Privacy Policy — rp66a

Definitions

The following definitions apply throughout this Privacy Policy:

Data Controller

rp66a acts as the Data Controller for all Personal Data collected from Members of the rp66a platform. As Data Controller, rp66a is responsible for ensuring that Personal Data is collected and processed lawfully, fairly, and transparently, and that appropriate technical and organisational measures are in place to protect it.

If you have questions about how rp66a handles your Personal Data, or wish to exercise any of the rights described in Section 11, please contact our Data Protection team using the details in Section 16.

Data We Collect

3.1 Registration Data

When you create an rp66a account, we collect the following information:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

To process withdrawals and comply with anti-money-laundering obligations, we collect:

• Government-issued photo ID (National ID / KTP, passport, or driver's license — front and back)
• Proof of payment method (bank account statement or e-wallet screenshot showing your name)
• Selfie photograph with your ID document, if requested during enhanced verification

3.3 Financial Transaction Data

Every deposit and withdrawal you make generates a transaction record that we retain. This includes:

• Transaction amount (in IDR)
• Payment method used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction timestamp (WIB, UTC+7)
• Transaction reference number issued by the payment provider
• Bank account or e-wallet identifier associated with the transaction

3.4 Betting and Gaming Activity Data

rp66a retains a complete record of your activity on the platform, including:

• Bet placement history — sport, market, odds, stake, and outcome
• Game session data — title, studio, session duration, wager amounts, and results
• Togel draw participation history
• Bonus credits received, wagering progress, and bonus expiry events

3.5 Technical and Device Data

When you access the rp66a platform, our servers automatically log:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session start and end timestamps
• Pages visited and features interacted with
• Referral URL (the page you visited immediately before arriving at rp66a)

3.6 Communications Data

If you contact our support team or submit a formal complaint, we retain records of that correspondence, including live chat transcripts, email threads, and any attachments you provide. This data is used to resolve disputes and improve our service quality.

How We Collect Data

rp66a collects Personal Data through the following means:

• Directly from you — when you register an account, complete KYC, make a deposit or withdrawal, place a bet, or contact support.
• Automatically via the Platform — through server logs, session tracking, and cookies (see Section 8) as you browse and use the site.
• From payment processors — transaction confirmation data returned by local bank transfer systems and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• From identity verification providers — KYC result data (pass/fail, document authenticity flags) returned by our third-party verification partners after you submit your ID documents.
• From fraud detection services — device fingerprint and behavioural risk scores used to detect bot activity, multi-accounting, and suspicious login patterns.

Legal Basis for Processing

rp66a processes your Personal Data on one or more of the following legal bases:

How We Use Your Data

6.1 Account Administration

We use your registration data to create and maintain your rp66a account, verify your identity, enforce the 21+ age restriction, and communicate important account notices — including security alerts, withdrawal confirmations, and Terms & Conditions updates.

6.2 Payment Processing

Financial transaction data is used to credit your Wallet Balance when you deposit via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or any supported e-wallet, and to route withdrawals back to your registered payment method. We retain this data to resolve transaction disputes and to comply with financial record-keeping obligations.

6.3 Regulatory Compliance

KYC and transaction data are used to meet anti-money-laundering (AML) obligations, verify that you are not a Prohibited Person, and respond to lawful information requests from regulatory or law enforcement authorities. Where required, rp66a will disclose data to such bodies without prior notice to you.

6.4 Responsible Gaming

Betting activity and session data are analysed to identify patterns consistent with problem gambling — for example, rapidly escalating deposit amounts, extended unbroken play sessions, or frequent self-exclusion requests followed by new account attempts. Where such patterns are detected, our Responsible Gaming team may proactively reach out to the account holder. Full details of our player protection programme are available on our Responsible Gaming page.

6.5 Fraud Prevention and Platform Security

Technical and device data — including IP addresses, device fingerprints, and behavioural patterns — are used to detect bot activity, multi-accounting, bonus abuse, and unauthorised access attempts. This processing protects both individual Members and the integrity of the platform as a whole.

6.6 Service Improvement

Aggregated, anonymised analytics data is used to improve platform performance, identify popular game categories, optimise the user interface, and plan new features. This data cannot be used to identify individual Members.

6.7 Marketing Communications

With your consent (given at registration or subsequently), we may send you promotional emails or in-platform notifications about bonuses, seasonal promotions (for example, during Ramadhan, Idul Fitri, or Nyepi celebration periods), and new product launches. You may opt out of marketing communications at any time without affecting your access to the platform.

Data Sharing

rp66a does not sell, rent, or trade your Personal Data. We share data only in the following limited circumstances:

7.1 Payment Processors

To execute your deposit and withdrawal instructions, we transmit the minimum necessary data to the relevant bank or e-wallet provider — your registered account name, transaction amount, and bank/wallet reference. This includes transfers handled via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja infrastructure.

7.2 Identity Verification Partners

Your KYC documents are transmitted to our third-party identity verification provider for authenticity checking and fraud screening. These partners are bound by data-processing agreements that prohibit them from using your data for any purpose other than completing the verification task.

