gacha99 Privacy Policy

This page describes what we collect when you use gacha99 and how we keep that data protected. We collect personal information — your email, phone number, identity documents, and payment details — to operate your account, process deposits and withdrawals, and comply with legal obligations. All data collected on gacha99 is encrypted, stored securely, and shared only with necessary service partners.

Our privacy commitments centre on transparency and minimal collection. We do not sell your data to third parties, do not use it for marketing beyond your account communications, and do not share it with external advertisers. You maintain the right to access, correct, or delete your personal information at any time by contacting our support team.

This policy applies to all account holders on gacha99 regardless of jurisdiction or payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet). We comply with standard data-protection practices and undertake regular security audits to safeguard your information.

What Data We Collect on gacha99

We collect personal information in several categories. Account setup data includes your email address, phone number, username, and password. Identity verification (KYC) requires government-issued ID, proof of current address, and in some cases photograph or video confirmation. Payment information includes your chosen deposit and withdrawal method (e-wallet account, bank account details, or QRIS identifier) and transaction history.

We also collect gameplay data — every wager you place, every outcome you receive, and every payout you request. This information remains on your account records for dispute resolution, fraud prevention, and regulatory compliance. We track your session activity (login times, duration, which tables or markets you accessed) to monitor account security and detect unauthorised access.

We use cookies and similar tracking technologies on our website to remember your login state, maintain your session, and analyse website performance. These cookies do not track you across external websites. You can disable cookies in your browser settings, though this may limit your gacha99 experience.

Data You Provide Directly

  • Account credentials: email, phone, username, password, security questions
  • Identity documents: national ID, passport, driving licence, proof of address
  • Payment details: e-wallet username, bank account number, e-wallet ID
  • Support communications: chat messages, email enquiries, phone call recordings (if you consent)
  • Account preferences: language selection, communication preferences, table limits

Data We Collect Automatically

  • Gaming history: wagers placed, outcomes, settlement amounts, payout requests
  • Session logs: login times, device type, IP address, browser version
  • Location data: approximate location derived from IP address (not precise GPS)
  • Analytics: pages visited, time spent, features used, payment method chosen
  • Security events: failed login attempts, suspicious activity flags, account recoveries

How We Use Your Data

We use collected data for five core purposes. First, account operation — we need your email, phone, and identity to set up your account, verify your identity, and enable deposits and withdrawals. Second, fraud prevention and security — we monitor your account for suspicious activity, unauthorised access, and payment disputes. Third, legal compliance — we retain records for tax reporting, anti-money-laundering obligations, and regulatory investigations if required.

Fourth, customer support — we access your account history and contact data to respond to your enquiries, resolve disputes, and assist with account recovery. Fifth, platform improvement — we analyse aggregated (anonymised) gameplay and website data to identify technical issues, optimise performance, and improve user experience.

We do not use your data for direct marketing beyond account-related communications (e.g., deposit confirmations, withdrawal notices, support responses). We do not sell your personal information to advertisers, data brokers, or unrelated third parties. We do not profile you for gambling risk or create predictive models about your behaviour for commercial purposes.

Jurisdiction note: Our servers may be located outside your jurisdiction. By using gacha99, you acknowledge that your data may be transferred, stored, and processed internationally. We apply consistent security standards regardless of server location.

Third-Party Data Sharing

We share your data only with essential service partners. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank partners) receive your payment details to process deposits and withdrawals. These partners operate under their own privacy policies, which we do not control — we recommend reviewing their terms if you have privacy concerns specific to a payment method.

Our live-dealer studios may be operated by external production companies. These partners receive your username and session data (to display your bets on tables) but do not receive sensitive personal information like your ID or bank details. We contractually require all external partners to maintain confidentiality and apply security standards equivalent to our own.

We may disclose your data if required by law — court orders, regulatory investigations, or legitimate law-enforcement requests. In such cases, we notify you of the disclosure unless legally prohibited. We do not proactively share data with government agencies; we disclose only when compelled.

Payment processors
Receive your payment method and transaction details; operate under their own privacy policies.
Studio partners
Receive your username and session info for live-table display; contractually bound to confidentiality.
Legal disclosures
Only when compelled by court order or regulatory requirement; you are notified when possible.

Your Rights on gacha99

You have the right to access your personal data. Contact our support team with your account reference, and we provide a copy of all personal information we hold about you within 14 business days. You have the right to correct inaccurate information — if your name, address, or contact details are wrong, contact support with updated documents.

You have the right to delete your account. If you request permanent deletion, we remove your personal information from active systems within 30 days. However, we retain anonymised gameplay records (outcomes without your identity) for regulatory purposes indefinitely. We also retain encrypted payment records for tax and anti-fraud obligations for the period required by law.

You have the right to withdraw consent for non-essential processing. If you object to analytics or automated profiling, contact support to opt out. This does not affect your ability to use gacha99 — only optional data uses stop. You have the right to lodge a complaint with your local data-protection authority if you believe we mishandle your data.

Data Security and Retention

We encrypt all data in transit using TLS (Transport Layer Security) and at rest using AES-256 encryption. Our servers are protected by firewalls, intrusion-detection systems, and regular security audits. We limit employee access to personal data — only staff with a legitimate work need can view sensitive information, and all access is logged and monitored.

We retain personal data only as long as necessary. Account information remains on file while your account is active; we delete it within 90 days of account closure unless law requires longer retention (e.g., tax records retained for 7 years). Gaming history is retained indefinitely to support dispute resolution and fraud investigations. Payment records are retained for the period mandated by local tax and anti-money-laundering law — typically 5–7 years.

Despite our security measures, no system is perfectly secure. We cannot guarantee absolute protection against all cyber threats. If we detect a data breach affecting your personal information, we notify you within 72 hours and provide guidance on protective steps you can take.

Cookies and Tracking

We use functional cookies to maintain your login session, remember your preferences (language, theme), and track your session activity for security. We use analytical cookies to measure website performance — page load times, traffic patterns, feature usage. These cookies are anonymised; we do not link them to your identity.

We do not use third-party advertising cookies or allow external networks to track your gacha99 activity. Your privacy on our platform is not monetised through data sales to advertisers. You can disable cookies in your browser; however, functional cookies are necessary for gacha99 to operate correctly.

Contact and Changes

Our support team handles privacy enquiries via live chat (typically 30-minute response during business hours), email (24-hour response), and phone during standard operating hours. Contact us in English or your preferred language to access your data, request deletion, or lodge a privacy complaint.

We may update this policy to reflect operational changes or legal developments. Updates are posted on this page with a revised date. Significant changes (e.g., new data uses) are notified to you by email; continued use of gacha99 after such notice implies acceptance. This policy was last updated today and applies to all account holders across supported jurisdictions.

Our commitment to data protection reflects our broader commitment to transparent, trustworthy service on gacha99. Questions about how we handle your information are welcome and will be answered promptly by our compliance team.

Related policies