rp666 Privacy Policy

Throughout this Privacy Policy, the following capitalised terms carry the meanings assigned below:

• "rp666", "we", "us", or "our" refers to the operator of the rp666 platform at rp666.pro, an internationally licensed entity.
• "Platform" means the rp666 website, including all features, pages, tools, games, and services available at rp666.pro.
• "Member", "you", or "your" refers to any individual who registers an Account on the Platform or accesses any part of it.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, email address, phone number, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" means Know Your Customer — the identity and age-verification procedures rp666 conducts in line with its anti-money-laundering and responsible gaming obligations.
• "Cookies" means small text files or similar tracking technologies placed on your device when you visit the Platform.
• "Third-Party Processor" means any external organisation that processes Personal Data on rp666's behalf under a written data-processing agreement.

This Privacy Policy sets out how rp666 collects, uses, stores, and protects the Personal Data of Members and visitors to the Platform. It applies to all interactions with rp666.pro, including account registration, deposits and withdrawals, customer support communications, participation in promotions, and general browsing of the Platform.

This policy should be read alongside the rp666 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By creating an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your Personal Data as described herein.

rp666 primarily serves players located in Indonesia. While Indonesian data-protection law (Undang-Undang Pelindungan Data Pribadi — UU PDP) is the principal domestic framework we reference for our Indonesian Members, rp666 operates as an internationally licensed offshore platform and applies data-protection standards consistent with leading international practice.

rp666 collects the following categories of Personal Data:

3.1 Registration & Identity Data

• Full legal name;
• Date of birth (used for 21+ age verification);
• Gender;
• Residential address (city, province — e.g., Jakarta, Surabaya, Bandung, Bali);
• Email address;
• Mobile phone number.

3.2 KYC & Verification Data

• Government-issued photo identity document (National Identity Card / KTP, passport, or driver's licence);
• Proof of address documentation (utility bill, bank statement);
• Selfie or video verification where required by our KYC procedures;
• Payment method ownership evidence (e.g., screenshot of a BCA, BRI, BNI, or Mandiri bank account in your name).

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method details (bank account numbers, OVO / DANA / GoPay / ShopeePay / LinkAja wallet identifiers — we do not store full card numbers);
• Transaction reference numbers and processing records;
• Balance history and wagering activity records.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session duration, pages visited, and clickstream data;
• Game session logs, bet history, and win/loss records;
• Login timestamps and authentication event logs.

3.5 Communications Data

• Live Chat transcripts with our Indonesian-speaking support team;
• Email and WhatsApp message content when you contact support at [email protected] or +62 811 0666 888;
• Responses to surveys, promotions, or feedback requests.

rp666 collects Personal Data through the following methods:

• Directly from you: when you register an Account, complete the KYC process, make a deposit or withdrawal, contact our support team, or participate in a promotion;
• Automatically from your device: through server logs, cookies, and similar tracking technologies when you browse or use the Platform;
• From third-party processors: including identity verification providers, payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), and fraud-prevention services, who may share verification results and transaction data with us under contractual data-processing agreements;
• From public sources: rp666 may cross-reference publicly available databases (e.g., sanctions lists, politically exposed persons registries) as part of its anti-money-laundering due-diligence process.

rp666 processes your Personal Data strictly for the following purposes:

1. Account Management: Creating, maintaining, and operating your rp666 Account, including authentication and session management;
2. Identity & Age Verification: Confirming that you meet the 21+ age requirement and verifying your identity in accordance with our KYC obligations;
3. Payment Processing: Executing IDR deposit and withdrawal transactions via your chosen local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja);
4. Responsible Gaming: Monitoring account activity to identify signs of problem gambling and applying self-exclusion, cooling-off periods, or deposit limits where requested or required;
5. Customer Support: Responding to your enquiries, resolving disputes, and providing assistance through Live Chat, email, and WhatsApp;
6. Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
7. Legal & Regulatory Compliance: Meeting obligations under applicable international licensing conditions and anti-money-laundering frameworks;
8. Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's performance, game selection, and user experience;
9. Marketing Communications: Sending you personalised promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent to receive such communications and have not subsequently opted out.

rp666 processes your Personal Data under one or more of the following legal bases:

• Contractual Necessity: Processing required to enter into and perform the contract between you and rp666, including account registration, payment processing, and the provision of gaming services;
• Legal Obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, KYC requirements, and licensing conditions;
• Legitimate Interests: Processing necessary for rp666's legitimate business interests — specifically fraud prevention, platform security, responsible gaming monitoring, and analytics — provided such interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications and non-essential cookies, which rp666 will only conduct where you have given clear, informed, and freely withdrawable consent.

rp666 does not sell, rent, or trade your Personal Data with third parties for their own marketing purposes. Personal Data may be shared only in the following circumstances:

• Payment Processors: We share the minimum necessary financial and identity data with your chosen payment provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) to execute your deposit and withdrawal instructions;
• KYC & Identity Verification Providers: We share identity documents and personal details with authorised third-party KYC providers solely to verify your eligibility to hold an Account;
• Game Studio Providers: Game providers including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe receive session tokens and anonymised player identifiers to enable game play. These providers do not receive your full name, payment details, or contact information;
• Fraud Prevention & Security Services: We may share data with fraud-detection services and cybersecurity providers to protect the integrity of the Platform and its Members;
• Legal Authorities: rp666 will disclose Personal Data to law-enforcement authorities, regulatory bodies, or courts where required to do so by a lawful order, court order, or mandatory legal obligation;
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of rp666's assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All Third-Party Processors engaged by rp666 are bound by written data-processing agreements that prohibit them from using your Personal Data for any purpose beyond the specific service they are contracted to provide.

rp666 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly — including session management, login authentication, and security features. These cannot be disabled without impairing your ability to use the Platform;
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your experience;
• Analytics Cookies: Collect aggregated, anonymised data about how Members navigate and use the Platform, enabling rp666 to improve performance and content relevance. These are only placed with your consent;
• Marketing Cookies: Used to identify your session in connection with promotional campaigns and to avoid showing you the same promotional message repeatedly. These are only placed with your explicit consent.

