evo99 is committed to protecting the privacy of every Member. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you hold over your own information. Please read this document carefully before registering an account.
These are the core standards that govern every data handling decision at evo99 — from first registration to account closure.
evo99 collects personal data only for clearly stated, legitimate purposes. Data collected for account verification will not be repurposed for unrelated commercial activities without your explicit consent.
We collect only the data that is genuinely necessary to deliver our services, comply with regulatory requirements, and protect the security of the platform and its Members.
All personal data is stored on encrypted servers with access controls, intrusion detection, and regular security audits. Data in transit is protected by 256-bit SSL/TLS encryption at all times.
evo99 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or commercial partners. Your information is used to operate and improve evo99, nothing more.
You have genuine, enforceable rights over your data — including access, correction, deletion, and portability. evo99 provides a clear process for exercising these rights, as detailed in Section 9 of this Policy.
We do not retain personal data indefinitely. Defined retention periods apply to each category of data, and data is deleted or anonymized when it is no longer required for its stated purpose.
In this Privacy Policy, the following terms carry the meanings set out below:
This Privacy Policy applies to all Members regardless of their country of residence and governs data collected from Members in Indonesia and internationally. evo99 is primarily designed for adult users in Indonesia and applies data handling standards consistent with internationally recognized privacy principles.
evo99 acts as the data controller in respect of all Personal Data collected through the platform. As data controller, evo99 determines the purposes and means of processing your Personal Data and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.
For all data protection inquiries, requests to exercise your rights, or complaints relating to how evo99 handles your Personal Data, you may contact our designated Data Protection contact using the details set out in Section 15 of this Policy. evo99 will acknowledge all data protection correspondence within 5 business days and provide a substantive response within 30 calendar days.
evo99 collects the following categories of Personal Data from Members. The specific data collected in each category depends on the services you use and the stage of your relationship with the platform.
| Category | Examples of Data Collected | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, KTP / Passport / SIM number | Yes — required for KYC |
| Contact Data | Email address, mobile phone number, residential address | Yes — required for account |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifiers (OVO, DANA, GoPay), transaction history, deposit and withdrawal records | Yes — required for payments |
| KYC Documents | Scanned copies or photographs of government-issued identity documents and proof of address | Yes — required for withdrawals |
| Technical Data | IP address, device type and operating system, browser type, session tokens, login timestamps | Collected automatically |
| Behavioral Data | Pages visited, games played, bet history, session duration, feature usage patterns | Collected automatically |
| Communications Data | Records of live chat sessions, email correspondence, and WhatsApp support interactions | Collected when support is used |
| Marketing Preferences | Opt-in/opt-out choices for promotional communications, preferred contact channel | Optional |
The majority of Personal Data held by evo99 is provided directly by you during the following interactions:
When you access the evo99 platform, certain data is collected automatically through your device and browser, including your IP address, geographic region (inferred from IP), device identifiers, browser type and version, operating system, session start and end times, pages visited, and actions taken. This data is collected using standard web technologies including cookies, session logs, and analytics tools.
evo99 may receive Personal Data about you from trusted third parties in the following circumstances:
evo99 processes your Personal Data only for specific, legitimate purposes. The table below sets out each purpose, the categories of data involved, and the legal basis on which evo99 relies:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity, Contact | Contract performance |
| Identity and age verification (KYC) | Identity, KYC Documents | Legal obligation; contract |
| Processing deposits and withdrawals | Financial, Identity | Contract performance |
| Anti-money laundering (AML) compliance | Financial, Identity, Behavioral | Legal obligation |
| Fraud detection and prevention | Technical, Behavioral, Financial | Legitimate interests |
| Responsible gaming monitoring | Behavioral, Financial | Legal obligation; legitimate interests |
| Customer support delivery | Identity, Contact, Communications | Contract performance |
| Platform improvement and analytics | Technical, Behavioral | Legitimate interests |
| Promotional communications (opted-in) | Contact, Marketing Preferences | Consent |
| Legal proceedings and dispute resolution | All categories as relevant | Legal obligation; legitimate interests |
evo99 engages trusted third-party service providers who process Personal Data on our behalf and under our instructions. These providers are bound by data processing agreements that require them to maintain confidentiality and implement appropriate security measures. Categories of service providers include:
evo99 may disclose Personal Data to regulatory authorities, financial intelligence units, and law enforcement agencies where required to do so by applicable law, court order, or lawful regulatory demand. Such disclosures are made only to the extent legally required and, where permitted, evo99 will notify the affected Member unless doing so would compromise an active investigation.
