Your privacy matters to us. This Policy explains exactly what personal data swip9 collects, why we collect it, how we use it, and the rights you hold over your information.
Last Updated: 1 January 2026For the purposes of this Privacy Policy, the following definitions apply:
The Data Controller responsible for your Personal Data in connection with the swip9 Platform is the internationally incorporated legal entity operating swip9 under its gaming licence. All data protection inquiries, subject access requests, and complaints should be directed to our Data Protection contact using the details in Section 15 of this Policy.
Where swip9 engages third-party service providers to process Personal Data on its behalf — for example, payment processors, KYC verification providers, and customer support platforms — those providers act as Data Processors. swip9 ensures that each Data Processor operates under a written data processing agreement that requires them to maintain confidentiality, implement appropriate security measures, and process data only on swip9's documented instructions.
The table below sets out the categories of Personal Data swip9 collects, organised by the stage at which the data is typically gathered.
| Category | Specific Data Points | When Collected |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, mobile phone number, username, password (hashed) | Account registration |
| Identity Verification (KYC) | Government-issued ID number (KTP, SIM, Passport), ID document images, selfie photograph, date of birth confirmation | Before first withdrawal; random spot checks |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts, transaction timestamps | Deposit and withdrawal requests |
| Gaming Activity | Bet history, game session logs, wager amounts, win/loss records, bonus usage, responsible gaming limit settings | Ongoing platform usage |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone setting | Each platform visit |
| Usage Data | Pages visited, features used, click-through paths, session duration, referral source URL | Each platform visit |
| Communications Data | Support chat transcripts, email correspondence, call recordings (where applicable), complaint records | When you contact support |
| Marketing Preferences | Opt-in or opt-out status for promotional emails, SMS, and WhatsApp notifications | Registration and account settings updates |
The majority of Personal Data swip9 holds about you is provided directly by you during account registration, KYC submission, deposit and withdrawal requests, and communications with our support team. You are under no legal obligation to provide this data; however, certain data (registration details, KYC documents, payment information) is necessary for us to provide the Platform's core services, and we cannot deliver those services without it.
When you visit or interact with the Platform, we automatically collect Technical Data and Usage Data through server logs, cookies, web beacons, and similar tracking technologies. This data collection is necessary to operate the Platform securely, detect fraud, and improve user experience. Please see Section 7 for detailed information on cookies and how to manage them.
swip9 may receive Personal Data about you from the following third-party sources:
swip9 processes your Personal Data only where we have a lawful basis to do so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis under internationally recognised data protection principles.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Registration Data | Performance of contract |
| Processing deposits and withdrawals | Financial Data, KYC Data | Performance of contract |
| Identity verification and fraud prevention | KYC Data, Technical Data | Legitimate interest; legal obligation |
| Anti-money laundering (AML) compliance | Financial Data, KYC Data, Gaming Activity | Legal obligation |
| Responsible gaming monitoring | Gaming Activity, Registration Data | Legitimate interest; legal obligation |
| Customer support and complaint handling | Communications Data, Registration Data | Performance of contract; legitimate interest |
| Sending promotional communications | Registration Data, Marketing Preferences | Consent |
| Platform security and abuse prevention | Technical Data, Usage Data, Gaming Activity | Legitimate interest |
| Platform improvement and analytics | Usage Data, Technical Data | Legitimate interest |
| Complying with legal and regulatory obligations | All categories as required | Legal obligation |
swip9 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the circumstances set out below, and only to the extent necessary for the stated purpose.
We engage carefully selected third-party service providers to assist in operating the Platform. These providers act as Data Processors and are contractually bound to process your data only on our instructions and to maintain appropriate security standards. Categories of service providers include:
swip9 may disclose your Personal Data to competent authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or the rules of our gaming licence. This includes disclosures required under anti-money laundering (AML) regulations, counter-terrorism financing obligations, and sanctions compliance requirements. We will notify you of such a disclosure where we are legally permitted to do so.
In the event that swip9 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify registered users by email prior to any such transfer and ensure the receiving entity is bound by data protection obligations at least equivalent to those in this Policy.
swip9 will never sell your Personal Data to data brokers, advertising networks, or any third party for commercial exploitation. This commitment is unconditional and applies regardless of any change in ownership or corporate structure.
swip9 uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate the Platform effectively, personalise your experience, and measure the performance of our services.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security (CSRF protection), load balancing | No — essential to platform operation |
| Functional | Remembering your language preferences, responsible gaming settings, last visited game category | Yes — disabling may reduce personalisation |
| Analytics | Measuring page views, session duration, and navigation paths to improve the platform | Yes — opt out via browser settings |
| Marketing / Affiliate Tracking | Recording referral source for affiliate commission attribution; retargeting (if applicable) | Yes — opt out via browser settings |
You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all or certain categories of cookies, delete existing cookies, and receive alerts when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For guidance on managing cookies in your specific browser, refer to the browser's official help documentation.
swip9 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:
At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised or aggregated data (which cannot identify you) may be retained indefinitely for statistical and research purposes.
swip9 implements a layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:
swip9 operates on an international basis and engages service providers located in multiple jurisdictions. Your Personal Data may therefore be transferred to and processed in countries outside Indonesia. Some of these countries may not have data protection laws equivalent to those that protect you in Indonesia.
