Privacy Policy

1. Definitions

The following terms are used throughout this Privacy Policy:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, email address, phone number, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means rp99k7, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of rp99k7 under written instruction.
• "User," "You," or "Player" refers to any individual who creates an account on the rp99k7 platform or otherwise interacts with our services.
• "Platform" means the rp99k7 website at https://rp99k7.cam, its sub-pages, and any associated mobile or desktop applications.
• "Cookies" means small text files placed on your device by the Platform for functionality, analytics, and personalization purposes.
• "KYC" (Know Your Customer) means the identity verification process we are legally obligated to carry out under applicable anti-money laundering (AML) regulations.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, verify your identity, make a deposit or withdrawal, or contact our support team, rp99k7 may collect the following categories of Personal Data:

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical data through Cookies, log files, and similar technologies:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution.
• Usage Data: Pages visited, session duration, click paths, search queries within the Platform, game history, bet history, and wagering patterns.
• Location Data: Approximate geographic location derived from your IP address (country and region level; we do not collect GPS coordinates).
• Session Identifiers: Unique identifiers assigned to your browsing session for security and personalization purposes.

3. How We Collect Your Data

rp99k7 collects Personal Data through the following channels:

• Direct interactions: Data you submit through our registration form, account settings, deposit and withdrawal pages, or when communicating with our support team.
• Automated technologies: Cookies, web beacons, pixel tags, and server-side log files that record your interactions with the Platform.
• Third-party sources: Identity verification partners, payment processors, fraud-prevention services, and publicly available sources such as sanctions lists or politically exposed persons (PEP) databases, where required by AML obligations.
• Our business partners: Game providers (e.g., Pragmatic Play, Evolution Gaming, PG Soft) may share aggregated gameplay event data with us for account management and dispute resolution.

4. Purposes of Processing

We use your Personal Data only for the purposes listed below. We do not use your data for purposes incompatible with those for which it was originally collected.

5. Legal Basis for Processing

rp99k7 processes your Personal Data on one or more of the following legal grounds, depending on the specific activity involved:

• Contractual Necessity: Processing required to perform our contractual obligations to you under our Terms & Conditions, including account management, payments, and dispute resolution.
• Legal Obligation: Processing necessary to comply with applicable laws, including KYC identity verification, AML screening, and regulatory reporting obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights.
• Consent: For optional processing activities such as direct marketing communications, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing and Disclosure of Personal Data

rp99k7 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share data only in the circumstances described below, and only to the extent necessary for the stated purpose:

6.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process data strictly on our behalf and under written data processing agreements:

• Payment processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay) to facilitate financial transactions.
• Identity verification providers: Third-party KYC services that verify the authenticity of identity documents.
• Game content providers: Platforms such as Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, and Spribe may receive limited gameplay identifiers to deliver game content and resolve disputes.
• Fraud and risk management services: Providers that assist in detecting suspicious activity, multi-accounting, and bonus abuse.
• IT infrastructure and hosting providers: Cloud and data-centre providers that host our Platform with appropriate security controls.

6.2 Legal and Regulatory Disclosures

We may disclose Personal Data when required to do so by applicable law, court order, or regulatory authority. This includes cooperation with Indonesian financial authorities, law enforcement agencies, and our international licensing regulator in cases involving fraud, money laundering, or underage gambling.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of our assets, Personal Data held by rp99k7 may be transferred to the successor entity. We will notify affected users via email or a prominent notice on the Platform prior to such a transfer and will ensure that appropriate privacy protections remain in place.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most brow sers allow you to refuse all cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will impair core Platform functionality, including your ability to log in and place wagers. Analytical and marketing cookies may be disabled without affecting your access to the Platform. For detailed instructions on managing cookies in your specific browser, please consult your browser's help documentation.

