At agm99, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains precisely what personal data we collect from players across Indonesia, how we use and protect that data, who we share it with, and what rights you hold over your own information. Please read this document carefully before using the agm99 platform.
Six core principles underpin every data-handling decision we make at agm99. These are not aspirations — they are binding operational standards.
All data transmitted between your device and agm99 servers is encrypted using TLS 1.3. Stored sensitive data — including payment credentials and identity documents — is encrypted at rest using AES-256.
agm99 collects only the data that is strictly necessary for operating the platform, processing payments, verifying identity, and complying with anti-money laundering obligations. We do not collect data speculatively.
agm99 does not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertising networks. Your data exists to serve your account — full stop.
Personal data is retained only as long as required for operational, legal, and regulatory purposes. Account data is held for a maximum of 5 years following account closure, after which it is securely deleted or anonymized.
Any third-party service provider that processes agm99 member data — including payment processors and KYC verification vendors — is contractually bound to our data protection standards and audited regularly.
You have the right to access, correct, export, and request deletion of your personal data at any time. agm99 will respond to all verified data rights requests within 30 calendar days of receipt.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data held by agm99. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion. |
| "Controller" | agm99 — the entity that determines the purposes and means of Processing your Personal Data. |
| "Processor" | A third party engaged by agm99 to Process Personal Data on agm99's behalf and under agm99's documented instructions. |
| "Member" | Any individual who has registered a verified account on the agm99 platform. |
| "KYC Data" | Identity and address verification documents — including national identity cards (KTP), selfies, and proof of payment method — collected as part of agm99's Know Your Customer compliance process. |
| "Device Data" | Technical information automatically collected from the device you use to access agm99, including IP address, browser type and version, operating system, device identifiers, and session timestamps. |
| "Sensitive Data" | A subset of Personal Data requiring heightened protection, including financial account details, identity document numbers, and biometric data (where applicable during KYC). |
agm99 collects the following categories of Personal Data about its Members and visitors:
2.1 Registration Data. When you create an agm99 account, we collect your chosen username, email address, mobile phone number, date of birth, and the country and city of your residence (for example, Jakarta, Surabaya, Bandung, or Bali). This data is mandatory — accounts cannot be created without it.
2.2 Identity and KYC Data. To comply with our anti-money laundering (AML) and fraud-prevention obligations, we may request a copy of your government-issued national identity card (KTP or equivalent), a live selfie or photograph of you holding your identity document, and documentary proof of the payment method used for deposits (for example, a bank statement or e-wallet screenshot). Submission of KYC Data is required before withdrawal processing is permitted above the standard threshold.
2.3 Financial Data. We record details of every deposit and withdrawal transaction processed through your account, including the payment method used (such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja), transaction amounts in Indonesian Rupiah (IDR), timestamps, and transaction reference numbers. We do not store full bank account numbers or e-wallet PINs — these are handled directly by your payment provider.
2.4 Betting and Gaming Activity Data. We maintain a complete record of your wagering history on agm99, including sports bets (BRI Liga 1 fixtures, EPL, Champions League, mix parlay accumulators, voor bola handicap markets), casino game sessions (slots from Pragmatic Play, NetEnt, Microgaming; live tables from Evolution Gaming), and any other products you engage with on the platform. This data is used for account management, bonus eligibility assessment, and responsible gaming monitoring.
2.5 Communication Data. We retain records of all communications you initiate with agm99 customer support — whether via live chat, email to [email protected], or any in-platform messaging feature. This includes the content of messages, timestamps, and the resolution outcome of any complaint or inquiry.
2.6 Device and Technical Data. Our servers automatically log Device Data each time you access agm99, including your IP address, browser fingerprint, device type (desktop, smartphone, tablet), operating system version, referring URL, and pages visited within the platform. This data is used for security, fraud detection, and platform optimization purposes.
2.7 Preference and Behavioral Data. We track in-platform behavior such as game preferences, session duration, deposit frequency, and responsiveness to promotional offers. This data is used in aggregate to improve platform design and, where you have consented, to personalize promotions.
agm99 collects Personal Data through the following mechanisms:
agm99 processes your Personal Data on the following lawful bases, depending on the specific purpose:
| Processing Purpose | Lawful Basis |
|---|---|
| Account creation and management | Performance of a contract (the agm99 Member Agreement) |
| Processing deposits and withdrawals | Performance of a contract |
| KYC identity verification | Legal obligation (AML compliance) |
| Fraud detection and prevention | Legitimate interests of agm99 and protection of Members |
| Responsible gaming monitoring | Legitimate interests and legal obligation |
| Personalized promotional offers | Consent (you may withdraw consent at any time) |
| Platform analytics and improvement | Legitimate interests of agm99 |
| Responding to support requests | Performance of a contract and legitimate interests |
| Compliance with legal or regulatory orders | Legal obligation |
5.1 Platform Operation. Your Registration Data and Financial Data are used to operate your account, process transactions denominated in Indonesian Rupiah (IDR), apply bonus credits, calculate wagering requirement progress, and generate account statements.
