Privacy Policy — sl999

The following terms carry the meanings assigned to them throughout this Privacy Policy:

• "sl999" / "we" / "us" / "our" — the online gaming platform operated at sl999.bio and all associated digital services under the sl999 brand.
• "Player" / "you" / "your" — any individual who accesses, registers on, or uses the sl999 platform in any capacity.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, either directly or in combination with other data. This includes but is not limited to name, date of birth, national identity number, email address, mobile number, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "KYC" — Know Your Customer identity verification procedures used to confirm a Player's identity, age, and eligibility to use the sl999 platform.
• "Cookies" — small text files stored on a Player's device by the sl999 platform that allow us to recognise returning visitors, maintain session state, and analyse platform usage.
• "Third-Party Service Providers" — companies and individuals engaged by sl999 to perform services on our behalf, including payment processors, game studios, identity verification providers, analytics platforms, and customer support tools.

sl999 acts as the data controller with respect to all Personal Data collected from Players in connection with the use of the sl999 platform. As data controller, sl999 is responsible for determining the purposes and means of processing your Personal Data and for ensuring that processing is carried out in accordance with applicable data protection principles.

If you have any questions or concerns about how your Personal Data is handled by sl999, you may contact our Data Privacy team using the contact details set out in Section 16 of this policy.

sl999 collects the following categories of Personal Data from Players:

sl999 collects Personal Data through the following channels:

• Direct Submission. Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, submitting a support request, or participating in a promotion.
• Automated Collection. Data collected automatically when you access and interact with the sl999 platform, including via cookies, log files, pixel tags, and similar tracking technologies as described in Section 8.
• Third-Party Sources. Data received from identity verification providers, payment processors (including Indonesian bank APIs for BCA, BRI, BNI, and Mandiri), fraud prevention services, and publicly available databases where permitted by applicable law.
• Inferred Data. Data we derive from combining information you have provided with usage patterns or other data points — for example, inferring your preferred game category based on your session history — for the purpose of improving your platform experience.

sl999 processes your Personal Data on one or more of the following legal grounds:

1. Contractual Necessity. Processing is required to perform the contract between you and sl999 — including operating your account, processing deposits and withdrawals, and delivering game services.
2. Legal Obligation. Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) regulations, and any lawful requests from regulatory or law enforcement authorities.
3. Legitimate Interests. Processing is necessary for sl999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
4. Consent. Where sl999 relies on your consent as the legal basis for processing — for example, to send you promotional communications or to place non-essential cookies on your device — you may withdraw that consent at any time by contacting sl999 support or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

sl999 uses the Personal Data we collect for the following purposes:

• Account Management. Creating, maintaining, and securing your sl999 account, including verifying your identity and age (21+ requirement) during registration and at subsequent KYC review points.
• Payment Processing. Processing deposits and withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) in Indonesian Rupiah (IDR / Rp).
• Fraud Prevention & Security. Detecting, investigating, and preventing fraudulent activity, account takeovers, money laundering, and other security threats to the platform and its players.
• Regulatory Compliance. Meeting AML, KYC, and other applicable regulatory obligations, including producing records in response to lawful requests from authorities.
• Customer Support. Responding to your enquiries, complaints, and requests for assistance via live chat and email.
• Responsible Gaming. Monitoring account activity for indicators of problem gambling and delivering responsible gaming interventions — including deposit limit reminders, cooling-off notifications, and self-exclusion tools — where appropriate.
• Platform Improvement. Analysing aggregated usage data to understand how Players interact with sl999 and to improve platform features, game selection, and user experience.
• Promotions & Communications. Sending you relevant bonus offers, seasonal promotions (such as Idul Fitri, Ramadhan, and Indonesian Independence Day campaigns), and important account notifications where you have not opted out of such communications.

sl999 may share your Personal Data with the following categories of recipients:

1. Payment Processors. Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial account details necessary to execute your deposit and withdrawal requests. These entities process your data under their own privacy policies and applicable Indonesian financial regulations.
2. Identity Verification Providers. Third-party KYC and AML service providers receive identity documents and related data strictly for the purpose of verifying your eligibility to use the sl999 platform and fulfilling our regulatory obligations.
3. Game Studio Partners. Where the delivery of a specific game requires data exchange with a third-party studio — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — sl999 shares only the session data strictly required to operate the game (e.g., session token, bet stake, account balance reference). These studios operate under certified regulatory frameworks.
4. Customer Support Platforms. Our live chat and email support tooling providers may process Communications Data on our behalf under data processing agreements that restrict use to support delivery only.
5. Analytics Providers. Aggregated and, where possible, anonymised usage data may be processed by analytics platforms to help sl999 understand platform performance. No individually identifiable data is shared for analytics purposes beyond what is necessary for security and fraud detection.
6. Legal & Regulatory Authorities. sl999 will disclose Personal Data to law enforcement, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid legal order, or where sl999 reasonably believes disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
7. Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of sl999's business, your Personal Data may be transferred to the acquiring entity as part of the transaction, subject to the acquiring party honouring the commitments set out in this Privacy Policy.