In the event that evo99 undergoes a merger, acquisition, restructuring, or sale of assets, Personal Data held about Members may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and the applicable privacy terms before the transfer takes effect.
evo99 does not sell, rent, or license your Personal Data to third-party advertisers, data brokers, or commercial marketing organizations. We do not share your data for any purpose that is not described in this Privacy Policy or separately consented to by you.
evo99's primary data infrastructure is hosted on servers located in secure data center facilities. Certain service providers engaged by evo99 may operate in countries outside Indonesia. Where Personal Data is transferred internationally, evo99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable privacy law.
Safeguards used for international transfers include contractual clauses requiring recipient entities to maintain privacy standards consistent with this Policy, and selection of service providers who operate under internationally recognized privacy frameworks.
Members in Indonesia should be aware that the Undang-Undang Perlindungan Data Pribadi (Personal Data Protection Law) establishes rights and standards applicable to the processing of Indonesian citizens' personal data. evo99's practices are designed to be consistent with the principles established under applicable Indonesian and international privacy standards.
evo99 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML/KYC legal obligation |
| KYC identity documents | Duration of account + 5 years post-closure | Legal obligation |
| Financial transaction records | Duration of account + 7 years post-closure | AML / financial regulatory obligation |
| Betting and gameplay records | Duration of account + 3 years post-closure | Dispute resolution; regulatory compliance |
| Customer support communications | 3 years from date of interaction | Legitimate interests (quality assurance) |
| Technical / log data | 12 months from collection | Security monitoring |
| Marketing preferences | Until withdrawal of consent or account closure | Consent |
Upon expiry of the applicable retention period, Personal Data is either securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized data may be retained indefinitely for aggregated statistical and analytical purposes.
Subject to applicable law and certain exceptions, you hold the following rights in respect of your Personal Data held by evo99. To exercise any of these rights, contact us using the details in Section 15. evo99 will respond within 30 calendar days of receiving a valid request.
Cookies are small text files stored on your device when you visit a website. evo99 uses cookies and similar tracking technologies (including web beacons and session tokens) to enable core platform functionality, maintain your logged-in session, detect fraud, and analyze platform usage patterns.
You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy settings menu. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. evo99 does not use cookies to deliver third-party advertising to Members on the platform.
The evo99 platform is strictly for adults aged 21 years and over. evo99 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all Members. If evo99 becomes aware that an account has been registered by a person under 21, the account will be suspended immediately, all funds frozen, and the data subject's information reviewed for appropriate action.
If you are a parent or guardian and believe that a minor under your care has registered an account on evo99 without your consent, please contact our support team immediately. We will investigate and take appropriate action, including account closure and data deletion to the extent permitted by law.
evo99 implements a multi-layered security architecture to protect your Personal Data from unauthorized access, disclosure, alteration, and destruction. Key security measures include:
Despite these measures, no data transmission over the internet or electronic storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, evo99 will notify affected Members promptly and take all reasonable steps to contain and remediate the breach.
The evo99 platform may from time to time contain references to third-party websites or services for informational purposes. evo99 is not responsible for the privacy practices or content of any third-party website. This Privacy Policy applies solely to data collected through the evo99 platform. We encourage you to review the privacy policy of any third-party service before providing your personal information to them.
evo99 does not endorse or make any representations about the data protection standards of any third party. The inclusion of a reference to a third-party service on the evo99 platform does not imply a partnership, affiliation, or data-sharing arrangement with that service.
evo99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The "Last Updated" date at the top of this page indicates when the most recent revision was made.
Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — evo99 will notify registered Members via email at the address associated with their account at least 14 days before the changes take effect. For minor or administrative updates, the revised Policy will be published on this page without individual notification.
Your continued use of the evo99 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with a material change, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.
To exercise any of the rights described in Section 9, or to make a general inquiry about how evo99 handles your Personal Data, please contact us through the following channels:
If you are dissatisfied with how evo99 has handled a data protection matter, you are entitled to lodge a complaint. evo99 encourages Members to contact us directly in the first instance, as many concerns can be resolved quickly through our internal process. If you remain dissatisfied after engaging with evo99's internal process, you may escalate your complaint to the relevant data protection authority in your jurisdiction.
This Privacy Policy is part of a broader set of commitments evo99 makes to its Members. Review our Terms & Conditions for the full platform agreement, or visit the FAQ for quick answers to common data and account questions.