Privacy Policy — ttt999

ttt999 operates the online gaming platform accessible at https://ttt999.onl (the "Platform"). We take the privacy of our members seriously. This Privacy Policy describes in plain, precise terms how we collect, use, disclose, and safeguard the personal information of all registered members and visitors to the ttt999 platform.

This Policy applies to all ttt999 services, including the sportsbook, live casino, card game rooms, slot games, and all customer support channels. It should be read in conjunction with the ttt999 Terms & Conditions, which govern your use of the Platform as a whole.

ttt999 primarily serves adult players resident in Indonesia. Where this Policy references local context — such as Indonesian banks, e-wallets, or regulatory bodies — those references are specific to the Indonesian market context and do not imply that ttt999 is licensed or regulated by any Indonesian government authority. Online gaming regulation in Indonesia is subject to ongoing legal developments, and it remains the responsibility of each member to ensure their use of the Platform complies with applicable local laws.

Throughout this Privacy Policy, the following definitions apply:

3.1 Registration Data. When you create a ttt999 account, we collect your full legal name, date of birth, Indonesian mobile phone number, email address (if provided), preferred username, and account password (stored in hashed, non-reversible form).

3.2 Identity Verification Data. To complete KYC verification prior to processing withdrawals, we collect a copy of your government-issued photographic identification (such as your KTP — Indonesian national identity card), a selfie or live photograph for liveness verification, and, where required, proof of ownership of the payment method used for deposits (e.g., a screenshot of your BCA, BRI, BNI, or Mandiri account showing your registered name).

3.3 Financial Data. We collect records of all deposits and withdrawals, including transaction amounts, timestamps, and the payment method used (bank transfer via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, or Bank Permata; or e-wallet via OVO, DANA, GoPay, ShopeePay, or LinkAja). We do not store full bank account numbers or e-wallet credentials — only the masked identifier and transaction reference provided by the payment processor.

3.4 Gaming Activity Data. We record your full betting history, game session logs, win/loss records, bonus usage, and wagering activity across all ttt999 products including the sportsbook, live casino, Bandar Ceme room, Dragon Tiger tables, and slot games. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical Data. When you access the Platform, we automatically collect your IP address, browser type and version, operating system, device model, screen resolution, referring URL, and session timestamps. This data is collected for security, fraud prevention, and platform performance optimization purposes.

3.6 Communications Data. We retain records of all communications between you and the ttt999 support team, including live chat transcripts, email correspondence, and any documents you submit in connection with a support request or dispute.

4.1 Directly From You. The majority of your Personal Data is collected directly from you during the registration process, during KYC verification, when you make deposits or withdrawal requests, when you contact customer support, and when you voluntarily provide information in connection with a promotion or survey.

4.2 Automatically. Technical Data (IP address, device information, session logs) is collected automatically each time you access the Platform, whether via a desktop browser or mobile device. This collection is essential to maintaining session security and detecting fraudulent access attempts.

4.3 From Third-Party Processors. When you complete a deposit or withdrawal via a local Indonesian bank or e-wallet, the payment processor returns a transaction confirmation to ttt999 containing the masked account identifier, transaction amount, currency (IDR), and status. We do not receive raw payment credentials from these processors.

4.4 From KYC Partners. Where ttt999 uses a third-party identity verification service to assist with KYC processing, that service returns a verification outcome (pass/fail) and a confidence score to ttt999. The underlying identity documents are processed by the KYC partner under their own applicable privacy policy.

4.5 Cookies and Similar Technologies. The Platform uses cookies, web beacons, and local storage to maintain your login session, remember your preferences, measure page performance, and support fraud detection. See Section 11 (Cookies & Tracking) for full details.

ttt999 processes your Personal Data only for specific, documented purposes. The primary purposes are set out in the table below:

ttt999 does not use your Personal Data for automated decision-making that produces significant legal effects without human review, with the exception of real-time fraud scoring during transactions. Where automated fraud scoring results in a transaction hold, a human agent will review the decision within 4 business hours.

6.1 Contract Performance. The majority of ttt999's data processing is necessary for the performance of the contract between ttt999 and you as a member. This includes account management, payment processing, KYC verification, and game delivery. Without this processing, ttt999 cannot provide its services to you.