5.2 Security and Fraud Prevention. Device Data, IP addresses, and behavioral signals are analyzed in real time by agm99's security infrastructure to detect account takeover attempts, duplicate account registrations, coordinated bonus abuse, and money laundering patterns. Accounts flagged as high-risk may be subject to additional verification before withdrawal processing proceeds.
5.3 Responsible Gaming. Betting and gaming activity data is monitored by agm99's responsible gaming team to identify behavioral indicators of problem gambling — such as rapid deposit escalation, extended session durations, or persistent loss-chasing patterns. Members exhibiting these indicators may be contacted proactively and offered self-exclusion or deposit limit tools. See our Responsible Gaming page for full details.
5.4 Customer Support. Communication Data is used by the agm99 support team to resolve inquiries, process complaints, and maintain a record of case outcomes. Indonesian-speaking support agents have access to relevant account data necessary to resolve your query — they are not permitted to access data unrelated to your open support case.
5.5 Legal and Regulatory Compliance. agm99 is obligated under its international operating license and applicable AML frameworks to retain certain transaction and identity records for a minimum statutory period. These records may be disclosed to competent regulatory or law enforcement authorities upon receipt of a valid legal order.
5.6 Marketing Communications. Where you have opted in to receive promotional communications, agm99 may use your email address and in-platform behavioral data to send personalized offers related to sports events (such as BRI Liga 1 match days, the Piala AFF tournament, or the FIFA World Cup qualification cycle) or casino promotions timed to cultural events (such as Idul Fitri, Chinese New Year, or Indonesian Independence Day on 17 August). You may withdraw consent at any time by updating your notification preferences in your account settings or contacting support.
6.1 Authorized Third Parties. agm99 shares Personal Data only with the following categories of third parties, and only to the extent necessary to fulfill the stated purpose:
6.2 No Marketing Data Sales. agm99 does not sell, license, or rent your Personal Data to third-party marketing companies, data aggregators, or advertising technology platforms under any circumstances.
6.3 Business Transfers. In the event of a merger, acquisition, or sale of agm99 assets, Member Personal Data may be transferred to the acquiring entity. agm99 will notify affected Members of any such transfer via the email address registered to their account no less than 30 calendar days before the transfer takes effect, and Members will have the option to request account closure if they do not consent to the transfer.
agm99 uses cookies and similar client-side tracking technologies on the agm99.pro website. The following table describes the categories of cookies we deploy:
| Category | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Maintain your login session, process transactions, enforce security controls, and remember language and display preferences. | Session / up to 24 hours |
| Functional | Remember preferences such as your last-selected game lobby, deposit method, and responsible gaming settings across sessions. | Up to 12 months |
| Analytics | Aggregate, anonymized usage statistics used to understand which platform features are most used and to identify technical issues. | Up to 24 months |
| Fraud Prevention | Device fingerprinting tokens used to detect duplicate account registrations, account takeover attempts, and bot activity. | Up to 6 months |
7.1 Managing Cookies. Strictly Necessary cookies cannot be disabled without impairing the functionality of the agm99 platform. All other cookie categories may be managed via your browser settings. Disabling Functional cookies may affect your experience — for example, your deposit method preferences will not be remembered between sessions. Disabling Analytics cookies has no impact on platform functionality.
7.2 No Third-Party Advertising Cookies. agm99 does not deploy third-party advertising or retargeting cookies on the agm99.pro domain. You will not receive agm99 advertising on external websites as a result of cookies placed during your agm99 session.
8.1 Active Accounts. Personal Data associated with an active agm99 account is retained for the duration of the account's active status plus a minimum post-closure retention period as described below.
8.2 Post-Closure Retention. Following account closure — whether initiated by the Member or by agm99 — Personal Data is retained for a period of 5 years from the date of closure. This retention period reflects our obligations under international AML regulations, which require gambling operators to maintain transaction and identity records for a minimum of 5 years.
8.3 Shortened Retention for Non-Members. Device Data and behavioral data collected from visitors who browse agm99.pro without registering an account is retained for a maximum of 12 months, after which it is automatically deleted or anonymized.
8.4 Deletion and Anonymization. Upon expiry of the applicable retention period, Personal Data is either securely and irreversibly deleted or anonymized in such a manner that it can no longer be linked to any identifiable individual. Anonymized aggregated data may be retained indefinitely for platform analytics purposes.
