At net89, your privacy is a foundational commitment, not an afterthought. This Privacy Policy explains precisely what personal data we collect from members across Jakarta, Surabaya, Bandung, Medan, Bali, and all of Indonesia; why we collect it; how we use, store, and protect it; and what rights you hold over your own information. We encourage you to read this document in full before registering an account.
Throughout this Privacy Policy, the following terms carry the meanings set out below. Capitalised terms not defined here take the meaning assigned in the net89 Terms & Conditions.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, national identity number (NIK), email address, phone number, device identifiers, IP address, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction, whether by automated means or otherwise. |
| "Data Subject" | The natural person to whom Personal Data relates — in the context of net89, this means any registered Member or website visitor whose data we process. |
| "Controller" | net89, the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Processor" | A third party that processes Personal Data on behalf of net89 under a written data-processing agreement (e.g., payment processors, KYC verification vendors, cloud infrastructure providers). |
| "Platform" | The net89 website at https://net89.pro, including all sub-pages, mobile interfaces, live casino environments, and any associated applications. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data, demonstrated by a clear affirmative action such as ticking an opt-in box during registration. |
| "KYC" | Know Your Customer — the identity verification process requiring documentary evidence of identity and payment-method ownership before a Member's first withdrawal is released. |
net89 acts as the Data Controller for all Personal Data collected through the Platform. As Controller, net89 determines the purposes for which your data is processed and the means by which that processing takes place. All enquiries relating to the exercise of your data rights, or to the content of this Privacy Policy, should be directed to our Data Protection team using the contact details in Clause 15.
Where net89 engages third-party Processors — such as payment gateway providers (BCA Virtual Account systems, OVO, DANA, GoPay, ShopeePay, LinkAja integrations), cloud hosting providers, fraud-prevention vendors, and KYC identity-verification platforms — those Processors operate strictly under written data-processing agreements that bind them to process Personal Data only on net89's documented instructions and to implement appropriate security safeguards.
Indonesian Data Protection Context: net89 is committed to processing personal data of Indonesian members in a manner consistent with the principles established under Indonesia's Personal Data Protection Law (UU PDP) and applicable international data protection standards. Where these standards conflict, the higher standard of protection applies.
net89 collects Personal Data across several categories. The table below sets out the specific data types within each category and the context in which they are collected.
| Category | Data Types | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national identity number (NIK/KTP), passport or driver's licence number, KTP scan or photograph. | Account registration; KYC verification; responsible gaming self-exclusion requests. |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali). | Account registration; customer support interactions; promotional communications (where consent given). |
| Financial Data | Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata); e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja); deposit and withdrawal transaction history; account balance snapshots. | Deposit and withdrawal processing; AML compliance reviews; KYC verification of payment method ownership. |
| Technical Data | IP address, browser type and version, operating system, device type and model, device fingerprint, screen resolution, time zone (WIB/WITA/WIT), session duration, login timestamps. | Automatic collection via server logs and browser APIs on each Platform visit or login. |
| Gaming & Behavioural Data | Game titles played, bet amounts, wager frequency, win/loss history, bonus redemption history, session duration per game type, responsible gaming tool usage. | Automatic collection during active gameplay; used for responsible gaming monitoring and personalisation. |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions. | Customer support interactions; complaint resolution; quality assurance. |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channel, bonus preference history. | Collected during registration and updated via Account settings at any time. |
Sensitive Data: net89 does not intentionally collect special-category sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for the purpose of uniquely identifying individuals — except where a government-issued photo ID (KTP) is submitted for KYC purposes, in which case it is processed solely for identity verification and stored securely.
net89 collects Personal Data through the following channels:
net89 processes your Personal Data only for the specific, documented purposes listed below. We do not process Personal Data for any purpose incompatible with those stated here without first obtaining your explicit consent or establishing a fresh legal basis.
