Privacy Policy – poci99

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" refers to poci99, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" refers to any third party that processes Personal Data on poci99's behalf under a formal data processing agreement.
• "Platform" means the poci99 website, mobile-optimized interface, and any associated services accessible at https://poci99.cam.
• "You" or "Player" means any individual who registers for or uses the Platform.
• "KYC" means Know Your Customer verification, which includes identity, age, and source-of-funds checks.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and personalization.

2 Data We Collect

poci99 collects Personal Data across several categories, each serving a specific operational or regulatory purpose. Below is a structured overview of the data categories we handle:

3 How We Collect Data

poci99 collects Personal Data through the following channels:

3.1 Direct Submission

The majority of Personal Data we hold is provided directly by you: during Account registration, when completing KYC verification, when making a deposit or requesting a withdrawal, when contacting our support team, or when completing any form on the Platform.

3.2 Automated Collection

Certain Technical Data is collected automatically when you access the Platform, including your IP address, browser fingerprint, device type, and session activity. This data is collected via server logs, cookies, and similar tracking technologies described further in Section 9.

3.3 Third-Party Sources

In limited circumstances, poci99 may receive data about you from third-party sources, including:

• Identity verification and KYC service providers engaged to cross-reference government ID databases.
• Fraud detection and anti-money laundering screening services.
• Payment processors such as local Indonesian bank APIs and e-wallet providers, to confirm transaction authenticity.
• Publicly available sources where required for regulatory compliance.

4 Purpose of Processing

poci99 processes your Personal Data for the following specific purposes:

1. Account Management: Creating, maintaining, and securing your player Account, including authentication and session management.
2. KYC and Age Verification: Verifying that you are at least 21 years of age and confirming your identity to comply with anti-money laundering obligations.
3. Payment Processing: Facilitating deposits and withdrawals through Indonesian payment channels including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
4. Platform Delivery: Providing sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and all other product verticals available on the Platform.
5. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and unauthorized Account access.
6. Customer Support: Responding to support inquiries, resolving disputes, and maintaining records of communications.
7. Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling and enforcing self-exclusion or limit requests.
8. Legal Compliance: Meeting obligations under ap plicable international gaming regulations, anti-money laundering laws, and data protection frameworks.
9. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent, and always with a clear unsubscribe mechanism.
10. Platform Improvement: Analyzing aggregated usage data to improve the Platform's features, performance, and user experience.

5 Legal Basis for Processing

poci99 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

5.1 Contractual Necessity

Processing is necessary for the performance of the contract between you and poci99 — specifically, to operate your Account, process transactions, and deliver the gaming services you have requested.

5.2 Legal Obligation

Certain processing activities — including KYC verification, transaction record-keeping, and fraud screening — are required by applicable anti-money laundering regulations and international gaming compliance standards.

5.3 Legitimate Interests

poci99 may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Legitimate interest processing includes fraud detection, platform security, responsible gaming monitoring, and internal analytics.

5.4 Consent

Where processing is not covered by the bases above — particularly for direct marketing communications — we will only process your data with your freely given, specific, and informed consent. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

6 Data Sharing and Disclosure

poci99 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data in the following limited circumstances:

6.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• KYC and identity verification platforms.
• Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game content providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe — who may receive anonymized session data for game performance purposes.
• Cloud hosting, cybersecurity, and platform infrastructure providers.
• Customer support and live chat software providers.

6.2 Regulatory and Legal Disclosure

poci99 may disclose your Personal Data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, valid legal process, or to protect the rights, property, or safety of poci99, its players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of poci99's operating entity, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7 Data Retention

poci99 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulations. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your Account's active status plus a minimum of five (5) years following Account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records, including all deposit and withdrawal history, are retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following Account closure or the last transaction, whichever is later.
• Support Communications: Customer support chat logs and email correspondence are retained for three (3) years.
• Marketing Consent Records: Records of your consent or opt-out preference are retained for the lifetime of your Account plus three (3) years.
• Technical and Log Data: Server logs and Technical Data are retained for up to twelve (12) months, unless a specific investigation requires longer retention.

Once the applicable retention period expires, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual.

8 Data Security

poci99 implements a comprehensive, layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the poci99 Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive Personal Data, including payment details and KYC documents, is encrypted when stored on our servers.
• Access Controls: Access to Personal Data is strictly limited to authorized poci99 personnel and service providers who require it to perform their defined functions. Role-based access controls and audit logging are enforced.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for player Accounts and enforce it for all internal system access by poci99 staff.
• Penetration Testing: Our infrastructure undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: poci99 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected players promptly and take all reasonable steps to mitigate harm.

9 Cookies & Tracking Technologies

poci99 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They manage your session state, maintain login authentication, and enable core features such as the game lobby and deposit flow. These cookies cannot be disabled without severely impairing the Platform's functionality.

9.2 Performance and Analytics Cookies

We use analytics cookies to collect aggregated, anonymized data about how players navigate the Platform — including which pages are visited most frequently, session durations, and error events. This data helps us improve Platform performance and user experience. No personally identifiable information is included in analytics reports.

9.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, time zone (WIB or WITA), and display settings — so that you do not need to re-enter them on each visit.

9.4 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use core Platform features. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may limit personalization capabilities.

10 Your Data Rights

As a player on the poci99 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request".

We will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days with notice. We will not charge a fee for processing reasonable requests.

11 Children and Minors

The poci99 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process includes mandatory age declaration and KYC verification to enforce this requirement.

If poci99 discovers or is notified that Personal Data has been collected from a person under 21 years of age, we will immediately close the associated Account, delete all related Personal Data, and take appropriate steps to prevent any recurrence. Parents or guardians who believe a minor has registered on the Platform should contact us immediately at [email protected].

12 Cross-Border Data Transfers

poci99 operates as an international platform, and your Personal Data may be processed on servers or by service providers located outside of Indonesia. Where such cross-border transfers occur, poci99 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring receiving parties to uphold data protection standards equivalent to those applied by poci99.
• Transfers only to jurisdictions or service providers that maintain internationally recognized data security certifications.
• Regular audits of third-party data processors to verify continued compliance with our data protection requirements.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia. poci99 will always take reasonable steps to ensure such transfers are conducted lawfully and securely.

13 Third-Party Services and Links

The poci99 Platform integrates with third-party services — including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — to deliver our gaming content. These providers operate under their own privacy frameworks and may process technical and session data in connection with their games.

poci99 does not control the privacy practices of these third-party providers. We encourage you to review the privacy policies of any third-party service whose content you interact with. poci99's Privacy Policy covers only data processing activities conducted directly by poci99 or its contracted Data Processors operating under our instruction.

14 Policy Amendments

poci99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players by email and display a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should cease using the Platform and request Account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the poci99 Data Protection team through the following channels:

• Email: [email protected]
• Subject Line: Please use "Privacy Policy Inquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 via the Platform interface, with native Indonesian-speaking agents during WIB (UTC+7) peak hours.
• Response Time: We aim to acknowledge all privacy-related inquiries within 48 hours and provide a full response within 30 days.

For formal data rights requests, please include your registered Account email address and a clear description of the right you wish to exercise. We may ask for additional verification to confirm your identity before processing the request.