-party verification services — identity verification providers may return enriched data (e.g., name-matching confidence scores) to assist in the KYC process. These providers do not retain your raw documents beyond their contractual service window.
• Payment processing partners — when you initiate a deposit or withdrawal via a local bank (BCA, BRI, BNI, Mandiri) or e-wallet (OVO, DANA, GoPay), transaction metadata is passed between the payment gateway and sl99k to confirm and record the transfer.
• Game studio integrations — certified game providers such as Pragmatic Play, Evolution Gaming, and NetEnt may return session-level gameplay data (game ID, stake size, outcome, session timestamp) to the Platform for account crediting, dispute resolution, and responsible gaming monitoring purposes.

sl99k processes your Personal Data on the following legal grounds, each of which is identified against its corresponding processing activity:

• Contractual necessity — processing required to open and maintain your Account, execute deposits and withdrawals, settle Wagers, and deliver the services described in our Terms & Conditions. Without this processing, the contractual relationship between you and sl99k cannot be performed.
• Legal obligation — processing required to comply with applicable anti-money laundering (AML) regulations, KYC mandates from our licensing authority, and any lawful order issued by a competent regulatory or law enforcement body.
• Legitimate interests — processing undertaken to prevent fraud and account abuse, ensure platform security, improve user experience through aggregated behavioral analytics, and enforce the terms of our bonus and promotional programs. In each case, we have assessed that our legitimate interests do not override your fundamental privacy rights.
• Consent — processing of your data for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing or your continued access to the Platform's core services.

The Personal Data we hold is used for the following purposes, each of which is linked to a legal basis identified in Section 5:

• Creating and maintaining your Account on the sl99k Platform.
• Verifying your identity and age (21+) in accordance with our KYC obligations.
• Processing deposits and withdrawals via your chosen local Indonesian payment method.
• Crediting and settling all Wagers placed on sportsbook markets, live casino tables, slot titles, Sakong, and poker tournaments.
• Providing customer support — including live chat, email correspondence at [email protected], and dispute resolution.
• Enforcing our Terms & Conditions, detecting and preventing fraud, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Monitoring gameplay patterns in connection with our Responsible Gaming obligations, including the identification of potentially problematic gambling behavior and the application of player protection tools.
• Sending transactional communications — Account confirmation emails, deposit receipts, withdrawal notifications, and security alerts. These are service messages and cannot be opted out of while your Account remains active.
• Sending promotional communications (where you have opted in) — bonus offers, seasonal promotions tied to Indonesian cultural events such as Idul Fitri, Independence Day, and Ramadhan, new game announcements, and VIP program updates.
• Conducting aggregated, anonymized analytics to improve the Platform's performance, navigation, and game selection.

sl99k does not sell your Personal Data. We share data only with the following categories of trusted third parties, under written data processing agreements that bind them to confidentiality and purpose-limitation obligations equivalent to our own:

• Identity verification providers — to perform KYC checks on submitted documents. These providers are contractually prohibited from using your data for any purpose other than the verification service they provide to sl99k.
• Payment processing partners — Indonesian bank gateways and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to process deposits and withdrawals in IDR.
• Certified game studios — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a session token and stake/outcome data sufficient to operate their games within the Platform environment. They do not receive your full identity or financial profile.
• Cloud infrastructure and hosting providers — server infrastructure used to host the Platform and store data securely. These providers act as Data Processors under our direction and may not use Platform data for their own purposes.
• Regulatory and law enforcement bodies — sl99k will disclose Personal Data to competent authorities when required to do so by a lawful order, court order, or regulatory mandate. We will notify you of such a disclosure where legally permissible to do so.
• Professional advisors — legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and engage with data solely in the context of advising sl99k.

All third-party Data Processors are required to implement technical and organizational security measures appropriate to the sensitivity of the data they handle on our behalf. sl99k conducts periodic reviews of third-party data handling practices as part of our ongoing vendor management program.

sl99k retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, subject to the minimum retention periods required by our licensing authority and applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where deletion is technically constrained by backup architecture, data is logically isolated and excluded from active processing pending the next scheduled purge cycle.

sl99k uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The categories of cookies we use are as follows:

• Strictly necessary cookies — essential for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional cookies — used to remember your preferences, such as your preferred deposit method and display settings. These enhance your experience but are not strictly required for the Platform to operate.
• Analytical cookies — aggregated, anonymized data on how users navigate the Platform (pages visited, session duration, game categories browsed) used to improve platform design and performance. These cookies are subject to your consent.
• Security cookies — used to detect and prevent fraudulent activity, bot traffic, and multi-accounting. These work in conjunction with our fraud detection systems and are classified as strictly necessary for platform integrity.

