This Privacy Policy explains how coy99 collects, uses, stores, shares, and protects the personal data of every registered User on the Platform. We are committed to handling your data responsibly and transparently. By registering a coy99 account, you acknowledge that you have read and understood this policy.
Every piece of data transmitted between your device and coy99 servers is protected by 256-bit TLS encryption — the same standard used by major Indonesian banks including BCA Mobile and Livin by Mandiri. Your credentials and financial data are never transmitted in plaintext.
coy99 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Data is shared only with service providers who are necessary for platform operations — payment processors, KYC providers, and security vendors — all of whom are bound by strict confidentiality obligations.
You have the right to access, correct, and in certain circumstances request deletion of the personal data coy99 holds about you. All data rights requests are handled by the coy99 support team and processed within 30 calendar days of a verified request being received.
Personal data is stored on access-controlled, encrypted servers. Access to stored personal data is restricted to coy99 personnel and approved service providers on a strict need-to-know basis. All internal data access is logged and periodically audited.
coy99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable compliance and anti-money-laundering obligations. Data is securely deleted or anonymised at the end of its retention period.
coy99 uses cookies strictly for session management, security, and platform performance analytics. No third-party advertising or cross-site tracking cookies are deployed on the coy99 Platform. Cookie settings can be managed through your browser preferences.
Scope: This Privacy Policy applies to all Users of the coy99 Platform accessible at coy99.onl, including registered account holders and visitors who browse the Platform without registering. This policy forms part of the coy99 Terms & Conditions. Capitalised terms not defined here carry the meanings assigned to them in the Terms & Conditions.
The following definitions apply throughout this Privacy Policy:
coy99 collects the following categories of Personal Data from Users, depending on the nature and stage of the account relationship:
| Category | Examples | Mandatory? |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, Indonesian mobile number, preferred username | ✓ Required |
| KYC Data | Government-issued ID (KTP or passport), selfie with ID, proof of address | ✓ Required for withdrawal |
| Financial Data | Bank account number, e-wallet account (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR | ✓ Required for transactions |
| Gameplay Data | Bets placed, games accessed, session duration, win/loss records, responsible gaming settings | ✓ Automatic |
| Technical Data | IP address, device ID, browser type, OS version, screen resolution, referral URL | ✓ Automatic |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Optional (support contact) |
| Marketing Preferences | Opt-in status for promotional emails and platform notifications | Optional |
Note on Sensitive Data: coy99 does not deliberately collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If any such data is incidentally included in a document you submit (for example, religion indicated on an Indonesian KTP), it is not recorded, processed, or used for any purpose beyond confirming the document's authenticity.
coy99 collects Personal Data directly from you when you: complete the account registration form; submit KYC verification documents; make a deposit or request a withdrawal; contact the support team via live chat or email; set responsible gaming limits or self-exclusion preferences; and opt in or out of marketing communications.
When you access the Platform, Technical Data and Gameplay Data are collected automatically through server logs, session tracking systems, and first-party cookies. This data is collected whether or not you are logged into a registered account. Automatic collection begins from the moment your device connects to coy99.onl.
coy99 may receive data about you from approved third-party service providers, including:
coy99 uses the Personal Data we collect for the following specific purposes:
coy99 Processes your Personal Data on one or more of the following legal bases, depending on the purpose of the Processing:
coy99 shares Personal Data with third-party Data Processors who assist in delivering the Platform and its services. All such processors are bound by written data processing agreements and are prohibited from using your data for any purpose other than those specified by coy99. Current categories of approved processors include:
coy99 may disclose Personal Data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent strictly necessary to satisfy the legal obligation and are documented internally.
In the event of a merger, acquisition, restructuring, or sale of all or part of the coy99 business, Personal Data held by coy99 may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity agreeing to be bound by privacy protections no less stringent than those set out in this policy. You will be notified of any such transfer via the email address on your registered account.
coy99 will never: sell your Personal Data to third-party advertisers or data brokers; share your data with other gambling platforms or affiliates for their own marketing purposes; disclose your payment account details to any party other than the payment processor required to complete your transaction; or provide your data to any authority beyond what is strictly required by a lawful obligation.
coy99 retains Personal Data for the minimum period necessary to fulfil the purposes described in this policy, subject to any longer retention periods required by law. The following general retention schedules apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Registration & KYC Data | Duration of account + 5 years after closure | AML compliance obligation |
| Financial Transaction Records | Duration of account + 5 years after closure | AML and financial record-keeping |
| Gameplay Data | Duration of account + 2 years after closure | Responsible gaming audit trail |
| Technical / Log Data | 90 days from collection | Security and fraud detection |
| Support Communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent-based |
Upon expiry of the applicable retention period, Personal Data is either securely and permanently deleted from coy99 systems or rendered irreversibly anonymous so that it can no longer be associated with any individual User.
coy99 implements a layered set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction:
While coy99 applies industry-standard security practices, no system connected to the internet can guarantee absolute security. In the event of a data breach affecting your Personal Data, coy99 will notify affected Users via their registered email address in a timely manner and take all reasonable steps to contain and remediate the breach.
