How kera99 collects, uses, protects, and manages your personal information with bank-grade security
Last Updated: January 1, 2026kera99 is committed to protecting the privacy and security of all personal information entrusted to us by our Indonesian members. This Privacy Policy explains in detail what data we collect, how we use it, who we share it with, and what rights you possess regarding your personal information. By creating an account or using kera99 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any provision herein, please do not use our services.
This Privacy Policy applies to all personal data collected, processed, and stored by kera99 ("we", "us", "our", "the Platform", "the Company") from users ("you", "your", "User", "Member") accessing our online gaming platform located at https://kera99.cam. This policy covers data collected through our website, mobile-optimized interface, customer support channels, and any associated services including casino games, sports betting, togel lottery entertainment, payment processing, and promotional communications.
kera99 operates under international gaming licenses and serves primarily Indonesian residents while maintaining compliance with global data protection standards. We recognize that privacy regulations continue evolving worldwide, and we commit to adapting our practices to meet or exceed applicable requirements. Our data practices align with internationally recognized principles of transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability.
This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall relationship between kera99 and Users. Where conflicts arise between this Privacy Policy and the Terms & Conditions regarding data matters, this Privacy Policy prevails. For specific questions about how we handle your personal information, please contact our Data Protection team via the contact information provided at the end of this document.
kera99 collects several categories of personal information necessary to provide secure, personalized gaming services and comply with legal obligations including anti-money laundering regulations and age verification requirements:
When registering an account, Users provide the following personal details: full legal name as it appears on government-issued identification; date of birth for age verification (minimum 21 years); email address for account communications and password recovery; mobile phone number registered in Indonesia for security verification and promotional communications; residential address including city, province, and postal code; and preferred username and secure password for account access.
During the Know Your Customer (KYC) verification process required before first withdrawal, Users submit identification documentation including Indonesian National ID card (KTP) or valid passport, proof of residential address dated within three months (utility bill, bank statement, or government correspondence), and a selfie photograph holding identification next to the face for identity confirmation. Financial information provided during transactions includes bank account details for deposits and withdrawals (bank name, account number, account holder name matching KYC documentation), e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions, and transaction amounts and timestamps.
kera99's systems automatically log certain technical and behavioral data when Users access the Platform: device information including device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and unique device identifiers; connection data including IP address, internet service provider, geographic location (city/region level based on IP), connection timestamps, and session duration; and gameplay activity including games played, bet amounts and frequencies, win/loss records, bonus usage, deposit and withdrawal history, and account balance changes.
We may receive limited information from external sources to verify identity, prevent fraud, or process payments: payment processors provide transaction confirmation and success/failure status without storing full payment credentials on kera99 servers; game providers supply gameplay outcomes and random number generation logs for transparency and dispute resolution; and fraud prevention services offer risk assessment data to identify suspicious patterns or multiple account attempts.
| Data Category | Examples | Purpose | Retention Period |
|---|---|---|---|
| Identity Data | Name, DOB, ID card number | Age verification, KYC compliance | Account lifetime + 5 years |
| Contact Data | Email, phone, address | Account communications, support | Account lifetime + 2 years |
| Financial Data | Bank account, transaction history | Deposits, withdrawals, AML compliance | Account lifetime + 7 years |
| Technical Data | IP address, device ID, browser | Security, fraud prevention | 12 months |
| Gameplay Data | Bets, wins, game choices | Service provision, dispute resolution | Account lifetime + 5 years |
kera99 processes personal data only for legitimate purposes directly related to providing and improving our gaming services:
Personal information enables us to create and maintain User accounts, authenticate login attempts using username and password verification, process deposits from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay), execute withdrawal requests to verified bank accounts and e-wallets following KYC confirmation, manage account balances in Indonesian Rupiah (IDR), facilitate gameplay across casino, sportsbook, and togel platforms, track betting history and transaction records for User transparency, and provide personalized account dashboards showing activity summaries.
We process data to fulfill legal obligations including verifying that all Users meet the minimum age requirement of 21 years, conducting Know Your Customer (KYC) checks to prevent identity fraud, monitoring transactions for anti-money laundering (AML) compliance, detecting and preventing fraudulent activity, investigating suspected Terms violations, responding to legal requests from authorities when required by law, and maintaining audit trails for regulatory inspections.
Contact information allows us to send transactional emails including account registration confirmation, deposit and withdrawal confirmations, KYC verification status updates, password reset links, and security alerts for unusual account activity; provide customer support via live chat and email responding to inquiries in English and Indonesian; deliver promotional communications about bonuses, VIP program benefits, and special offers (Users may opt out); and send responsible gaming reminders about deposit limits and self-exclusion tools.
