Your privacy and data security are our top priorities. Learn how we collect, use, and protect your personal information.
Last Updated: January 2026
Welcome to the xl999 Privacy Policy. This document explains how xl999 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects your personal information when you access or use our online gaming platform at https://xl999.cam. We are committed to protecting the privacy and security of our Indonesian users in Jakarta, Surabaya, Bandung, Medan, and across Indonesia.
By creating an account on xl999 or using our services, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with this policy, please do not use our platform.
This Privacy Policy applies to all personal data processed by xl999 in connection with our online gaming services, including sports betting, live casino games, slot machines, lottery games (including togel - Indonesia's traditional numbers lottery), and all related services. This policy covers data collected through our website, mobile-optimized platform, customer support channels (Live Chat, WhatsApp, email), and any future xl999 applications or services.
We recognize that Indonesian users entrust us with sensitive personal information including full names, contact details, government-issued ID documents (KTP - Kartu Tanda Penduduk), banking information for BCA, BRI, BNI, Mandiri, CIMB Niaga, and other Indonesian banks, e-wallet details for OVO, DANA, GoPay, and ShopeePay, and gaming activity records. We treat this information with the highest level of security and confidentiality.
xl999 operates under international gaming licenses issued by offshore regulatory authorities. While Indonesia's personal data protection laws are evolving, we voluntarily comply with international data protection standards including GDPR principles where applicable, ensuring our Indonesian users receive world-class privacy protection regardless of local regulatory frameworks.
The data controller responsible for your personal information is xl999, the legal entity operating the gaming platform at https://xl999.cam. Our registered business address and licensing information are available upon request through our Customer Support team.
For all privacy-related inquiries, data access requests, or concerns about how your personal information is handled, please contact our Data Protection Officer via:
xl999 collects several categories of personal information to provide, maintain, and improve our gaming services. The information we collect includes:
When you create an xl999 account, we collect:
To comply with anti-money laundering regulations and verify that users meet the 21+ age requirement, we collect:
KYC documents are stored securely with restricted access and are used solely for identity verification, age confirmation, and regulatory compliance purposes.
To process deposits and withdrawals, we collect:
We do not store full credit card numbers, CVV codes, or complete bank login credentials. Payment processing is handled through secure, PCI-DSS compliant third-party payment processors.
We automatically collect information about your gaming activity including:
This information helps us detect problem gambling behaviors, comply with responsible gaming obligations, identify fraudulent activity, and personalize your gaming experience.
When you access xl999, we automatically collect technical information including:
When you contact xl999 Customer Support, we collect:
xl999 uses your personal information for the following purposes:
You can opt out of marketing communications at any time by clicking "Unsubscribe" in any promotional email or by contacting Customer Support.
xl999 does not sell or rent your personal information to third parties for their marketing purposes. However, we may share your data in the following limited circumstances:
We share necessary financial information (bank account details, e-wallet IDs) with secure third-party payment processors to facilitate deposits to BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and other Indonesian payment methods. These processors are contractually obligated to protect your data and use it only for transaction processing.
Your gameplay data (bets placed, game outcomes) is shared with third-party game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, PG Soft, and Spribe to enable game functionality. These providers do not receive your full personal identity information.
Your ID documents and selfie photos may be shared with specialized KYC verification service providers that use facial recognition and document authentication technology to verify your identity. These services operate under strict data protection agreements.
Live Chat, email, and WhatsApp support communications are processed through secure customer support platforms. Support staff access your account information solely to assist with your inquiries.
We may disclose your personal information if required by law, court order, or regulatory authority (such as our licensing jurisdiction). We may also share information to prevent fraud, enforce our Terms and Conditions, or protect the rights and safety of xl999, our users, and the public.
In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. You will be notified of any such transfer via email and given the opportunity to delete your account before the transfer occurs.
xl999 employs industry-leading security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:
All data transmission between your device and xl999 servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same technology used by international banks. This ensures that sensitive information such as passwords, banking details, and KYC documents cannot be intercepted by third parties during transmission.
Personal data stored on our servers is encrypted at rest. KYC documents and financial information are stored in isolated, access-controlled database segments with strict permission requirements. Our data centers employ physical security measures including 24/7 surveillance, biometric access controls, and redundant backup systems.
Access to personal data is restricted to authorized xl999 personnel who require it to perform their job functions (customer support, compliance, fraud detection). All staff members sign confidentiality agreements and undergo data protection training. Access logs are maintained and regularly audited.