| Purpose | Description |
|---|---|
| Account Administration | Creating and maintaining your net89 Member Account; authenticating your identity on login; enforcing one-account-per-person policies; processing Account closure requests. |
| Service Delivery | Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; crediting bonus funds; delivering sportsbook, live casino, and slot gaming services. |
| Identity Verification (KYC) | Verifying that you meet the 21+ age requirement and that your payment methods are registered in your own name, in compliance with AML obligations and responsible gaming standards. |
| Fraud Prevention & Security | Detecting and preventing unauthorised Account access, bonus abuse, collusion, money laundering, and other prohibited conduct described in the Terms & Conditions; monitoring login anomalies and unusual transaction patterns. |
| Responsible Gaming | Monitoring gaming behaviour for signs of problem gambling; enforcing deposit limits, cooling-off periods, and self-exclusion requests; proactively reaching out to Members exhibiting high-risk patterns. |
| Customer Support | Responding to support enquiries, processing complaints, and maintaining records of interactions for quality assurance and dispute resolution. |
| Legal Compliance | Meeting obligations under applicable AML legislation, data protection law, international gaming licensing conditions, and any court orders or regulatory requests directed at net89. |
| Service Improvement | Analysing aggregated, anonymised usage data to improve Platform performance, game selection, payment processing speed, and user experience for members across Indonesia. |
| Marketing Communications | Sending promotional offers, bonus notifications, and seasonal campaign communications (e.g., Idul Fitri promotions, Ramadhan cashback events, Indonesian Independence Day specials) — only where you have given explicit consent and only via channels you have opted into. |
Every processing activity carried out by net89 rests on one or more of the following lawful bases. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
net89 does not sell, rent, or trade your Personal Data to any third party for that party's own marketing or commercial purposes. We share Personal Data only in the following limited and controlled circumstances:
As an internationally operated platform serving members primarily based in Indonesia, net89 may transfer Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, net89 ensures that appropriate safeguards are in place, including:
You may request information about the specific safeguards applied to international transfers of your Personal Data by contacting our Data Protection team at [email protected].
Net89 does not transfer Personal Data to jurisdictions that lack adequate data protection frameworks without first putting in place the contractual safeguards described above. All cloud infrastructure used by net89 meets ISO 27001 or equivalent security certification standards.
net89 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The retention periods below represent our standard schedules; individual data may be retained longer where an active legal dispute, regulatory investigation, or unresolved compliance matter requires it.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of Account + 5 years after closure | Gaming licence obligations; AML record-keeping requirements; limitation period for contractual claims. |
| KYC Documents | 5 years from date of submission | AML compliance and regulatory audit requirements under international gaming licensing conditions. |
| Financial Transaction Records | 7 years from transaction date | AML legislation; tax reporting obligations; dispute resolution records. |
| Gaming & Behavioural Data | 3 years from last login | Responsible gaming monitoring; fraud pattern analysis; service improvement analytics. |
| Support Communications | 3 years from ticket closure | Quality assurance; dispute resolution; complaint regulatory reporting. |
| Technical / Log Data | 90 days from collection | Security incident investigation; fraud detection; Platform performance monitoring. |
| Marketing Preferences | Until consent withdrawn or Account closed | Ensuring marketing communications are only sent to consenting Members. |
When Personal Data is no longer required under the applicable retention period, net89 will securely delete or irreversibly anonymise that data in accordance with our internal data disposal procedures.
The net89 Platform uses cookies and similar client-side storage technologies to deliver core functionality, maintain session state, and — where you have consented — to measure usage patterns for Platform improvement purposes. The table below describes the categories of cookies we use.
| Category | Examples | Duration | Purpose |
|---|---|---|---|
| Strictly Necessary | Session token, CSRF token, login state | Session / up to 30 days | Required for secure login, maintaining your authenticated session, and preventing cross-site request forgery. Cannot be disabled without breaking core Platform functionality. |
| Functional | Language preference, game lobby layout, last deposit method | Up to 12 months | Remembers your Platform preferences so you do not need to re-configure them on each visit. |
| Analytics | Page view counters, session duration, click-path data | Up to 13 months | Aggregated, anonymised measurement of how Members navigate the Platform — used solely to improve usability and game lobby organisation. Only activated with your consent. |
| Security | Device fingerprint hash, IP-change detection flag | Up to 90 days | Detects suspicious login patterns such as impossible-geography logins or device switching within a single session. Forms part of net89's fraud prevention infrastructure. |
You may manage your cookie preferences at any time by adjusting your browser settings to block or delete cookies. Please note that disabling Strictly Necessary cookies will prevent you from logging in to your net89 Account. net89 does not use third-party advertising cookies or cross-site tracking cookies.
