Privacy Policy

1. Introduction

This Privacy Policy applies to all users of luna99, Indonesia's premier online gaming platform. We understand that trust is earned through transparency, and we are committed to being open about our data handling practices. This policy covers all personal information collected through our website, mobile platform, customer service interactions, and any other channels through which you interact with luna99.

As a gaming platform serving Indonesian players, luna99 processes personal data in accordance with international data protection standards and best practices. We recognize the importance of safeguarding sensitive information such as identity documents (Indonesian KTP), financial details, transaction records, and gameplay activity. This policy outlines your rights regarding your personal data and explains how you can exercise those rights.

By using luna99 services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not register an account or use our services. We may update this policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated via email and prominent notice on our platform.

2. Information We Collect

2.1 Personal Information

When you register a luna99 account, we collect the following personal information:

• Identity Information: Full legal name (as it appears on your Indonesian national identity card), date of birth, place of birth, nationality
• Contact Information: Email address, mobile phone number, residential address, postal code
• Identity Verification Documents: Photographs or scans of your Indonesian KTP, selfie holding your KTP, proof of address documents
• Financial Information: Bank account details (account number, account holder name, bank name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history
• Login Credentials: Username, encrypted password, security questions and answers

2.2 Automatically Collected Information

When you access luna99, we automatically collect certain technical information:

• Device Information: Device type (smartphone, tablet, desktop), operating system, browser type and version, screen resolution
• Connection Information: IP address, internet service provider, approximate geographic location (city and province level)
• Usage Data: Pages visited, features used, time spent on platform, click patterns, session duration, referring website
• Gaming Activity: Games played, bets placed, bet amounts, win/loss records, deposit and withdrawal history, bonus claims and usage

2.3 Communication Records

We retain records of all communications between you and luna99, including:

• Live chat transcripts with customer support
• Email correspondence
• Phone call recordings (if applicable, with notification)
• Support ticket history and resolution notes
• Feedback and survey responses

These records help us improve our service quality, resolve disputes, prevent fraud, and comply with regulatory requirements.

3. How We Use Your Data

luna99 uses your personal information for the following purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Processing deposits and withdrawals
• Verifying your identity (KYC compliance)
• Processing bets and game transactions
• Crediting bonuses and promotional offers
• Providing customer support and responding to inquiries

3.2 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, multiple accounts, and terms violations
• Monitoring unusual betting patterns or suspicious transactions
• Protecting against unauthorized access and cyber attacks
• Enforcing our Terms & Conditions and responsible gaming policies
• Complying with anti-money laundering (AML) regulations

3.3 Platform Improvement and Personalization

• Analyzing user behavior to improve platform features and user experience
• Personalizing game recommendations based on your preferences
• Testing new features and measuring their effectiveness
• Optimizing website performance and mobile responsiveness

3.4 Marketing and Communications

• Sending promotional offers, bonus notifications, and special event announcements
• Informing you about new games, features, and platform updates
• Delivering personalized marketing content based on your gaming preferences
• Sending important account notifications (deposits, withdrawals, security alerts)

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

luna99 shares your personal information with trusted third-party service providers who assist us in operating our platform. These providers are contractually obligated to protect your data and use it only for the specific purposes we authorize:

Service Provider Type	Data Shared	Purpose
Payment Processors	Bank account details, transaction amounts	Processing deposits and withdrawals
Identity Verification Services	KTP documents, personal details	KYC compliance and age verification
Game Providers	Username, bet amounts, gameplay data	Delivering casino games and sports betting
Cloud Hosting Services	All account data (encrypted)	Secure data storage and platform hosting
Customer Support Tools	Contact info, chat transcripts	Providing customer assistance

4.2 Legal Requirements

We may disclose your personal information when required by law or to protect our legal rights:

• In response to valid legal processes (court orders, subpoenas, warrants)
• To comply with regulatory investigations or audits
• To enforce our Terms & Conditions or investigate violations
• To protect the safety and security of luna99, our users, or the public
• To prevent fraud, money laundering, or other illegal activities

4.3 Business Transfers

If luna99 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and/or prominent notice on our platform of any such change in ownership or control of your personal data.

