Privacy Policy

The following defined terms apply throughout this Privacy Policy. Where a term is also defined in the agm99 Terms & Conditions, the meaning used here is consistent with that definition unless otherwise specified.

• "agm99", "we", "us", or "our" refers to the agm99 platform and its affiliated operating entities that own and operate the website at https://agm99.cam.
• "You", "User", or "Data Subject" refers to any individual who accesses, browses, registers on, or interacts with the agm99 platform in any capacity.
• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, date of birth, email address, phone number, bank account details, device identifiers, and IP address.
• "Processing" means any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Controller" means agm99, which determines the purposes and means of processing your Personal Data.
• "Processor" means any third-party service provider that processes Personal Data on behalf of agm99, acting under our instructions and contractual obligations.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Cookies" means small text files placed on your device by the agm99 platform for the purposes of session management, analytics, personalization, and security.

2.1 This Privacy Policy applies to all Personal Data collected by agm99 through the website at https://agm99.cam, including any subdomains, mobile-optimized versions of the site, and any other digital channels operated by agm99 that link to this Policy.

2.2 This Policy applies to all Users, including visitors who browse without registering, prospective Members in the process of registering, fully verified Members with active accounts, and former Members whose accounts have been closed.

2.3 agm99's platform is operated for and marketed to users in Indonesia. This Policy takes into account the data protection expectations of Indonesian users while applying internationally recognized privacy standards including principles drawn from the General Data Protection Regulation (GDPR) framework, which agm99 adopts voluntarily as a global best-practice baseline.

2.4 This Policy does not apply to third-party websites or services that may be referenced on the agm99 platform. Any links to external resources are provided for informational purposes only, and agm99 is not responsible for the privacy practices of those third parties.

3.1 agm99 collects the following categories of Personal Data, depending on the nature of your interaction with the platform:

3.2 agm99 does not intentionally collect Special Category Data (which includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation). If such data is inadvertently included in documents you submit for KYC purposes, it will not be used for any processing purpose and will be handled with the highest level of confidentiality.

4.1 Directly from You. The majority of your Personal Data is collected directly from you when you: register an account; complete the KYC verification process; make a deposit or withdrawal; contact our support team; or respond to a promotional offer.

4.2 Automatically via Technology. When you visit and interact with the agm99 platform, certain Technical Data and Usage Data is collected automatically through cookies, log files, web beacons, and similar tracking technologies. This data collection occurs regardless of whether you are logged in to your account.

4.3 From Third Parties. agm99 may receive limited Personal Data about you from trusted third parties in the following circumstances:

• From identity verification service providers during the KYC process, to confirm the authenticity of documents you have submitted;
• From payment processors and financial institutions (such as BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay) when processing deposits and withdrawals, to confirm transaction status;
• From fraud detection and anti-money-laundering (AML) screening services, which cross-reference data against watchlists and sanctions databases;
• From analytics providers that supply aggregated, anonymized data to help us understand platform usage trends.

5.1 agm99 processes your Personal Data for the following defined purposes:

• Account Management: To create, maintain, and administer your agm99 account, including password resets, preference updates, and account closure requests.
• Identity Verification (KYC): To verify that you meet the eligibility requirements for using agm99 — specifically that you are 21 years of age or older and are a genuine individual with a verifiable Indonesian identity.
• Payment Processing: To facilitate deposits and withdrawals via local Indonesian payment methods, including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Service Delivery: To provide you with access to all agm99 betting and gaming products, including the sportsbook, live casino, slot games, and togel (Indonesia's traditional numbers lottery) products.
• Fraud Prevention & Security: To detect, prevent, and investigate fraudulent activity, account breaches, bonus abuse, money laundering, and other Restricted Activities as defined in our Terms & Conditions.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling behavior and to apply any self-exclusion, deposit limit, or cooling-off measures requested by or applied to your account.
• Customer Support: To respond to your enquiries, process complaints, and provide technical assistance through our 24/7 live chat, email, and WhatsApp support channels.
• Legal Compliance: To meet obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and record-keeping regulations as required by agm99's international licensing authority.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign messages (such as Ramadhan, Idul Fitri, and Chinese New Year promotions) where you have opted in to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyze usage patterns, test new features, and improve the overall performance and user experience of the agm99 platform using anonymized and aggregated data.

5.2 agm99 will not use your Personal Data for any purpose that is materially different from those described above without providing you with prior notice and, where required, obtaining your consent.

6.1 agm99 processes your Personal Data on the following legal bases, consistent with GDPR principles voluntarily adopted as our global privacy standard:

• Contractual Necessity: Processing required to perform the contract between you and agm99 — including account management, payment processing, KYC verification, and service delivery.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering, counter-terrorism financing, and international licensing regulations to which agm99 is subject.
• Legitimate Interests: Processing necessary for agm99's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests do not override your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where we rely on your freely given and withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7.1 agm99 does not sell your Personal Data. We share Personal Data only in the limited circumstances described below, and only with parties who are contractually bound to handle it responsibly:

• Payment Service Providers: We share transaction-related data with payment processors and Indonesian banking partners (including BCA, BRI, BNI, Mandiri, and e-wallet operators such as OVO, DANA, and GoPay) to process your deposits and withdrawals.
• Identity Verification Providers: We share KYC document data with certified third-party verification services to authenticate your identity and age during the account verification process.
• Fraud & AML Screening Services: We may share limited identity and transaction data with anti-fraud and AML compliance services as required by our licensing obligations.
• Game Studio Providers: Game play data (session identifiers, wager amounts, game outcomes) may be shared with our partner game studios (including Evolution Gaming, Pragmatic Play, Pocket Games Soft, and similar providers) for the purposes of game delivery, fairness certification, and dispute resolution.
• Technology Infrastructure Providers: We share data with cloud hosting, content delivery, and cybersecurity providers that support the operation of the agm99 platform, all under strict data processing agreements.
• Legal & Regulatory Authorities: We may disclose Personal Data to law enforcement, regulatory bodies, or courts of competent jurisdiction where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of agm99, our Members, or the public.

