Privacy Policy

1. Introduction

This Privacy Policy explains how epsi99 ("we," "us," "our," or the "Platform") collects, uses, discloses, stores, and protects the personal information of users ("you," "your," or "Player") who access or use our online gaming services available at https://epsi99.click and associated mobile applications (collectively, the "Services").

epsi99 is committed to protecting your privacy and ensuring the security of your personal data in accordance with international data protection standards and best practices applicable to online gaming platforms serving Indonesian players. By creating an account or using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately cease using the Services and contact us to close your account.

Your Rights: You have the right to access, correct, delete, or restrict the processing of your personal data. You may also withdraw consent for certain data processing activities. For more information about your privacy rights, see Section 8 of this Policy.

2. Information We Collect

epsi99 collects various categories of personal information necessary to provide our Services, verify your identity, process payments, comply with legal obligations, and improve your gaming experience.

2.1 Information You Provide Directly

When you register an account or use our Services, you provide the following information:

Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address in Indonesia, username, and password.
Identity Verification Documents: Government-issued identification (KTP, passport, or driver's license), proof of address, proof of payment method ownership, and selfie photographs for KYC compliance.
Payment Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history.
Communications: Messages you send to customer support, feedback forms, survey responses, and any other communications with epsi99.
Responsible Gaming Settings: Deposit limits, loss limits, time limits, self-exclusion preferences, and other responsible gaming tool configurations.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioral data:

Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID).
Connection Data: IP address, internet service provider, geographic location (country, city), time zone, and connection timestamps.
Usage Data: Pages visited, games played, bet amounts, win/loss records, session duration, click patterns, navigation paths, and feature usage statistics.
Cookies and Tracking Technologies: Session cookies, preference cookies, analytics cookies, and similar technologies (see Section 9 for detailed cookie information).

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

Payment Processors: Transaction verification, fraud detection signals, and payment method validation from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers.
Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party KYC providers.
Game Providers: Game outcome data, RTP statistics, and technical performance metrics from casino game and live dealer providers.

3. How We Use Your Information

epsi99 processes your personal information for the following purposes, based on the legal grounds of contract performance, legal obligation, legitimate interests, and consent:

3.1 Account Management and Service Delivery

Create and maintain your player account
Authenticate your identity and prevent unauthorized access
Process deposits, withdrawals, and other financial transactions
Provide access to casino games, live dealer tables, and sports betting markets
Track your gaming activity, balance, and transaction history
Enable account features, preferences, and personalization settings

3.2 Legal and Regulatory Compliance

Verify you are at least 21 years of age and a resident of Indonesia
Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
Detect and prevent fraud, money laundering, and other illegal activities
Maintain records required by gaming regulations and financial laws
Respond to legal requests, court orders, and regulatory inquiries
Enforce our Terms and Conditions and protect our legal rights

3.3 Customer Support and Communications

Respond to your inquiries, questions, and support requests
Send transactional notifications (deposit confirmations, withdrawal updates, account alerts)
Provide important service announcements and policy updates
Conduct customer satisfaction surveys and gather feedback
Resolve disputes, complaints, and technical issues

3.4 Responsible Gaming and Player Protection

Implement and enforce deposit limits, loss limits, and time limits
Process self-exclusion and cooling-off period requests
Monitor gaming behavior for signs of problem gambling
Provide access to responsible gaming tools and support resources
Prevent underage gambling and restrict access to prohibited jurisdictions

3.5 Marketing and Promotions (With Consent)

Send promotional emails about bonuses, tournaments, and special offers
Deliver personalized game recommendations based on your preferences
Notify you about new games, features, and platform updates
Conduct promotional campaigns aligned with Indonesian holidays and events

Note: You may opt out of marketing communications at any time by clicking "unsubscribe" in any promotional email or contacting support. Opting out does not affect transactional communications necessary for account management.

