Privacy Policy

1. Introduction

This Privacy Policy applies to all users of rafi99, an internationally operated online betting and gaming platform serving English-preference players across Indonesia. This policy describes how rafi99 collects, uses, stores, and protects personal information obtained through our website, mobile platform, and associated services.

By registering an account on rafi99, depositing funds, placing bets, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the data collection and processing practices described herein. If you do not agree with this policy, you must immediately discontinue use of the rafi99 platform.

2. Information We Collect

rafi99 collects several categories of personal information necessary to provide our services, verify your identity, process financial transactions, and comply with legal and regulatory obligations. The types of information we collect include:

2.1 Account Registration Information

When you create an account on rafi99, we collect the following personal details:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Residential address (street, city, province, postal code)
• Email address
• Mobile phone number
• Username and password (password is stored in encrypted form only)

2.2 Identity Verification (KYC) Documents

To comply with Know Your Customer (KYC) and anti-money-laundering (AML) regulations, rafi99 requires users to submit identity verification documents before their first withdrawal. These documents typically include:

• Government-issued photo ID (Indonesian KTP, passport, or driver's license)
• Proof of residential address (utility bill, bank statement, or government correspondence dated within the last 90 days)
• Proof of payment method ownership (bank account statement or verified e-wallet screenshot)

All identity documents are securely stored on encrypted servers and accessed only by authorized compliance personnel.

2.3 Financial Transaction Data

rafi99 processes deposits and withdrawals in Indonesian Rupiah (IDR) via local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). We collect and store transaction records including:

• Deposit amounts, timestamps, and payment method used
• Withdrawal amounts, timestamps, and destination account details
• Bank account numbers and e-wallet account identifiers (stored in encrypted form)

Payment card details (if applicable) are tokenized and processed through PCI-DSS Level 1 compliant third-party payment gateways. rafi99 does not store full credit or debit card numbers on our own servers.

2.4 Betting and Gaming Activity

To provide our services and comply with responsible gaming obligations, rafi99 logs all betting and gaming activity on your account, including:

• Bets placed (stake amount, odds, selections, bet type)
• Games played (slots, live casino, togel, sabung ayam)
• Win/loss records and account balance history
• Bonus claims and wagering progress
• Session duration and frequency of play

This data is used to detect problem gambling patterns and enforce deposit limits, loss limits, and self-exclusion tools as described in our Responsible Gaming policy.

2.5 Technical and Usage Data

When you access rafi99, we automatically collect certain technical information to ensure platform security, optimize performance, and prevent fraud:

• IP address and approximate geolocation (country and city level only, not precise GPS coordinates)
• Device type, operating system, and browser type
• Pages visited, time spent on site, and navigation paths
• Referral source (how you arrived at rafi99)
• Cookies and similar tracking technologies (see Section 7 for details)

3. How We Use Your Data

rafi99 uses the personal information we collect for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your rafi99 user account
• Processing deposits, withdrawals, and internal account transfers
• Providing access to sportsbook, live casino, togel, slots, and sabung ayam services
• Calculating and crediting winnings, bonuses, and promotional offers
• Responding to customer support inquiries via live chat or email

3.2 Identity Verification and Fraud Prevention

• Verifying your age, identity, and residential address to comply with KYC/AML regulations
• Detecting and preventing duplicate accounts, bonus abuse, and fraudulent activity
• Monitoring unusual betting patterns or suspicious financial transactions
• Enforcing our Terms & Conditions and protecting the integrity of the platform

3.3 Responsible Gaming and Player Protection

• Tracking deposit frequency, loss rates, and session duration to identify at-risk players
• Enforcing deposit limits, loss limits, and self-exclusion requests
• Providing reality-check reminders and self-assessment tools
• Contacting users who may be exhibiting signs of problem gambling to offer support resources

3.4 Legal and Regulatory Compliance

• Complying with international gaming regulations and licensing requirements
• Responding to lawful requests from government authorities or law enforcement
• Maintaining transaction records for audit and tax reporting purposes (as required by applicable law)

3.5 Platform Improvement and Analytics

• Analyzing user behavior to identify popular betting markets, game preferences, and platform usage patterns
• Optimizing website performance, mobile responsiveness, and load times
• Testing new features and conducting A/B testing to improve user experience

3.6 Marketing and Promotional Communications (Opt-In Only)

With your explicit consent, rafi99 may send promotional emails about new betting markets, bonus offers, and platform updates. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting support. Even if you opt out of marketing emails, we will still send essential service-related messages (withdrawal confirmations, security alerts, responsible gaming notifications).