6.2 Legal Obligation. Certain processing is required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, tax reporting requirements, and regulatory directions from the licensing authority under which ttt999 operates internationally. Compliance-related processing continues regardless of whether you withdraw your consent.

6.3 Legitimate Interests. ttt999 processes Technical Data and Gaming Activity Data on the basis of its legitimate interests in maintaining a secure, fair, and stable platform, preventing fraud, and monitoring for problem gambling patterns. These legitimate interests are balanced against your privacy rights, and ttt999 applies data minimization principles to limit the scope of this processing.

6.4 Consent. Where ttt999 seeks to send you marketing communications about promotions, seasonal offers (such as those aligned with Ramadhan, Idul Fitri, or Indonesian Independence Day events), or personalized game recommendations, we will obtain your explicit consent before doing so. You may withdraw your marketing consent at any time by contacting support or using the preference center in your account settings.

7.1 Payment Processors. ttt999 shares the minimum necessary financial and identity data with our Indonesian payment processing partners — including the local bank transfer gateways supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata, and the e-wallet integrations for OVO, DANA, GoPay, ShopeePay, and LinkAja — solely for the purpose of completing your deposit or withdrawal transactions.

7.2 KYC Verification Partners. Identity documents submitted for KYC verification are shared with ttt999's designated identity verification partner. This partner processes documents under contractual data protection obligations and returns only the verification outcome to ttt999. Documents are not stored by ttt999 beyond the period required for regulatory compliance.

7.3 Game Providers. Third-party game studios integrated into the ttt999 Platform — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe — may receive a pseudonymized member identifier and session token necessary to deliver game content and settle bet results. These providers do not receive your full name, contact details, or financial information.

7.4 Regulatory & Law Enforcement Authorities. ttt999 may be required to disclose member data to regulatory bodies, financial intelligence units, or law enforcement agencies where required by law, court order, or in connection with an investigation into money laundering, fraud, or other criminal activity. Such disclosures are made without prior notice to the member where legally mandated.

7.5 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of ttt999's assets, member Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the contact details held on your account.

8.1 Cross-Border Processing. ttt999 operates an internationally licensed platform. Some Personal Data processing — including hosting infrastructure, game platform servers, and certain KYC and fraud detection systems — may be performed in jurisdictions outside Indonesia. Where data is transferred internationally, ttt999 ensures that appropriate contractual safeguards are in place between ttt999 and the receiving entity.

8.2 Safeguards Applied. For international data transfers, ttt999 applies the following protections: data processing agreements with all third-party processors containing binding data protection obligations; encryption of all data in transit using 256-bit TLS; and access controls that limit who within a receiving organization can view identifiable member data.

8.3 Member Awareness. By registering a ttt999 account, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia. If you have concerns about a specific data transfer, please contact ttt999 support and we will provide further information about the safeguards applicable to that transfer.

9.1 Active Accounts. For active member accounts, ttt999 retains all Personal Data for as long as the account remains open. Gaming activity records and transaction histories are retained for the lifetime of the account to support dispute resolution, responsible gaming monitoring, and audit requirements.

9.2 Closed Accounts. Following account closure — whether initiated by you or by ttt999 — your Personal Data is retained for a minimum period of five years from the date of closure. This retention period reflects ttt999's obligations under applicable anti-money laundering regulations and the standard limitation period for financial claims. After this period, data is securely deleted or anonymized.

9.3 KYC Documents. Identity documents submitted for KYC verification are retained for a minimum of five years from the date of submission, in accordance with AML record-keeping requirements. After the mandatory retention period, documents are securely and permanently destroyed.

9.4 Communications Records. Customer support transcripts and email correspondence are retained for three years from the date of the last communication in a given support thread, or for the lifetime of an open dispute, whichever is longer.

9.5 Anonymized Analytics. Aggregated, anonymized analytics data derived from Technical Data may be retained indefinitely, as it no longer constitutes Personal Data and cannot be used to identify individual members.

ttt999 respects your rights in relation to your Personal Data. The following rights are available to all ttt999 members, subject to applicable legal limitations:

• Right of Access: You may request a copy of all Personal Data ttt999 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. For KYC-sensitive fields such as your legal name or date of birth, you will be required to submit supporting documentation.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. This right is subject to our legal retention obligations — data we are required to retain under AML or regulatory rules cannot be deleted on request.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, such as while a dispute about data accuracy is pending.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that we provide your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing based on ttt999's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the ttt999 support team at [email protected] (plain text — not a clickable link). We will acknowledge your request within 72 hours and respond in full within 30 days. We may require identity verification before processing any rights request to ensure we are releasing data only to the correct individual.

