Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless the context expressly requires otherwise:

• "ags9" / "we" / "us" / "our" means the company operating the website and betting platform at https://ags9.cam, including its officers, employees, agents, and authorized processors.
• "Platform" means the ags9 website, mobile-optimized web interface, and all associated services, tools, and features accessible to registered users.
• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data, including name, email address, national identity number, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Subject" / "You" / "Your" means any individual whose Personal Data is processed by ags9, including registered users and visitors to the Platform.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. ags9 acts as the Data Controller in respect of all Personal Data collected via the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of ags9 and under ags9's documented instructions.
• "Cookies" means small text files stored on your device by your web browser when you visit the Platform, used to recognize returning visitors and maintain session continuity.
• "KYC" means Know Your Customer — the identity verification process required under ags9's anti-money-laundering obligations.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial data, which is subject to heightened protection standards.

2 Scope and Application

This Privacy Policy applies to all Personal Data collected and processed by ags9 in connection with your use of the Platform, regardless of whether you access the Platform from Indonesia or from any other location. It applies to:

• Registered account holders who actively use ags9's betting and gaming services.
• Visitors who browse the Platform without registering an account.
• Individuals who contact ags9 via live chat, email, or any other communication channel for customer support or general inquiries.
• Former account holders whose data is retained in accordance with ags9's data retention obligations set out in Section 10 of this Policy.

This Policy should be read in conjunction with the ags9 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any conflict between this Policy and the Terms & Conditions with respect to privacy matters, this Policy shall prevail.

3 Data Controller Information

ags9 operates as the Data Controller for all Personal Data collected through the Platform. The Platform is operated and maintained by the entity registered under ags9's international gaming license. For all privacy-related inquiries, data subject rights requests, or complaints regarding our data handling practices, please contact our designated Data Protection contact using the details below:

• Data Protection Contact: [email protected] (subject line: "Privacy / Data Protection")
• Response Commitment: We aim to acknowledge all privacy inquiries within 48 hours and provide a substantive response within 30 calendar days.
• Support Availability: 24/7 via live chat on the Platform, or via email at any time.

ags9 has appointed an internal data protection point of contact responsible for overseeing compliance with this Policy and applicable data protection legislation. This individual reviews data handling practices, responds to data subject requests, and coordinates with our legal and compliance teams on privacy matters.

4 Personal Data We Collect

The Personal Data ags9 collects from you depends on how you interact with the Platform. The table below summarizes the categories of data we collect and the primary reason for collecting each category:

5 How We Collect Your Data

ags9 collects Personal Data through the following channels and mechanisms:

5.1 Direct Collection

You provide data directly to us when you: register an account on the Platform; complete KYC verification by uploading identity documents; make a deposit or request a withdrawal; contact our customer support team; respond to surveys or promotional offers; or activate any Responsible Gaming Tools within your Account Settings.

5.2 Automated Collection

When you access the Platform, our servers automatically record Technical Data including your IP address, device identifiers, browser type, and session information. We use cookies and similar tracking technologies (described in detail in Section 9) to collect Usage Data as you navigate the Platform. Automated fraud-detection systems also analyze patterns in your login behavior, transaction activity, and betting patterns to identify potential unauthorized access or policy violations.

5.3 Third-Party Sources

We may receive Personal Data about you from third parties in the following circumstances:

• Payment processors (e.g., local Indonesian bank gateways, OVO, DANA, GoPay) confirm transaction status and flag suspicious payment activity.
• KYC verification service providers perform automated checks against national identity databases to confirm the authenticity of identity documents you submit.
• Fraud prevention partners share device fingerprint data and IP reputation scores to assist us in identifying high-risk access attempts.
• Game studios and content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) return aggregated game result data and jackpot trigger records necessary for calculating your Account balance accurately.

6 Legal Bases for Processing

ags9 processes your Personal Data only where a valid legal basis exists. Depending on the activity, we rely on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically to provide the betting and gaming services described in our Terms & Conditions, process your deposits and withdrawals, and manage your Account.
• Legal Obligation: ags9 is required by its international gaming license and anti-money-laundering (AML) obligations to verify your identity (KYC), retain transaction records, and report suspicious activity to relevant authorities.
• Legitimate Interests: We process Technical Data and Usage Data to maintain Platform security, prevent fraud, improve our services, and detect bonus abuse — activities that serve both ags9's and our users' legitimate interests, provided they do not override your fundamental privacy rights.
• Consent: Where we send you optional marketing communications or deploy non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests: In rare circumstances, we may process data to protect the vital interests of a Data Subject — for example, where a user's communications suggest an immediate risk of harm related to problem gambling.

