This Privacy Policy explains how wira99 collects, uses, stores, protects, and shares your personal information. We are committed to transparency and to protecting your privacy in accordance with international data protection standards.
wira99 operates according to these six foundational privacy principles. Every data processing decision we make is evaluated against these standards.
We collect only the personal information necessary to operate your account, verify your identity, and comply with legal obligations. We do not request data we do not need.
Your data is used exclusively for the purposes disclosed in this Privacy Policy. We do not repurpose your data for unrelated uses without explicit consent.
All personal data is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel only.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law (up to 7 years for financial records).
You have the right to know what data we hold about you, why we hold it, and how it is used. We provide clear, accessible explanations in plain language.
You have the right to access, correct, export, or delete your personal data at any time. Contact our support team to exercise these rights.
Effective Date: 1 January 2026
wira99 ("we", "us", "our", or the "Platform") is committed to protecting the privacy and personal data of all users ("you", "your", or "User") who access or use our online betting and casino services. This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information in accordance with internationally recognised data protection principles and applicable Indonesian data protection regulations.
By registering an account on wira99, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you must not use wira99 services.
This Privacy Policy should be read in conjunction with our Terms & Conditions. In the event of a conflict between the two documents, the more specific provision shall prevail.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
When you register an account on wira99, we collect the following Personal Data:
When you access or use wira99, we automatically collect the following data:
We may receive Personal Data about you from third-party sources including:
Important: wira99 does not collect or process Sensitive Personal Data (racial or ethnic origin, political opinions, religious beliefs, health data, biometric data for identification, sexual orientation) except where strictly necessary for identity verification (facial recognition for KYC selfie matching) and with your explicit consent.
We process your Personal Data to create and manage your wira99 account, authenticate your login, process deposits and withdrawals, maintain your account balance, settle bets, credit winnings, apply bonuses, and provide customer support. This processing is necessary for the performance of our contract with you (the Terms & Conditions you agreed to when registering).
We process your KYC documentation to verify your identity, confirm your age (21+ requirement), verify your residency (Indonesia), prevent underage gambling, prevent money laundering, detect and prevent fraud, comply with anti-money-laundering (AML) regulations, and fulfil our legal obligations under international gambling compliance standards. This processing is necessary for compliance with legal obligations to which wira99 is subject.
We share your payment data (bank account details, e-wallet account details, transaction amounts) with authorised third-party payment processors to facilitate deposits and withdrawals. All payment data is transmitted via secure, encrypted channels. We do not store full credit card numbers; only the last four digits are retained for transaction identification purposes.
We process your technical data, usage data, and device data to detect and prevent fraudulent activity, identify multi-accounting (multiple accounts created by the same individual), detect collusion and bonus abuse, protect against account takeover and unauthorised access, and maintain the integrity and security of the wira99 platform. This processing is necessary for our legitimate interests in protecting our business and other users from fraud and abuse.
We process your betting and gaming data to monitor for signs of problem gambling behaviour, enforce self-exclusion requests, apply deposit limits and loss limits you have set, trigger reality-check reminders, and provide support to players who may be experiencing gambling-related harm. This processing is necessary for compliance with our responsible gaming obligations and for your vital interests.
With your explicit consent (opt-in), we may use your email address and usage data to send promotional offers, bonus announcements, personalised game recommendations, and platform updates. You may withdraw your consent and unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link in any marketing email or by contacting [email protected].
We process aggregated and anonymised usage data to analyse platform performance, identify popular games and betting markets, optimise user experience, develop new features, and improve service quality. Aggregated data cannot be used to identify you as an individual.
wira99 engages carefully vetted third-party service providers to perform specific functions on our behalf. These Data Processors have access to Personal Data only to the extent necessary to perform their designated functions and are contractually bound to process your data in accordance with our instructions and applicable data protection laws. Categories of Data Processors include:
We may disclose your Personal Data to law enforcement, regulatory authorities, courts, or other government bodies if required by law, legal process, court order, subpoena, or valid regulatory request. We may also disclose data where necessary to protect the rights, property, or safety of wira99, our users, or the public.