4.4 What We Don't Do

luna99 will never:

• Sell your personal information to third parties for marketing purposes
• Share your data with unauthorized parties
• Use your information for purposes unrelated to providing gaming services
• Disclose your identity or gambling activity to your employer, family, or friends without your explicit consent (except when legally required)

5. Security Measures

luna99 implements industry-leading security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL encryption, the same standard used by major banks
• Data Encryption at Rest: Sensitive data stored in our databases is encrypted using advanced encryption standards (AES-256)
• Secure Password Storage: Passwords are hashed and salted using bcrypt algorithm, making them unreadable even to luna99 employees
• Two-Factor Authentication: Optional 2FA adds an extra layer of security to your account
• Firewall Protection: Multiple firewall layers protect our infrastructure from external threats
• Regular Security Audits: Independent security firms conduct periodic penetration testing and vulnerability assessments

5.2 Operational Security

• Access Controls: Only authorized personnel with legitimate business needs can access personal data
• Employee Training: All staff undergo regular data protection and security awareness training
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements
• Secure Development Practices: Our development team follows secure coding standards to prevent vulnerabilities
• Incident Response Plan: We maintain a comprehensive plan for responding to data breaches or security incidents

5.3 Physical Security

Our data centers and offices implement physical security measures including 24/7 surveillance, access control systems, biometric authentication, and environmental monitoring to prevent unauthorized physical access to servers and data storage systems.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit luna99. They help us recognize your device, remember your preferences, and improve your user experience. We use both session cookies (deleted when you close your browser) and persistent cookies (remain until deleted or expired).

6.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality such as login sessions, security features, and transaction processing. These cannot be disabled without affecting core services.
• Performance Cookies: Collect anonymous information about how you use luna99 to help us identify and fix technical issues and improve performance.
• Functionality Cookies: Remember your preferences (language, display settings, favorite games) to provide a personalized experience.
• Analytics Cookies: Help us understand user behavior, traffic sources, and popular features through anonymized aggregate data.

6.3 Managing Cookies

Most browsers allow you to control cookies through their settings. You can block or delete cookies, but this may affect your ability to use certain luna99 features. To manage cookies:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Edge: Settings > Privacy, search, and services > Cookies and site permissions

7. Your Privacy Rights

As a luna99 user, you have the following rights regarding your personal information:

7.1 Right to Access

You can request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

7.2 Right to Correction

If any personal information we hold is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your account settings or by contacting customer support.

7.3 Right to Deletion

You can request deletion of your personal information, subject to certain legal obligations. Note that we must retain some data for regulatory compliance (e.g., transaction records for 5 years for anti-money laundering purposes).

7.4 Right to Restriction of Processing

You can request that we limit how we process your personal data in certain circumstances, such as while we verify data accuracy or assess whether you have legitimate grounds for deletion.

7.5 Right to Data Portability

You can request your personal data in a portable format that allows you to transfer it to another service provider.

7.6 Right to Object

You can object to certain types of processing, particularly for marketing purposes. We will honor such requests unless we have compelling legitimate grounds to continue processing.

7.7 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with "Privacy Rights Request" in the subject line. Include your account username and specify which right you wish to exercise. We will verify your identity and respond within 30 days.

8. Data Retention and Deletion

8.1 Retention Periods

luna99 retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Active Accounts: Data retained for the duration of account activity plus 5 years after last login
• Closed Accounts: Most data deleted within 30 days of voluntary account closure, except as noted below
• Transaction Records: Retained for 5 years from transaction date (anti-money laundering requirement)
• KYC Documents: Retained for 5 years from account closure (regulatory requirement)
• Communication Records: Retained for 3 years for quality assurance and dispute resolution
• Marketing Opt-Out Records: Retained indefinitely to honor your preferences

8.2 Secure Deletion

When personal information is no longer needed and retention periods have expired, we securely delete or anonymize the data using industry-standard methods that make it unrecoverable.

9. Children's Privacy

luna99 services are strictly for individuals 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If we discover that a user is underage, we will immediately suspend the account, void all bets and bonuses, and delete all personal information associated with that account. Parents or guardians who believe their child has provided information to luna99 should contact us immediately at [email protected].

10. International Data Transfers

luna99 primarily operates within Indonesia, but some of our service providers and data storage facilities may be located outside Indonesia. When we transfer your personal data internationally, we ensure appropriate safeguards are in place through:

• Contracts with service providers that include data protection clauses
• Selection of providers in jurisdictions with adequate data protection laws
• Encryption of data in transit and at rest
• Regular audits of third-party security practices

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact our Data Protection Team:

• Email: [email protected] (Subject: "Privacy Inquiry")
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours
• Escalation: If you are not satisfied with our response, you may escalate to our management team