Privacy Policy for one69

1 Definitions

In this Privacy Policy, the following terms shall have the meanings set out below.

2 Data We Collect

one69 collects Personal Data through several channels: directly from you when you register or use the Platform, automatically as you interact with our systems, and from trusted third-party sources where permitted.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you access the one69 Platform, our systems automatically record certain technical information. This includes your IP address, browser type and version, operating system, device type and identifier, pages visited, time spent on each page, referring URL, and session duration. This data is used for security monitoring, fraud prevention, and aggregate platform analytics. It is not linked to your personal identity for marketing profiling purposes.

2.3 Data from Third Parties

one69 may receive Personal Data about you from the following categories of third parties:

• Identity verification providers: confirmation of name, date of birth, and document validity;
• Payment processors: transaction status updates and fraud signals from your bank or e-wallet provider;
• Responsible gaming databases: self-exclusion registries to which you may have previously registered.

3 Legal Basis for Processing

one69 processes your Personal Data only where a valid legal basis exists. The applicable basis depends on the specific processing activity:

• Contractual necessity: Processing required to open your account, verify your identity, process deposits and withdrawals in IDR, and fulfil our obligations under the Terms & Conditions;
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, responsible gaming requirements, and law enforcement requests from competent authorities;
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics — where our interests are not overridden by your rights;
• Consent: Processing for direct marketing communications and non-essential cookies — where you have given a freely given, specific, and informed consent that you may withdraw at any time.

4 How We Use Your Data

one69 uses the Personal Data we collect for the following specific purposes:

4.1 Account Administration

We use your identity and contact data to create and maintain your one69 account, authenticate your logins, apply account settings and preferences you configure, and communicate with you about account activity. This is necessary for the performance of our contract with you.

4.2 Identity Verification and KYC

We process your identity documents and date of birth to confirm that you are at least 21 years of age and to verify that the name on your account matches the name on your nominated payment method. This is required before any withdrawal is approved and is a legal obligation under our responsible gaming policy.

4.3 Payment Processing

We share the minimum financial data necessary with our Indonesian payment processing partners — including the bank transfer networks servicing BCA, BRI, BNI, Mandiri, Bank Permata, and BSI, and e-wallet partners including OVO, DANA, GoPay, ShopeePay, and LinkAja — to credit deposits to your account balance and to process withdrawal requests to your verified payment method.

4.4 Fraud Prevention and Security

We analyse account activity, device data, IP addresses, and transaction patterns to detect and prevent fraudulent activity, money laundering, collusion, bonus abuse, and unauthorised account access. Where suspicious activity is identified, we may temporarily suspend your account pending investigation. This processing is based on our legitimate interest in maintaining the integrity of the Platform.

4.5 Responsible Gaming Compliance

We monitor gameplay patterns and account behaviour to identify signs of problem gambling and to enforce deposit limits, loss limits, cooling-off periods, and self-exclusion restrictions that you or we have applied to your account. This processing is a contractual and regulatory obligation.

4.6 Customer Support

We retain records of your support interactions — including live chat transcripts and email correspondence — to resolve disputes, train our support team, and maintain a consistent service history. Support is available in English and with Indonesian-speaking agents, around the clock.

4.7 Marketing Communications

Where you have explicitly opted in, we may send you promotional communications including bonus offers, match previews for BRI Liga 1 and Champions League fixtures, and seasonal promotions tied to Idul Fitri, Ramadhan, or Chinese New Year (Imlek). You may withdraw this consent at any time by updating your communication preferences in your account dashboard or by emailing [email protected].

4.8 Platform Analytics and Improvement

We use aggregated, anonymised data to understand how players interact with the Platform, which game categories — including togel (Indonesia's traditional numbers lottery), live blackjack, sportsbook, and slots — generate the most engagement, and where the user experience can be improved. No individual player is identifiable in these aggregate reports.

5 Data Sharing

one69 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the following limited circumstances:

5.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process Personal Data on our behalf under strict contractual data processing agreements. These providers include:

• Identity verification and KYC platform providers;
• Cloud infrastructure and data hosting providers;
• Payment processing partners facilitating IDR transactions;
• Fraud detection and cyber-security service providers;
• Customer support platform providers (live chat and ticketing systems);
• Game studio platforms including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, and Microgaming, which operate the game environments within the one69 Platform.

5.2 Legal and Regulatory Disclosure

one69 may disclose your Personal Data to competent authorities, courts, or law enforcement agencies where required to do so by applicable law, regulation, court order, or legal process. In such cases, one69 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify you of such disclosure.

5.3 Business Transfers

In the event that one69 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquirer as part of that transaction. You will be notified of any such transfer and any material change to the processing of your data before it takes effect.

