keno89 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by keno89 in connection with the operation of the online betting platform available at keno89.app. It covers data collected through the website, any progressive web application, customer support channels, and all promotional communications issued under the keno89 brand.

For the purposes of this Privacy Policy, keno89 acts as the data controller — the entity that determines the purposes and means of processing your personal data. Where keno89 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual data-processing agreements that require equivalent standards of protection.

This Policy should be read alongside the keno89 Terms & Conditions and the Responsible Gaming policy, which together form the complete framework governing your use of the Platform.

keno89 collects the following categories of personal data. The specific data points required depend on which Services you use and what stage of account verification you have completed.

keno89 collects personal data through the following mechanisms:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated Technical Collection: Data gathered automatically when you access or use the Platform, including server logs, session analytics, and device fingerprinting used for fraud detection and security monitoring.
• Payment Provider Integration: Transaction confirmation data received from local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• Third-Party Identity Verification: Where keno89 uses an external KYC or AML screening provider, that provider may return identity-match scores, sanctions-list results, and politically-exposed-person (PEP) flags to keno89 based on the identity data you submit.
• Cookies and Tracking Technologies: As described in Clause 7 (Cookies & Tracking) below.

keno89 processes your personal data for the following purposes:

• Account Creation and Management: Registering your account, verifying your identity, maintaining your account profile, and enabling login.
• Service Delivery: Executing your bets and wagers, processing deposits and withdrawals in IDR, crediting bonuses, and providing access to all betting and gaming products on the Platform.
• KYC and Regulatory Compliance: Verifying your identity and age (21+), screening against sanctions and PEP lists, meeting anti-money-laundering (AML) obligations, and responding to lawful requests from regulatory or law enforcement authorities.
• Fraud Prevention and Security: Detecting and preventing fraudulent transactions, unauthorised account access, chip dumping in poker, bot usage in sportsbook, and any other activity that violates the Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling, administering self-exclusion and deposit limit controls, and flagging accounts that may require intervention under our Responsible Gaming programme.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance and training.
• Marketing and Promotions: Sending promotional emails and SMS messages about bonuses, special events, and new product launches — only where you have provided consent or where a legitimate interest applies. Indonesian seasonal promotions (e.g., Idul Fitri, Ramadhan specials) are included in this category.
• Platform Improvement: Analysing aggregated usage data to improve site performance, game selection, user interface design, and mobile compatibility.

For each processing purpose described in Clause 4, keno89 relies on one or more of the following legal bases:

keno89 does not sell your personal data. We share data only in the following circumstances and only to the extent strictly necessary for the relevant purpose:

• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session tokens and bet records to deliver game content and ensure correct settlement. These providers do not receive your full identity or financial data.
• Payment Processors: Indonesian bank and e-wallet integrations receive the minimum financial data required to execute a transaction (account number, amount in IDR, reference number). No betting or identity data is shared with payment providers beyond what is required for transaction processing.
• KYC and AML Verification Partners: Identity document images and basic biographical data (name, date of birth, ID number) may be transmitted to a third-party verification service for automated identity matching and sanctions screening. Results are returned to keno89 and not stored by the verification provider beyond their contractual retention period.
• Analytics and Performance Monitoring: Aggregated and anonymised technical data (page performance metrics, error rates, session counts) may be shared with infrastructure and analytics partners. No personally identifiable information is included in these data sets.
• Legal and Regulatory Authorities: keno89 will disclose personal data to competent authorities — including law enforcement, regulatory bodies, or courts — when required by a valid legal instrument (court order, regulatory notice, or equivalent). Where permitted by law, keno89 will notify the affected Member of such disclosure.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of keno89, your personal data may be transferred to the acquiring entity. Members will be notified at least fourteen (14) days before such a transfer takes effect and will be given the opportunity to close their account prior to the transfer.

keno89 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your logged-in session, to detect fraud, and to understand how Members use the site. The following categories of cookies are used:

keno89 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer period required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of the Member relationship and for a period of five (5) years following permanent account closure.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of last transaction, consistent with standard AML record-keeping requirements.
• Transaction Records (Deposits, Withdrawals, Bet Settlements): Retained for seven (7) years to satisfy financial record-keeping obligations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service quality review.
• Marketing Preference Records: Consent records are retained indefinitely as evidence of lawful marketing processing. Opt-out preferences are retained permanently to prevent inadvertent re-subscription.
• Technical Logs (IP, Session): Retained for twelve (12) months in an identifiable form; thereafter anonymised and retained as aggregated analytics data.

keno89 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and keno89 servers is encrypted using TLS 1.3 with strong cipher suites.
• At-Rest Encryption: Sensitive data fields — including bank account numbers, KYC document images, and password hashes — are encrypted at rest using AES-256 or equivalent.
• Access Controls: Production data systems are accessible only to authorised keno89 personnel on a role-based, need-to-know basis. All internal access is logged and subject to periodic review.
• Intrusion Detection: Automated systems monitor network traffic and application behaviour for anomalies consistent with brute-force attacks, SQL injection, cross-site scripting, and other common attack vectors.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts. 2FA is mandatory for all keno89 staff accessing production systems.
• Vendor Security Assessments: Third-party service providers with access to Member data are subject to security questionnaires and contractual data processing agreements before integration.

As a keno89 Member, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a description of your request. keno89 will respond within thirty (30) calendar days.

keno89 does not knowingly collect personal data from individuals under the age of 21. Where keno89 becomes aware — through KYC review, self-disclosure, or third-party report — that a registered Member is under the minimum age, the account will be immediately suspended, all bets voided, and any deposited funds returned to the originating payment method. No winnings accrued on an under-age account will be paid out.

If you believe that a minor has registered on keno89, please contact us immediately at [email protected] so that the account can be investigated and closed as quickly as possible.

keno89's primary servers and data infrastructure are located in jurisdictions that maintain robust data protection regimes. Where personal data is transferred outside the country in which it was originally collected — for example, when game software providers or KYC verification partners process data on servers located in their own jurisdictions — keno89 ensures that:

• The transfer is necessary for the performance of the Member contract or for the provision of the relevant service;
• Appropriate contractual safeguards are in place between keno89 and the receiving entity (e.g., standard data-processing clauses); and
• The receiving entity is subject to binding obligations to protect the data to a standard at least equivalent to that described in this Privacy Policy.

keno89 reviews this Privacy Policy at least annually and may update it at any time to reflect changes in our data practices, applicable law, or regulatory guidance. When we make material changes — changes that significantly affect how we use your data or the rights available to you — we will:

• Post the revised Policy on this page with an updated "Last Updated" date;
• Send an email notification to the address registered on your account at least fourteen (14) days before the revised Policy takes effect; and
• Display a prominent notice on the Platform home page for a period of at least seven (7) days following the publication of material changes.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, please cease using the Platform and contact support to arrange account closure and return of your available balance.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a privacy complaint, please contact keno89 through the following channels:

• Email: [email protected] — use the subject line "Privacy Request" or "Data Complaint" so your message is routed to the correct team. Please note this is displayed as plain text and is not a clickable link.
• Live Chat: Available 24/7 on the Platform. Indonesian-speaking agents are on duty at all times and can assist with privacy queries in both English and Bahasa Indonesia.
• Response Commitment: All privacy-related requests are acknowledged within five (5) business days (WIB, UTC+7) and substantively resolved within thirty (30) calendar days. Complex requests may take up to sixty (60) days; you will be informed of any extension.

For questions about responsible gaming tools, self-exclusion, or account closure, please visit our dedicated Responsible Gaming page. For general platform questions, please refer to our FAQ page.