arena99Privacy Policy

This page describes what we collect when you use arena99 and how we keep that data protected. Our privacy practices centre on transparency: we disclose which data we collect, how long we store it, and who has access to it. We do not sell user data to third parties, and we encrypt sensitive information like payment details and identification documents.

When you register an arena99 account, we collect personal information (name, email, phone, date of birth, address) as part of mandatory Know Your Customer (KYC) verification. We also log your betting behaviour, deposit and withdrawal history, and game activity. These records are stored on encrypted servers and accessed only for account verification, compliance screening, dispute resolution, or law enforcement requests.

Your rights on arena99 include the ability to request a copy of your data, request deletion of non-essential records (after account closure), and opt out of marketing communications. This policy covers account security, cookie use, third-party processors, and how to contact us with privacy concerns.

What Data We Collect on arena99

We collect data in three categories:

Account Information

During registration and KYC verification, we collect your full name, email address, phone number, date of birth, residential address, and identification document (passport, KTP, or driving licence). We also collect a selfie photo to verify that the ID holder matches the account owner. This data is mandatory to activate your account and comply with anti-money-laundering (AML) regulations.

Transaction Data

We log every deposit, withdrawal, and bet on your arena99 account. This includes the payment method used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), transaction amount, timestamp, and resulting account balance. For sportsbook bets, we record the market, odds, stake, and settlement outcome. For live-table play, we record table name, bet amounts, and game results. For slot spins, we log spin details and payout amounts.

We retain transaction data for seven years to satisfy regulatory requirements and support account audits. This data is never shared with game providers or payment processors—only settlement amounts and anonymised user IDs are transmitted to external partners.

Technical Data

We collect your device information (phone model, operating system, app version), IP address, browser type, and login timestamps. We also track which games you play, how long you remain active, and your general geographic region (derived from IP address). This data helps us diagnose technical issues, prevent fraud, and detect account compromise.

Cookies and Tracking

We use cookies to keep you logged in on arena99 and remember your preferences (language, bet history view, table filters). Session cookies expire when you log out; persistent cookies remain for up to one year. We do not use cookies for advertising or external tracking. Third-party analytics services (such as Google Analytics) may place their own cookies if enabled, but we do not share personal account data with analytics partners.

Your Rights and Our Commitments on arena99

Data Access and Deletion

You can request a copy of all data we hold on your arena99 account by contacting [email protected]. We will provide this within 14 days. After account closure, we retain transaction records for seven years (regulatory requirement) but delete personal details like your name, phone, and address within 30 days unless required by law.

Third-Party Processors

We share data with:

• Payment processors: DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet. We share only the amount, currency, timestamp, and account ID—never your full details.
• Game providers: SA Gaming and Push Gaming (live tables), slot vendors (Aviator, Sweet Bonanza, etc.), and odds providers (sportsbook). These receive only settlement amounts and user ID, not KYC documents or account history.
• Compliance and fraud screening: Third-party AML services screen deposits against international sanctions lists. We share name, address, and transaction patterns but no payment details.
• Customer support tools: We may use helpdesk platforms to manage support tickets. Your data is encrypted and never sold.

Jurisdiction and Data Transfers

Our servers may be located outside Indonesia. By using arena99, you consent to data transfers to other countries. We apply the same security standards globally—encryption, access restrictions, and audit logging—regardless of server location.

Law Enforcement and Disclosure

We disclose account data to law enforcement or regulators only when legally required by court order, warrant, or regulatory demand. We do not voluntarily share data without such request. If we receive a legal demand, we notify you unless legally prohibited from doing so.

Data retention

Transaction records: 7 years (regulatory). Personal details: 30 days after account closure. Technical logs: 1 year.

Security audit

We conduct quarterly security reviews and annual penetration testing. Results are logged internally; we address vulnerabilities immediately.

Contact us

Privacy questions: [email protected]. Include your account email. We respond within 5 business days.

Policy updates

We update this policy as needed and notify users via in-app message. Continued use of arena99 constitutes acceptance of changes.

Marketing Communications

We may send promotional emails or in-app notifications about new games, sportsbook markets (Liga 1, Piala AFF, Piala Indonesia), or payment method updates. You can opt out of marketing emails via the unsubscribe link in every email. In-app promotions respect your notification settings in account preferences.

Children and Age Restrictions

arena99 services are not intended for minors. You must be of legal age in your jurisdiction to use our platform. If we discover an underage user, we immediately close the account and flag it for investigation. Parents or guardians concerned about a child's access should contact support.

Account Closure and Data Retention

If you request account closure, we disable login immediately. Your account enters a 30-day grace period; you can reactivate during this window. After 30 days, the account is closed permanently. We delete personal details (name, phone, address, photo ID) within this window but retain transaction records for seven years to comply with regulatory requirements. You cannot request deletion of transaction records as they are legally required.

Related Policy Documents