Scope of This Policy: This Privacy Policy applies to all personal data processed by bw099 in connection with your use of the Platform at https://bw099.bet, including data collected through the website, our customer support channels, and any promotional communications. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.
The following definitions apply throughout this Privacy Policy. Terms not defined here carry the same meaning as in the bw099 Terms & Conditions.
| Term |
Meaning |
| "Personal Data" |
Any information relating to an identified or identifiable natural person — including name, email address, phone number, IP address, device identifiers, and financial account details. |
| "Processing" |
Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, deletion, or destruction. |
| "Controller" |
bw099, the entity that determines the purposes and means of processing your Personal Data. |
| "Processor" |
Any third party engaged by bw099 to process Personal Data on bw099's behalf and under bw099's documented instructions. |
| "Member" / "You" |
Any natural person who has registered an Account on the bw099 Platform, or who is browsing the Platform without an Account. |
| "Platform" |
The bw099 website at https://bw099.bet, including all subpages, game interfaces, account dashboards, and support channels operated by bw099. |
| "KYC Data" |
Identity verification documents and associated data submitted by a Member to satisfy bw099's Know Your Customer obligations, including government-issued photo ID, proof of address, and payment method verification. |
| "Cookies" |
Small text files or similar tracking technologies placed on your device by the Platform for the purposes described in Clause 7. |
bw099 collects Personal Data through several channels: directly from you when you register and use the Platform, automatically through technical systems as you browse, and in limited circumstances from third-party sources such as payment processors and fraud-prevention services.
2.1 Registration & Identity Data. When you create a bw099 Account, we collect your full legal name, date of birth, email address, mobile phone number, residential address in Indonesia, preferred username, and a securely hashed version of your chosen password. This data is mandatory — without it we cannot open or maintain your Account.
2.2 KYC & Verification Data. To comply with our anti-money-laundering obligations and to process withdrawal requests, we require you to submit identity documents such as your Indonesian national identity card (KTP), passport, or driving licence, together with evidence of your registered payment method (e.g., a screenshot of your BCA, BRI, BNI, or Mandiri mobile banking profile, or confirmation of your OVO, DANA, GoPay, ShopeePay, or LinkAja account in your name). We may also request a selfie photograph alongside your identity document for enhanced verification purposes.
2.3 Financial Transaction Data. Every deposit and withdrawal transaction processed through your Account is recorded. This record includes the transaction amount in Indonesian Rupiah (IDR), the payment method used (e.g., BCA transfer, GoPay), the date and time in WIB, and the transaction reference number. We do not store full payment card numbers; where card payments are supported, card data is tokenized by our certified payment processor.
2.4 Betting & Gaming Activity Data. We maintain a complete record of all Wagers placed under your Account, including the market or game selected, the stake amount, the odds or RTP, the outcome, and any applicable bonus applied. This data is used for account integrity checks, dispute resolution, regulatory compliance, and responsible gaming monitoring.
2.5 Technical & Usage Data. When you visit the Platform, our servers automatically log your IP address, browser type and version, operating system, device type, referring URL, pages visited, time on page, and session duration. This information is used for Platform security, fraud detection, and analytics.
2.6 Communications Data. If you contact our support team via live chat or email at [email protected], we retain a record of that correspondence, including the content of your messages and any documents you provide, for the duration described in Clause 6.
2.7 Marketing Preference Data. Where you have consented to receive promotional communications, we record that consent together with the date and method by which it was given. We also record opt-out requests promptly.
bw099 processes your Personal Data only for specific, explicit, and legitimate purposes. The table below summarizes the primary purposes and the data categories involved.
| Purpose |
Data Categories Used |
| Account creation and management |
Registration & Identity Data |
| Identity verification (KYC) and fraud prevention |
KYC Data, Financial Transaction Data, Technical Data |
| Processing deposits and withdrawals |
Financial Transaction Data, KYC Data |
| Delivering and improving betting and gaming services |
Betting & Gaming Activity Data, Technical Data |
| Responsible gaming monitoring and intervention |
Betting & Gaming Activity Data, Registration Data |
| Customer support and dispute resolution |
Communications Data, Betting & Gaming Activity Data |
| Sending promotional communications (with consent) |
Registration Data, Marketing Preference Data |
| Platform security, analytics, and performance optimization |
Technical & Usage Data, Cookies |
| Compliance with legal and regulatory obligations |
All categories, as required by applicable law |
bw099 does not use your Personal Data to make solely automated decisions that produce significant legal effects about you, except where strictly required by law or fraud-prevention systems, in which case you have the right to request human review as described in Clause 9.
bw099 processes your Personal Data on one or more of the following legal bases:
- Contract Performance: Processing is necessary to provide the services described in the bw099 Terms & Conditions — including Account management, Wager settlement, and payment processing. Without this processing, we cannot fulfill our contractual obligations to you.