4. Data Sharing and Disclosure

rafi99 does not sell, rent, or share your personal information with third-party marketers or advertisers. However, we may share your data with the following categories of third parties under limited circumstances:

4.1 Payment Processors

To process deposits and withdrawals, rafi99 shares necessary financial information (bank account numbers, e-wallet IDs, transaction amounts) with our payment gateway partners. These partners are bound by strict confidentiality agreements and PCI-DSS compliance requirements.

4.2 Game Providers and Platforms

When you play live casino games (Evolution Gaming), slots (Pragmatic Play, Microgaming, NetEnt, Pocket Games Soft, Spribe), or other third-party game content, your user ID and session data may be shared with the game provider to deliver the gaming experience. These providers are contractually obligated to handle data in accordance with international privacy standards.

4.3 Legal and Regulatory Authorities

rafi99 may disclose personal information if legally required to do so by court order, subpoena, or government investigation. We may also share data with law enforcement authorities to investigate suspected fraud, money laundering, or other illegal activity.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity. You will be notified via email if such a transfer occurs, and the acquiring entity will be required to honor this Privacy Policy.

5. Data Storage and Retention

All personal information collected by rafi99 is stored on secure servers located in data centers with 24/7 physical security, fire suppression systems, and redundant power supplies. Data is encrypted both in transit (via 256-bit SSL) and at rest (using AES-256 encryption or equivalent).

5.1 Retention Periods

rafi99 retains personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: Data is retained for the duration of your account's active status and for 7 years following account closure (to comply with financial record-keeping requirements).
• Transaction Records: Financial transaction logs are retained for a minimum of 7 years for audit and regulatory compliance purposes.
• Identity Documents: KYC documents are retained for 7 years following the last account activity.
• Marketing Data: If you opt out of marketing communications, your contact information is moved to a suppression list and retained indefinitely to ensure we do not contact you again.

5.2 Data Deletion Requests

You may request deletion of your personal data at any time by contacting rafi99 support. However, please note that certain data may be retained if required by law or legitimate business interests (e.g., fraud investigation records, financial audit trails). We will inform you if we are unable to fulfill a deletion request and explain the reason.

6. Security Measures

rafi99 employs industry-standard security technologies and operational procedures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and rafi99 servers is encrypted using SSL/TLS protocols.
• Firewalls and Intrusion Detection: Our servers are protected by multi-layer firewalls and real-time intrusion detection systems.
• Access Controls: Personal data is accessible only to authorized rafi99 personnel who require it to perform their job functions. Access is logged and audited regularly.
• Regular Security Audits: Third-party security firms conduct penetration testing and vulnerability assessments on a quarterly basis.
• Password Protection: User passwords are hashed using bcrypt or similar one-way encryption algorithms and are never stored in plaintext.

While rafi99 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. Users are responsible for maintaining the confidentiality of their login credentials and should immediately notify rafi99 if they suspect unauthorized account access.

7. Cookies and Tracking Technologies

rafi99 uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

7.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality (login sessions, account security, language preferences). These cannot be disabled.
• Performance Cookies: Collect anonymous usage data to help us understand how users interact with rafi99 and identify areas for improvement.
• Functional Cookies: Remember your preferences (language, odds format, time zone) to personalize your experience.

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent you from accessing certain features of the platform.

8. Your Privacy Rights

As a rafi99 user, you have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data rafi99 holds about you.
• Right to Correction: Request correction of inaccurate or incomplete personal information.
• Right to Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Right to Data Portability: Request a machine-readable copy of your data to transfer to another service provider.
• Right to Object: Object to processing of your data for marketing purposes or other non-essential activities.
• Right to Restriction: Request temporary suspension of data processing under certain circumstances.

To exercise any of these rights, contact rafi99 support via live chat or email [email protected]. We will respond to your request within 30 days.

9. Children's Privacy

rafi99 is strictly for users aged 21 and above. We do not knowingly collect personal information from individuals under the age of 21. If we discover that a minor has registered an account, we will immediately suspend the account, void all transactions, and delete all associated personal data. Parents or guardians who believe their child has accessed rafi99 should contact support immediately.

10. Changes to This Privacy Policy

rafi99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. The "Last Updated" date at the top of this document indicates the most recent revision. Material changes will be communicated via email or prominent notice on the platform. Continued use of rafi99 following such changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or rafi99's data handling practices, please contact our support team:

• Live Chat: Available 24/7 on the rafi99 platform (Indonesian-speaking agents available across WIB / WITA / WIT time zones)
• Email: [email protected] (displayed as plain text per site policy)

For additional information about rafi99, visit our About Us page. For legal terms, see our Terms & Conditions. For responsible gaming resources, visit our Responsible Gaming page.