At revo99, your privacy is not an afterthought — it is built into the foundation of our platform. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a registered player. We encourage you to read this document in full.
These six principles underpin every data decision we make. They are not aspirational statements — they are enforceable commitments reflected in our operational policies and technical infrastructure.
We collect personal data only for clearly defined, legitimate purposes. We do not repurpose your data for secondary uses without your explicit informed consent.
We collect only the data that is strictly necessary to deliver our services. If we do not need a piece of information to serve you, we do not ask for it.
All data is stored with SSL 256-bit encryption. Our infrastructure uses industry-standard access controls and undergoes regular independent security audits.
We do not sell your personal data to third parties. Data shared with service partners is governed by strict contractual data-processing agreements.
You have the right to access, correct, port, and request deletion of your personal data. We provide clear mechanisms to exercise these rights at any time.
We retain your data only for as long as necessary to fulfil the purpose for which it was collected, subject to legal and regulatory minimum retention obligations.
In this Privacy Policy, the following terms shall have the meanings set out below:
2.1 Who This Policy Applies To. This Privacy Policy applies to all individuals who access or use the revo99 Platform, including visitors who browse without registering, registered account holders, and individuals who contact our support team. It covers Personal Data collected through the Platform, through direct communications (email, live chat), and through the registration and KYC processes.
2.2 Geographic Scope. revo99 is directed at residents of Indonesia. Our primary user base is located across major Indonesian cities including Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, Makassar, and Yogyakarta. This Policy is drafted in compliance with applicable international data protection standards and is designed to meet the privacy expectations of Indonesian users engaging with an internationally licensed platform.
2.3 Related Documents. This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy. Together, these documents form the complete framework governing your relationship with revo99.
3.1 Overview. The table below summarises the categories of Personal Data we collect and the primary reason for collecting each category:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, NIK (national ID number), KTP/Passport scan | Account registration, KYC verification, age confirmation (21+) |
| Contact Data | Email address, mobile phone number, residential address | Account communications, support, promotional notifications (with consent) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) | Processing deposits and withdrawals in IDR, fraud prevention |
| Transaction Data | Deposit and withdrawal history, bet history, game session logs, bonus activity | Account management, dispute resolution, AML compliance, responsible gaming monitoring |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Platform security, fraud detection, duplicate account identification |
| Usage Data | Pages visited, features used, game categories accessed, time spent per session | Platform optimisation, personalised experience, responsible gaming analysis |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Service delivery, quality assurance, dispute records |
3.2 Sensitive Data. revo99 does not intentionally collect special-category or sensitive Personal Data (such as health records, religious affiliation, or biometric data) unless this is strictly required by our responsible gaming obligations (for example, where a user self-discloses a gambling disorder in the course of a self-exclusion request). Any such data is handled with the highest level of care and is not shared with third parties except where required by law.
revo99 collects your Personal Data through the following channels:
revo99 processes your Personal Data only where a valid legal basis exists. The legal bases we rely on are as follows:
6.1 Core Service Delivery. Your Personal Data is used to create and manage your revo99 account, verify your identity and age (21+), process deposits and withdrawals in Indonesian Rupiah (IDR), settle bets and game rounds, and deliver customer support across all channels available on the Platform.
6.2 Security and Fraud Prevention. We use Technical Data and Transaction Data to detect and investigate suspicious activity, identify duplicate accounts, prevent unauthorised access, and enforce the prohibited activities listed in our Terms & Conditions. This includes monitoring for patterns consistent with money laundering, bonus abuse, and collusive play.
6.3 Responsible Gaming Monitoring. revo99 uses Usage Data and Transaction Data to identify players who may be exhibiting signs of problem gambling — such as extended session lengths, escalating deposit patterns, or repeated self-exclusion lapses. Where such patterns are identified, our responsible gaming team may proactively reach out to the relevant player.
6.4 Legal and Regulatory Compliance. We process and retain certain categories of Personal Data to fulfil our obligations under our international gaming licence, AML frameworks, and any applicable data reporting requirements imposed by competent authorities.
6.5 Platform Improvement. Aggregated and anonymised Usage Data is analysed to improve the performance, usability, and content of the Platform. This analysis does not involve identifying individual users and does not affect your privacy.
6.6 Marketing Communications. With your explicit consent, we may send promotional emails or SMS messages to your registered contact details, informing you of new promotions, seasonal bonus offers (including those aligned with Idul Fitri, Ramadhan, and Indonesian Independence Day), and Platform updates. You may unsubscribe from marketing communications at any time by following the opt-out instructions in any message, or by contacting our support team.
7.1 General Principle. revo99 does not sell, rent, or trade your Personal Data to any third party for their independent commercial purposes. Data is shared with third parties only in the specific circumstances described in this clause.
7.2 Service Providers (Data Processors). We engage trusted third-party service providers to support the operation of our Platform. These providers act as Data Processors and are contractually prohibited from using your data for any purpose beyond the specific service they deliver to revo99. Categories of service providers include:
7.3 Regulatory and Legal Disclosure. revo99 may disclose your Personal Data to competent regulatory authorities, law enforcement agencies, or courts where we are legally obligated to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of any person, or enforce our Terms & Conditions.