7.2 In the event of a corporate restructuring, merger, acquisition, or sale of assets involving agm99, your Personal Data may be transferred to a successor entity. We will provide notice of any such transfer and the new entity will be bound by this Privacy Policy or a substantially similar successor policy.

8.1 agm99 operates as an internationally licensed platform. As a result, your Personal Data may be stored on and transferred to servers located outside of Indonesia. These transfers may include countries whose data protection laws differ from those applicable in Indonesia.

8.2 Where Personal Data is transferred internationally, agm99 implements appropriate safeguards to ensure the data remains protected at a standard equivalent to that applied within the agm99 platform, including:

• Contractual clauses that require recipient processors to maintain data protection standards consistent with agm99's Privacy Policy;
• Technical security measures including encryption in transit and at rest;
• Access controls limiting the personnel who can access transferred data to only those with a business need.

8.3 By registering an account and using the agm99 platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia as described in this clause.

9.1 agm99 retains your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, including any legal, regulatory, accounting, or reporting requirements.

9.2 The following general retention periods apply:

9.3 Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual.

10.1 As a Data Subject, you have the following rights with respect to your Personal Data held by agm99. To exercise any of these rights, please contact our support team through the channels listed in Clause 15.

• Right of Access: You have the right to request a copy of the Personal Data agm99 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data. For basic account details, you may update this directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to agm99's legal obligations to retain certain data as described in Clause 9.
• Right to Restrict Processing: You have the right to request that agm99 restrict the processing of your Personal Data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the Personal Data you have provided to agm99, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data on the grounds of legitimate interests, including for direct marketing purposes. Where you object to marketing, agm99 will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

10.2 agm99 will respond to all rights requests within 30 days of receipt. Where a request is complex or there are a high number of requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and reason within the initial 30-day window.

11.1 agm99 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and analyze usage patterns. The following cookie categories are in use:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. You cannot opt out of these without affecting your ability to use the platform.
• Functional Cookies: Used to remember your preferences, such as preferred language, game view settings, and notification preferences. These improve your experience but are not strictly required.
• Analytics Cookies: Used to collect anonymized data about how visitors use the agm99 platform — which pages are visited most, where users encounter errors, and how navigation flows are used. This data helps us continuously improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and unusual account behavior. These are deployed automatically as part of our security infrastructure.

11.2 You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling functional or analytics cookies may affect your experience on the agm99 platform. agm99 does not use third-party advertising cookies or cross-site tracking cookies for the purposes of behavioral advertising.

11.3 agm99 uses secure, HttpOnly, and SameSite cookie attributes on all authentication-related cookies to protect against cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.

12.1 agm99 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or alteration:

• Transport Encryption: All data in transit between your browser or device and the agm99 platform is encrypted using TLS 1.2 or higher (SSL).
• Data Encryption at Rest: Sensitive Personal Data, including KYC documents and financial account details, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within agm99's systems is governed by role-based access controls (RBAC). Employees can only access data that is necessary for their specific job function.
• Multi-Factor Authentication (MFA): agm99 strongly recommends enabling MFA on your account. Internally, agm99 staff access to systems containing Personal Data requires MFA.
• Regular Security Audits: The agm99 platform undergoes regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident Response: agm99 maintains a documented data breach response procedure. In the event of a breach likely to result in a high risk to your rights, we will notify affected Members without undue delay.

12.2 While agm99 takes all reasonable steps to protect your Personal Data, no digital platform can guarantee absolute security. You also have a role to play in keeping your account secure — do not share your password, use a strong and unique password, and enable MFA on your account.

13.1 The agm99 platform is strictly for adults aged 21 years and over. agm99 does not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory step in the KYC process for all Members.

13.2 If agm99 discovers or is notified that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete all associated data and permanently close the account in question.

13.3 If you believe that a minor may have accessed or registered on the agm99 platform, please notify us immediately by contacting our support team. We take all such reports seriously and will act promptly.

14.1 agm99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The revised Policy will be published on this page with an updated "Last Updated" date.

14.2 Where changes to this Policy are material — meaning they significantly affect how we process your Personal Data or reduce your rights — agm99 will provide advance notice by email to your registered address and/or by a prominent on-platform notification, at least 14 days before the changes take effect.

14.3 Your continued use of the agm99 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or agm99's handling of your Personal Data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly on the agm99 platform. This is the fastest channel for privacy-related enquiries, with typical response times under one minute.
• Email: support@agm99.cam (plain text — not a clickable link). We commit to responding to all privacy-related email requests within 3 business days.
• WhatsApp (display only): +62 811 9899 9901 — for reference only; this number is not a clickable link.

15.2 When submitting a rights request, please include your registered email address and a brief description of your request so we can locate your account and respond efficiently. We may need to verify your identity before processing certain requests to ensure the security of your data.