Your privacy is fundamental to how evo99 operates. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, who we share it with, and the rights you hold over your own information. We are committed to full transparency — if you have questions after reading this document, our support team is available around the clock.
These cards highlight the most important aspects of how evo99 handles your data. The full legal text in the sections below is binding; these summaries are provided for ease of navigation only.
All data transmitted between your device and evo99 is protected by TLS 1.3 encryption. Personal data at rest — including KYC documents and payment records — is stored using AES-256 encryption on access-controlled servers.
evo99 does not sell, rent, or trade your personal information to third-party marketing organisations under any circumstances. Your data is used solely to operate your account, verify your identity, and comply with applicable law.
evo99 is built for Indonesian players across Jakarta, Surabaya, Medan, Bandung, and Bali. Our data practices respect local banking norms — your BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay account details are handled with the highest level of care and never shared beyond operational necessity.
You hold the right to access, correct, export, or request deletion of your personal data at any time. Submit a request to our support team and we will respond within five business days. Data required for legal retention cannot be deleted early but will be isolated from active processing.
We operate on a data-minimisation principle: we collect only what is strictly necessary to operate your account, process transactions, and fulfil our legal obligations. We do not collect location data beyond country-level geolocation, and we do not access your device contacts or media.
We retain transaction and identity records for a minimum of five years to comply with international AML standards. Game-play logs are retained for 24 months. Marketing preference data is deleted within 30 days of an opt-out request. All retention periods are documented in Clause 7 of this Policy.
A simplified overview of the journey your personal data takes from collection through to secure storage and — where applicable — controlled sharing.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Platform" | The evo99 website at https://evo99.lat, including all pages, features, games, sportsbook, payment systems, and mobile-browser interfaces. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial account information, device identifiers, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transfer, restriction, erasure, or destruction. |
| "Member" / "You" | A natural person who has registered an account on the Platform or who browses the Platform without registration. |
| "KYC Data" | Identity and address documentation submitted by a Member during the Know Your Customer verification process, including copies of government-issued ID, proof of address, and payment method verification. |
| "Game Provider" | Third-party game studios whose titles are available on the Platform, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. |
| "Cookies" | Small data files placed on your device by the Platform to support session management, analytics, personalisation, and fraud prevention functions. |
evo99 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, evo99 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with this Policy and applicable international data protection standards.
Where evo99 engages third-party service providers to process Personal Data on its behalf (for example, payment processors, KYC verification services, or cloud infrastructure providers), those providers act as Data Processors under written agreements that impose binding data protection obligations consistent with this Policy.
evo99 collects Personal Data in the following categories. We apply a data-minimisation principle and collect only what is necessary for the specific purpose identified:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Legal full name, date of birth, nationality, gender (optional) | Registration; KYC |
| Contact Data | Email address, mobile phone number, residential address in Indonesia | Registration; KYC address verification |
| Document Data | Scanned copies of Indonesian KTP, passport, SIM (driver's licence), utility bills, bank statements | KYC verification process |
| Financial Data | Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction history | First deposit; payment verification |
| Account Activity Data | Login timestamps, session durations, game history (titles played, bet amounts, results), bonus claims, wagering activity | Ongoing Platform use |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, country-level geolocation | Every Platform visit (registered or anonymous) |
| Communication Data | Live chat transcripts, support email correspondence, feedback submissions | When you contact support |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS notifications, and push notifications | Registration; preference centre updates |
evo99 collects Personal Data through the following channels:
evo99 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
| Legal Basis | How evo99 Applies It |
|---|---|
| Contractual Necessity | Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account creation, payment processing, game delivery, and dispute resolution. |
| Legal Obligation | Processing required to comply with anti-money-laundering (AML) obligations, identity verification requirements, international sanctions screening, and lawful government or court orders. |
| Legitimate Interests | Processing for fraud prevention, platform security, responsible gaming monitoring, and improving Platform performance — where these interests are not overridden by your fundamental rights. |
| Consent | Processing for optional marketing communications (promotional emails, SMS) — only where you have actively opted in. You may withdraw consent at any time through the preference centre in your account settings or by contacting support. |
evo99 uses your Personal Data for the following specific purposes, each tied to a legal basis identified in Clause 5:
evo99 retains Personal Data only for as long as necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following standard retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years from account closure | AML legal obligation |
| Financial transaction records | 5 years from transaction date | AML legal obligation |
| Account activity & game logs | 24 months from last recorded activity | Dispute resolution; legitimate interests |
| Support communications | 24 months from last interaction | Dispute resolution; quality assurance |
| Marketing preferences & consent records | 30 days after opt-out or account closure | Consent management compliance |
| Technical / server logs | 12 months from collection | Security and fraud prevention |
| Anonymised analytics data | Indefinite (no personal identifiers retained) | Platform improvement; legitimate interests |
Upon expiry of the applicable retention period, Personal Data is securely and irreversibly deleted or anonymised. Where evo99 is subject to a legal hold (e.g., pending litigation or regulatory investigation), the affected data will be preserved until the hold is released, after which normal retention periods resume.