7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our business assets, your Personal Data may be transferred to the successor entity. We will notify you of any such transfer and the privacy commitments that apply to your data following the transfer, with a minimum of 30 days' notice before any material change to data handling takes effect.
8.1 What Are Cookies. Cookies are small text files stored on your device when you visit the Platform. They enable the Platform to recognise your browser, maintain your session state, remember your preferences, and collect aggregate usage analytics.
8.2 Types of Cookies We Use.
8.3 Managing Cookies. You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Most modern browsers allow you to view, delete, and block cookies on a per-site basis — consult your browser's help documentation for instructions specific to your browser version.
9.1 Retention Principle. revo99 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. We do not retain data indefinitely as a matter of convenience.
9.2 Retention Periods. The following general retention periods apply:
9.3 Deletion. On expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is requested by a User and no legal retention obligation applies, we aim to complete deletion within 30 days of the verified request.
10.1 Technical Measures. revo99 implements a layered security architecture to protect your Personal Data from unauthorised access, alteration, disclosure, or destruction. Our technical security measures include:
10.2 Organisational Measures. In addition to technical controls, revo99 enforces data protection through organisational policies including mandatory data protection training for all staff, a formal data breach response plan, and contractual data security obligations imposed on all third-party service providers.
10.3 Data Breach Response. In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, revo99 will notify affected Users without undue delay, and in accordance with the notification timelines required by our licensing authority. We will communicate the nature of the breach, the categories of data affected, the likely consequences, and the steps we have taken or propose to take to address the breach.
As a User of the revo99 Platform, you hold the following rights in relation to your Personal Data. These rights are subject to applicable legal limitations and our legitimate operational requirements, including AML retention obligations.
revo99 respects your data rights and provides straightforward mechanisms to exercise each of them. Contact our support team at [email protected] to submit any data rights request.
Request a copy of all Personal Data we hold about you, together with information about how it is being used and the legal basis for processing.
Request correction of inaccurate or incomplete Personal Data held in your account. Identity changes may require supporting documentation.
Request deletion of your Personal Data where retention is no longer necessary, subject to overriding legal obligations such as AML record-keeping requirements.
Request that we limit the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested or a complaint is under review.
Receive a structured, machine-readable copy of the Personal Data you provided to us, where processing was based on your consent or on contractual necessity.
Object to processing carried out on the basis of legitimate interests, including direct marketing. Marketing opt-outs are actioned within 5 business days of your request.
12.1 Age Restriction. The revo99 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. Registration requires a date-of-birth declaration, and our KYC process includes mandatory age verification against a government-issued identity document.
12.2 Discovery of Underage Use. If revo99 discovers or is notified that an account has been registered by a person under the age of 21, we will immediately suspend the account, void all associated wagers, and securely delete the Personal Data associated with that account to the extent permitted by applicable law. Any deposits made by an underage user will be returned in accordance with our Terms & Conditions.
13.1 Cross-Border Processing. revo99 operates under an international gaming licence and uses cloud infrastructure and service providers whose data processing operations may be located outside of Indonesia. As a result, your Personal Data may be transferred to and processed in countries other than your country of residence.
13.2 Transfer Safeguards. Wherever Personal Data is transferred outside of Indonesia, revo99 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that provided under this Privacy Policy. These safeguards include contractual data-processing agreements incorporating standard privacy and security obligations, and a preference for service providers that operate under established international data protection frameworks.
13.3 Your Rights on Transfer. Your data rights as described in Clause 11 apply regardless of where your Personal Data is processed. If you have questions about specific cross-border transfers affecting your data, please contact our Data Protection contact at [email protected].
14.1 Right to Update. revo99 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, changes to applicable law, or updates to our Platform services. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
14.2 Notification of Material Changes. Where a proposed amendment constitutes a material change to how we process your Personal Data — for example, a new category of data collected or a new category of third party with whom data is shared — we will provide you with at least 14 days' notice via your registered email address before the change takes effect.
14.3 Continued Use. Your continued use of the Platform after the effective date of any amendment to this Policy constitutes your acknowledgement of the revised terms. If you do not accept any material change, you must discontinue use of the Platform and may request account closure in accordance with Clause 3.5 of our Terms & Conditions.
15.1 Data Rights Requests. To exercise any of your data rights described in Clause 11, or to raise a question or concern about how revo99 processes your Personal Data, please contact our support team using the details below. We will acknowledge your request within 3 business days and aim to resolve it within 30 days of receipt.
Support Email: [email protected] (plain text — not a clickable link)
Support Hours: 24 hours a day, 7 days a week — Indonesian-speaking agents available at all times
15.2 Identity Verification for Requests. To protect your privacy, revo99 will verify your identity before actioning any data rights request. You may be asked to confirm details consistent with your registered account information. We will not action a data rights request from an unverified requestor.
15.3 Complaints. If you are dissatisfied with our response to a data rights request, or believe that revo99 has processed your Personal Data in breach of this Policy, you may escalate your complaint to our senior data protection contact via the email address above, clearly marked as a "Formal Privacy Complaint". We will treat all formal complaints with priority and respond within 15 business days.
Our support team is available around the clock to address any concern about your data. You can also explore our FAQ for quick answers, or review our full Terms & Conditions.