LEGAL REFERENCE

Your Data. Your Control. Our Commitment.

We built hebat99 around your privacy. Every account detail, payment record and gaming session stays encrypted and protected. This policy shows exactly how we handle your information —...

Data EncryptedPayment SecureYour ControlTransparent PolicyIndonesia Compliant
Account access Read FAQ
hebat99 Your Data. Your Control. Our Commitment.

What We Collect and Why

When you join hebat99, we collect your name, email, phone number and account credentials to verify your identity and process withdrawals. Payment information — your DANA, OVO, GoPay or QRIS details — is tokenized and never stored on our servers. We track your gaming activity to detect fraud, honour your account limits and comply with local regulations in supported regions. Your location,

device type and browser data help us optimise the lobby and prevent unauthorised access. We do not sell your data to third parties.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Questions About Your Privacy

Email Support Reach our privacy team at [email protected] with any data request, deletion inquiry or concern about how we handle your account information.
Live Chat Chat with our support agents in real time. They can explain our data practices, help you update your profile or guide you through account recovery.
Account Settings Manage your privacy preferences directly in your account dashboard. Update contact details, review login history and control notification settings anytime.
PLATFORM TRUST SIGNALS

How We Protect Your Trust

SSL Encryption

Every transaction between your device and our servers is encrypted with industry-standard SSL protocols. Your payment details and login credentials are never transmitted in plain text.

Regular Audits

We conduct quarterly security audits and penetration testing to identify vulnerabilities before they become threats. Third-party assessments verify our data handling practices.

Compliance Framework

hebat99 operates under data protection standards aligned with Indonesian regulations and international best practices for gaming platforms in supported regions.

Access Controls

Only authorised staff can access your personal data, and only when necessary to process your request or investigate fraud. All access is logged and monitored.

Data Retention

We keep your account data for as long as your account is active, plus seven years for regulatory compliance. You can request deletion of non-essential information anytime.

Incident Response

If a breach occurs, we notify affected users within 48 hours and work with authorities to contain the incident. Our incident response team operates 24/7.

Consistency Across Our Platform

Desktop & Mobile
Your privacy settings sync across all devices. Log in on your phone to check QRIS transactions, then continue on desktop — your data preferences stay the same.
Live Casino & Slots
Whether you're at a live baccarat table or spinning slots, the same encryption and fraud detection protect your session. No difference in data handling between lobbies.
Sportsbook Markets
Your betting history and account balance are protected with the same standards as your casino activity. All payment methods — DANA, OVO, GoPay, QRIS — use identical security.
Account Recovery
If you forget your password or lose access, our verification process confirms your identity before restoring your account. Your data stays locked until you prove ownership.
Third-Party Integrations
We partner with payment processors and game providers who meet our privacy standards. Your data is shared only when necessary to complete your request.
Policy Updates
When we change this policy, we notify you via email at least 30 days in advance. You can review the changes and opt out if you disagree with new terms.
Your Rights
You can request a copy of your data, correct inaccuracies, or ask us to delete your account. Submit requests through your account settings or email [email protected].
AT A GLANCE

What Defines Our Privacy Approach

01
Transparent Logging Every login, withdrawal and profile change is recorded in your account timeline. You can review your activity history anytime to spot unauthorised access.
02
Payment Tokenization Your DANA, OVO, GoPay and QRIS details are converted into secure tokens. We never store your actual payment credentials on our systems.
03
Fraud Detection Our system monitors for unusual login patterns, rapid withdrawals and suspicious transactions. If we detect anomalies, we pause the action and verify with you first.
04
Cookie Control We use cookies to remember your preferences and keep you logged in. You can disable non-essential cookies in your browser settings without losing core functionality.
05
Data Minimisation We collect only the information needed to run your account, process payments and comply with law. We don't ask for unnecessary personal details.
06
Withdrawal Verification Before we send funds to your DANA, OVO, GoPay or QRIS wallet, we verify your identity and confirm the destination matches your registered account.

Privacy Questions Answered

We retain your account data for seven years to comply with Indonesian financial regulations and detect fraud. After that period, we delete your personal information unless law requires us to keep it longer.

Yes. Log into your account, go to Settings > Privacy, and click 'Download My Data'. We'll email you a complete record of your profile, transactions and activity history within 48 hours.

We share only the minimum data needed to run your gaming session — your account ID, balance and game history. Providers cannot see your payment details, email or phone number.

Your payment details are tokenized immediately. We store only a reference token, not your actual wallet credentials. Your e-wallet provider handles the transaction; we never see your PIN or password.

We monitor login locations, withdrawal patterns and device changes in real time. If we spot unusual activity, we send you an alert and may temporarily lock your account until you verify your identity.

Yes. Every promotional email includes an unsubscribe link. You can also manage email preferences in your account settings. We'll stop sending marketing messages within 24 hours.

Absolutely. Every live table stream and chat message is encrypted end-to-end. Your video feed, balance display and betting actions are protected from interception.