3.6 Platform Improvement and Analytics

Analyze usage patterns to improve user experience and interface design
Optimize game selection and betting market offerings
Enhance platform performance, speed, and reliability
Conduct A/B testing of features and functionalities
Generate aggregated, anonymized statistics for business intelligence

4. Information Sharing and Disclosure

epsi99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who assist in operating our platform:

Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals.
Game Providers: Casino game studios, live dealer operators, and sports betting data providers receive limited gameplay data to deliver their services.
Identity Verification Services: KYC and age verification providers receive identification documents to authenticate your identity and age.
Cloud Hosting Providers: Secure server infrastructure providers host our databases and application servers.
Customer Support Tools: Live chat platforms and ticketing systems access communication history to provide support.
Analytics Services: Web analytics providers receive anonymized usage data to help us understand platform performance.

All service providers are contractually bound to protect your data and may only use it for the specific purposes we authorize. They are prohibited from selling or sharing your information with other parties.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement, or regulatory bodies when:

Required by applicable law, regulation, or legal process (subpoena, court order, warrant)
Necessary to comply with gaming license conditions or regulatory reporting requirements
Needed to investigate, prevent, or take action regarding suspected illegal activities
Required to protect our rights, property, or safety, or that of our users or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified of any such change in ownership or control of your personal data.

4.4 With Your Consent

We may share your information with other parties when you provide explicit consent for such sharing, such as participating in third-party promotions or linking your account to external services.

No Marketing Sales: epsi99 will never sell your email address, phone number, or other contact information to marketing companies, data brokers, or advertising networks. Your personal information is only shared with service providers necessary to deliver our gaming services.

5. Data Security

epsi99 employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

Encryption: All data transmission between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, payment information) is encrypted using advanced cryptographic algorithms.
Secure Servers: Our databases and application servers are hosted in secure data centers with physical access controls, surveillance, and environmental safeguards.
Firewall Protection: Network-level firewalls and intrusion detection systems monitor and block unauthorized access attempts.
Access Controls: Employee access to personal data is restricted on a need-to-know basis and protected by multi-factor authentication.
Security Audits: Regular vulnerability assessments, penetration testing, and security audits identify and remediate potential weaknesses.

5.2 Organizational Security Measures

Employee Training: All staff with access to personal data receive privacy and security training.
Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of personal information.
Data Minimization: We collect only the personal information necessary for legitimate purposes and delete data when no longer needed.
Incident Response: We maintain a security incident response plan to quickly address any data breaches or security events.

5.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

Choose a strong, unique password and never share it with anyone
Enable two-factor authentication if available
Log out of your account when using shared or public devices
Keep your email account and mobile phone secure (they are used for account recovery)
Be cautious of phishing emails claiming to be from epsi99 (verify sender addresses)
Report any suspicious account activity to support immediately

Data Breach Notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, epsi99 will notify you promptly via email and provide information about the nature of the breach, potential consequences, and remedial actions taken.

6. Data Retention

epsi99 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your account remains active, we retain all account information, transaction history, gaming records, and communications to provide ongoing services and comply with regulatory requirements.

6.2 Closed Account Data

After you close your account, we retain certain data for the following periods:

Transaction Records: 10 years (required by financial regulations and anti-money-laundering laws)
Identity Verification Documents: 7 years (KYC compliance requirements)
Gaming Activity Logs: 5 years (gaming license requirements and dispute resolution)
Marketing Consent Records: 3 years (to demonstrate compliance with consent requirements)
Customer Support Communications: 2 years (to address follow-up inquiries and quality assurance)

6.3 Legal Holds and Disputes

If your account is subject to an ongoing investigation, dispute, legal proceeding, or regulatory inquiry, we will retain relevant data until the matter is resolved, even if it exceeds our standard retention periods.

6.4 Anonymized Data

After personal identifiers are removed, we may retain anonymized, aggregated data indefinitely for statistical analysis, platform improvement, and business intelligence purposes. This anonymized data cannot be used to identify you personally.