7.3 Game Studio Providers

When you launch a game supplied by a third-party studio such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, or Spribe, a session token containing your anonymised player ID and wallet balance is transmitted to that studio's game servers. Your full name, email address, and financial details are never shared with game studios.

7.4 Regulatory and Law Enforcement Bodies

rp66a will disclose Personal Data to governmental, regulatory, or law enforcement bodies where required to do so by applicable law, court order, or formal legal process. Where legally permissible, we will attempt to notify you of such a request before disclosing data.

7.5 Business Transfers

In the event that rp66a or its operating entity undergoes a merger, acquisition, restructuring, or asset sale, Member data may be transferred to the acquiring entity as part of that transaction. You will be notified by email if your data becomes subject to a materially different privacy policy as a result of such a transfer.

Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website to store information about your session and preferences. rp66a uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the platform and understand how Members use it.

8.2 Types of Cookies Used

8.3 Managing Cookies

You may disable non-essential cookies through your browser settings at any time. Please be aware that disabling Strictly Necessary cookies will prevent you from logging into the platform. Most modern browsers (Chrome, Firefox, Safari, Edge) provide cookie management under Settings → Privacy & Security.

Data Retention

rp66a retains Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal obligations. The following retention schedule applies:

Once a retention period expires, Personal Data is securely deleted or permanently anonymised so that it can no longer be linked to an individual Member. Anonymised analytical data may be retained indefinitely for aggregate reporting purposes.

Data Security

rp66a implements a layered security architecture to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. Key measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your device and rp66a servers is encrypted using TLS 1.2 or higher. Look for the padlock icon in your browser's address bar when accessing https://rp66a.cam.
• Encryption at Rest: Sensitive data fields — including passwords (hashed using bcrypt), bank account identifiers, and ID document images — are encrypted at rest in our database using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to rp66a staff and contractors who require it to perform their job function. All access is logged, audited, and governed by a formal data access policy.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. rp66a uses 2FA internally for all staff access to production systems containing Member data.
• Penetration Testing: rp66a conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach affecting Member Personal Data, rp66a will notify affected Members and relevant authorities in accordance with applicable data protection requirements, within a reasonable timeframe after discovery.

Your Rights

As an rp66a Member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our Data Protection team using the details in Section 16. We will respond to all verifiable requests within 30 days.

Note that certain rights are subject to exceptions — for example, we cannot erase data that we are legally required to retain for AML compliance, and we cannot provide portability of data that is already fully anonymised.

Minors

The rp66a platform is strictly intended for adults aged 21 or older. We do not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and additional documentary confirmation is required during KYC.

If rp66a discovers that an account has been registered by an individual under 21 years of age, the account will be immediately suspended, all associated balances will be forfeited, and the KYC data of the minor will be securely deleted from our systems within 30 days of discovery, except where retention is required by applicable law.

If you believe that a minor has created an rp66a account using false information, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

Third-Party Services

The rp66a platform integrates with a number of third-party service providers to deliver its core functionality. Each of these providers operates under its own privacy policy, and rp66a is not responsible for their independent data practices. The categories of third-party services integrated into the platform are:

• Game Studios: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe — game session data is transmitted to these studios' servers when you launch a game.
• Payment Infrastructure: Local bank transfer networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) — transaction data is shared as described in Section 7.1.
• Identity Verification: Third-party KYC document verification providers — ID document images and selfie photographs are transmitted for authenticity checks.
• Fraud Detection: Device fingerprinting and behavioural analytics providers — technical session data is transmitted for real-time risk scoring.
• Analytics: Aggregated, anonymised platform usage data may be processed by analytics infrastructure providers. No personally identifiable data is included in these flows.

All third-party Data Processors engaged by rp66a are required to sign a data-processing agreement that restricts their use of Member data to the specific purpose for which it was shared and mandates appropriate security standards.

International Data Transfers

rp66a's platform infrastructure and some of its third-party service providers operate servers located outside of Indonesia. As a result, your Personal Data may be transferred to and processed in countries other than Indonesia. Where such transfers occur, rp66a ensures that appropriate safeguards are in place, including:

• Data-processing agreements incorporating internationally recognised standard contractual clauses
• Transfers only to service providers that maintain security standards equivalent to or exceeding those described in Section 10
• Regular review of transfer arrangements to ensure ongoing adequacy

By using the rp66a platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section.

Policy Amendments

rp66a reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made — particularly those that affect the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — we will:

• Update the "Last updated" date at the top of this page
• Send a notification to your registered email address at least 7 days before the change takes effect
• Display a prominent notice on the platform dashboard for logged-in Members

Your continued use of the rp66a platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you must cease using the platform and may request account closure via our support team.

Contact & Complaints

To exercise your data rights, ask questions about this Privacy Policy, or raise a formal data protection complaint, please contact rp66a's Data Protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Subject Request — [Your Username]"
• Subject line for complaints: "Data Protection Complaint — [Your Username]"
• Support Hours: 24/7, Western Indonesia Time (WIB, UTC+7)
• Response time: We acknowledge all data requests within 5 business days and aim to resolve them within 30 calendar days.

Our support team includes native Indonesian-speaking agents available around the clock. If you are not satisfied with our response to a data protection complaint, you have the right to escalate the matter to a relevant independent supervisory authority in your jurisdiction.