Privacy Policy

In this Privacy Policy, the following terms carry the meanings assigned to them below unless the context expressly requires otherwise:

• "rp66c", "we", "us", "our" — the rp66c platform, its operating entity, and its authorised data-processing representatives.
• "Platform" — the rp66c website at https://rp66c.net and any associated mobile interfaces or software applications provided by rp66c.
• "Player", "you", "your" — any individual who visits, registers an account with, or uses the services available on the Platform.
• "Personal Data" — any information that, alone or in combination with other data, can identify a natural person. This includes but is not limited to: full name, date of birth, national identity number (NIK on KTP), email address, mobile phone number, bank account details, e-wallet identifiers, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, alteration, and deletion.
• "KYC" — Know Your Customer; the identity and age-verification process rp66c performs before processing withdrawal requests and as an ongoing anti-money-laundering measure.
• "Third Party" — any entity other than you and rp66c, including but not limited to payment processors, game studios, KYC verification providers, analytics platforms, and fraud-prevention services.
• "Cookies" — small text files placed on your device by the Platform to support session management, preference storage, and analytics.

This Privacy Policy applies to all Personal Data collected by rp66c in connection with the operation of the Platform, regardless of whether you are a registered Account holder or a casual visitor who has not yet completed registration.

This Policy covers data collected through:

• Direct interactions with the Platform, including registration forms, deposit and withdrawal flows, customer support conversations, and in-game activity.
• Automated technologies, including cookies, web beacons, server logs, and similar tracking mechanisms embedded in the Platform.
• Third-party sources, including KYC verification providers, payment processors, and fraud-prevention databases where rp66c receives data about you in order to verify your identity or protect the integrity of the Platform.

This Policy does not apply to third-party websites, services, or applications that may be accessible via links displayed on the Platform. rp66c has no control over the data practices of those third parties, and you should review their own privacy policies independently before providing any personal information to them.

rp66c collects Personal Data across several categories depending on the nature of your interaction with the Platform. The table below summarises what we collect and why.

3.1 Sensitive Data

rp66c does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data used for identification purposes) beyond what is inherent in the identity documents submitted during KYC. Identity document images are processed solely for age and identity verification and are not used for any other purpose.

3.2 Data You Provide Voluntarily

In addition to the categories above, you may choose to provide additional information when contacting our support team or completing player surveys. Such data is used only for the purpose for which it was provided and is not retained beyond the resolution of the relevant interaction, unless required for regulatory audit purposes.

rp66c uses your Personal Data for the following purposes. Each use is tied to a specific legal basis described in Section 5.

• Account Management: Creating, maintaining, and administering your rp66c Account, including processing registration, verifying login credentials, and managing Account security settings such as two-factor authentication.
• Service Delivery: Processing deposits and withdrawals in Indonesian Rupiah (IDR) via local bank channels and e-wallets; calculating and crediting bonus balances; settling winning bets; and delivering all other gaming and betting services available on the Platform.
• Identity & Age Verification (KYC): Confirming that you are at least 21 years of age and are who you claim to be, in compliance with rp66c's responsible gaming obligations and anti-money-laundering (AML) policy.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, unauthorised access, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: Retaining transaction records, KYC documents, and audit logs as required by applicable regulations and rp66c's international licensing obligations.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of your interactions with our support team for quality-assurance purposes.
• Platform Improvement: Analysing aggregated and anonymised behavioural data to improve the user experience, optimise game performance, and develop new features on the Platform.
• Marketing Communications: Sending you promotional emails, SMS messages, and in-Platform notifications about bonuses, seasonal promotions (e.g., Idul Fitri specials, Ramadhan cashback offers, Independence Day tournaments), and new game releases — subject to your having opted in and your right to opt out at any time.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling and, where appropriate, proactively offering responsible gaming tools such as deposit limits, cool-down periods, and self-exclusion in accordance with our Responsible Gaming Policy.

rp66c processes your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and rp66c, including creating your Account, processing transactions, and delivering gaming services. Without this processing, rp66c cannot provide you with the Platform's core services.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, age-verification requirements, and data-retention obligations imposed by rp66c's licensing authority.
• Legitimate Interests: Processing carried out in the pursuit of rp66c's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of data for marketing communications, where you have given explicit, freely-given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

rp66c does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Service Providers

We engage trusted third-party service providers to support the operation of the Platform. These providers act as data processors under rp66c's instructions and are contractually prohibited from using your data for their own purposes. Categories of service providers include:

• Payment processors — including the Indonesian bank transfer networks supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata, as well as e-wallet operators OVO, DANA, GoPay, ShopeePay, and LinkAja.
• KYC and identity verification providers — third-party platforms that validate the authenticity of KTP, passport, and bank statement documents.
• Game content studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These studios receive anonymised session identifiers to deliver game content and return results; they do not receive your full name, national ID, or financial details.
• Fraud prevention and AML screening services — platforms that cross-reference transaction patterns against known fraud indicators and regulatory watchlists.
• Customer support software providers — the live-chat platform used to deliver 24/7 support to rp66c players.
• Analytics platforms — aggregated, anonymised data only; no individual player identities are shared with analytics providers.

