Privacy Policy

The following terms have the meanings ascribed to them throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data; in this context, faw999.
• "Data Processor" — a third party that processes personal data on behalf of faw999 under a data processing agreement.
• "Member" — any individual who has completed registration on the faw999 Platform.
• "Sensitive Data" — a subset of personal data afforded higher protection, including financial account details, identity document numbers, and KYC verification materials.
• "Cookies" — small data files placed on a device by a website to enable functionality, remember preferences, and support analytics.

faw999 acts as the Data Controller for all personal data collected through the Platform. Our designated privacy contact is reachable at [email protected]. All data-related enquiries, access requests, and erasure requests should be directed to this address with the subject line "Privacy Request – [Your Username]".

While faw999 is operated internationally, we specifically serve Members in Indonesia — including players in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, and Palembang — and we acknowledge the importance of data protection expectations held by Indonesian consumers. We are committed to handling your data with the care and transparency those expectations demand.

faw999 collects the following categories of personal data:

faw999 collects personal data through the following means:

1. Direct Submission: Information you provide when completing the registration form, submitting KYC documents, initiating deposit or withdrawal transactions, contacting our support team, or responding to promotions.
2. Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 9 (Cookies & Tracking) for full details .
3. Third-Party Sources: We may receive data about you from identity verification service providers, fraud prevention agencies, payment processors, and banking partners (including BCA, BRI, BNI, and Mandiri) where such sharing is necessary to complete a transaction or fulfil a legal obligation.
4. Publicly Available Sources: In limited circumstances related to fraud prevention or compliance, faw999 may reference publicly available records to verify information you have provided.

faw999 processes your personal data only where a valid legal basis exists. The table below maps each processing purpose to its corresponding lawful basis:

faw999 does not sell personal data. We share your information only in the following circumstances and only to the extent strictly necessary:

1. Payment Processors and Banking Partners: To facilitate deposits and withdrawals, we share relevant financial identifiers with your chosen payment provider — for example, your registered bank account number with BCA, BRI, BNI, or Mandiri, or your e-wallet ID with OVO, DANA, GoPay, ShopeePay, or LinkAja. These partners act as independent data controllers for their own services.
2. Identity Verification Providers: We engage licensed third-party KYC and identity verification services to confirm Member identity and age. These providers process your KYC documents solely for verification purposes under binding data processing agreements.
3. Game Studio Partners: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session data necessary to operate their game content on the Platform. No directly identifiable personal data is shared for studio game-operation purposes.
4. Fraud Prevention and AML Services: We may disclose data to specialist fraud detection or anti-money laundering screening providers where we have reasonable grounds to suspect misuse of the Platform.
5. Legal and Regulatory Authorities: faw999 will disclose personal data to competent authorities when required to do so by a court order, legal process, or applicable regulation. We will inform you of such disclosure where legally permitted to do so.
6. Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any resulting changes to this Policy.

As an internationally operated platform, faw999 may transfer and store your personal data on servers located outside Indonesia. Where such transfers occur, faw999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within the Platform's primary operating jurisdiction. Safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions as applicable.

By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Indonesia. We take all reasonably practicable steps to ensure that any international transfer is conducted securely and that receiving parties are bound by obligations consistent with this Policy.

faw999 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your Account's active status plus a minimum of five (5) years following Account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Transaction Records (Deposits and Withdrawals): Retained for a minimum of five (5) years to satisfy financial record-keeping and AML compliance requirements.
• Customer Support Communications: Retained for three (3) years from the date of the final communication in a support thread, unless the matter relates to an ongoing dispute.
• Marketing Consent Records: Retained for the duration of consent, plus two (2) years after consent is withdrawn, to evidence compliance with opt-in and opt-out obligations.
• Technical and Usage Logs: Typically retained for thirteen (13) months from the date of collection, after which logs are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard methods or, where deletion is not immediately practicable, permanently anonymised such that it can no longer be linked to an identifiable individual.

faw999 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and gather analytics data that helps us improve the user experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for Platform operation — for example, maintaining your authenticated session and enabling secure page navigation. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember preferences such as your selected language, display settings, and last-visited game section, providing a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how Members interact with the Platform — including pages visited and features used — to help us identify areas for improvement.
• Security Cookies: Support fraud detection and security functions, including identifying unusual login patterns or suspicious transaction activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features including account login and deposit processing. faw999 does not use third-party advertising or behavioural targeting cookies.

faw999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields — including bank account details and identity document numbers — at rest within our database infrastructure.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular internal security audits and penetration testing conducted by independent information security specialists.
• Incident response procedures that include prompt investigation and, where required by applicable law, timely notification to affected Members in the event of a confirmed data breach.
• Staff training on data protection principles and secure data handling practices.

While faw999 applies stringent security practices, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials, including your password and any two-factor authentication codes. If you suspect your Account has been compromised, contact our support team immediately.

The faw999 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the KYC process for all Members.

If faw999 becomes aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated Account. Any funds held in such an Account will be handled in accordance with our Terms & Conditions and applicable law. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

Subject to applicable law, you have the following rights in relation to your personal data held by faw999. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request – [Your Username]". We will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your personal data — for example, while the accuracy of the data is under dispute.
• Right to Data Portability: Where processing is based on your consent or on performance of a contract, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object at any time to processing of your personal data where the legal basis is legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

faw999 may send you promotional communications — including bonus offers, event promotions tied to BRI Liga 1 fixtures, Idul Fitri specials, or major international tournaments — by email or SMS, provided that you have given your explicit consent to receive such communications during registration or at any subsequent point.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email we send.
• Updating your communication preferences in your Account settings.
• Contacting our support team at [email protected] and requesting removal from marketing lists.

Opting out of marketing communications will not affect the delivery of transactional messages, which are necessary for the operation of your Account — such as deposit confirmations, withdrawal notifications, and security alerts.

The Platform may contain references to third-party services — for example, payment gateways operated by your chosen bank or e-wallet provider. Once you navigate away from faw999.cam to a third-party site or service, this Privacy Policy no longer applies. faw999 has no control over and accepts no responsibility for the privacy practices of third-party sites. We encourage you to review the privacy policy of any third-party service you use in connection with your faw999 Account.

faw999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. Where changes are material, we will notify you by email to your registered address or via a prominent notice on the Platform at least seven (7) days before the updated Policy takes effect.

The "Last updated" date displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or faw999's data processing practices, please reach out through the following channels:

• Email: [email protected] — use the subject line "Privacy Request – [Your Username]" for data-related enquiries. We aim to respond within 30 calendar days.
• Live Chat: Available 24/7 directly on the Platform. Our Indonesian-speaking support agents are available at all hours (WIB, UTC+7) and can direct your enquiry to our designated privacy contact if required.

We are committed to resolving all privacy-related concerns promptly and transparently. If you feel your concern has not been adequately addressed, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.