IMPORTANT: This Privacy Policy ("Policy") explains how puma90 ("we," "us," "our") collects, uses, discloses, stores, and protects personal data obtained from users ("you," "your") of our gaming platform. By creating an account, depositing funds, or using any service provided by puma90, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.
1. Data Controller and Contact Information
puma90 is the data controller responsible for processing your personal information. Our platform operates under a gaming license issued by the Government of Curacao and adheres to internationally recognized data protection principles.
For all privacy-related inquiries, data access requests, correction requests, or deletion requests, please contact us:
2. Legal Basis for Data Processing
We process your personal data on the following legal grounds:
- Contractual Necessity: To provide gaming services, process transactions, and fulfill our obligations under the Terms & Conditions you agreed to when creating your account.
- Legal Compliance: To meet regulatory requirements including anti-money laundering (AML) verification, Know Your Customer (KYC) identity checks, age verification (21+ requirement), and financial transaction reporting mandated by gaming regulators and Indonesian law.
- Legitimate Interests: To prevent fraud, detect account abuse, improve service quality, personalize user experience, and communicate relevant promotions (subject to your marketing preferences).
- Consent: For optional marketing communications and cookies/tracking technologies (where required by law).
3. What Personal Data We Collect
puma90 collects various categories of personal data depending on how you interact with our platform. The data we collect includes:
3.1 Account Registration Data
- Full legal name (as it appears on your Indonesian National Identity Card / KTP)
- Date of birth (to verify you are at least 21 years old)
- Residential address (street, city, province, postal code)
- Email address
- Mobile phone number
- Username and encrypted password
- Preferred currency (Indonesian Rupiah / IDR)
3.2 Identity Verification (KYC) Data
- Government-issued ID documents (Indonesian National Identity Card / KTP, passport)
- Selfie photograph holding your ID document
- Proof of address documents (utility bills, bank statements dated within the last 3 months)
- Source of funds documentation (for high-value deposits as part of AML compliance)
3.3 Financial and Transaction Data
- Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI
- E-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs)
- Deposit amounts, withdrawal amounts, and transaction timestamps
- Payment method selection and transaction status
- Account balance history
3.4 Betting and Gaming Activity Data
- Bet placement history (sport, market, stake, odds, outcome)
- Casino game play history (game title, bet amount, result, session duration)
- Lottery (togel) selections and results
- Bonus claims and wagering progress
- Favorite games and betting patterns (used for personalized recommendations)
3.5 Technical and Device Data
- IP address and geolocation data (to verify you are accessing from Indonesia and for fraud prevention)
- Device type, operating system, browser type and version
- Screen resolution and device identifiers
- Referring URLs and pages visited on our platform
- Session timestamps and duration
- Cookies and tracking pixels (see Section 10 for details)
3.6 Communications Data
- Live chat transcripts with customer support
- Email correspondence
- WhatsApp messages (if you contact us via WhatsApp)
- Complaint submissions and dispute records
- Marketing preference selections (opt-in/opt-out status)
4. How We Use Your Personal Data
puma90 uses your personal data for the following purposes:
4.1 Account Management and Service Delivery
- Creating and maintaining your player account
- Authenticating your identity when you log in
- Processing deposits and withdrawals
- Managing your account balance and transaction history
- Providing access to sports betting, casino games, lottery markets, and promotions
- Applying bonus terms and tracking wagering requirements
4.2 Legal and Regulatory Compliance
- Verifying that you are at least 21 years of age (mandatory age restriction)
- Confirming your identity via KYC procedures to prevent identity fraud
- Conducting AML checks and monitoring for suspicious transactions
- Complying with gaming license conditions imposed by the Curacao regulator
- Responding to lawful requests from Indonesian authorities or international regulators
- Maintaining records as required by law (typically 7 years for financial records)
4.3 Security and Fraud Prevention
- Detecting and preventing fraudulent deposits (stolen payment methods, chargebacks)
- Identifying multiple account abuse, collusion, or bot usage
- Monitoring betting patterns for match-fixing or arbitrage exploitation
- Blocking access from prohibited jurisdictions or sanctioned individuals
- Investigating account takeovers or unauthorized access
4.4 Customer Support
- Responding to your questions, complaints, and technical issues
- Troubleshooting payment failures or game errors
- Resolving disputes over bet outcomes or bonus terms
- Providing responsible gaming support and self-exclusion assistance
4.5 Marketing and Personalization (with your consent)
- Sending promotional emails about new bonuses, tournaments, or game releases
- Displaying personalized game recommendations based on your play history
- Tailoring bonus offers to your betting preferences
- Sending SMS or WhatsApp notifications about account activity (e.g., successful withdrawals, bonus expiration reminders)
Note: You can opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account settings, or contacting support. Transactional messages (deposit confirmations, withdrawal approvals, security alerts) cannot be disabled as they are essential to account operation.
4.6 Platform Improvement and Analytics
- Analyzing aggregate user behavior to improve website performance
- A/B testing new features or interface designs
- Identifying popular games and betting markets to optimize content offerings
- Detecting technical issues (slow page loads, broken links, game crashes)
5. Data Sharing and Third-Party Disclosures
puma90 does not sell your personal data to third parties for marketing purposes. However, we may share your data with the following categories of recipients for legitimate business and legal reasons:
5.1 Service Providers and Processors
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
- Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and other licensed software suppliers that power our casino and live dealer games.
