Your privacy is a fundamental priority at suki99. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and the rights you hold as a data subject. Please read this document carefully before using our platform.
1.1 Identity. The data controller responsible for the personal information collected through the suki99 platform at https://suki99.cam is the legal entity that owns and operates the suki99 brand under its international gaming licence. For enquiries regarding this Privacy Policy or the exercise of data subject rights, please contact us at [email protected].
1.2 Nature of Processing. suki99 acts as a data controller in respect of all personal data collected directly from Members and prospective Members during the registration, verification, and account management processes. In respect of certain technical services (e.g., payment processing, game delivery), suki99 may act as a data controller alongside or in addition to appointed data processors, as described in Section 6 of this Policy.
2.1 Who This Policy Applies To. This Privacy Policy applies to all individuals who visit the suki99 website, register a Member Account, use any feature of the suki99 platform, contact our customer support team, or participate in any promotion offered by suki99. It applies regardless of the device or software used to access the platform.
2.2 Geographic Context. suki99 primarily serves players based in Indonesia, including major cities such as Jakarta, Surabaya, Bandung, Medan, Semarang, Makassar, Bali, and Yogyakarta. This Policy is drafted to be consistent with internationally recognised data protection principles and standards. Members are responsible for ensuring that their use of the platform and the sharing of their personal data is consistent with applicable local laws in Indonesia.
2.3 Third-Party Links. The suki99 platform does not contain links to external third-party websites. This Privacy Policy governs only the data processing activities of suki99 itself and does not extend to any third-party services that a Member may access independently outside the platform.
3.1 Registration Data. When you create a suki99 Account, we collect the following information:
3.2 KYC and Verification Data. To comply with our Know Your Customer (KYC) obligations and anti-money-laundering requirements, we may collect:
3.3 Financial Data. When you make deposits or request withdrawals, we collect:
3.4 Behavioural and Usage Data. When you use the platform, we automatically collect technical and behavioural data including:
3.5 Communications Data. When you contact suki99 support, we retain records of your communications, including email correspondence, live chat transcripts, and the nature and resolution of your enquiries, for quality assurance and compliance purposes.
suki99 processes your personal data for the following defined purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your Member Account; processing login, password resets, and account updates. |
| KYC & Compliance | Verifying your identity and age (21+), meeting AML and CFT obligations, and maintaining records required by our licensing authority. |
| Payment Processing | Executing deposits and withdrawals via local banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallets (OVO, DANA, GoPay, etc.); detecting and preventing fraud. |
| Service Delivery | Providing access to sports betting, live casino, togel, slot games, and all other platform features. |
| Responsible Gaming | Monitoring betting behaviour to identify signs of problem gambling; enforcing deposit limits, loss limits, and self-exclusion requests. |
| Customer Support | Responding to enquiries, resolving disputes, and maintaining communication records for quality assurance. |
| Security & Fraud Prevention | Detecting and preventing unauthorised access, collusion, bonus abuse, money laundering, and other fraudulent activity. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve platform performance, user experience, and product offerings. |
| Legal Obligations | Complying with applicable laws, regulatory requirements, court orders, and requests from lawfully authorised authorities. |
5.1 Contract Performance. The primary legal basis for processing your registration data, financial data, and KYC data is the performance of the contract between you and suki99 (i.e., the Terms & Conditions you accepted upon registration). Without this data, suki99 cannot legally or operationally provide its services to you.
5.2 Legal Obligation. Certain processing activities — particularly KYC verification, AML record-keeping, and responsible gaming monitoring — are carried out to comply with the legal and regulatory obligations imposed on suki99 by its licensing authority and applicable international standards.
5.3 Legitimate Interests. suki99 processes behavioural and usage data on the basis of its legitimate interests in maintaining platform security, preventing fraud, improving its services, and protecting the interests of all Members. These interests are balanced against your privacy rights and do not override your fundamental freedoms.
5.4 Consent. Where suki99 processes your data for purposes not covered by the above bases — such as sending optional promotional communications — we will request your express consent beforehand. You may withdraw consent at any time by contacting [email protected] without this affecting the lawfulness of processing carried out prior to withdrawal.
6.1 Data Processors. suki99 engages a limited number of carefully vetted third-party service providers who process Member data on our behalf and under our instructions. These include:
6.2 Legal Disclosures. suki99 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by a valid legal order, court process, or regulatory obligation. suki99 will, where legally permissible, notify affected Members of any such disclosure.
6.3 No Sale of Data. suki99 does not sell, rent, exchange, or otherwise make available your personal data to unaffiliated third parties for their own commercial purposes. Data shared with processors is governed by co nfidentiality and data processing agreements that prohibit secondary use.
6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of the suki99 business, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, suki99 will notify affected Members via email and update this Privacy Policy prior to any transfer taking effect. The successor entity will be bound by terms no less protective than those set out in this Policy.
7.1 Retention Periods. suki99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of account plus 5 years after closure |
| KYC & Identity Documents | Duration of account plus 5 years after closure |
| Financial Transaction Records | 7 years from the date of each transaction |
| Betting & Gaming History | 5 years from the date of each wager |
| Customer Support Correspondence | 3 years from the date of last interaction |
| Technical Logs (IP, session) | 12 months on a rolling basis |
| Self-Exclusion Records | Permanently, to prevent re-registration during exclusion |
7.2 Deletion. Upon expiry of the applicable retention period, suki99 will securely delete or anonymise your personal data in a manner that renders re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data.
