Privacy Policy — net29

net29 ("we", "us", "our") operates the online betting and casino platform accessible at net29.org. As a platform that requires members to create accounts and conduct real-money financial transactions, net29 necessarily collects and processes certain categories of personal data. This Privacy Policy sets out, in plain terms, precisely what data we collect, the purposes for which it is processed, the safeguards we apply to protect it, and the rights available to you as a data subject.

net29 is designed specifically for the Indonesian market, serving members across Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan, Semarang, and beyond. We recognise that Indonesian users share the same fundamental expectations regarding data privacy as users of any international platform — and we hold ourselves to the same rigorous standards as the leading global betting brands on which this platform's privacy practices are modelled.

This Policy applies to all personal data collected through the net29 website, any net29 mobile-optimised interface, customer support channels, and any other net29 service or communication. It does not apply to third-party websites or services that may be linked from within the net29 platform.

net29 collects personal data across several categories, each of which serves a specific and documented processing purpose. We collect only the data necessary for these purposes and do not engage in speculative or disproportionate data collection.

net29 collects personal data through the following channels:

1. Direct Provision: Data you provide during account registration, KYC document submission, payment setup, and any contact with net29 support.
2. Automated Collection: Technical and activity data collected automatically through cookies, server logs, and analytics tools as you use the net29 platform.
3. Third-Party Sources: Identity and fraud-check data received from licensed KYC verification service providers and payment processors, where net29 engages such providers as data processors acting on net29's instructions.
4. Responsible Gaming Monitoring: Behavioural indicators derived from your account activity that our responsible gaming systems use to identify members who may be experiencing gambling-related harm — as described in our Responsible Gaming page.

net29 processes your personal data for the following defined purposes. We do not use your data for any purpose incompatible with those listed below without obtaining your prior consent or having an independent legal basis to do so.

• Account Administration: Creating, maintaining, and managing your net29 account, including authentication and account security.
• KYC and Age Verification: Verifying your identity and confirming that you meet the 21+ age requirement before processing withdrawals or, where required, at other points in the account lifecycle.
• Transaction Processing: Facilitating deposits and withdrawals in IDR via local Indonesian payment methods, including reconciliation and dispute resolution.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct on the platform.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling, enforcing member-set limits and self-exclusion decisions, and supporting members who seek assistance.
• Regulatory Compliance: Meeting obligations under applicable international licensing conditions, anti-money-laundering requirements, and other legal or regulatory frameworks applicable to net29's operations.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of net29's support services.
• Platform Improvement: Using aggregated, anonymised activity data to analyse platform performance, improve product features, and optimise the member experience.
• Marketing Communications: Sending promotional offers, newsletters, and bonus notifications — only where you have provided explicit consent and subject to your right to opt out at any time.

net29 processes personal data only where it has a lawful basis to do so. The primary legal bases applicable to net29's processing activities are:

1. Contractual Necessity: Processing required to enter into or perform the contract between net29 and you — including account creation, payment processing, and bet settlement.
2. Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations under net29's operating licence conditions.
3. Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where net29's legitimate interests are not overridden by your privacy rights.
4. Consent: Processing for direct marketing communications, where your prior, freely given, specific, and informed consent has been obtained. You may withdraw consent for marketing at any time.

net29 does not sell, rent, or trade personal data to third parties. Data is shared only in the following circumstances and only to the minimum extent necessary:

• Payment Processors: Financial data is shared with licensed payment processing partners (including Indonesian bank clearing networks and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja) solely to execute transactions.
• KYC Verification Providers: Identity documents and verification data are shared with licensed KYC service providers acting as data processors under binding contractual terms.
• Game Software Providers: Minimum technical data (e.g., anonymised session identifiers) may be shared with licensed game studios (Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, Spribe, etc.) for game functionality and audit purposes. These providers do not receive identifiable personal data beyond what is required for technical game delivery.
• Fraud Prevention Services: Technical identifiers and transaction data may be shared with licensed fraud detection service providers for anti-fraud and AML screening purposes.
• Legal and Regulatory Authorities: Personal data may be disclosed to law enforcement agencies, regulators, or courts where net29 is required to do so by applicable law, court order, or regulatory direction.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of net29's business, personal data held by net29 may be transferred as part of the transaction, subject to the same privacy protections described in this Policy.