Aggregated and anonymized data helps us analyze platform performance and User preferences, identify popular games and betting markets, optimize payment processing speed, enhance mobile user experience, develop new features aligned with Indonesian player interests, personalize game recommendations based on play history, and adjust VIP tier benefits for competitiveness.
Technical data supports security measures including detecting multiple account creation attempts from the same device or IP address, identifying unusual betting patterns suggesting collusion or bonus abuse, monitoring login attempts from unfamiliar locations, implementing two-factor authentication for enhanced account protection, and flagging suspicious transactions for manual review.
kera99 adheres to the principle of data minimization, collecting only information strictly necessary to provide services, comply with regulations, and protect platform security. We do not collect excessive or irrelevant personal data. Users may request clarification on why specific information is required during registration or verification processes.
kera99 implements comprehensive technical and organizational security measures to safeguard personal information against unauthorized access, disclosure, alteration, or destruction:
Our infrastructure employs bank-grade SSL/TLS encryption (256-bit) for all data transmission between User devices and kera99 servers, ensuring that sensitive information including login credentials, payment details, and personal data cannot be intercepted during transit. All personally identifiable information stored in our databases undergoes encryption at rest using Advanced Encryption Standard (AES-256) cryptography. Password storage utilizes industry-standard hashing algorithms (bcrypt) with individual salt values, meaning kera99 staff cannot view User passwords in plain text.
Access to personal data is restricted through role-based access controls, ensuring only authorized personnel with legitimate business needs can view specific data categories. Multi-factor authentication protects administrative accounts. Regular security audits conducted by independent third-party firms identify vulnerabilities and ensure compliance with international cybersecurity standards. Automated intrusion detection systems monitor for suspicious access patterns and trigger immediate investigation protocols.
kera99 staff undergo mandatory data protection training emphasizing confidentiality, proper handling procedures, and consequences of unauthorized disclosure. Employment contracts include strict confidentiality clauses with legal penalties for violations. Personal data access logs are maintained and reviewed quarterly to ensure compliance with access policies. Our data protection officer oversees privacy practices and serves as the escalation point for security concerns.
kera99 does not store full bank account numbers, credit card details, or e-wallet credentials on our servers. Payment processing occurs through PCI-DSS compliant third-party processors specializing in Indonesian banking integrations. We retain only transaction references, amounts, timestamps, and success/failure status necessary for account reconciliation and dispute resolution.
In the unlikely event of a data breach compromising personal information, kera99 commits to notifying affected Users within 72 hours of discovery via email to registered addresses. Notifications will specify what data was compromised, what immediate steps Users should take (such as password changes), and what remedial actions kera99 is implementing. We will also report qualifying breaches to relevant regulatory authorities as required by applicable data protection laws.
kera99 does not sell, rent, or trade personal information to third parties for marketing purposes. We share data only in limited circumstances necessary to operate our services or comply with legal obligations:
We engage trusted third-party service providers who assist in operating the kera99 platform under strict contractual obligations to protect data confidentiality: payment processors facilitate deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay) with access limited to transaction data necessary for processing; game suppliers provide casino games, live dealer platforms, and sportsbook software with visibility into gameplay activity for fair play verification; KYC verification services perform identity document authentication and fraud checks using submitted identification documents; hosting providers maintain servers and databases with encrypted data storage and physical security controls; and customer support platforms enable live chat and email ticketing systems with access to contact information and support history.
All service providers sign Data Processing Agreements committing to process personal information only according to kera99's instructions, implement appropriate security measures, delete or return data upon contract termination, and not use data for independent purposes. We conduct due diligence on service provider security practices before engagement.
kera99 may disclose personal information when legally required to comply with valid subpoenas, court orders, or government requests; cooperate with law enforcement investigations involving suspected criminal activity; enforce our Terms & Conditions or investigate Terms violations; protect the safety, rights, or property of kera99, Users, or the public; or defend against legal claims or litigation.
In the event kera99 undergoes a merger, acquisition, bankruptcy, or sale of assets, personal data may transfer to the successor entity. Users will receive notification of such transfers via email and Platform announcements. The successor entity will remain bound by this Privacy Policy unless Users consent to a new policy.
kera99 may share aggregated, non-personally identifiable statistics about User behavior, such as total monthly deposits across the platform, popular game categories, or demographic distributions, with business partners for market analysis. This aggregated data cannot identify individual Users.
kera99 uses cookies and similar tracking technologies to enhance User experience and analyze platform performance. Cookies are small text files stored on User devices that help recognize return visits and maintain login sessions.
Essential Cookies: Required for core platform functionality including maintaining login sessions, remembering language preferences, and processing transactions. These cookies cannot be disabled without impairing platform usability.