7.3 Extended Retention. Where personal data is subject to an active legal dispute, regulatory investigation, or law enforcement hold, suki99 may be required to retain the relevant data beyond the standard retention period until the matter is fully resolved.
8.1 Technical Measures. suki99 implements a comprehensive set of technical security controls to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:
8.2 Organisational Measures. Beyond technical controls, suki99 maintains internal data protection policies, conducts staff training on data handling responsibilities, and requires all employees and contractors with access to personal data to be bound by confidentiality obligations.
8.3 Breach Response. In the event of a personal data breach that poses a risk to Member rights and freedoms, suki99 will notify affected Members without undue delay and will take all reasonable steps to contain the breach, assess its impact, and implement remediation measures. Where required by applicable law or our licensing authority, suki99 will also report the breach to the relevant regulatory body.
9.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. suki99 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to enable essential platform functionality, improve your user experience, and gather anonymised analytics data.
9.2 Types of Cookies Used. suki99 employs the following categories of cookies:
9.3 Cookie Management. You may manage or disable non-essential cookies through your browser's privacy settings. Please note that disabling certain cookies may affect the performance and availability of some platform features. Strictly necessary cookies cannot be disabled via browser settings as they are essential to platform security and session management.
9.4 No Third-Party Advertising Cookies. suki99 does not permit third-party advertising networks to place tracking cookies on the platform for the purpose of serving targeted advertisements to Members based on their browsing behaviour.
As a data subject whose personal information is processed by suki99, you hold the following rights. To exercise any of these rights, please contact [email protected] with your full name, Account username, and a clear description of the right you wish to exercise. suki99 will respond within 30 days of receipt of a verifiable request.
11.1 Strict 21+ Policy. The suki99 platform is intended exclusively for adults aged 21 years and over. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. If we become aware that personal data belonging to a minor has been submitted to us, we will delete it immediately and close the associated Account.
11.2 Parental Awareness. If you are a parent or guardian and believe that a person under 21 in your care has registered an account or provided personal information to suki99 without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including account closure and data deletion.
11.3 Age Verification Enforcement. Age verification is a mandatory step in the suki99 KYC process. Any account that cannot be verified as belonging to a person aged 21 or over will be suspended pending verification and closed permanently if verification cannot be completed satisfactorily.
12.1 Cross-Border Processing. As an internationally operated platform serving Members in Indonesia, suki99 may process and store personal data on servers located outside Indonesia. These servers are operated by suki99's cloud infrastructure providers in jurisdictions that maintain robust data protection frameworks.
12.2 Safeguards. Where personal data is transferred internationally, suki99 ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy. These safeguards include contractual data protection clauses with all data processors operating in third-country jurisdictions, and selection of processors in countries recognised as providing adequate data protection standards.
12.3 Payment Data. Financial transaction data processed through Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) is processed within the Indonesian financial system in accordance with applicable Bank Indonesia regulations and the relevant payment provider's own privacy practices.
13.1 Right to Update. suki99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The "Last Updated" date at the top of this page will be revised accordingly whenever a new version of this Policy is published.
13.2 Notification of Material Changes. Where a proposed change is material — that is, where it significantly affects how your personal data is used or the rights available to you — suki99 will notify affected Members via the email address associated with their Account at least 14 days before the change takes effect. Continued use of the platform after the effective date constitutes acceptance of the updated Policy.
13.3 Version Control. The version of this Privacy Policy currently published at https://suki99.cam/privacy-policy is always the operative version. Prior versions are available upon request by contacting [email protected].
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which suki99 handles your personal data, please reach out to our support team using the contact details below. All data protection enquiries are handled with confidentiality and in accordance with the timelines set out in Section 10.
For urgent matters, including suspected data breaches affecting your Account, please mark your email subject line as "URGENT: Data Security" and our team will respond on a priority basis within 24 hours.
Six core privacy commitments that underpin every data decision we make at suki99.
Every byte of data exchanged between your browser and the suki99 platform is protected by TLS 1.2+ encryption. Your personal and financial data is never transmitted in plain text under any circumstance.
Access to Member personal data within suki99 is governed by role-based permissions. Only staff with a documented need to access specific data categories are granted that access, and all access is logged and audited.
suki99 will never sell, rent, or trade your personal information to third parties for marketing or advertising purposes. Your data exists solely to power your experience on our platform and to meet our legal obligations.
We keep your data only for as long as required — no longer. Clear retention periods are applied to every data category, and data is securely deleted or anonymised once the retention period expires.
Your rights to access, correct, delete, and port your data are real and actionable. Contact our support team to exercise any right, and we will respond within the timeframes set out in this Privacy Policy.
suki99 conducts independent penetration testing and security reviews on a regular basis. Any vulnerability identified is triaged and remediated promptly, keeping the platform's defences current against evolving threats.
A quick-reference summary of the rights you hold as a suki99 Member. Full details are set out in Section 10 above.
Request a full copy of all personal data suki99 holds about you at any time.
Ask us to correct inaccurate or incomplete personal data without delay.
Request deletion of data no longer needed, subject to legal retention rules.
Receive your data in a structured, machine-readable format on request.
Review our Terms & Conditions for the full contractual framework, explore our FAQ for quick answers, or contact support directly — we are happy to help.