11.1 What Are Cookies. Cookies are small text files placed on your device by your web browser when you visit the ttt999 Platform. They are widely used across the web to make websites function efficiently and to provide reporting information to site operators.

11.2 Types of Cookies Used by ttt999. The Platform uses the following categories of cookies:

11.3 Managing Cookies. You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling other cookie categories will not affect your ability to access core Platform features but may reduce performance or personalization quality.

11.4 No Third-Party Advertising Cookies. ttt999 does not deploy third-party advertising or retargeting cookies. We do not share your browsing behavior on the ttt999 Platform with advertising networks or social media platforms for the purpose of targeting you with advertisements on other websites.

12.1 Encryption in Transit. All data transmitted between your device and the ttt999 Platform is encrypted using 256-bit TLS (Transport Layer Security). This is the same encryption standard applied by Indonesia's major commercial banks and ensures that your login credentials, payment details, and account data cannot be intercepted in transit.

12.2 Encryption at Rest. Sensitive Personal Data stored on ttt999 servers — including identity documents and hashed account credentials — is encrypted at rest using AES-256. Database access is restricted by role-based access controls, and all administrative access is logged and audited.

12.3 Password Storage. Account passwords are never stored in plaintext. ttt999 applies a bcrypt hashing algorithm with a high work factor, ensuring that even in the event of a data breach, your password cannot be recovered from the stored hash.

12.4 Incident Response. In the event of a data security incident affecting your Personal Data, ttt999 will notify affected members without undue delay via their registered contact details. Notifications will describe the nature of the incident, the data affected, and the steps ttt999 is taking to address it.

12.5 Your Responsibilities. While ttt999 applies robust technical and organizational security measures, account security also depends on your own practices. You are responsible for maintaining the confidentiality of your username and password, using a strong and unique password for your ttt999 account, and logging out of shared or public devices after each session. ttt999 will never contact you asking for your full password.

13.1 Age Restriction. The ttt999 Platform is strictly for adults aged 21 years and above. ttt999 does not knowingly collect Personal Data from persons under the age of 21. The minimum age for account registration is 21 years, and this is verified as part of the KYC process.

13.2 Underage Access. If ttt999 discovers or is notified that an account has been registered by a person under 21 years of age, the account will be closed immediately, all associated Personal Data will be deleted (subject to any mandatory legal retention obligations), and any funds held in the account will be reviewed in accordance with applicable law.

13.3 Shared Devices. If you share a device with persons under the age of 21, ttt999 strongly recommends enabling device-level parental controls and ensuring that your ttt999 account is protected by a strong, unique password that is not accessible to minors.

13.4 Reporting Underage Access. If you have reason to believe that a person under 21 years of age has registered or is using a ttt999 account, please contact ttt999 support immediately. We will investigate and take appropriate action without delay.

14.1 Right to Update. ttt999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our services. The date of the most recent revision is displayed at the top of this page.

14.2 Notification of Material Changes. Where a material change is made to this Privacy Policy — for example, a change to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — ttt999 will notify active members via their registered contact details at least 14 days before the change takes effect.

14.3 Continued Use as Acceptance. Your continued use of the ttt999 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you must close your account before the effective date.

14.4 Archived Versions. Previous versions of this Privacy Policy are available on request from the ttt999 support team. If you believe a change has been applied that adversely affects your rights, you may contact support to request a review.

If you have any questions, concerns, or requests in connection with this Privacy Policy — including requests to exercise your privacy rights under Section 10 — please contact the ttt999 data protection team. Our support team is available 24 hours a day, 7 days a week including Indonesian public holidays, with Indonesian-speaking agents on hand via live chat.

Email: [email protected] (plain text — not a clickable link)

When contacting us about a privacy matter, please include the subject line "Privacy Request" and the registered email address or phone number associated with your ttt999 account. This enables our team to locate your account and respond accurately within the target timeframe.

For responsible gaming-related data requests — such as questions about how your gaming activity data is used in responsible gaming monitoring — please also visit our Responsible Gaming page for the full range of available self-management tools.