coy99 Casino & Sportsbook Data Care

This page describes what we collect when you use coy99 and how we keep that data protected. When you register on our platform or make a deposit through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect personal information necessary to verify your identity, process your transactions, and operate our service. Our data practices are designed around three principles: we collect only what we need to serve you, we encrypt everything at rest and in transit, and we never sell your data to third parties.

We store your account data (name, email, phone, government ID, residential address) in encrypted form on servers located outside Indonesia. Your transaction history—all deposits, withdrawals, and game entries—is retained for twelve months for dispute resolution and regulatory review. This page explains our full data policy so you understand what happens to your information from the moment you create your coy99 account.

What We Collect and How We Use It on coy99

We collect your personal information in three categories. First, account setup data: full legal name, date of birth, email address, mobile phone number, and residential address. Second, identity verification documents: a photograph of your national ID, passport, or driver's license, and a selfie holding your ID for facial matching. Third, transaction and activity logs: every deposit amount and method, every withdrawal request and status, every game bet and outcome, your login timestamps, and your device type and IP address.

Account data
Name, email, phone, address, ID documents. Used to create and verify your account, comply with KYC requirements, and process withdrawals.
Transaction data
Deposit and withdrawal amounts, payment methods, timestamps. Retained for 12 months to settle disputes and meet regulatory obligations.
Device and usage data
IP address, browser type, login history, game selections. Used to detect fraud, enforce account security, and understand platform reliability.
Payment processor data
Encrypted payment information shared with DANA, e-wallet, and mobile banking only to execute your deposit or withdrawal. We never store your full card or wallet credentials.

Identity Verification and Payment Processing

When you deposit for the first time on coy99, we require you to upload a clear government ID and a selfie for facial verification. This process is called Know Your Customer (KYC) verification and is mandatory in all jurisdictions where we operate. We do not share your ID documents with external services; verification occurs on our secure server using automated matching software. Once your ID is verified, you may deposit and withdraw without re-submitting documents, unless we flag unusual activity and ask for re-verification.

Every deposit and withdrawal is logged with the payment method you used. If you deposit via local payment, we record only that the transaction came through online payment; your wallet credentials are never stored on our servers. The same applies to e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers. Your withdrawal funds always return to the same method you used for deposit—never to third-party accounts.

Your ID documents are encrypted and used only for verification.

We do not share your ID photo with any third party. It is stored in encrypted form and deleted six months after your account is closed.

Two-Factor Authentication and Account Security

We encourage all coy99 users to enable two-factor authentication (2FA) in account settings. When 2FA is active, every login requires a six-digit code sent to your registered phone number. This means even if someone learns your password, they cannot access your account without your phone. We store your phone number in encrypted form and use it only for 2FA codes and withdrawal notifications. You may disable 2FA at any time from your account settings, but we recommend keeping it active.

Data Protection, Retention, and Your Rights on coy99

We protect all data with encryption: your password is hashed (never stored in readable form), your account data is encrypted at rest on our servers, and all data transmitted between your phone and our platform is encrypted in transit using HTTPS. Our servers may be located outside Indonesia; your data remains protected by the same encryption standards regardless of server location. We conduct quarterly security audits and maintain incident-response procedures in case of breach.

We retain your account data for as long as your account is active plus one year after closure. We retain transaction records for twelve months to settle disputes and comply with local gaming regulations. Your ID documents are deleted six months after account closure. If you request account deletion, we will remove all personal data except transaction records required by law (which we keep for two years). We do not retain session cookies longer than one year.

Your rights on coy99 include the right to access a copy of your data, the right to correct inaccurate information (e.g., if your address changed), and the right to request deletion of non-essential data. To exercise any of these rights, contact our support team via live chat (24/7) or submit a request through in-app help. We will respond within 7 business days. We do not use your data for marketing emails or sportsbook recommendations unless you explicitly opt in to our newsletter through account settings.

Third-Party Payment Processors and Local Regulations

When you deposit or withdraw via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet (e-wallets) or via mobile banking, local payment, online payment, e-wallet (bank accounts), we share your transaction with that payment provider. These providers process your payment according to their own privacy policies, which you should review. We do not control their data practices, but we require all payment partners to maintain encryption and comply with Indonesian banking standards.

Our coy99 service is available only where local law permits. We monitor account access location based on IP address and payment method origin. If we detect access from outside supported jurisdictions, we may suspend your account pending review. We comply with all applicable data-protection regulations in jurisdictions where we operate. For questions about specific regulations in your city—Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, or elsewhere—contact our compliance team through in-app help.

Contact and Policy Updates

To request your data, report a privacy concern, or ask a question about this policy, contact us via live chat (24/7), in-app help, or email. We will acknowledge your request within 24 hours and respond fully within 7 business days. We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email and in-app notice; continued use of coy99 after notice constitutes acceptance of the updated policy. The date of the latest policy update appears at the bottom of this page.