sky99 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

sky99, operating at https://sky99.cam, is the Data Controller responsible for the personal data of all registered Players. As Data Controller, sky99 determines the purposes for which your Personal Data is collected and the means by which it is processed.

If you have any questions about how sky99 handles your Personal Data, or if you wish to exercise any of your rights described in Section 10 of this Policy, you may contact our Data Protection team directly at:

sky99 collects only the Personal Data that is necessary to provide our gaming services, fulfill legal obligations, and protect the security and integrity of the platform. The categories of data we collect are set out below:

sky99 does not collect any special categories of sensitive personal data (such as health information, racial or ethnic origin, or political opinions) except where strictly required by applicable law or explicitly volunteered by you in a responsible gaming context.

sky99 collects Personal Data through the following channels:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or participating in a promotion.
• Automated Technologies: Technical data collected automatically as you navigate the sky99 platform — including via cookies, web beacons, server logs, and similar tracking technologies (see Section 9 for details).
• Payment Processors: Confirmation data received from third-party payment providers (BCA, BRI, OVO, DANA, GoPay, and others) when you initiate a financial transaction on sky99.
• Identity Verification Partners: Data received from KYC and fraud-detection service providers engaged to verify your identity and protect the platform against unauthorized activity.
• Game Providers: Session and outcome data passed to sky99 from licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and others) for game integrity and account reconciliation purposes.
• Publicly Available Sources: In limited circumstances — and only where relevant to fraud prevention or regulatory compliance — sky99 may supplement your profile with information from publicly available databases.

sky99 processes your Personal Data only for specific, clearly defined purposes and only where a valid legal basis exists for doing so. The table below sets out the primary purposes for which sky99 processes Personal Data, together with the applicable legal basis:

sky99 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment Processors: We share transaction-relevant data with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposits and withdrawals.
• Game Studios & Platform Providers: We share session identifiers and account-level data with licensed game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) to enable game delivery and ensure accurate game-round reconciliation.
• KYC & Fraud Detection Partners: We may share identity data with specialist verification and fraud-prevention service providers engaged to authenticate your identity and protect the platform against fraud, money laundering, and unauthorized access.
• Legal and Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, courts, or regulatory bodies where required by law, court order, or where disclosure is necessary to protect the rights, property, or safety of sky99, its players, or the general public.
• Professional Advisors: We may share data with lawyers, auditors, and insurers where necessary in connection with legal proceedings, audits, or insurance claims — subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of sky99's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance via the email address registered to your Account.

sky99 operates as an internationally licensed platform. Some of the third-party service providers we engage (including game studios such as Evolution Gaming and Pragmatic Play, and certain technology infrastructure providers) are based outside Indonesia, meaning your Personal Data may be transferred to and processed in jurisdictions other than Indonesia.

Whenever such transfers occur, sky99 takes all reasonable steps to ensure that your Personal Data receives a level of protection consistent with this Privacy Policy and with internationally recognized data protection standards. These safeguards include:

• Contractual clauses that require receiving parties to protect Personal Data to standards equivalent to those applied by sky99.
• Technical measures including encryption in transit (TLS 1.2 or higher) and at rest (AES-256) to protect data during international transmission and storage.
• Due diligence on the privacy and security practices of all international service providers prior to engagement, and on an ongoing basis.

By using sky99, you acknowledge and consent to the transfer of your Personal Data as described in this section, subject always to the protections described above.

sky99 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods sky99 applies are as follows:

• Active Account Data: Retained for the entire duration of your registered Account, plus a minimum of five (5) years following Account closure — to satisfy AML record-keeping requirements and to facilitate resolution of any post-closure disputes.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years following the completion of verification or Account closure, whichever is later, in accordance with internationally recognized AML standards.
• Transaction Records (Deposits & Withdrawals): Retained for a minimum of five (5) years from the date of each transaction.
• Communications Records (Support Transcripts, Emails): Retained for a minimum of two (2) years from the date of the communication — or longer if the communication is relevant to an open dispute or investigation.
• Marketing Data (Opt-in Records): Retained for as long as your consent remains active, plus one (1) year following withdrawal of consent, to maintain an auditable record of your marketing preferences.
• Technical & Analytics Data (Logs, IP Records): Typically retained for twelve (12) months from collection, unless required for longer by fraud investigations or security incidents.