- KYC Verification Services: Third-party identity verification platforms that check your documents against government databases and fraud watch lists.
- Cloud Hosting Providers: Secure data centers where our servers and databases are hosted (all using encryption and access controls).
- Customer Support Tools: Live chat software providers, email service providers, and ticketing systems used by our support team.
All service providers are contractually bound to process your data only on our instructions and to maintain appropriate security measures. They are prohibited from using your data for their own purposes.
5.2 Legal and Regulatory Authorities
We may disclose your personal data to government agencies, law enforcement, or regulatory bodies if required by law or if we reasonably believe disclosure is necessary to:
- Comply with a legal obligation, court order, or subpoena
- Investigate suspected money laundering or terrorist financing
- Report match-fixing or sports corruption to relevant authorities
- Protect our legal rights, property, or safety, or that of our users
5.3 Business Transfers
In the event that puma90 undergoes a merger, acquisition, asset sale, or bankruptcy, your personal data may be transferred to the successor entity. You will be notified via email or prominent website notice before your data is transferred and becomes subject to a different privacy policy.
5.4 With Your Consent
We may share your data with other third parties if you explicitly consent to such sharing (e.g., participating in a joint promotion with a partner brand).
6. International Data Transfers
puma90 operates internationally. Your personal data may be transferred to, stored in, and processed by servers and service providers located outside Indonesia, including in countries that may not have data protection laws equivalent to those in Indonesia. When we transfer data internationally, we implement appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by data protection authorities
- Ensuring the recipient country has been deemed to provide adequate data protection
- Binding Corporate Rules for intra-group transfers
- Encryption of data in transit and at rest
7. Data Security Measures
puma90 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:
- Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our databases (passwords, payment details) is encrypted at rest.
- Access Controls: Employee access to personal data is restricted on a need-to-know basis. All staff undergo confidentiality training.
- Two-Factor Authentication (2FA): Available for all player accounts to prevent unauthorized logins.
- Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and monitored for suspicious activity 24/7.
- Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments annually.
- Data Backup and Recovery: Regular backups are maintained in secure, geographically distributed locations to ensure data can be recovered in case of system failure.
Despite our best efforts, no system is 100% secure. If you become aware of any security breach or unauthorized access to your account, you must notify us immediately at [email protected].
8. Data Retention
puma90 retains your personal data for as long as necessary to fulfill the purposes outlined in this Policy, plus any additional period required by law:
| Data Category |
Retention Period |
| Account registration data |
Duration of active account + 7 years after closure |
| KYC documents |
7 years after account closure (AML requirement) |
| Transaction records |
7 years (financial reporting and tax compliance) |
| Betting history |
7 years (regulatory and dispute resolution) |
| Customer support chats |
3 years |
| Marketing consent records |
Until you withdraw consent, then 1 year |
| Technical logs (IP addresses) |
90 days (security and fraud prevention) |
After the retention period expires, personal data is securely deleted or anonymized so it can no longer be associated with you.
9. Your Data Protection Rights
Under applicable data protection laws, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of all personal data we hold about you. We will provide this within 30 days of your request.
Right to Rectification
You can update incorrect or incomplete information via your account settings or by contacting support.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your data, provided we are no longer legally required to retain it. Note: We cannot delete data subject to 7-year regulatory retention requirements.
Right to Restrict Processing
You can request that we temporarily stop processing your data in certain circumstances (e.g., while verifying data accuracy).
Right to Data Portability
You can request a machine-readable copy of your data to transfer to another service provider.
Right to Object
You can object to processing based on legitimate interests (e.g., direct marketing). We will cease processing unless we have compelling legal grounds to continue.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at [email protected] with your full name, registered email, and account username. We may request additional verification to confirm your identity before processing your request.
10. Cookies and Tracking Technologies
puma90 uses cookies (small text files stored on your device) and similar tracking technologies to enhance your experience and collect usage data. The types of cookies we use include:
- Strictly Necessary Cookies: Essential for website functionality, such as maintaining your login session and remembering your language preference. These cannot be disabled.
- Performance Cookies: Collect anonymous data on how users interact with our site (pages visited, time spent, errors encountered) to improve performance.
- Functional Cookies: Remember your preferences (e.g., favorite games, bet slip settings) to personalize your experience.
- Advertising Cookies: Track your browsing behavior to display relevant promotions. Used only with your consent.
You can manage cookie preferences via your browser settings. Note that disabling certain cookies may limit website functionality. For detailed information, see our Cookie Policy (accessible from the footer).
11. Children's Privacy
puma90 strictly prohibits use of our services by individuals under 21 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has created an account, we will immediately suspend the account, void all transactions, and delete associated personal data. Parents or guardians who believe a minor has accessed our platform should contact us immediately at [email protected].
12. Changes to This Privacy Policy
puma90 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email and prominent website notice at least 30 days before taking effect. Your continued use of puma90 after the effective date constitutes acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed.
13. Complaints and Supervisory Authority
If you believe puma90 has not handled your personal data appropriately or has violated your data protection rights, you have the right to lodge a complaint with a supervisory authority. For Indonesian residents, this is the Ministry of Communication and Informatics (Kominfo). You may also contact the Curacao Gaming Control Board, which oversees puma90's gaming license compliance.
Your Privacy Matters
puma90 is committed to protecting your personal data and respecting your privacy rights. We process data transparently, securely, and only for legitimate purposes. If you have any concerns or questions about how we handle your information, our privacy team is here to help.