8.5 Self-Exclusion Records. Where a Member has activated a self-exclusion through the agm99 responsible gaming tools, agm99 retains a record of the self-exclusion for the full duration of the exclusion period and for 5 years thereafter. This ensures that the Member cannot circumvent the self-exclusion by closing and re-registering an account.
agm99 implements a layered security architecture to protect Personal Data against unauthorized access, disclosure, alteration, and destruction. Key measures include:
As a Member of agm99 and a data subject whose Personal Data we process, you hold the following rights. To exercise any of these rights, contact agm99 support at [email protected] with the subject line "Data Rights Request".
Request a copy of all Personal Data agm99 holds about you, including the categories of data, the purposes of processing, and any third parties with whom it has been shared.
Request correction of inaccurate or incomplete Personal Data held in your agm99 account. Most registration data can be updated directly in your account settings.
Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to agm99's legal retention obligations under AML regulations.
Request that agm99 restricts the processing of your Personal Data — for example, while a dispute over its accuracy is being resolved — without requiring full deletion.
Request an export of your Personal Data in a structured, commonly used, machine-readable format (JSON or CSV) so that you can transfer it to another service provider.
Object to the processing of your Personal Data where agm99 relies on legitimate interests as the lawful basis. agm99 will cease processing unless it can demonstrate compelling grounds that override your interests.
10.1 Response Timeframe. agm99 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days of receipt. Where the complexity or volume of the request requires additional time, agm99 will notify you of the extension and the expected completion date.
10.2 Identity Verification. To protect against unauthorized data access requests, agm99 will verify your identity before processing any data rights request. Verification is typically completed via your registered email address and a one-time code sent to your registered mobile number.
11.1 Strict Age Limit. agm99 strictly prohibits access to its platform by persons under the age of 21. This age threshold applies to all users, regardless of the age of majority in their jurisdiction of residence. The platform is designed and marketed exclusively for adults aged 21 and over.
11.2 Age Verification at Registration. During the account registration process, all applicants are required to self-declare that they are 21 years of age or older. agm99 may require formal KYC identity verification — including submission of a government-issued ID — to confirm the declared age before deposit or withdrawal functions are enabled.
11.3 Discovery of Underage Accounts. If agm99 discovers or has reasonable grounds to believe that a registered Member is under the age of 21, the account will be permanently suspended immediately and all funds held in the account will be returned to the depositing payment method. Any winnings generated on the account will be forfeited. agm99 does not knowingly collect or retain Personal Data from persons under 21.
12.1 International Infrastructure. agm99 operates on cloud infrastructure that may be hosted in data centers located outside Indonesia. Where your Personal Data is transferred to or processed in a jurisdiction other than Indonesia, agm99 ensures that equivalent data protection safeguards are in place through contractual mechanisms, including standard data processing agreements with all relevant service providers.
12.2 Payment Provider Transfers. Transaction data shared with Indonesian payment providers — including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja — is processed within their own systems, which are subject to the data protection obligations applicable to regulated financial institutions in Indonesia.
12.3 Member Acknowledgment. By using the agm99 platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia as described in this section, and that agm99 is committed to maintaining appropriate safeguards for any such transfers.
13.1 Right to Update. agm99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The "Last Updated" date at the top of this page will be revised with each new version.
13.2 Notification of Material Changes. Where agm99 determines that a change to this Privacy Policy is material — meaning it affects the fundamental basis on which your data is processed or materially reduces your rights — agm99 will provide no less than 14 calendar days' advance notice via an in-platform notification or email to your registered address before the revised policy takes effect.
13.3 Continued Use as Acceptance. Your continued use of the agm99 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not accept the revised Privacy Policy, you must cease using the platform and request account closure.
If you have any questions about this Privacy Policy, wish to exercise a data rights request, or wish to raise a complaint about agm99's data handling practices, please contact the agm99 Data Protection team through the following channels:
14.1 Complaint Resolution. agm99 is committed to resolving all privacy-related complaints within 30 calendar days of receipt. Complex complaints involving cross-border data transfer queries or requests for large-volume data exports may take up to 60 days; agm99 will keep you informed of progress throughout.
14.2 Escalation. If you are dissatisfied with agm99's response to a privacy complaint, you have the right to escalate your complaint to the data protection authority in the jurisdiction in which agm99 holds its operating license. Contact agm99 support for details of the relevant supervisory authority.
Your data is protected. Your privacy is respected. Sign in to agm99 and experience Indonesia's most trusted online casino and sportsbook — with SSL encryption, provably fair games, and withdrawals processed in under 5 minutes.
21+ only. Terms & Conditions apply. Gamble responsibly.