When Personal Data is no longer required under the retention schedule above, sky99 will securely delete or anonymize it in a manner that prevents reconstruction of the original data. Anonymized data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

sky99 uses cookies and similar tracking technologies to operate the platform, improve your experience, and analyze how the site is used. The types of cookies used by sky99 are described below:

• Strictly Necessary Cookies: Essential for the platform to function. These include session management cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Enable the platform to remember your preferences — such as your preferred language settings, game display preferences, and notification settings — so that you receive a personalized experience on each visit.
• Analytics Cookies: Used to understand how Players interact with sky99 — including which pages are visited most frequently, session duration, and navigation paths. This data is aggregated and anonymized wherever possible. sky99 uses these insights to improve platform usability and game selection.
• Marketing & Attribution Cookies: Used only where you have provided consent, to track responses to sky99 promotions and to measure the effectiveness of marketing campaigns. These cookies do not contain your name or financial details.

You can manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core sky99 features, including account login and game access. Full cookie management instructions are available via your browser's help documentation.

As a Player whose Personal Data is processed by sky99, you hold the following rights in respect of that data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You have the right to request a copy of the Personal Data sky99 holds about you, along with information about how it is being used.
• Right to Rectification: You may request that sky99 correct any inaccurate or incomplete Personal Data held in your Account. You may also update certain information directly from within your Account settings.
• Right to Erasure: Subject to any overriding legal retention obligations (see Section 8), you may request that sky99 delete your Personal Data. This right is not absolute — it does not apply where retention is required for legal compliance, fraud prevention, or dispute resolution.
• Right to Restrict Processing: You may request that sky99 temporarily restrict the processing of your Personal Data — for example, while the accuracy of your data is being verified, or while an objection to processing is being considered.
• Right to Data Portability: You may request that sky99 provide your Personal Data in a structured, machine-readable format for transfer to another service provider, where technically feasible and where the processing is based on your consent or contract performance.
• Right to Object: You have the right to object at any time to the processing of your Personal Data on the basis of legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, sky99 will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

sky99 will respond to all data rights requests within 30 calendar days of receipt. We may request proof of identity before processing any request to protect against unauthorized access to your Personal Data. In complex cases, we may extend the response period by a further 30 days, in which case we will notify you promptly.

sky99 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our key security safeguards include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the sky99 platform is encrypted using TLS 1.2 or higher, ensuring that your credentials, financial details, and gaming activity cannot be intercepted in transit.
• Encrypted Data Storage: All sensitive data stored on sky99 infrastructure — including passwords (cryptographically hashed using bcrypt), KYC documents, and payment details — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within sky99 is strictly limited on a need-to-know basis. All staff with data access are subject to confidentiality agreements and receive regular data protection training.
• Intrusion Detection & Monitoring: sky99's infrastructure is continuously monitored for unauthorized access attempts, unusual traffic patterns, and potential security incidents. Automated alerts trigger immediate investigation and response by our security team.
• Regular Security Audits: sky99 conducts regular penetration testing, vulnerability assessments, and third-party security audits to identify and remediate potential weaknesses before they can be exploited.
• Two-Factor Authentication (2FA): sky99 offers 2FA for registered accounts as an additional layer of protection beyond username and password.

sky99 verifies player age as part of the mandatory KYC process. If sky99 discovers or has reasonable grounds to believe that Personal Data has been collected from a person under the age of 21, the relevant Account will be immediately suspended, all associated Personal Data will be deleted as promptly as practicable, and any balance (excluding Bonus Funds) will be returned via the original payment method.

If you believe that a person under 21 years of age has registered or is using a sky99 Account — including through your own payment methods or devices — please contact us immediately at [email protected]. sky99 takes all reports of potential underage access seriously and will investigate and act on all credible reports without delay.

Parents and guardians are encouraged to install parental controls and internet filtering tools on shared devices to prevent underage access to online gaming platforms. Resources are available from reputable internet-safety organizations to assist with this.

sky99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, sky99 will provide advance notice to registered Players via the email address on their Account and via a prominent notice on the sky99 platform.

The updated Privacy Policy will be published at https://sky99.cam/privacy-policy with a revised "Last Updated" date at the top of the page. Your continued use of the sky99 platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

sky99 recommends that all registered Players review this Privacy Policy periodically — particularly ahead of major promotional periods such as Ramadhan, Idul Fitri, or Indonesian Independence Day campaigns — to remain informed of any updates to our data handling practices.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sky99 processes your Personal Data, please contact our team through any of the following channels:

Our customer support team includes native Indonesian-speaking agents available around the clock — including during Ramadhan, Idul Fitri, and all Indonesian public holidays — so you can always reach us in your preferred language for any data protection concerns.