6 Payment Data

one69 treats financial data with the highest level of protection. The following principles govern how your payment information is handled:

• Your full bank account credentials are never stored on one69 servers in plain text. Payment details are tokenised at the point of entry and handled exclusively by our payment processing partners;
• Deposit and withdrawal transactions are conducted exclusively in Indonesian Rupiah (IDR / Rp). one69 does not store foreign currency account data;
• Transaction records — including deposit amounts, withdrawal amounts, dates, and the last four digits of the payment method used — are retained for a minimum of five years to satisfy anti-money laundering and responsible gaming regulatory requirements;
• Withdrawals are processed only to a payment method verified as being held in your own name. one69 does not process payments to third-party accounts under any circumstances.

7 Cookies & Tracking Technologies

one69 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a web server. Cookies do not execute code or deliver malware; they are used to maintain session state and improve your experience.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control cookie preferences from the account settings panel within your one69 dashboard. You may also configure your browser to refuse cookies entirely, though this may impair the functionality of the Platform. Essential and functional cookies cannot be disabled without preventing the Platform from operating correctly.

8 Data Retention

one69 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five years following account closure, to meet anti-money laundering and responsible gaming record-keeping requirements;
• Transaction records: Retained for a minimum of five years from the date of each transaction;
• KYC documents: Retained for a minimum of five years following account closure or the date of the last regulated transaction, whichever is later;
• Support communications: Retained for three years from the date of the interaction, or longer if the communication relates to an unresolved dispute;
• Marketing consent records: Retained for the duration of your marketing opt-in and for two years after withdrawal of consent, to demonstrate compliance;
• Technical log data (IP addresses, session logs): Retained for 12 months and then deleted or anonymised.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to your identity.

9 Data Security

one69 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction.

9.1 Technical Measures

• 256-bit SSL/TLS encryption for all data in transit between your device and one69 servers;
• AES-256 encryption for sensitive data stored at rest, including KYC document stores;
• Salted cryptographic hashing of all account passwords — plain-text passwords are never stored;
• Network-level firewall and intrusion detection systems monitoring for anomalous traffic patterns;
• Regular third-party penetration testing of the Platform's infrastructure.

9.2 Organisational Measures

• Access to player Personal Data is restricted on a strict need-to-know basis. Support agents can view only the data required to resolve the specific query at hand;
• All staff with access to Personal Data are bound by confidentiality obligations and complete data protection training;
• Data breach response procedures are in place, including a defined notification timeline for affected players in the event of a significant breach.

10 Your Rights

As a player whose Personal Data is processed by one69, you have the following rights. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the Personal Data one69 holds about you, along with information about how it is processed and for what purposes;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. For minor corrections (e.g., a typographical error in your address), you may be able to update your details directly within your account dashboard;
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records for anti-money laundering and responsible gaming compliance;
• Right to Restrict Processing: You have the right to request that one69 restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested;
• Right to Data Portability: You have the right to receive a copy of the Personal Data you have provided to one69 in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Objecting to marketing will take effect immediately and does not require any justification;
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications or non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11 Minors

The one69 Platform is strictly intended for persons aged 21 years and over. one69 does not knowingly collect Personal Data from individuals under 21. If we become aware that an account has been registered by a person under the age of 21, we will immediately suspend that account, void any associated balance, and delete the Personal Data of the underage individual as soon as it is safe and legally permissible to do so.

If you are a parent or guardian and believe that your child has registered an account on one69, please contact us immediately at [email protected] so that we can take prompt action.

12 Third-Party Links and Game Environments

Certain games within the one69 Platform are operated within environments provided by third-party studio platforms, including Evolution Gaming, Pragmatic Play, Pocket Games Soft, NetEnt, and Microgaming. While one69 selects its studio partners carefully, please be aware that each studio's own privacy practices govern the data processed within their respective game environments. one69 encourages players to review the privacy documentation of any third-party studio whose games they play.

The one69 Platform does not contain links to external third-party websites beyond the game studio environments described above. one69 accepts no responsibility for the privacy practices or content of any external website.

13 International Data Transfers

one69 may process or store your Personal Data on servers located outside Indonesia, including in jurisdictions where data protection laws may differ from those applicable in your country of residence. Where such transfers occur, one69 ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent data transfer mechanisms, to protect your Personal Data to a standard at least equivalent to the protections described in this Policy.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to and from Indonesia as described in this clause.

14 Policy Amendments

one69 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When a material change is made, we will notify you by displaying a prominent notice on the Platform homepage and, where possible, by sending a notification to your registered email address. The updated Policy will take effect on the date specified in the notice.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated terms. If you do not accept an amended Privacy Policy, you should close your account before the effective date of the change.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the one69 data protection team through the following channel:

one69 is committed to resolving all privacy concerns directly and promptly. If you are not satisfied with our response, you have the right to refer the matter to the relevant data protection authority in your jurisdiction.