As a Data Subject, you hold the following rights over your Personal Data held by net89. These rights apply regardless of whether your Account is currently active or has been closed, subject to the retention periods and legal exemptions described elsewhere in this Policy.
To exercise any of the rights above, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Right]". net89 will verify your identity before processing any request, and will respond within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and its reason.
net89 implements a comprehensive, layered security programme designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our key security controls include:
Your Role in Security: While net89 maintains robust technical controls, you also play an important role. Use a strong, unique password for your net89 Account; never share your login credentials; log out from shared devices; and contact support immediately at [email protected] if you suspect unauthorised access to your Account.
net89 is an adults-only platform. You must be at least 21 years of age to register an Account, make a deposit, or participate in any gaming activity on the Platform. This age restriction applies to all members, including those based in Jakarta, Surabaya, Bandung, Bali, and throughout Indonesia.
net89 does not knowingly collect, store, or process Personal Data belonging to individuals under 21 years of age. As part of the KYC verification process, all Members are required to provide documentary proof of age (a valid government-issued photo ID such as a KTP, passport, or SIM) before their first withdrawal is processed.
If net89 discovers or reasonably suspects that a registered Account belongs to a person under the age of 21, we will immediately suspend the Account, initiate a mandatory identity verification review, and — if the suspicion is confirmed — permanently close the Account, void all outstanding bonuses, and return any net deposits in accordance with our Terms & Conditions. All Personal Data associated with the underage Account will be securely deleted upon confirmation, except where retention is required for regulatory reporting purposes.
Parental Notice: If you are a parent or guardian and believe that a person under 21 has registered an Account with net89 using false information, please contact us immediately at [email protected]. We will investigate promptly and take all necessary action. We also recommend that parents and guardians use parental control software to restrict access to online gaming websites on shared or family devices.
net89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, the services we offer, or feedback received from members and regulators. All amendments are effective from the date indicated in the "Effective Date" field at the top of this document.
When we make material changes — meaning changes that significantly affect how your Personal Data is processed or that reduce your rights — we will notify you by email to the address registered on your Account at least 14 days before the changes take effect. For non-material clarifications or corrections, we will update the Policy silently and revise the version number.
Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to a material change, you have the right to close your Account before the effective date by contacting our support team.
Previous Versions: Archived versions of this Privacy Policy are available on request. To obtain a copy of a previous version, send your request to [email protected] specifying the version number or approximate date you require.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the net89 Data Protection team using the details below. Our support team includes native Indonesian-speaking agents available around the clock (24/7, WIB).
| [email protected] — plain text only; not a clickable link | |
| Subject Line | For data rights requests, use "Data Rights Request — [Type of Request]". For general privacy queries, use "Privacy Policy Enquiry". |
| Response Time | We aim to acknowledge all privacy-related enquiries within 2 business days (WIB) and to resolve data rights requests within 30 calendar days. |
| Support Hours | 24 hours a day, 7 days a week, including Indonesian public holidays (Idul Fitri, Nyepi, Indonesian Independence Day, etc.). |
net89 is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection supervisory authority as described in Clause 11.
Six foundational privacy principles that govern every decision we make about your personal data.
All data transmitted between your device and net89 servers is protected by TLS 1.2+ encryption with 256-bit keys — the same standard used by major international banks.
We collect only the data strictly necessary to deliver our services, verify your identity, and comply with licensing obligations. No data is collected for its own sake.
net89 will never sell, rent, or trade your Personal Data to third parties for their own commercial purposes. Your data serves your account — nothing else.
Access, correct, export, or request deletion of your data at any time. Marketing preferences can be updated instantly in your Account settings without contacting support.
Every category of Personal Data has a defined maximum retention period. When that period expires and no legal hold applies, data is securely and irreversibly deleted.
Our data protection support team includes native Indonesian-speaking agents available around the clock — ready to handle data rights requests from members across Jakarta, Surabaya, Bali, and beyond.
Your data is protected. Your experience is secure. Explore thousands of games, live sports betting, and exclusive promotions — all on net89's fully licensed platform trusted by over 2.5 million members across Indonesia.