8. Data Retention

rp99k7 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in line with AML and regulatory record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction to comply with Indonesian financial regulations and international AML standards.
• KYC verification documents: Retained for the duration of your account and for 5 years after closure. Copies are stored in encrypted form and accessed only by authorised compliance personnel.
• Customer support communications: Retained for 2 years from the date of last interaction to enable dispute resolution and service quality monitoring.
• Cookies and technical log data: Retained for periods ranging from the end of a browser session to 24 months, depending on the cookie type as described in Section 7.
• Marketing consent records: Retained for the duration of your consent plus 1 year following withdrawal of consent, to demonstrate compliance.

When Personal Data is no longer required, we securely delete or anonymise it in accordance with industry best practices. Anonymised or aggregated data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

rp99k7 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same bank-grade protocol used by Indonesia's leading financial institutions.
• Encrypted Data Storage: Sensitive Personal Data — including KTP numbers, bank account details, and KYC documents — is stored in encrypted form at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised rp99k7 personnel on a strict need-to-know basis. All internal access is logged and audited regularly.
• Two-Factor Authentication (2FA): Available to all users to add an additional layer of protection to account logins and withdrawal requests.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration tests performed by independent cybersecurity firms.
• Fraud Monitoring Systems: Automated systems monitor transactions and login activity in real time to detect and block suspicious behaviour before it affects your account.
• Staff Training: All rp99k7 employees who handle Personal Data receive mandatory training on data protection obligations and security protocols.

Despite our best efforts, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, rp99k7 will notify affected users and relevant authorities in accordance with applicable data breach notification requirements.

10. Your Rights and Choices

Subject to applicable law, you hold the following rights with respect to your Personal Data held by rp99k7. To exercise any of these rights, please contact our support team at [email protected]. We will respond to verified requests within 30 days.

10.1 Right of Access

You have the right to request a copy of the Personal Data we hold about you, together with information about how it is used and with whom it has been shared.

10.2 Right to Rectification

If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. You may update basic account information directly through your account settings at any time.

10.3 Right to Erasure

In certain circumstances, you may request that we delete your Personal Data. Please note that this right is subject to overriding legal obligations — for example, we are required to retain KYC and financial transaction records for a minimum of 5 years and cannot erase them on request during that period.

10.4 Right to Restrict Processing

You may request that we temporarily suspend the processing of your Personal Data — for example, while you contest the accuracy of data we hold or while a complaint is being investigated.

10.5 Right to Object

You have the right to object to the processing of your Personal Data where we rely on legitimate interests as our legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.

10.6 Right to Withdraw Consent

Where processing is based on your consent (e.g., receiving promotional communications), you may withdraw that consent at any time by clicking the unsubscribe link in any marketing email, updating your notification preferences in your account settings, or contacting our support team directly.

11. Protection of Minors

The rp99k7 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires users to confirm their age, and our KYC procedures verify date of birth through official identity documents such as the Indonesian KTP. If we discover that Personal Data has been submitted by a person under 21, we will immediately suspend the associated account, void any transactions, and permanently delete all related data. If you believe a minor has registered an account on our platform, please notify us immediately at [email protected] so that we can take prompt action.

12. International Data Transfers

rp99k7 operates internationally, and your Personal Data may be transferred to, stored in, or processed in countries outside Indonesia where our servers, partners, or service providers are located. Whenever Personal Data is transferred internationally, we ensure that appropriate safeguards are in place to protect it to a standard equivalent to what you would expect under Indonesian data protection principles. These safeguards include contractual data processing agreements with all recipients, use of recognised security frameworks, and limiting transfers to jurisdictions with adequate data protection standards. By using the rp99k7 platform, you acknowledge and consent to such international transfers as described in this policy.

13. Changes to This Privacy Policy

rp99k7 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where appropriate, by sending an email to your registered address at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect when the most recent revision was published. We encourage you to review this policy periodically. Your continued use of the rp99k7 platform following the effective date of any revision constitutes your acceptance of the updated terms.

14. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rp99k7 handles your Personal Data, please reach out to us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through your account dashboard
• WhatsApp Support: Indonesian and English-speaking agents available during business hours (09:00–21:00 WIB)

We take all privacy-related inquiries seriously and aim to respond within 5 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.