Where such transfers occur, swip9 takes appropriate steps to ensure that your data remains protected to the standard described in this Policy. These steps include entering into standard contractual clauses with Data Processors, conducting transfer impact assessments for high-risk jurisdictions, and requiring contractual data protection obligations from all international service providers.
By using the Platform and agreeing to this Policy, you acknowledge that your Personal Data may be transferred internationally as described in this section.
As a Data Subject, you hold the following rights in relation to your Personal Data held by swip9. These rights are not absolute and are subject to applicable exceptions; however, swip9 will always respond to your request within a reasonable timeframe and explain any limitations that apply.
You have the right to request a copy of the Personal Data swip9 holds about you, along with information about how it is being processed. We will provide this information free of charge within 30 days of receiving a valid request.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many data points directly through your Account settings; for data that cannot be self-amended (such as your registered name or date of birth), contact support with supporting documentation.
You may request that we delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interest and we have no overriding grounds to continue. Please note that erasure requests may be limited where retention is required by law (e.g., AML record-keeping obligations).
Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider.
To exercise any of the rights listed above, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing the request and will respond within 30 days. Where a request is complex or we have received a high volume of requests, we may extend the response period by a further 60 days, with prior notice to you.
The swip9 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 21. During account registration, users must confirm their date of birth, and KYC verification is conducted before any withdrawal is processed.
If swip9 becomes aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the relevant account. If you are a parent or guardian and believe that your child has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
The Platform may integrate third-party game content, payment widgets, and support tools that are operated independently of swip9. These third-party services have their own privacy policies and data practices, for which swip9 is not responsible. We encourage you to review the privacy policies of any third-party service providers whose interfaces you interact with while using the Platform.
In particular, the following categories of third-party services may process elements of your Personal Data under their own privacy frameworks:
swip9 carefully vets all third-party integrations and requires contractual data protection commitments from all partners. However, once you interact directly with a third-party interface, you are also subject to that party's own terms and privacy notices.
swip9 reviews this Privacy Policy periodically — at minimum once per calendar year — and updates it whenever our data processing practices change materially or when applicable laws require it. When we make significant changes, we will notify registered users by email at least 7 days before the updated Policy takes effect, and display a prominent notice on the Platform homepage for at least 14 days.
The "Last Updated" date at the top of this page reflects when the most recent revision was made. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgement of the updated Policy. If you disagree with any amendment, you may exercise your right to close your account and request erasure of your Personal Data as described in Section 11.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how swip9 handles your Personal Data, please reach out using the details below:
If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to our licensing authority's supervisory body or to seek independent legal advice. swip9 is committed to resolving all privacy concerns fairly and in accordance with the principles set out in this Policy.
Six concrete practices that demonstrate our commitment to keeping your personal data safe, transparent, and firmly under your control.
Every byte of data exchanged between your device and swip9's servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our systems — including KYC documents and financial account details — is encrypted at rest using AES-256, the gold standard for data security.
Your Personal Data is accessible only to personnel whose role specifically requires it. Role-based access control (RBAC) is enforced across all internal platforms. Administrative access to production systems requires multi-factor authentication and is fully audited.
You hold seven distinct rights over your data — access, rectification, erasure, restriction, portability, objection, and consent withdrawal. swip9 responds to all rights requests within 30 days and provides clear explanations where any limitation applies.
swip9 will never sell, rent, or trade your Personal Data to third parties for their commercial use. This commitment is unconditional. Data is shared only with vetted service providers who process it strictly on our instructions to deliver your gaming experience.
We do not retain your data indefinitely. Clear retention periods — ranging from 12 months for server logs to 5 years for AML-required records — govern every data category. At the end of each retention window, data is securely deleted or irreversibly anonymised.
When this Policy changes in a meaningful way, you will receive advance email notice at least 7 days before the update takes effect — not a silent revision buried in fine print. You always have the option to close your account and request data erasure if you disagree with any change.
Our support team is available around the clock to address any concerns about how your data is handled. You can also review our full Terms & Conditions or visit our FAQ for quick answers.
Read the FAQ Terms & Conditions Back to Home