7. International Data Transfers

epsi99 primarily operates servers and processes data within regions that serve Indonesian players. However, some of our service providers and technology partners may be located outside Indonesia, which may result in your personal information being transferred to, stored in, or processed in other countries.

When we transfer personal data internationally, we ensure appropriate safeguards are in place through:

Contractual agreements requiring service providers to implement adequate data protection measures
Selection of providers that adhere to internationally recognized data protection standards
Use of secure data transmission protocols and encryption for cross-border data flows
Regular audits of service provider security and privacy practices

By using epsi99 Services, you acknowledge and consent to the transfer of your personal information outside Indonesia to countries that may have different data protection laws, subject to the safeguards described above.

8. Your Privacy Rights

As an epsi99 user, you have the following rights regarding your personal information:

Right to Access

Request a copy of the personal information we hold about you, including account data, transaction history, and communications.

Right to Rectification

Correct inaccurate or incomplete personal information in your account profile or records.

Right to Deletion

Request deletion of your personal data, subject to legal retention requirements and ongoing obligations.

Right to Restriction

Request that we limit the processing of your personal information in certain circumstances.

Right to Portability

Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service.

Right to Object

Object to certain types of data processing, including direct marketing and automated decision-making.

8.1 Exercising Your Rights

To exercise any of these rights, please contact epsi99 customer support at [email protected] (plain text per site specifications). Include your username and a detailed description of your request. We will respond within 30 days and may require identity verification before processing your request.

8.2 Marketing Opt-Out

You may opt out of promotional communications by clicking "unsubscribe" in any marketing email or adjusting your communication preferences in your account settings. Note that you will continue to receive transactional emails necessary for account management (deposit confirmations, security alerts, policy updates).

9. Cookies and Tracking Technologies

epsi99 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your browser, remember your preferences, and track your interactions with the platform.

9.2 Types of Cookies We Use

Essential Cookies: Required for platform functionality, authentication, and security. These cannot be disabled without affecting core services.
Performance Cookies: Collect anonymous usage statistics to help us understand how players interact with the platform and identify areas for improvement.
Functionality Cookies: Remember your preferences (language, display settings, favorite games) to provide a personalized experience.
Marketing Cookies: Track your activity across sessions to deliver relevant promotional content and measure campaign effectiveness.

9.3 Managing Cookies

Most browsers allow you to control cookies through their settings. You can block or delete cookies, but this may impact platform functionality. Disabling essential cookies may prevent you from accessing certain features or logging into your account.

10. Children's Privacy

The Services provided by epsi99 are intended exclusively for adults aged 21 years or older. We do not knowingly collect, use, or disclose personal information from individuals under the age of 21.

If we discover that we have inadvertently collected personal information from a person under 21 years of age, we will immediately delete that information and close the associated account. If you believe a minor has created an account on our platform, please contact us immediately at [email protected] so we can take appropriate action.

We implement age verification procedures during account registration and may request identification documents to confirm age compliance. Users who provide false age information will have their accounts permanently closed and funds forfeited.

11. Changes to This Privacy Policy

epsi99 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make material changes to this Policy, we will notify you by:

Posting a prominent notice on the Platform homepage
Sending an email to your registered email address
Displaying an in-platform notification upon your next login

Changes become effective immediately upon posting to the Platform. Your continued use of the Services after changes are posted constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed of any updates.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made.

12. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or how epsi99 handles your personal information, please contact us:

Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Protection Request"
Response Time: We aim to respond to all privacy-related inquiries within 72 hours

When contacting us regarding privacy matters, please include:

Your full name and registered username
Detailed description of your inquiry or request
Any relevant documentation (for data access or correction requests)
Preferred method of response (email reply, account message)

We take all privacy concerns seriously and will investigate and respond to your inquiry in accordance with applicable data protection requirements.