net29 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. Our standard retention periods are as follows:

Where retention beyond these periods is required by law (for example, under anti-money-laundering regulations), net29 will retain data for the full period required and no longer. On expiry of the applicable retention period, personal data is securely deleted or anonymised.

net29 applies a layered approach to personal data security that reflects the sensitivity of the financial and identity data we hold. Our technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the net29 platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive data fields — including identity document data, bank account numbers, and payment credentials — are encrypted at rest in net29's database infrastructure.
• Two-Factor Authentication (2FA): net29 supports and encourages the use of 2FA on all member accounts, adding a second layer of authentication beyond username and password.
• Access Controls: Access to personal data within net29's systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging for all data access events.
• Penetration Testing and Security Audits: The net29 platform undergoes regular independent security assessments including penetration testing to identify and remediate vulnerabilities.
• Incident Response: net29 maintains a documented data breach response procedure. In the event of a breach affecting member personal data, net29 will notify affected members and relevant authorities within the timeframes required by applicable law.

The net29 website uses cookies and similar tracking technologies to deliver and improve platform functionality, maintain session state, and gather aggregated analytics data. The categories of cookies used on net29 are:

1. Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and preference storage. These cookies cannot be disabled without significantly impairing platform functionality.
2. Analytics Cookies: Used to collect aggregated, anonymised information about how members use the platform — including page visit patterns, session durations, and feature usage — to help net29 improve the member experience.
3. Functional Cookies: Used to remember your preferences (such as display settings and language) across sessions so that you do not need to re-configure your experience on each visit.
4. Marketing Cookies: Used, where you have consented, to personalise promotional content displayed within the platform based on your activity history and preferences.

You may manage your cookie preferences through your browser settings. Disabling analytics or marketing cookies will not prevent you from using the core net29 platform but may affect the relevance of promotional content shown to you.

As a member whose personal data is processed by net29, you hold the following rights in relation to that data. To exercise any of these rights, please contact net29 support via live chat or email:

net29 will respond to all verified data rights requests within 30 days of receipt. Requests must be submitted through your authenticated account channel or verified via your registered email address to prevent unauthorised disclosure.

The net29 platform is strictly for adults aged 21 years and above. net29 does not knowingly collect personal data from any person under 21 years of age. Age verification is a mandatory step in the net29 KYC process, and accounts found to have been registered by or on behalf of a minor will be immediately closed.

If net29 becomes aware that personal data belonging to a person under 21 years of age has been collected — whether through fraudulent registration or any other means — that data will be deleted from all net29 systems within 30 days of discovery, and any associated transactions will be reversed in accordance with net29's responsible gaming policy.

net29 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform services. Material changes to this Policy will be communicated to registered members via email to their registered address and/or via a prominent notice on the net29 platform, with a minimum of 14 days' advance notice before the revised Policy takes effect.

Continued use of the net29 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. The date of the most recent revision is indicated at the top of this page. The current version of this Policy is always available at net29.org/privacy-policy.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, wish to withdraw consent for marketing, or need to report a potential data security concern, please contact net29 through any of the following channels:

• Live Chat: Available 24/7 via the net29 platform — fastest route for urgent data security concerns. Average first response under two minutes.
• Email: [email protected] (plain text only — not a clickable link; please type this address into your email client). Include "Privacy Request" in your subject line.
• Response Time: net29 will acknowledge all privacy-related enquiries within 2 business days and will provide a substantive response within 30 days of receipt.
• Language: Privacy enquiries may be submitted in English or Indonesian. Our team will respond in the same language as your enquiry wherever possible.

This Privacy Policy was last reviewed and updated on 1 January 2026. The most current version is always available at net29.org/privacy-policy.