You may manage your cookie preferences at any time through your browser settings. Blocking essential cookies will prevent core Platform functionality from operating correctly. Blocking analytics or marketing cookies will not affect your ability to play games, deposit, or withdraw.

rp666 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account & Registration Data: Retained for the full duration of your Account and for a minimum of 5 years following Account closure, in compliance with anti-money-laundering record-keeping obligations;
• KYC & Identity Documents: Retained for a minimum of 5 years after Account closure or the completion of the last transaction, whichever is later;
• Transaction & Financial Records: Retained for a minimum of 5 years from the date of each transaction;
• Customer Support Communications: Retained for 3 years following the closure of the relevant support case;
• Technical & Usage Logs: Retained for up to 12 months, after which logs are anonymised or deleted;
• Marketing Consent Records: Retained for the duration of your Account plus 2 years to evidence consent and opt-out status.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to you.

rp666 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, and destruction:

• SSL / TLS Encryption: All data transmitted between your device and the rp666 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher);
• At-Rest Encryption: Sensitive Personal Data and financial records stored in rp666 databases are encrypted at rest using AES-256 encryption;
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All internal staff with data access privileges undergo background screening and receive regular data-protection training;
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their Accounts. Internal administrative access to production systems requires mandatory 2FA;
• Penetration Testing: The Platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities;
• Incident Response: rp666 maintains a documented data-breach response procedure. In the event of a breach that poses a material risk to Members, affected individuals will be notified without undue delay.

Subject to applicable law and rp666's legal obligations, you have the following rights in relation to your Personal Data:

• Right of Access: You may request a copy of the Personal Data rp666 holds about you. Requests will be fulfilled within 30 days of receipt;
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected. Some data — such as your registered name and date of birth — can only be corrected through formal KYC re-verification;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected and there is no overriding legal obligation requiring us to retain it;
• Right to Restriction: You may request that rp666 restrict the processing of your Personal Data in certain circumstances — for example, while an accuracy dispute is being resolved;
• Right to Data Portability: You may request that certain Personal Data you have provided to rp666 be transferred to you or to another controller in a structured, machine-readable format;
• Right to Object: You may object to the processing of your Personal Data where rp666 relies on legitimate interests as the legal basis. rp666 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team via Live Chat or email at [email protected] (plain text — not a clickable link). rp666 will respond to all data-rights requests within 30 calendar days. For complex or high-volume requests, this period may be extended by a further 30 days, in which case you will be notified.

rp666 is an internationally licensed offshore platform. Your Personal Data may be transferred to, stored in, or processed in countries other than Indonesia, including countries where rp666's servers, KYC providers, game studio providers, or payment processors are located.

Where Personal Data is transferred outside Indonesia, rp666 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses or data-processing agreements that impose equivalent data-protection obligations on the recipient;
• Transfers to countries or entities that have been determined to provide an adequate level of data protection under applicable standards;
• Other legally recognised transfer mechanisms where the above are not applicable.

You may request further information about the specific safeguards in place for any international transfer by contacting our support team.

The rp666 Platform is strictly for adults aged 21 years and over. rp666 does not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not access, register on, or use the Platform in any way.

If rp666 becomes aware that Personal Data has been collected from an individual under the age of 21 — whether through Account registration, KYC review, or any other means — the Account will be suspended immediately, all associated funds will be returned after identity verification, and the Personal Data will be deleted as promptly as possible.

Parents and guardians who believe that a minor in their care has accessed the Platform or provided Personal Data to rp666 should contact our support team immediately at [email protected] (plain text — not a clickable link).

The rp666 Platform does not contain links to external third-party websites for general browsing purposes. Where links to third-party payment providers (e.g., OVO, DANA, GoPay, ShopeePay) or game studio interfaces are presented as part of the service, those third parties operate their own privacy policies and data-processing practices.

rp666 is not responsible for the privacy practices of third-party platforms or services. We encourage you to review the privacy policy of any third-party service you interact with in connection with your rp666 Account, particularly your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet provider.

rp666 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or Platform features. When material changes are made, we will:

• Post a prominent notice on the rp666 Platform homepage;
• Where practicable, send a notification to the email address registered on your Account;
• Update the "Last Revised" date at the top of this page.

Revised terms take effect immediately upon publication unless a specific future effective date is stated. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not accept the revised terms, you must discontinue use of the Platform and contact support to close your Account.

If you have any questions, concerns, or requests regarding this Privacy Policy or rp666's handling of your Personal Data, please reach out through any of the following channels:

• Live Chat: Available 24/7 directly on the rp666 Platform — the fastest method to reach our Indonesian-speaking data support team.
• Email: [email protected] (plain text — not a clickable link). Responses within 4 business hours for general enquiries; within 30 calendar days for formal data-rights requests.
• WhatsApp: +62 811 0666 888 (plain text — not a clickable link). Available 08.00–24.00 WIB daily for general support.

When submitting a formal data-rights request, please include your registered Account username, the nature of your request (e.g., access, rectification, erasure), and any relevant details to help us locate your data promptly. rp666 commits to acknowledging all formal data-rights requests within 3 business days and providing a substantive response within 30 calendar days.