- Legal Obligation: Certain processing is required for bw099 to comply with applicable anti-money-laundering laws, international sanctions screening, and financial crime prevention regulations. KYC verification and transaction record-keeping fall under this basis.
- Legitimate Interests: bw099 processes Technical & Usage Data and certain Communications Data on the basis of its legitimate interests in maintaining Platform security, preventing fraud, improving its services, and resolving disputes — provided those interests are not overridden by your fundamental rights.
- Consent: Where we send you promotional emails, SMS messages, or in-Platform notifications about bonuses, seasonal offers (such as BRI Liga 1 match-day promotions or Idul Fitri special events), and new game launches, we do so only on the basis of your freely given, specific, and informed consent recorded at the time of opt-in. You may withdraw your consent at any time by updating your communication preferences in your Account dashboard or by contacting [email protected].
bw099 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary.
5.1 Payment Processors. To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, bw099 transmits the transaction details and account identifiers necessary to complete each payment. These processors are bound by contractual data protection obligations and applicable financial privacy regulations.
5.2 Identity Verification Providers. bw099 engages certified KYC and anti-money-laundering service providers to assist in verifying the identity documents you submit. These providers process your KYC Data solely for verification purposes under strict data processing agreements.
5.3 Game Content Providers. Game studios and RNG certification bodies (such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe) may receive anonymized session and wagering data for game audit, fairness certification, and technical support purposes. These providers do not receive your name, contact details, or financial account information.
5.4 Fraud Prevention and Security Partners. bw099 uses industry-standard fraud detection and cybersecurity services. Technical Data including IP addresses and device fingerprints may be shared with these providers to identify and block fraudulent activity, account takeover attempts, and prohibited automated betting tools.
5.5 Legal and Regulatory Disclosure. bw099 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by a valid legal obligation, court order, or government request. Where permitted by law, bw099 will notify the affected Member of such a disclosure request.
5.6 Corporate Transactions. In the event of a merger, acquisition, or sale of all or part of bw099's business assets, your Personal Data may be transferred to the successor entity, which will be required to honor the commitments made in this Privacy Policy.
All third-party Processors engaged by bw099 are contractually required to implement appropriate technical and organizational security measures and to process your data only as instructed by bw099. bw099 conducts periodic due-diligence reviews of its key data Processors.
bw099 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the minimum retention periods required by applicable law. The following general retention schedule applies:
| Data Category |
Retention Period |
Basis |
| Account Registration & Identity Data |
Duration of Account plus 5 years after closure |
Legal obligation (AML / financial crime compliance) |
| KYC Documents |
Duration of Account plus 5 years after closure |
Legal obligation |
| Financial Transaction Records |
Duration of Account plus 5 years after closure |
Legal obligation |
| Betting & Gaming Activity |
Duration of Account plus 3 years after closure |
Legitimate interests (dispute resolution) |
| Customer Support Communications |
3 years from the date of each interaction |
Legitimate interests (dispute resolution) |
| Marketing Consent Records |
Until withdrawal of consent plus 2 years |
Legal obligation (proof of consent) |
| Technical & Usage Logs |
13 months on a rolling basis |
Legitimate interests (security, analytics) |
At the end of each applicable retention period, Personal Data is securely deleted or anonymized in accordance with bw099's internal data destruction policy. Anonymized, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
The bw099 Platform uses Cookies and similar tracking technologies (such as web beacons and local storage objects) to deliver and improve our services. By continuing to use the Platform, you consent to the use of Cookies as described in this clause.
7.1 Essential Cookies. These Cookies are strictly necessary for the Platform to function. They maintain your login session, remember your currency and language preferences, protect against cross-site request forgery (CSRF), and ensure the integrity of the cashier flow. You cannot opt out of essential Cookies without ceasing to use the Platform.
7.2 Analytics Cookies. bw099 uses first-party and third-party analytics Cookies to understand how Members interact with the Platform — which pages are most visited, where users encounter difficulty, and how game categories (slots, togel, live casino, sportsbook, Keno) perform relative to one another. This data is aggregated and used solely to improve the Platform experience.
7.3 Performance & Functionality Cookies. These Cookies enable enhanced Platform features such as saved bet selections, preferred deposit method memory, and personalized game recommendations based on your play history.
7.4 Marketing Cookies. Where you have consented to promotional communications, marketing Cookies may be used to measure the effectiveness of promotional campaigns and to avoid showing you the same offer repeatedly. bw099 does not use marketing Cookies to track your activity on other websites.
7.5 Managing Cookies. You may control or delete Cookies at any time through your browser settings. Please note that disabling non-essential Cookies may affect the functionality of certain Platform features. Instructions for managing Cookies in common browsers are available in each browser's help documentation.
bw099 implements a layered approach to data security, combining technical and organizational controls designed to protect your Personal Data against unauthorized access, alteration, disclosure, and destruction.