evo99 does not sell, rent, or trade your Personal Data. We share Personal Data only in the limited circumstances described below, and only to the minimum extent necessary:
The evo99 Platform uses cookies and similar tracking technologies to support essential Platform functions, maintain session security, and understand how Members interact with the site. We do not use third-party advertising cookies or cross-site tracking pixels.
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Essential | Session authentication, CSRF protection, load balancing | Session / up to 24 hours | No — required for Platform operation |
| Security | Fraud detection, bot prevention, device fingerprinting for AML | Up to 12 months | No — required for AML compliance |
| Functional | Language preference, display settings, game lobby layout preferences | Up to 12 months | Yes — disabling affects personalisation |
| Analytics | Aggregate page-view and navigation data to improve Platform UX (no individual profiling) | Up to 24 months | Yes — via browser settings |
You may manage cookie preferences through your browser settings. Disabling essential or security cookies will prevent you from logging in to the Platform. Instructions for managing cookies vary by browser; consult your browser's help documentation for guidance.
evo99 implements a layered, defence-in-depth security architecture to protect your Personal Data against unauthorised access, loss, destruction, or disclosure. Key measures include:
As a Member of evo99, you hold the following rights in relation to your Personal Data. To exercise any right, submit a written request to [email protected] with your account username and the specific right you wish to exercise. We will respond within five business days.
The evo99 Platform is strictly intended for adults. You must be at least 21 years of age to register an account, make a deposit, or participate in any game, betting market, or promotional offer on the Platform. This age restriction applies to all users, including those located in Jakarta, Surabaya, Medan, Bandung, Bali, and across the Indonesian archipelago.
evo99 does not knowingly collect Personal Data from individuals under the age of 21. As part of the KYC process, we verify date of birth against a government-issued identity document. Any account found to belong to a person under 21 will be immediately suspended, all funds will be returned to the verified payment source, and all associated Personal Data will be deleted to the extent permitted by applicable law.
If you believe that a person under 21 has registered an account on the Platform, please notify our support team immediately at the contact address in Clause 15. We will investigate and take appropriate action within 24 hours of notification.
The evo99 Platform does not contain links to external third-party websites for commercial or affiliate purposes. Any navigation links present on the Platform point exclusively to internal evo99 pages (such as the sportsbook, slots lobby, live baccarat tables, and mahjong games) or to evo99's own legal and information pages.
Game content delivered through Game Provider integrations (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) is rendered within an evo99-controlled session environment. The Game Provider's own privacy policy governs the limited technical data that the Game Provider processes to deliver the game engine; evo99 is not responsible for Game Provider data practices beyond the scope of the data processing agreements described in Clause 8.
evo99 is not responsible for the privacy practices or content of any external website that a user may navigate to independently. This Privacy Policy applies solely to data processed through the evo99 Platform at https://evo99.lat.
evo99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or Platform functionality. The following amendment procedure applies:
If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about evo99's data practices, please contact our Data Protection team through the following channels:
When submitting a privacy-related request or complaint, please include your evo99 account username, the email address registered to your account, and a clear description of your request or concern. This allows our team to locate your record promptly and respond without requiring you to repeat information.
If you are not satisfied with evo99's response to your privacy complaint, you may refer your complaint to the independent dispute resolution body identified on evo99's licensing information page, or to the relevant data protection supervisory authority in the jurisdiction applicable to you. evo99 will cooperate fully with any such external review and will provide all information reasonably requested by the supervisory authority within the prescribed timeframe.
You've reviewed how evo99 protects your personal data. Now explore Indonesia's most trusted online betting platform — world-class sportsbook, premium live casino, top-rated slots, and daily togel markets, all secured by the same data protection standards you just read about.