sl999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse how the platform is used. The following categories of cookies are deployed on sl999:

• Strictly Necessary Cookies. Essential for the platform to function. These cookies enable core features such as secure login sessions, account authentication, and session state management. They cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies. Collect aggregated data about how Players interact with sl999 — including pages visited, session duration, and error rates — to help us identify and resolve issues and improve the platform experience.
• Functional Cookies. Remember your preferences such as preferred language display, last-visited game category, and notification settings so that sl999 can deliver a more personalised experience on subsequent visits.
• Security Cookies. Used for fraud detection and account security purposes, including identifying suspicious login patterns, device fingerprinting for multi-account detection, and session integrity checks.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may limit the functionality available to you on the sl999 platform.

sl999 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. Specific retention periods that apply to the main categories of data sl999 holds are as follows:

• Account and Identity Data — retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with applicable AML record-keeping requirements.
• Financial Transaction Records — retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping obligations.
• KYC Verification Documents — retained for the duration of your active account plus 5 years following account closure, or longer if required by a specific regulatory request.
• Customer Support Communications — retained for 2 years from the date of the last interaction within a support thread, unless the thread is related to a dispute or investigation in which case retention is extended until the matter is fully resolved.
• Usage and Technical Data — retained in aggregated or anonymised form for up to 3 years for analytics and platform improvement purposes.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual Player.

sl999 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and sl999 servers — the same encryption standard used by BCA, BNI, and Mandiri for digital banking services.
• Encrypted storage of sensitive Personal Data and financial records at rest using industry-standard encryption protocols.
• Role-based access controls ensuring that sl999 staff can only access the Personal Data strictly necessary for their assigned role.
• Regular security audits, penetration testing, and vulnerability assessments of the sl999 platform infrastructure.
• Two-factor authentication (2FA) options available to Players to strengthen account access security.
• Automated systems for detecting unusual login activity, multi-account patterns, and suspicious transaction behaviour.

Subject to applicable law, you hold the following rights with respect to your Personal Data held by sl999. To exercise any of these rights, contact our Data Privacy team at [email protected]. sl999 will respond to all verified requests within 30 days.

The sl999 platform is strictly for adults aged 21 and over. sl999 does not knowingly collect, store, or process Personal Data from individuals under the age of 21. If you believe that sl999 has inadvertently collected data from a person under 21, please contact us immediately at [email protected] and we will take prompt steps to delete the data concerned and close the associated account.

sl999 employs age verification controls during the account registration process and at KYC review stages. Any account found to belong to a person under the age of 21 will be immediately suspended and all associated funds held pending investigation and, where appropriate, return to the verified account owner.

The sl999 platform integrates with a number of third-party services to deliver the full range of gaming and payment functionality available to Players. While sl999 takes reasonable steps to ensure that all third-party service providers maintain appropriate data protection standards, each provider operates under its own privacy policy and data handling practices. sl999 is not responsible for the privacy practices of third-party services, and we encourage you to review the relevant privacy policies of any third-party provider whose services you interact with through sl999.

Third-party integrations present on the sl999 platform include payment gateway services for BCA, BRI, BNI, Mandiri, and e-wallet providers; game delivery platforms for Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft; and identity verification and AML screening services. All such providers are engaged under contractual data processing agreements that restrict their use of your data to the purposes for which it was shared.

To deliver a globally reliable platform to Players across Indonesia — including those in Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, Makassar, and Semarang — sl999 may transfer certain Personal Data to servers or service providers located outside of Indonesia. Where such transfers occur, sl999 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded under this Privacy Policy.

Safeguards used for international transfers include contractual clauses requiring recipient organisations to handle Personal Data in accordance with applicable data protection principles, and selection of service providers operating in jurisdictions that maintain adequate data protection standards recognised internationally.

sl999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where an amendment materially affects your rights or the way in which sl999 handles your Personal Data, we will provide reasonable advance notice via your registered contact details or by displaying a prominent notice on the platform prior to the amended policy taking effect.

The effective date at the top of this Privacy Policy will be updated whenever a new version is published. Continued use of the sl999 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this policy periodically to stay informed about how sl999 protects your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way sl999 handles your Personal Data, please contact our Data Privacy team through any of the following channels:

• Live Chat: Available 24/7 directly within the sl999 platform. Indonesian-speaking agents are on hand at all times to assist with privacy-related enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line. sl999 aims to acknowledge all privacy-related correspondence within 24 hours (WIB) and to resolve requests within 30 calendar days.

All privacy enquiries are handled in accordance with Western Indonesia Time (WIB, UTC+7). Players contacting us from WITA (UTC+8) or WIT (UTC+9) time zones should allow for the relevant time difference when estimating response windows.