90king Platform Privacy Notice

This page describes what we collect when you use 90king and how we keep that data protected. We at 90king take data privacy seriously and comply with Indonesia's Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022). Our privacy practices apply to all users who register a 90king account, regardless of location, and extend to all services we provide—live-dealer tables, sportsbook betting on Liga 1 and Piala AFF, slot games, and payment processing via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet.

We collect personal data only to operate our platform, verify your identity, process deposits and withdrawals, and comply with legal obligations. We do not sell your data to third parties. We do not use your data for marketing emails or unsolicited outreach. We encrypt sensitive information at rest and in transit, and we limit internal access to authorized personnel only.

If you have questions about how we handle your data or wish to exercise your rights under Indonesian data protection law, contact our support team via email or in-app help.

Data We Collect on 90king

When you register a 90king account, we collect: your email address, password (hashed, never stored in plain text), and your chosen primary payment method. These fields are mandatory to create your account.

Before your first withdrawal, we require account verification. We collect: your full name, government-issued ID number (KTP, passport, or driving license), residential address, and a photograph of you holding your ID. This data is used solely for anti-money-laundering (AML) and know-your-customer (KYC) compliance. We do not share your ID with third parties except to licensed identity-verification services (which operate under strict confidentiality agreements).

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect: the transaction amount, date, time, and confirmation number from the payment processor. We store this data to reconcile deposits with your account and to detect fraud patterns.

We collect transaction logs (all bets placed, game results, deposits, withdrawals, and bonus claims) and store them indefinitely for audit and dispute resolution. We also log your IP address, device type, browser, and login timestamps to detect unauthorized access and fraud.

Cookies and Tracking

We use session cookies to keep you logged into 90king. Session cookies expire when you close your browser and do not persist across sessions. We do not use third-party tracking cookies or analytics services that profile user behavior for marketing.

We use functional cookies (e.g., to store your language preference, theme selection, or betting slip) to enhance your experience. You can disable these cookies via your browser settings, though some 90king features may not function correctly.

Data retention: We retain your personal data (name, ID, address) for 7 years after account closure to comply with money-laundering reporting requirements. Transaction logs are retained indefinitely for audit purposes.

How We Use Your Data

We use your 90king data for the following purposes:

Account management: Create and manage your 90king account, verify your identity, and process password resets.
Payment processing: Execute deposits and withdrawals via your chosen payment method (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) and reconcile transactions with banking partners.
AML/KYC compliance: Verify your identity, screen for sanctions lists, and detect unusual transaction patterns.
Fraud prevention: Monitor for unauthorized access, account takeover, collusion, or bonus abuse.
Customer support: Respond to your inquiries, resolve disputes, and assist with technical issues.
Legal compliance: Respond to lawful requests from Indonesian authorities, maintain audit trails, and comply with regulations.

We do not use your data to build marketing profiles, send unsolicited emails or SMS, or sell to third parties. We do not use your name or account data in testimonials or case studies without explicit written consent.

Third-Party Processors

We share your data with the following third parties, all under strict data-processing agreements:

Payment processors (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet): We share transaction amount, your account name, and transaction confirmation number to complete deposits and withdrawals.
Identity-verification services: We share your ID number and photograph for automated identity verification and sanctions screening.
Banking partners: We share transaction records for reconciliation and AML reporting.
Cloud infrastructure providers: We store encrypted backups on AWS (servers in Singapore and regional data centres). Your encrypted data is subject to AWS's data protection commitments.

All processors are contractually required to use your data only for the stated purpose, maintain confidentiality, and implement industry-standard security measures.

Data Location and Security

We maintain servers in multiple locations, including data centres in Jakarta, Surabaya, Bandung, Medan, and Semarang, as well as cloud backups in Singapore. Your data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2+. We do not transfer your personal data outside the Asia-Pacific region without explicit consent.

We conduct quarterly security audits, maintain a vulnerability disclosure program, and employ intrusion detection systems. We do not claim absolute protection against all cyber threats, but we maintain industry-standard safeguards.

Your password is hashed using bcrypt (salted, never reversible). We do not store payment card details; all card data is processed by PCI-DSS-compliant payment gateways and never stored on our servers.

Your data rights on 90king

You can view, update, or download your personal data via your 90king account settings.
You can request deletion of your account and associated data (subject to legal retention requirements).
You can object to processing of your data for marketing or profiling (we do not use your data for these purposes anyway).
You can request a data portability report showing all data we hold on you.
You can lodge a complaint with Indonesian data protection authorities if you believe we have violated your rights.

Your Rights on 90king

Under Indonesia's Personal Data Protection Law, you have the right to: access your data, request correction of inaccurate data, request deletion (subject to legal holds), object to certain processing, and request a portability report. To exercise any of these rights, contact our support team with your account email and a description of your request.

We respond to data requests within 30 days. If we deny a request (e.g., because we are legally required to retain the data), we explain the reason. If you are unsatisfied with our response, you may lodge a complaint with the Indonesian Personal Data Protection Authority.

Changes to This Privacy Notice

We may update this privacy notice at any time. We notify users of material changes via in-app notification or email. Your continued use of 90king after a notice of change constitutes acceptance of the updated policy.

We last updated this privacy notice on the date shown below. If you have questions or concerns about our privacy practices, contact our support team. We maintain this policy to reflect our commitment to protecting your data while operating 90king in compliance with applicable law.