- SSL/TLS Encryption: All data transmitted between your device and the bw099 Platform is encrypted using industry-standard TLS 1.2 or higher. Our SSL certificate is maintained by a trusted certificate authority and renewed proactively before expiry.
- Password Hashing: Passwords are never stored in plaintext. bw099 employs a modern, salted cryptographic hashing algorithm to store password credentials, so that even in the unlikely event of a database exposure, your password cannot be recovered in readable form.
- Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their Accounts via a one-time passcode (OTP) sent to their registered mobile number or email address. 2FA adds a critical second layer of protection against unauthorized Account access.
- Access Controls: Access to Personal Data within bw099's internal systems is restricted to staff who require it to perform their job functions, enforced through role-based access control (RBAC) policies and audit logging.
- Infrastructure Security: bw099's Platform infrastructure is hosted in certified data centers with physical access controls, redundant power supplies, and 24/7 monitoring. Regular vulnerability assessments and penetration tests are conducted by qualified security professionals.
- Data Breach Response: In the event of a Personal Data breach that poses a risk to your rights and freedoms, bw099 will notify affected Members and relevant authorities within the timeframe required by applicable law. Notification will be provided via the email address registered on your Account.
While bw099 takes all reasonable steps to protect your data, no internet transmission is completely secure. We encourage you to use a strong, unique password for your bw099 Account and to enable two-factor authentication. If you suspect unauthorized access to your Account, contact our 24/7 support team immediately.
Subject to applicable law and certain limited exceptions (such as overriding legal obligations), you have the following rights in relation to the Personal Data bw099 holds about you. To exercise any of these rights, please contact us as described in Clause 14.
- Right of Access: You have the right to request a copy of the Personal Data bw099 holds about you, along with information about how it is processed. We will respond to verified access requests within thirty (30) calendar days.
- Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly in your Account dashboard; for changes to identity documents or KYC records, please contact our support team.
- Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you have withdrawn your consent and there is no other legal basis for processing; or (c) you object to processing and there are no overriding legitimate grounds. Note that legal obligations (such as AML retention requirements) may prevent full erasure during the mandatory retention period described in Clause 6.
- Right to Restriction: You may request that bw099 restrict the processing of your Personal Data in certain circumstances — for example, while we verify the accuracy of data you have disputed, or while your objection to processing is being assessed.
- Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the Personal Data you have provided to bw099, suitable for transmission to another service provider.
- Right to Object: You have the right to object at any time to the processing of your Personal Data where that processing is based on bw099's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes, including profiling for marketing.
- Right Not to Be Subject to Automated Decision-Making: You have the right to request human review of any significant decision made about you by automated means, to express your point of view, and to contest the decision.
bw099 will not charge a fee for exercising your data rights in the vast majority of cases. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, with written reasons provided.
The bw099 Platform is strictly restricted to adults aged 21 years and over. bw099 does not knowingly collect, process, or retain Personal Data from any person under the age of 21. If you are under 21, you must not register an Account, attempt to use the Platform, or provide any Personal Data to bw099.
If bw099 discovers or reasonably suspects that Personal Data belonging to a person under 21 has been collected — whether through misrepresentation during registration or any other means — we will take immediate action to close the associated Account, reverse any transactions where possible, and securely delete all associated Personal Data without delay.
If you are a parent or guardian and believe that a person under your care has provided Personal Data to bw099, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
The bw099 Platform may display content from or references to third-party services — such as live sports data feeds, game studio interfaces, or payment gateway pages. This Privacy Policy applies solely to the processing of Personal Data by bw099. It does not extend to any third-party website, application, or service that you may access through the Platform.
bw099 has no control over, and accepts no responsibility for, the privacy practices, data handling procedures, or content of third-party services. We strongly encourage you to review the privacy policy of any third-party service before providing them with your Personal Data.
bw099 operates as an internationally licensed platform and may transfer your Personal Data to service providers and infrastructure partners located outside Indonesia. Wherever such transfers occur, bw099 takes appropriate safeguards to ensure that your data receives a standard of protection consistent with this Privacy Policy.
Safeguards used for international transfers include: contractual clauses that impose data protection obligations on the recipient equivalent to those applicable to bw099; transfers only to jurisdictions or recipients recognized as providing an adequate level of data protection; and, where appropriate, obtaining your explicit consent to the specific transfer.
By using the bw099 Platform and providing us with your Personal Data, you acknowledge that your data may be transferred to and processed in countries outside Indonesia, and that bw099 will apply the safeguards described above in connection with such transfers.
bw099 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last Updated" date at the top of this document will be revised whenever a material change is made.
Where changes are significant, bw099 will provide advance notice via a Platform announcement banner or by email to your registered address at least seven (7) calendar days before the revised Policy takes effect. Minor or clarificatory changes may be made without prior notice, but the updated Policy will always be available at https://bw099.bet/privacy-policy.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may close your Account in accordance with the Terms & Conditions.