Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, rp689 (accessible at https://rp689.cam) acts as the data controller responsible for the personal information you provide when registering and using our platform. As data controller, we determine the purposes and means of processing your personal data and are accountable for doing so lawfully and transparently.

Our platform is operated by rp689 under international licensing and primarily serves players based in Indonesia. All references to "we", "us", or "our" throughout this document refer to rp689. Questions about data privacy may be directed to our Data Protection contact at the address provided in Section 13.

2. Data We Collect

We collect personal data only to the extent necessary to provide our Services, comply with legal obligations, and ensure a safe and secure betting environment. The categories of data we collect are described below.

2.1 Data You Provide Directly

• Registration Information: Full legal name, date of birth, email address, phone number, and residential address as entered during account creation.
• Identity Verification (KYC) Documents: Scanned copies or photographs of your Indonesian KTP (national identity card), proof of residential address, and selfie verification photographs submitted to fulfill our age and identity verification obligations.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawal processing via BCA, BRI, BNI, Mandiri, CIMB Niaga, and other local Indonesian banks, as well as e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Communication Records: Records of correspondence with our customer support team via live chat, email, WhatsApp, and in-platform messaging, including content, timestamps, and support ticket history.
• Responsible Gaming Declarations: Information you provide when activating self-exclusion, deposit limits, or interacting with our self-assessment tools.

2.2 Data Collected Automatically

• Technical and Device Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features used, betting history, game session data, time spent on platform, click paths, and session duration.
• Transaction Data: Records of all financial transactions including deposits, withdrawals, bet placements, game wagers, bonus claims, and promotional activity.
• Location Data: Approximate geographic location derived from your IP address, used to comply with jurisdictional access restrictions and deliver location-appropriate content.
• Cookies and Tracking Technologies: Information collected via cookies, web beacons, pixels, and similar technologies as detailed in Section 8.

3. How We Use Your Data

The following table outlines the primary purposes for which we use your personal data:

4. Lawful Basis for Processing

We process your personal data under the following lawful bases, consistent with internationally recognized data protection principles:

• Contract Performance: Processing necessary to fulfill our obligations under the User Agreement (Terms & Conditions), including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) laws, age verification requirements, and licensing conditions under our international gaming license.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming compliance, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional personalization features, where you have given explicit, informed consent. You may withdraw consent at any time without affecting prior processing.

5. Data Sharing and Third Parties

5.1 Service Providers

We share your personal data with carefully vetted third-party service providers who assist in delivering our Services. These include:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC verification services that help us confirm player identity and age compliance.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe receive limited player data necessary to deliver their gaming content.
• Customer Support Platforms: Live chat and helpdesk software providers who process communication data on our behalf.
• Fraud Detection Services: Security firms that analyze behavioral and transactional data to detect fraud and money laundering.
• Cloud Infrastructure: Hosting and cloud computing providers that store and process data on secure servers.

All third-party service providers are bound by contractual data processing agreements that require them to handle your data securely, use it only for specified purposes, and comply with applicable data protection standards.

5.2 Legal Disclosures

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of law if required by applicable law, court order, or as necessary to prevent, investigate, or respond to fraud, illegal activity, or threats to security.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or corporate restructuring, your personal data may be transferred to the acquiring entity. We will notify you of such a transfer and, where applicable, provide an opportunity to withdraw consent or close your account.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are outlined in the table in Section 3.

When your account is closed—whether voluntarily by you or due to a breach of our Terms & Conditions—we will retain certain data for the periods specified above, primarily for legal and AML compliance purposes. Data that is no longer needed is securely deleted or anonymized.

Transaction records and KYC documents are retained for a minimum of seven (7) years from the date of the last transaction, as required by i nternational anti-money laundering standards and our licensing requirements.

7. Security Measures

rp689 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption, the same standard used by major international banks.
• Data Encryption at Rest: Sensitive personal data and financial records stored on our servers are encrypted using industry-standard encryption algorithms.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent required for their specific duties.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for player accounts and enforce it for all internal staff accessing player data systems.
• Regular Security Audits: Our platform undergoes periodic independent security audits, penetration testing, and vulnerability assessments to identify and remediate potential weaknesses.
• Incident Response: We maintain a documented data breach response plan. In the event of a confirmed breach affecting your personal data, we will notify you promptly and take all necessary remedial steps.
• Staff Training: All rp689 employees who handle personal data receive regular training on data protection obligations and security best practices.

8. Cookies and Tracking Technologies

rp689 uses cookies and similar tracking technologies to operate and improve our platform. A cookie is a small text file placed on your device when you visit our Website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences (e.g., language settings, display preferences, last visited game category) to personalize your experience on return visits.
• Analytical Cookies: Collect anonymized or aggregated data about how players use our platform (pages visited, session length, feature engagement) to help us improve performance and usability.
• Security and Fraud-Prevention Cookies: Help us identify suspicious behavior, bot activity, and unauthorized access attempts by recognizing trusted devices and flagging anomalous patterns.

Most web browsers allow you to manage cookie preferences through their settings. You may block or delete cookies, but doing so may affect the functionality of certain platform features. Strictly necessary cookies cannot be disabled without preventing you from using our Services.

We do not use third-party advertising or behavioral retargeting cookies that track your activity across other websites outside rp689.

9. Your Rights

As a player using rp689, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us using the details in Section 13. We will respond to all verified requests within 30 days.

10. Marketing Communications

With your explicit consent at registration or subsequently through your account settings, rp689 may send you marketing communications including:

• Promotional offers, bonuses, and free spins notifications by email or SMS.
• Seasonal campaign announcements aligned with Indonesian holidays such as Idul Fitri, Ramadhan, and Independence Day (17 August).
• Platform updates, new game launches, and feature announcements.
• Personalized recommendations based on your betting history and game preferences.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email.
• Updating your communication preferences in your account settings.
• Contacting our customer support team by live chat or email.

Opting out of marketing does not affect service-related communications (e.g., transaction confirmations, account security alerts, KYC requests), which are necessary for account management and cannot be disabled.

11. Children and Minors

rp689 is strictly an adult platform. Our Services are intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from anyone under the age of 21.

All accounts undergo mandatory age verification through our KYC process. If we discover that personal data has been collected from a person under 21, we will immediately close the relevant account, void all associated bets, and permanently delete the minor's personal data from our systems, except where retention is required by law.

Parents and guardians who believe their child may have accessed rp689 are encouraged to contact us immediately at [email protected] so we can investigate and take appropriate action without delay.

12. Changes to This Privacy Policy

rp689 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent revision is displayed at the top of this page.

When we make material changes to this Privacy Policy, we will notify you by:

• Displaying a prominent notice on our Website for a minimum of 30 days following the update.
• Sending an email notification to the address registered on your account.
• Requesting renewed consent where the changes affect processing activities that rely on your consent.

We encourage you to review this Privacy Policy periodically. Your continued use of rp689 after the effective date of any changes constitutes your acceptance of the revised policy. If you do not agree with the updated terms, you must discontinue use of our Services and may request account closure.

13. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing.
• Live Chat: Available 24/7 from any page on the rp689 Website.
• WhatsApp: +62 812 3456 7890 (available 08:00–24:00 WIB daily).

We aim to acknowledge all privacy-related inquiries within 48 hours and resolve them fully within 30 calendar days. For complex requests, we may request a 30-day extension and will inform you accordingly.

If you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction or to an independent dispute resolution body.

For questions about your account terms and conditions, please refer to our Terms & Conditions. For information on responsible gaming tools and support resources, please visit our Responsible Gaming page.