Privacy Policy HMS99 — Your Data Is Safe With Us

1 About This Privacy Policy

This Privacy Policy explains how hms99 ("we", "Platform") collects, uses, stores, and protects the personal information you ("user") provide when using our services — whether through the official hms99 website or app.

We wrote this document in the clearest language possible because we believe you deserve to know exactly what happens with your personal data — not just face a long list of hard-to-read legal clauses. If any section is still unclear, the hms99 support team is ready to explain further.

This policy applies to all users accessing hms99, including guest users who have not yet registered, registered members, and VIP members. The data collected may vary depending on the type of interaction you have with the platform.

2 Data We Collect

Hms99 collects data in two main categories: data you provide directly, and data collected automatically when you use the platform.

Data you provide directly:

• Identity information: your full name, date of birth, email address, and phone number registered when creating your hms99 account.
• Identity verification documents (KYC): a photo of your national ID, driver's license, or passport, required for account verification before your first withdrawal.
• Payment account information: your bank account number or digital wallet number (DANA, OVO, GoPay, ShopeePay) registered for transaction purposes.
• Correspondence with the hms99 customer support team, including chat history, emails, and issue reports you have previously submitted.

Automatically collected data:

• Technical data: IP address, device type, operating system, app or browser version, and unique device identifiers.
• Activity data: pages visited, session duration, games played, betting history, and navigation patterns on the platform.
• Transaction data: a complete history of all deposits and withdrawals, including amounts, methods, timestamps, and transaction status.
• Approximate location data (non-precise): derived from your IP address for security and regulatory compliance purposes.

3 How We Use Your Data

The data we collect is used responsibly for the following purposes, and nothing beyond that:

• Operating and maintaining your account at hms99 — including the login process, profile management, and preference settings.
• Processing financial transactions: deposits, withdrawals, bonus claims, and refunds where applicable.
• Performing identity verification (KYC) to ensure account security and compliance with Anti-Money Laundering (AML) standards.
• Detecting, preventing, and investigating suspicious activity, fraud, or violations of the hms99 Terms & Conditions.
• Providing relevant and effective customer support based on your interaction history with the platform.
• Sending important account-related communications, such as transaction confirmations, policy updates, or security alerts.
• Improving the quality of hms99 services based on aggregated and anonymized analysis of platform usage patterns.
• Sending promotional offers and bonus information — only if you have not opted out of such communications.

4 Sharing Data with Third Parties

Hms99 does not sell, rent, or trade users' personal data to third parties for their commercial purposes. However, under certain circumstances, we may need to share data with the following parties:

• Payment service provider: Banks and digital wallet providers (DANA, OVO, GoPay, ShopeePay) that process your financial transactions. Data shared is limited to what is necessary to complete each transaction.
• Game platform provider: Game providers that supply content on hms99 receive the session data necessary to run games correctly. They are bound by a confidentiality agreement with hms99.
• Legal authority: hms99 will disclose user data if required by law, court order, or a lawful request from an authorized law enforcement agency.
• Technical service provider: Technology partners who help us operate the platform (such as cloud and cybersecurity services) have limited access to the data required for their tasks and are bound by strict confidentiality agreements.

5 Cookies and Tracking Technologies

Hms99 uses cookies and similar tracking technologies to enhance your experience on the platform and ensure session security. The following are the types of cookies we use:

• Essential cookies: Required for the hms99 platform to function properly — including login session cookies, language preferences, and security settings. These cookies cannot be disabled without affecting core platform functionality.
• Analytics cookies: Helping us understand how users interact with the platform in aggregate — which pages are visited most, average session duration, and where users typically exit. This data is fully anonymized.
• Security cookies: Used to detect suspicious activity, prevent unauthorized access, and protect user accounts from cyber threats.

You can manage your cookie preferences through your browser settings. Please be aware that disabling essential cookies may affect your ability to log in and fully use the features of the hms99 platform.

6 Data Security

Hms99 implements comprehensive technical and organizational security measures to protect users' personal data from unauthorized access, alteration, disclosure, or accidental destruction.

• 256-bit SSL encryption for all data communications between your device and hms99 servers.
• Encryption of sensitive data at rest — including identity information and account details.
• A multi-layered firewall system and intrusion detection that monitors all access to the hms99 infrastructure in real time.
• A least-privilege access policy for hms99 staff — only personnel who genuinely require access to specific data are granted that permission.
• Regular security audits and penetration testing to identify and fix vulnerabilities before they can be exploited.
• A clear incident response procedure — in the event of a significant data breach, we will notify affected users as promptly as possible.

7 Data Retention

Hms99 retains users' personal data for as long as necessary to operate the service and fulfill applicable legal obligations. In general, data retention periods are as follows:

• Active account data: retained for as long as your account remains active on the hms99 platform.
• Financial transaction history: retained for a minimum of 5 (five) years after the transaction occurs, in accordance with applicable audit and financial regulatory requirements.
• KYC documents: retained while the account is active and for a minimum of 5 years after account closure.
• Security log data: retained for 2 (two) years for security incident investigation purposes.
• Customer support correspondence: retained for 3 (three) years for service reference and dispute resolution.

Once the designated retention period has passed, data will be permanently deleted or anonymized so that it can no longer be linked to any user's identity.

8 User Rights over Personal Data

As an hms99 user, you have the following rights regarding the personal data we hold:

9 Changes to the Privacy Policy

Hms99 reserves the right to update this Privacy Policy from time to time to reflect changes in business practices, applicable regulations, or security system improvements. Any changes will be handled as follows:

• Material changes will be communicated via notifications on the hms99 platform and/or by email to the address registered to your account, at least seven (7) days before the changes take effect.
• The "Last Updated" date at the top of this page will always reflect the latest version of this policy.
• Continued use of hms99 after the effective date of any changes constitutes your acceptance of the updated policy.
• If you disagree with any changes made, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 8.

10 Contact Us for Privacy Matters

If you have any questions, concerns, or wish to exercise your rights regarding personal data at hms99, we strongly encourage you to contact us.

• Live Chat: Available 24 hours directly via the hms99 website or app — the fastest channel for general inquiries.
• Email: [email protected] — for formal requests regarding data access, correction, or deletion.
• FAQ: Visit the page hms99 FAQ for quick answers to general questions about privacy and account security.

We are committed to responding to all privacy-related inquiries within a maximum of 3 (three) business days. For official data requests (access, correction, deletion), the maximum processing time is 30 business days.