Privacy Policy — rp6666

rp6666 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses our platform. We operate in a regulated environment and take our obligations with respect to data protection seriously. Our approach to privacy is grounded in principles of transparency, purpose limitation, data minimization, and security.

This policy has been drafted in accordance with internationally recognized data protection standards and reflects the expectations of our Members, the majority of whom are based in Indonesia. We process personal data only to the extent necessary to deliver and improve our services, fulfill our legal and regulatory obligations, and prevent financial crime.

If you have any questions about how we handle your personal data, or if you wish to exercise any of your rights under this policy, please contact our Data Protection team at the details set out in Section 15.

In this Privacy Policy, the following terms have the meanings given below:

rp6666 collects the following categories of personal data from Members and visitors to the platform. We collect only data that is necessary for the purposes set out in this policy.

We collect personal data through the following channels and methods:

• Direct submission: Information you provide when creating your Account, completing KYC verification, submitting deposit or withdrawal requests, or contacting our support team.
• Automated technical collection: Data gathered automatically when you access the rp6666 platform, including IP address, device identifiers, and session data collected via server logs and cookies.
• Payment processors: Transaction confirmation data received from your bank or e-wallet provider (e.g., BCA, BRI, OVO, DANA, GoPay) when you execute a deposit or withdrawal.
• Identity verification providers: Where we use a third-party KYC service to verify your identity documents, that provider may return structured identity data to us following the verification check.
• Game providers: Aggregated session and RTP data received from our licensed game studios (e.g., Pragmatic Play, Evolution Gaming, Spribe) for integrity monitoring and dispute resolution purposes.
• Publicly available sources: In limited circumstances, for fraud prevention or AML purposes, we may cross-reference data you provide against publicly accessible records.

rp6666 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or establishing a separate lawful basis.

1. Account management: To create, maintain, and administer your rp6666 Account, verify your identity and age (21+), and manage your login credentials securely.
2. Service delivery: To provide access to our sportsbook, live casino, slot games, fish shooting, and virtual sports products, and to process all associated bets, deposits, and withdrawals in IDR.
3. Regulatory compliance: To fulfill our obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) regulations, including verifying that Members are at least 21 years of age.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized Account access, bonus abuse, multi-accounting, and other forms of platform misuse.
5. Customer support: To respond to your enquiries, process complaints, and improve the quality of our support service.
6. Responsible gaming: To monitor gameplay patterns for signs of problem gambling, to apply deposit limits, session time-outs, or self-exclusion measures requested by Members, and to adhere to our responsible gaming policy.
7. Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may withdraw consent at any time.
8. Platform improvement: To analyze usage patterns, run A/B tests, and enhance the performance, security, and user experience of the rp6666 platform.
9. Legal proceedings: To establish, exercise, or defend legal claims where necessary.

rp6666 relies on the following legal bases to process your personal data, depending on the specific purpose in each case:

rp6666 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

• Licensed game providers: We share session identifiers and wager data with our certified game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) strictly to the extent needed to deliver game content and resolve disputes. These providers are contractually prohibited from using Member data for any other purpose.
• Payment processors and banking partners: We share transaction data with your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These entities act as independent data controllers for their own payment operations.
• Identity verification services: KYC document data is shared with our accredited identity verification partner solely for the purpose of completing verification checks required by our AML obligations.
• Regulatory and law enforcement authorities: We may disclose Member data to relevant authorities where required by law, court order, or regulatory directive, including for the investigation of suspected financial crime, money laundering, or terrorism financing.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by rp6666 may access personal data in the course of providing their services, subject to strict professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or restructuring of rp6666, personal data held by rp6666 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

rp6666 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Once a retention period has expired, personal data is securely deleted or anonymized in accordance with our internal data governance procedures. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and research purposes.

rp6666 employs a comprehensive, layered security architecture to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our technical and organizational security measures include:

• SSL/TLS encryption: All data transmitted between your device and the rp6666 platform is encrypted using industry-standard TLS 1.3 protocols. Our SSL certificate is continuously monitored and renewed.
• Data encryption at rest: Sensitive personal data and financial records stored on our servers are encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All staff with data access privileges undergo background checks and regular data protection training. Access logs are maintained and audited.
• Firewall and intrusion detection: Our platform is protected by enterprise-grade firewalls and a continuous intrusion detection and prevention system (IDPS) that monitors for anomalous activity in real time.
• Two-factor authentication (2FA): Administrative access to systems containing personal data requires multi-factor authentication as an additional layer of protection.
• Regular security audits: rp6666 commissions periodic third-party penetration tests and vulnerability assessments to proactively identify and remediate security risks.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, rp6666 will notify affected Members without undue delay and take all necessary steps to contain and remediate the breach.

The rp6666 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve your experience, and to support our security and analytics operations. The following categories of cookies are in use:

You may configure your browser to refuse or delete cookies; however, doing so may impair certain functions of the rp6666 platform, including the ability to log in or maintain a game session. rp6666 does not use cookies to serve third-party advertising or to track your activity on other websites.

As a Member of rp6666, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting our Data Protection team at [email protected]. We will respond to all verifiable requests within 30 days.

The rp6666 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. All Account registrations are subject to age verification as part of our KYC process, and any Account where the Member is found to be underage will be immediately suspended.

If rp6666 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, we will take prompt steps to delete that data in its entirety and close the associated Account. Any funds deposited by an underage individual will be returned to the originating payment method after deduction of any amounts wagered, in accordance with our Terms & Conditions.

We strongly encourage parents and guardians in Indonesia to make use of available parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. If you believe a minor has accessed the rp6666 platform, please contact our support team immediately at [email protected].

rp6666 operates a globally distributed technical infrastructure. As a result, your personal data may be processed on servers located outside Indonesia, including in jurisdictions where data protection laws may differ from those applicable in your home country.

Where personal data is transferred to a third country or international organization, rp6666 ensures that an adequate level of protection is maintained through one or more of the following safeguards:

• Use of standard contractual clauses approved by recognized data protection authorities, incorporated into agreements with all relevant third-party processors.
• Transfer only to jurisdictions that have been assessed as providing an adequate level of data protection relative to internationally recognized standards.
• Application of additional technical measures — such as end-to-end encryption — where the adequacy of destination-country protections cannot be fully confirmed.

By registering an Account with rp6666, you acknowledge and consent to the transfer of your personal data in accordance with the safeguards described in this section.

rp6666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or the services we offer. The version date displayed at the top of this document will be updated whenever a revision is made.

Where changes to this policy are material — meaning they significantly affect how we use your personal data or your rights with respect to that data — we will notify active Members via email or a prominent in-platform notification prior to the revised policy taking effect. For minor or clarificatory changes, the updated policy will be posted on this page without separate notification.

Your continued use of the rp6666 platform after the effective date of any revised Privacy Policy constitutes your acceptance of that revision. If you do not agree with a material change, you may close your Account prior to the effective date by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rp6666 handles your personal data, please reach out to our dedicated Data Protection team through the following channels:

• Email: [email protected] — mark your subject line with "Privacy Request" for fastest routing to our Data Protection team. We aim to respond within 24 hours for general enquiries and within 30 days for formal rights requests.
• Live Chat: Available 24/7 directly within the rp6666 platform. Our support agents include Indonesian-speaking staff available at all hours, including during Indonesian public holidays such as Idul Fitri, Ramadhan, and Nyepi.

Our Data Protection Officer (DPO) oversees compliance with this policy and with applicable data protection regulations. The DPO can be reached via the same email address above, clearly addressed to the attention of the Data Protection Officer.