7 How We Use Your Personal Data

ags9 uses the Personal Data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your consent or establishing a separate legal basis.

7.1 Account Management and Service Delivery

We use your Identity Data and Contact Data to create and maintain your Account, authenticate your identity at login, process your deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, and deliver the full range of betting and gaming products available on the Platform — including sports betting on BRI Liga 1 and international fixtures, live casino games, slot titles, crash games, and togel (Indonesia's traditional numbers lottery) markets where available.

7.2 Identity Verification and Compliance

We use Document Data and Identity Data to fulfill our KYC obligations prior to your first withdrawal and on an ongoing basis as required by our compliance framework. This processing is mandatory; failure to complete KYC verification will result in withdrawal restrictions on your Account until verification is successfully concluded.

7.3 Fraud Prevention and Security

We analyze Technical Data, Financial Data, and Gaming and Betting Data using automated and manual review processes to detect unauthorized access, account takeover attempts, payment fraud, multi-accounting, and bonus abuse. Detected violations may result in Account suspension, fund forfeiture, and referral to relevant authorities.

7.4 Responsible Gaming Monitoring

We use your Gaming and Betting Data to monitor for behavioral indicators associated with problem gambling — such as rapidly escalating wager sizes, frequent deposits following large losses, or extended uninterrupted play sessions. Where such patterns are detected, our Responsible Gaming team may proactively reach out to offer support resources. This processing is carried out in your vital interests and in fulfillment of our duty of care as a licensed operator.

7.5 Customer Support

We use Communications Data and Account Data to respond to your inquiries, resolve disputes, process complaints, and improve the quality of our 24/7 Indonesian-speaking support service. Live chat transcripts and email correspondence may be retained for quality assurance and staff training purposes.

7.6 Marketing and Promotions

With your explicit consent, we may use your Contact Data and gaming preferences to send you personalized promotional offers, bonus notifications, and event-based communications (such as offers tied to BRI Liga 1 fixtures, major international tournaments, or Indonesian seasonal events like Idul Fitri and Ramadhan). You may unsubscribe from marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe."

7.7 Platform Improvement and Analytics

We use aggregated and anonymized Usage Data to analyze Platform performance, identify user experience issues, optimize page layouts, and inform product development decisions. Where possible, analytics processing uses anonymized or pseudonymized data that cannot be linked back to individual users.

8 Sharing and Disclosure of Personal Data

ags9 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes. We share your data only in the specific, limited circumstances described below:

8.1 Authorized Data Processors

We share Personal Data with carefully selected third-party service providers who process data strictly on our behalf and under our written instructions. These include:

• Payment processors and local bank gateways — to execute deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, and other supported channels.
• E-wallet providers — OVO, DANA, GoPay, ShopeePay, and LinkAja, for processing e-wallet transactions.
• KYC and identity verification vendors — to authenticate the identity documents you submit during the verification process.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive the minimum data necessary to deliver their games within the Platform environment.
• Cloud infrastructure and hosting providers — who store Platform data on servers secured in accordance with industry-standard security protocols.
• Fraud prevention and security analytics partners — who assist us in identifying high-risk transactions and access attempts.

8.2 Regulatory and Legal Disclosure

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally compelled to do so, where disclosure is necessary to protect the rights, property, or safety of ags9, our users, or the public, or where required under the terms of our international gaming license. ags9 will notify affected users of any such disclosure to the extent permitted by applicable law.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of ags9's business assets, Personal Data held at the time of such transaction may be transferred to the acquiring entity. We will notify registered users via email prior to any such transfer taking effect and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

9 Cookies and Tracking Technologies

ags9 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session continuity, and gather usage analytics. The following categories of cookies are deployed on the Platform:

• Strictly Necessary Cookies: These cookies are essential for you to navigate the Platform and use its core features, including maintaining your logged-in session, remembering items in your bet slip, and applying your account settings. These cookies cannot be disabled without severely impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language display settings and notification preferences — to deliver a more personalized experience. Disabling these cookies will not prevent you from using the Platform but may reduce convenience.
• Analytical Cookies: We use analytics tools to collect aggregated data on how users interact with the Platform — including pages visited, time spent, and navigation paths. This data is used exclusively for internal product improvement and is not shared with advertisers.
• Security Cookies: These cookies support our fraud-detection systems by recording device fingerprint data and flagging anomalous login behavior. They are classified as strictly necessary and cannot be disabled.

You may manage your cookie preferences through your browser settings. Instructions for disabling cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in those browsers' respective help documentation. Please note that disabling strictly necessary or security cookies may impair your ability to log in or use certain Platform features.

