xl999Privacy Policy

This page describes what we collect when you use xl999 and how we keep that data protected. We take your privacy seriously and handle personal information according to applicable data protection regulations in supported jurisdictions.

When you register an account on xl999, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer, or engage with our slot tournaments (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), live-dealer tables, sportsbook, or esports markets, we collect specific personal and transactional data. We use this data to verify your identity, process payments, manage withdrawals, prevent fraud, and comply with anti-money-laundering requirements.

Our xl999 platform operates across supported regions including Jakarta, Surabaya, Bandung, Medan, and Semarang. This policy explains how we collect, use, store, and protect your information. Your privacy rights and how you can request access or deletion of your data are outlined below.

What Data We Collect on xl999

We collect personal information when you create an account on xl999. This includes your legal name, email address, phone number, date of birth, and residential address. We require government-issued identification (passport, national ID, or driver's license) and proof of address (utility bill, bank statement, or tax document) for account verification under our KYC (Know Your Customer) policy.

We collect transactional data from your xl999 activity. When you deposit funds, we record the payment method, amount, timestamp, and your account reference. When you withdraw, we capture the destination account, amount, and verification status. We log your gameplay across all categories—slot tournament participation, live-dealer table sessions, sportsbook markets, and card game activity—to calculate winnings, track bonus eligibility, and detect unusual patterns.

We automatically collect technical data. Your IP address, device type, browser version, and operating system are logged when you access xl999. We use cookies and similar technologies to remember your login status, language preference, and betting history. Our servers record your session duration, page views, and button interactions to improve platform performance and user experience.

How We Use Your Data

We use your personal information to verify your identity under our KYC process, which typically takes 1–2 business days. We use your data to process deposits and withdrawals through your selected payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet). We match withdrawal requests to your account records and regulatory obligations.

We use gameplay data to calculate winnings, track bonus turnover, and detect fraud. If we identify suspicious patterns—rapid account creation, identical IP addresses across multiple accounts, or unusual betting sequences—we may freeze the account and investigate. We use your data to send account notifications (deposit confirmations, withdrawal status, bonus offers during Idul Fitri, Idul Adha, Liga 1 tournaments, or Piala AFF events).

We use technical data to troubleshoot performance issues, optimize our website, and prevent abuse. We may share aggregated, anonymized data with partners to understand platform usage trends. We never share your personal information with advertising networks or data brokers.

Third-Party Data Processors and Subcontractors

We use third-party services to process payments and verify identities. Our payment processors (linked to mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and Indonesian banks) receive your payment details and account number to execute transactions. These processors are contractually bound to protect your data and comply with payment security standards.

We use identity verification providers to confirm your government ID and proof of address during KYC. These providers receive copies of your documents, validate them against government databases, and return only a verification status to xl999. We do not retain your ID copies longer than required by regulation.

Our servers may be located outside your jurisdiction. Data transferred across borders is encrypted in transit and subject to data protection agreements with our hosting providers. We select providers that meet international security standards, but we cannot guarantee protection equivalent to your home jurisdiction if those standards differ.

Your Privacy Rights and Data Access

You have the right to access your personal data stored on xl999. Your account dashboard displays your profile information, deposit and withdrawal history, and gameplay records. If you wish to export your complete data, contact our support team during business hours. We provide data export within 5 business days in a machine-readable format.

You have the right to request correction of inaccurate data. If you notice errors in your registered name, email, or address, contact support and we will update your account after verifying your identity. You have the right to request deletion of your account and associated data after withdrawal processing is complete. We retain some data (transaction records, KYC documents) for regulatory and tax compliance periods as required by applicable law.

Cookies and Tracking Technologies

Our xl999 website uses cookies to remember your login status, language selection, and account preferences. Cookies are small files stored on your device that allow us to recognize you on return visits. You can control cookies through your browser settings—disabling cookies may limit platform functionality. We use analytics cookies to track page views and user flow, which helps us optimize the xl999 experience. We do not use tracking pixels for advertising or retargeting.

Data Security and Retention on xl999

We protect your data through encryption, access controls, and security audits. Your password is hashed using industry-standard algorithms—we do not store plain-text passwords. Payment information is encrypted in transit using TLS/SSL. We restrict internal access to personal data to employees and contractors who need it to serve your account.

We retain your personal information while your xl999 account is active. After you close your account, we retain transaction records, KYC documents, and gameplay data for regulatory compliance—typically 5–7 years depending on applicable law in your jurisdiction. We delete or anonymize other personal data within 12 months unless legal obligations require longer retention.

We maintain incident response procedures. If we discover a data breach involving your personal information, we notify you via email and our support team within 72 hours of discovery. We take security seriously and regularly test our systems for vulnerabilities.

Policy Changes and Contact Information

We may update this privacy policy to reflect changes in our practices or applicable law. Material changes are communicated to your registered email at least 30 days before taking effect. Your continued use of xl999 after such notice constitutes acceptance of the updated policy.

If you have questions about our privacy practices, your data, or this policy, contact our support team during business hours. Our multilingual team responds in English and regional languages within 2–3 business days. You can also request a formal privacy review or data deletion request through your account settings or by contacting support directly.

This privacy policy is governed by the laws applicable in your jurisdiction. By using xl999, you acknowledge that you have read and understood how we collect, use, and protect your personal information. If you do not agree with our practices, you may close your account and request data deletion subject to regulatory retention requirements.