We offer optional two-factor authentication to add an extra layer of security to your account. We strongly recommend enabling 2FA to protect against unauthorized login attempts.
xl999 undergoes regular security audits and penetration testing by independent cybersecurity firms to identify and address vulnerabilities. Our systems are continuously monitored for suspicious activity.
While we implement robust security measures, you are responsible for maintaining the confidentiality of your login credentials. Never share your password with anyone, avoid using public Wi-Fi for financial transactions, and log out after each session on shared devices.
xl999 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
For active accounts, we retain all personal data, transaction history, and gaming records to provide ongoing service, comply with regulatory obligations, and resolve disputes.
When you close your account, we retain your personal information for 7 years to comply with anti-money laundering regulations, tax reporting requirements, and legal obligations. After this period, personal data is securely deleted or anonymized.
If you self-exclude due to problem gambling concerns, we retain your information permanently to prevent you from creating new accounts in the future, as required by responsible gaming regulations.
If you opt out of marketing communications, we retain your email address to ensure we do not send you promotional messages in the future, but we delete other marketing-related data.
You have the following rights regarding your personal data held by xl999:
You can request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used format (typically PDF or CSV) within 30 days of your request.
If any of your personal information is inaccurate or incomplete, you can request that we correct it. You can update most information (email, phone number, address) directly in your account settings. For changes to name or date of birth, contact Customer Support with supporting documentation.
You can request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purposes for which it was collected. However, we may be required to retain certain information to comply with legal obligations (anti-money laundering, tax reporting, fraud prevention).
You can request that we temporarily restrict the processing of your personal data in certain situations, such as while we verify the accuracy of disputed information.
You can request that we transfer your personal data to another service provider in a machine-readable format, where technically feasible.
You can object to processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests.
Where processing is based on your consent (e.g., marketing communications), you can withdraw consent at any time. This does not affect the lawfulness of processing before consent was withdrawn.
To exercise any of these rights, please contact our Data Protection Officer via:
We will respond to all legitimate requests within 30 days. We may ask you to verify your identity before fulfilling data access requests to prevent unauthorized disclosure of personal information.
xl999 uses cookies and similar tracking technologies to enhance your gaming experience, analyze site usage, and deliver personalized content.
Cookies are small text files stored on your device by your web browser when you visit a website. They enable the website to remember your preferences and track your activity.
You can control cookie settings through your browser preferences. Most browsers allow you to refuse all cookies or delete existing cookies. However, disabling essential cookies may prevent you from using certain features of the xl999 platform.
Some cookies are set by third-party services such as game providers (Evolution Gaming, Pragmatic Play), analytics tools (Google Analytics), and payment processors. These third parties have their own privacy policies governing their use of cookies.
xl999 is strictly an adults-only platform. We do not knowingly collect personal information from individuals under 21 years of age. By creating an account, you represent and warrant that you are at least 21 years old or the legal age of majority in your jurisdiction, whichever is greater.
If we discover that a user is underage, we will immediately suspend the account, void all bets and winnings, and permanently delete all personal information associated with that account. Deposits will be returned to the payment source.
Parents and guardians are encouraged to monitor children's internet usage and ensure minors do not access gambling websites. If you believe a minor has created an account on xl999, please contact us immediately at [email protected].
xl999 reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:
Your continued use of xl999 services after policy changes take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should discontinue use and may request account closure.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.
If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact xl999's Data Protection Officer:
Our Indonesian-speaking support team is available 24/7 to assist with privacy-related questions and help you exercise your data protection rights.
At xl999, we are committed to maintaining the trust Indonesian players place in us by protecting your personal information with bank-grade security, transparent data practices, and respect for your privacy rights. If you have any concerns about how your data is handled, please don't hesitate to reach out to our Data Protection Officer.
All data transmission is protected by bank-grade encryption technology, ensuring your personal and financial information cannot be intercepted.
Only authorized personnel with legitimate business needs can access your data. All access is logged and regularly audited.
Personal data is stored in encrypted databases with redundant backups in secure data centers with 24/7 physical security.
Optional 2FA adds an extra security layer to your account, protecting against unauthorized login attempts even if your password is compromised.
Independent cybersecurity firms conduct regular penetration testing and security audits to identify and fix vulnerabilities.
We comply with international data protection standards and anti-money laundering regulations to ensure your data is handled responsibly.
Our Data Protection Officer and support team are available 24/7 to answer your privacy-related questions.