10 Data Retention

ags9 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account relationship with ags9, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required under our licensing obligations and standard financial compliance practice.
• KYC Document Data: Retained for five (5) years following account closure or the completion of the last transaction to which the KYC relates, whichever is later.
• Gaming and Betting History: Retained for five (5) years for compliance and dispute resolution purposes.
• Customer Support Communications: Retained for three (3) years for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months, after which it is anonymized or deleted.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized using industry-standard data destruction methods. You may request early deletion of certain categories of your Personal Data subject to the limitations described in Section 13 (Your Rights).

11 Data Security

ags9 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), ensuring that data in transit cannot be intercepted by unauthorized parties.
• Data Encryption at Rest: Sensitive Personal Data stored in our databases — including identity documents and financial account details — is encrypted at rest using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure that ags9 employees can only access Personal Data that is necessary for their specific job function. All internal access to Personal Data is logged and audited.
• Two-Factor Authentication (2FA): All ags9 staff with access to systems containing Personal Data are required to use two-factor authentication. We also make 2FA available to Platform users as an additional layer of Account security.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a Personal Data breach that poses a risk to your rights, ags9 will notify affected users without undue delay and in accordance with applicable notification obligations under our licensing framework.

While ags9 takes all reasonable steps to protect your Personal Data, no internet-based system is entirely immune to security risks. You play an important role in protecting your own data by maintaining a strong, unique password for your Account and by not sharing your login credentials with any third party.

12 International Data Transfers

As an internationally licensed platform serving users across Indonesia, ags9 may transfer Personal Data to servers or service providers located outside Indonesia. Such transfers are necessary to deliver the Platform's services — for example, where our cloud infrastructure provider operates data centers in multiple regions, or where a game studio's servers are located overseas.

Where Personal Data is transferred internationally, ags9 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include:

• Contractual data protection clauses incorporated into all agreements with third-party processors that involve cross-border data transfers.
• Transfer of data only to processors operating in jurisdictions with recognized data protection frameworks, or processors that have independently certified their compliance with equivalent standards.
• Regular review and audit of third-party processor compliance with agreed data protection obligations.

You may request details of the specific safeguards applied to any cross-border transfer of your Personal Data by contacting our Data Protection contact at [email protected] with the subject line "International Transfer Query."

13 Your Rights as a Data Subject

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your Personal Data held by ags9. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Rights Request." We will respond within thirty (30) calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. You may also update certain Account information directly through your Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal retention obligations — specifically, we cannot delete financial records we are required to retain for AML compliance.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to request that we transmit it directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on our Legitimate Interests, including profiling for fraud prevention or gaming analytics purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent — such as receipt of marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

14 Children's Privacy

The ags9 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, use, or retain Personal Data from individuals under the age of 21. Age verification checks are performed during the registration process and as part of our KYC procedures to enforce this requirement.

If ags9 becomes aware that Personal Data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data from our systems and close the associated Account. Any funds deposited to such an Account will be returned to the source payment method after appropriate verification, and the matter will be referred to our compliance team.

If you believe that a person under 21 has registered an Account on the Platform or that their Personal Data has been collected without proper consent, please contact us immediately at [email protected] with the subject line "Underage Account Report." We treat all such reports with the highest priority.

15 Amendments to This Policy

ags9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services offered on the Platform. Where amendments are material — for example, changes to the categories of data we collect, new categories of third-party sharing, or significant changes to retention periods — we will provide at least fourteen (14) days' advance notice by email to the address registered to your Account and by posting a prominent notice on the Platform homepage.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We maintain an archive of previous versions of this Policy, available upon written request to [email protected] with the subject line "Privacy Policy Archive." Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the revised terms, you must cease using the Platform and may request Account closure prior to the amendment taking effect.

16 Contact and Complaints

For all privacy-related queries, data subject rights requests, or concerns about how ags9 handles your Personal Data, please use the contact details below. All email addresses are displayed as plain text and are not clickable links.

• General Privacy Inquiries: [email protected] (subject line: "Privacy Inquiry")
• Data Subject Rights Requests: [email protected] (subject line: "Data Subject Rights Request")
• Underage Account Reports: [email protected] (subject line: "Underage Account Report")
• Data Breach Notifications: [email protected] (subject line: "Security Concern")
• Live Chat Support: Available 24 hours a day, 7 days a week via the Platform interface, with Indonesian-speaking agents available at all times.
• Response Time: Privacy inquiries acknowledged within 48 hours; substantive response within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or to ags9's international licensing regulatory body, details of which are available upon written request. ags9 is committed to resolving all privacy complaints fairly, transparently, and without undue delay.