Your role in account security: You are responsible for maintaining the confidentiality of your coy99 login credentials. Use a unique, strong password. Enable two-factor authentication (2FA) from the account security settings. Never share your password with anyone — coy99 staff will never ask for it. Report any suspected unauthorised access to your account to support immediately via live chat.
As a coy99 User, you have the following rights with respect to the Personal Data we hold about you. To exercise any of these rights, contact the coy99 support team via live chat or at . We will respond to all verified requests within 30 calendar days.
Request a copy of the Personal Data coy99 holds about you, along with information on how it is used and with whom it is shared.
Request correction of inaccurate or incomplete Personal Data. You may update most registration data directly through the account settings panel.
Request deletion of your Personal Data where it is no longer necessary for the purposes collected, or where you withdraw consent. Note: deletion may be limited where retention is required by law.
Request that coy99 restrict Processing of your data in certain circumstances — for example, while the accuracy of data is disputed or while an objection is being assessed.
Request a machine-readable copy of the Personal Data you have provided to coy99, for transmission to another service provider, where technically feasible.
Object to Processing of your Personal Data for direct marketing purposes at any time. You may also object to Processing based on legitimate interests, subject to coy99's right to demonstrate compelling grounds.
Where your request involves data subject to a mandatory legal retention obligation (such as AML-required KYC records), coy99 will inform you of the applicable retention requirement and the earliest date at which deletion or restriction can be applied.
Cookies are small text files placed on your device by a website when you visit it. coy99 uses first-party cookies only — meaning cookies set directly by coy99.onl for the Platform's own operational purposes. coy99 does not deploy third-party advertising cookies or cross-site tracking scripts.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session Cookies | Maintain your authenticated login session and preserve game state during an active session | Deleted when browser closes |
| Security Cookies | CSRF protection, login attempt limiting, and bot/fraud detection signals | Session or up to 24 hours |
| Preference Cookies | Remember your game lobby preferences, language settings, and display options | Up to 30 days |
| Analytics Cookies | Measure page performance, identify technical errors, and analyse aggregate Platform usage patterns (anonymised data only) | Up to 90 days |
You can control and delete cookies through your browser settings at any time. Disabling session or security cookies will prevent you from logging in and using the Platform. Disabling preference and analytics cookies will not affect your ability to access coy99, though some personalisation features may be unavailable.
The coy99 Platform is strictly for adults aged 21 and over. coy99 does not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory step in the account registration process, and coy99 reserves the right to request documentary proof of age at any time.
If you believe a minor has registered on the coy99 Platform, please contact the support team immediately at . coy99 will investigate promptly, close the account, and securely delete all Personal Data associated with it. No winnings from an account registered by a minor will be paid out under any circumstances.
The coy99 Platform does not contain links to third-party websites for marketing or content purposes. All navigation within coy99.onl is internal. However, third-party game studios (Evolution Gaming, Pragmatic Play, PG Soft, and others) deliver their game content via embedded iframes or APIs within the Platform. These studios operate their own data processing infrastructure. coy99 shares only the minimum data necessary (anonymised session tokens) with game studios for game delivery purposes, and all studio partnerships are governed by data processing agreements that restrict studio use of any data to game delivery only.
coy99 is not responsible for the privacy practices of third-party studios' standalone platforms or marketing websites, should you independently navigate to those properties outside of the coy99 Platform environment.
coy99 may update this Privacy Policy from time to time to reflect changes in the Platform's data practices, applicable legal requirements, or the services we offer. All updates will be posted on this page with a revised "Last Updated" date. Where a change is material — meaning it significantly affects how we collect or use your Personal Data — we will notify you via the email address registered on your account prior to the change taking effect.
Your continued use of the coy99 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must cease using the Platform and may request account closure via the support team.
For all privacy-related enquiries, data rights requests, or to report a suspected data incident, please contact the coy99 support team through the following channels:
When submitting a data rights request, please include your registered account username and a clear description of the right you wish to exercise or the concern you wish to raise. coy99 may need to verify your identity before processing the request to ensure we do not disclose or modify data belonging to a different individual.
Response Commitment: coy99 commits to acknowledging all privacy-related requests within 2 business days (WIB) of receipt and completing a substantive response within 30 calendar days. For complex requests, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it before the initial 30-day period expires.
coy99 handles your personal data with the same care we put into every other part of the platform. Explore our full game library, check the FAQ for common questions, or log in to your account and start playing. 21+ only — please play responsibly.