In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of wira99's assets, your Personal Data may be transferred to the acquiring entity as part of the business transfer. We will notify you via email and prominent notice on the wira99 website at least 30 days before any such transfer takes effect.
wira99 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We do not share your data with social media platforms, advertising networks, or data brokers. We do not use your data for profiling or automated decision-making that produces legal effects or similarly significant impacts on you (with the exception of automated fraud detection systems, which are necessary to protect platform integrity).
wira99 employs industry-standard technical security measures to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction:
All wira99 employees and contractors with access to Personal Data are bound by confidentiality agreements and receive regular data protection training. We maintain an incident response plan to address any suspected data breach promptly. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach.
You are responsible for maintaining the confidentiality of your account password and for all activity that occurs under your account. Do not share your password with anyone. Use a strong, unique password that combines letters, numbers, and special characters. Enable two-factor authentication. Log out of your account when using shared or public devices. Contact [email protected] immediately if you suspect unauthorised access to your account.
For active accounts, we retain your Personal Data for as long as your account remains open and for a reasonable period thereafter to allow for account reactivation if you choose to return to wira99.
When you close your account, we retain certain Personal Data for up to 7 years from the date of account closure to comply with legal and regulatory obligations, including:
After the retention period expires, your Personal Data is securely deleted or anonymised such that it can no longer be used to identify you.
If you have opted in to receive marketing communications, we retain your email address and marketing preferences until you unsubscribe or close your account. Once you unsubscribe, we retain a suppression record (email address only, with no other Personal Data) to ensure we do not inadvertently send you marketing communications in the future.
You have the right to request a copy of all Personal Data we hold about you. To exercise this right, contact [email protected] with the subject line "Data Access Request". We will provide a complete copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) within 30 days of your request.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update your email address, phone number, and residential address directly from your account settings. For corrections to your name or date of birth (which must match your KYC documents), contact [email protected].
You have the right to request deletion of your Personal Data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent for processing based on consent. However, we may be legally required to retain certain data (e.g., financial transaction records) even after you request deletion. We will inform you if legal retention requirements prevent full erasure.
You have the right to request that we temporarily restrict processing of your Personal Data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests. During the restriction period, we will store your data but not actively process it.
You have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit that data to another service provider. This right applies only to Personal Data you have provided to us and where processing is based on your consent or on a contract.
You have the right to object to processing of your Personal Data based on legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds for continued processing that override your interests, rights, and freedoms.
Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
To exercise any of the rights described above, contact our Data Protection Officer at [email protected] with the subject line indicating the right you wish to exercise (e.g., "Right to Access Request", "Right to Erasure Request"). We will respond to your request within 30 days. If your request is complex or if we receive multiple requests from you, we may extend the response period by an additional 60 days, in which case we will inform you of the extension and the reasons for the delay.
Cookies are small text files stored on your device by your web browser when you visit a website. Cookies allow the website to recognise your device on subsequent visits and remember your preferences, login status, and other information.
You can control and manage cookies through your browser settings. Most browsers allow you to block cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that if you disable or block essential cookies, certain features of wira99 may not function properly, and you may not be able to log in to your account.
wira99 operates internationally and may transfer your Personal Data to servers and Data Processors located outside of Indonesia. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your data, including:
All international transfers are subject to the same security standards and data protection principles described in this Privacy Policy. If you have questions about international data transfers, contact [email protected].
wira99 services are restricted to individuals aged 21 years or older. We do not knowingly collect Personal Data from anyone under the age of 21. If we become aware that we have inadvertently collected Personal Data from a minor, we will immediately delete that data and close the associated account. If you believe we have collected data from a minor, please contact [email protected] immediately.
wira99 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision.
Material changes to this Privacy Policy (such as changes to the purposes for which we process data, new categories of data collected, or changes to your rights) will be announced via email to your registered email address and via a prominent notice on the wira99 homepage for a period of at least 14 days before the changes take effect.
Continued use of wira99 services after changes to this Privacy Policy take effect constitutes your acceptance of the updated policy. If you do not agree to the updated Privacy Policy, you must cease using wira99 and close your account.
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your data protection rights, please contact our Data Protection Officer:
If you are not satisfied with our response to your data protection enquiry or complaint, you have the right to lodge a complaint with your local data protection supervisory authority.
Document Version: 1.2 | Last Updated: 1 January 2026
wira99 – Committed to Privacy, Security, and Transparency
For complete transparency, we encourage you to review our Terms & Conditions, Responsible Gaming guidelines, and Frequently Asked Questions. All documents are written in clear English with Indonesian market context.