Analytics Cookies: Track User behavior patterns including pages visited, time spent on platform, navigation paths, and game preferences. This data helps us identify usability issues and popular features. These cookies are anonymized and aggregated for analysis.
Functional Cookies: Remember User preferences such as timezone settings for displaying Indonesian time (WIB), display options for odds formats (voor bola Asian handicap preferences), and notification preferences for promotional offers.
Marketing Cookies: Track effectiveness of promotional campaigns and affiliate referrals. These cookies help us understand which marketing channels attract Users and optimize advertising spend. Users may opt out of marketing cookies without affecting core functionality.
Most web browsers automatically accept cookies, but Users can modify browser settings to decline cookies or alert when cookies are being sent. Note that disabling essential cookies will prevent platform access. Users may delete cookies at any time through browser settings, though this will log them out of active sessions.
kera99 respects User rights regarding personal information and provides mechanisms to exercise these rights:
Users may request a copy of all personal data kera99 holds about them. Requests should be submitted via email to our Data Protection team. We will provide the information in a commonly used electronic format within 30 days. One request per 12-month period is provided free of charge; subsequent requests may incur a reasonable administrative fee.
Users may update inaccurate or incomplete personal information through account settings or by contacting Customer Support. Email addresses, phone numbers, and residential addresses can be self-updated. Changes to legal names require KYC document resubmission for verification.
Users may request account deletion and erasure of personal data by contacting Customer Support. Upon approval, we will deactivate the account and delete personal information within 30 days, subject to legal retention requirements. Financial transaction records must be retained for seven years under anti-money laundering regulations even after account deletion.
Users may request their personal data in a structured, commonly used, machine-readable format (CSV or JSON) for transfer to another service provider. This includes account information, transaction history, and gameplay records.
Users may object to data processing for marketing purposes by unsubscribing from promotional emails or contacting Customer Support. Essential data processing for service provision and legal compliance cannot be objected to while maintaining an active account.
Where data processing relies on consent (such as marketing communications), Users may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.
kera99 retains personal data only as long as necessary to fulfill purposes outlined in this Privacy Policy or comply with legal requirements. Specific retention periods vary by data category as detailed in the data collection table above. Upon expiration of retention periods, personal data undergoes secure deletion through multi-pass overwriting ensuring irrecoverability. Transaction records required for Indonesian regulatory compliance are retained for seven years from transaction date. Closed accounts remain in inactive status for 12 months before permanent deletion, allowing Users to reactivate if desired.
kera99 reserves the right to modify this Privacy Policy at any time to reflect changes in data practices, legal requirements, or business operations. Material changes will be communicated via email to registered addresses and prominently displayed on the Platform homepage. The "Last Updated" date at the top of this document indicates the most recent revision. We encourage Users to review this Privacy Policy periodically. Continued use of kera99 services after modifications constitutes acceptance of the updated policy. Users who disagree with changes must close their accounts before the effective date.
Indonesia's data protection landscape continues evolving with legislation such as the Personal Data Protection Law (UU PDP) establishing frameworks for data handling. kera99 monitors regulatory developments and commits to adapting our practices to exceed local requirements while maintaining international security standards. Indonesian Users retain all rights outlined in applicable national and international data protection regulations.
For questions, concerns, or requests regarding this Privacy Policy or kera99's data practices, please contact our Data Protection team:
When contacting us regarding data matters, please include your registered username and email address for identity verification. We may request additional information to confirm identity before fulfilling data subject requests to prevent unauthorized disclosure.
kera99 recognizes that trust forms the foundation of our relationship with Indonesian members. By transparently explaining our data practices and implementing robust security measures, we demonstrate our commitment to protecting your privacy. Your personal information is valuable, and we treat it with the highest level of care and responsibility. Thank you for trusting kera99 with your gaming entertainment.
Bank-grade 256-bit SSL/TLS encryption protects all data transmission between your device and kera99 servers. Your sensitive information remains secure during login, deposits, and gameplay.
Advanced hashing algorithms (bcrypt) protect stored passwords. Even kera99 staff cannot view your password in plain text. Two-factor authentication adds an extra security layer.
All personally identifiable information stored in our databases undergoes AES-256 encryption at rest. Multiple security layers prevent unauthorized access to your data.
kera99 never sells, rents, or trades your personal information to third parties for marketing purposes. Your data remains confidential and used solely for providing gaming services.
Identity documents submitted during KYC verification are encrypted, stored securely, and accessible only to authorized compliance staff. We employ strict document handling protocols.
Independent third-party security firms conduct quarterly audits of our data protection practices, infrastructure security, and compliance with international privacy standards.
Our Data Protection team is available to address any concerns about how we handle your personal information. We believe in complete transparency and are committed to protecting your privacy rights.