You may manage your cookie preferences through your browser settings. Note that disabling cookies beyond strictly necessary types may affect certain Platform features. sl99k does not use cross-site tracking cookies to follow your activity on third-party websites.

sl99k implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and sl99k servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial account details.
• Role-based access control (RBAC) ensuring that only personnel with a verified operational need may access identifiable player records.
• Multi-factor authentication (MFA) enforced for all internal staff accounts with access to production systems.
• Regular third-party penetration testing and vulnerability scanning of the Platform infrastructure.
• Automated anomaly detection systems that flag unusual access patterns, login attempts from unrecognized devices or IP addresses, and abnormal transaction volumes.
• Documented incident response procedures including breach notification protocols aligned with the requirements of our licensing authority.

While sl99k takes all reasonable technical precautions, no internet-transmitted data can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own Account credentials. Never share your sl99k password with anyone, including anyone claiming to represent sl99k support — our team will never ask for your password.

As an Account Holder on sl99k, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your Account:

• Right of Access — you may request a copy of the Personal Data we hold about you, together with information about how it is being processed. We will respond within 30 days of receiving a verified request.
• Right to Rectification — if Personal Data we hold is inaccurate or incomplete, you may request that we correct it. Minor corrections (e.g., email address, phone number) can be made directly through your Account settings panel.
• Right to Erasure ("Right to Be Forgotten") — you may request deletion of your Personal Data. This right is subject to our legal retention obligations; data required to be held under AML or KYC regulations for the prescribed retention period cannot be deleted on request until that period has elapsed.
• Right to Restriction — you may request that we temporarily restrict processing of your data while a rectification or objection request is under review.
• Right to Data Portability — you may request a machine-readable copy of the Personal Data you have provided to us directly (registration data and transaction history) in a structured, commonly used format.
• Right to Object — you may object to processing carried out on the basis of legitimate interests, including direct marketing. Upon receipt of a valid objection to marketing, we will cease that processing immediately.
• Right to Withdraw Consent — where processing is based on consent (marketing communications and non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

sl99k will not charge a fee for handling data rights requests submitted in good faith. We may decline requests that are manifestly unfounded, repetitive, or excessive, but will provide written reasons for any refusal within the 30-day response window.

sl99k operates a strict 21+ only policy. We do not knowingly collect Personal Data from individuals under 21 years of age. Our registration flow includes an age declaration, and KYC verification confirms date of birth against a government-issued identity document before full Account access is granted.

If sl99k becomes aware that an Account has been opened by a person under 21, or that Personal Data has been collected from a minor, we will immediately suspend the Account, void any Wagers placed, and delete the minor's Personal Data without undue delay, save for any records required for legal compliance purposes.

If you are a parent or guardian and believe that a minor in your care has created an Account on sl99k, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

sl99k operates as an internationally licensed offshore platform. Your Personal Data may be transferred to and processed in countries outside Indonesia, including the jurisdiction in which sl99k holds its operating license and the locations of our cloud infrastructure providers.

Where Personal Data is transferred internationally, sl99k ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Policy. These safeguards include contractual clauses in Data Processing Agreements with all third-party processors, binding corporate rules where applicable, and technical security measures equivalent to those applied to data processed within Indonesia.

By creating an Account on sl99k, you acknowledge that your Personal Data will be processed in the jurisdictions described above and consent to such processing for the purposes set out in this Policy.

sl99k reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable law. When we make material changes to this Policy, we will notify Account Holders by email to the address registered to their Account at least 14 days before the changes take effect.

The effective date at the top of this document is updated each time a new version is published. Your continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may request Account closure before the changes take effect.

We encourage you to review this Policy periodically. The current version is always accessible at https://sl99k.cam/privacy-policy.

For any questions, concerns, or formal requests relating to this Privacy Policy or our data processing practices, please contact the sl99k Data Team using the details below. We ask that all privacy-related correspondence be submitted in English to ensure the fastest and most accurate response.

Data Controller: sl99k (internationally licensed offshore platform)

Contact Email: [email protected]

Subject Line: Please use "Privacy Request — [Your Account Username]" as the subject line of your email to ensure your request is routed to the correct team immediately.

Response Time: All privacy-related requests are acknowledged within 48 hours and resolved within 30 calendar days of receipt of a verified, complete request. In cases of exceptional complexity, we may extend the resolution period by a further 30 days with written notice to you before the initial deadline.

Support Availability: Our support team is available 24 hours a day, 7 days a week, including Indonesian public holidays.

This Privacy Policy was last reviewed and updated on January 1, 2026. This version supersedes all prior versions. If you are reading a cached or printed copy, please visit https://sl99k.cam/privacy-policy to confirm you are reading the current version.