6.2 Legal & Regulatory Disclosure

rp66c may disclose your Personal Data to competent governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by a valid court order, statutory obligation, or licensing requirement. rp66c will, where legally permissible, notify you of such a disclosure request before complying.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of rp66c's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change in the data controller's identity or privacy practices before the transfer takes effect.

6.4 Aggregate & Anonymised Data

rp66c may share aggregated, de-identified statistical data (for example, total monthly active players, average deposit values by region, or popular game categories) with business partners, investors, and the public. Such data cannot be used to identify any individual player and is not subject to the restrictions in this section.

rp66c uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience on the Platform. The following categories of cookies are in use:

7.1 Managing Cookies

You can manage or delete cookies at any time through your browser settings. Please note that disabling cookies beyond the functional category may affect the performance of certain Platform features. For detailed instructions on managing cookies in your specific browser (Chrome, Firefox, Safari, Samsung Internet), consult your browser's official help documentation.

7.2 Web Beacons & Pixel Tags

Some pages and HTML emails from rp66c may contain web beacons — small transparent image files that record whether an email has been opened or a specific page has been viewed. This data is used solely to measure the effectiveness of marketing campaigns and to improve the relevance of offers sent to you. Web beacons in emails can be blocked by disabling HTML rendering in your email client.

rp66c retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following retention periods apply:

• Account and identity data (KYC documents): Retained for the lifetime of your Account plus a minimum of 5 years following Account closure, in compliance with AML record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of each transaction, as required for financial audit and regulatory reporting purposes.
• Customer support communications: Retained for 2 years from the date of the last interaction, or longer if the interaction relates to an unresolved dispute or compliance investigation.
• Marketing consent records: Retained for the duration of your Account plus 1 year following Account closure, as evidence of the basis on which marketing communications were sent.
• Technical and server-log data: Retained for 90 days on active servers; archived logs may be retained for up to 12 months for security incident investigation purposes.
• Anonymised and aggregated analytics data: Retained indefinitely, as this data cannot be used to identify any individual.

When your data is no longer required under the above schedules, it is securely deleted from rp66c's systems using methods that prevent recovery. Physical document copies, if any, are destroyed by certified data-destruction processes.

As a player whose Personal Data is processed by rp66c, you hold the following rights. To exercise any of these rights, contact rp66c's support team via live chat or at [email protected]. rp66c will respond to all verified requests within 14 calendar days.

• Right of Access: You may request a copy of all Personal Data rp66c holds about you, together with information about how it is used, who it is shared with, and how long it will be retained.
• Right to Rectification: If any Personal Data rp66c holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. Note that this right is subject to rp66c's legal obligation to retain certain records (KYC documents, transaction logs) for the minimum periods described in Section 8.
• Right to Restriction of Processing: You may request that rp66c limit the processing of your Personal Data in specified circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing carried out on the basis of rp66c's legitimate interests, including profiling for responsible-gaming monitoring or for fraud prevention, unless rp66c can demonstrate compelling legitimate grounds for continuing the processing.
• Right to Withdraw Consent: Where processing is based solely on your consent (primarily marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

rp66c's Platform and Services are strictly intended for adults aged 21 years and above. rp66c does not knowingly collect, store, or process Personal Data from any person under the age of 21.

If rp66c becomes aware that Personal Data has been collected from a person under 21, it will take the following immediate steps:

• Suspend and close the Account associated with that individual without notice.
• Return any net deposits to the originating payment method, after deducting any sums required to satisfy legal obligations.
• Permanently and securely delete all Personal Data associated with the underage Account from rp66c's active systems, retaining only the minimum records required to satisfy AML and audit obligations.
• Forfeit any winnings credited to the Account.

If you are a parent or guardian and believe that a person under 21 in your care has registered with rp66c, please contact our support team immediately via live chat or email. We treat such reports with the highest priority and will act within 24 hours of receiving a verified report.

rp66c implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our key technical and organisational security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and rp66c's servers is encrypted using TLS 1.3 with 256-bit AES encryption, the same standard used by major international financial institutions.
• At-Rest Encryption: Sensitive data fields, including financial account numbers and KYC document images, are encrypted at rest using AES-256 encryption with keys stored in a hardware security module (HSM).
• Access Controls: Access to production systems containing Personal Data is restricted to a small number of authorised personnel, enforced via multi-factor authentication and role-based access control (RBAC). All access is logged and reviewed.
• Password Hashing: Player passwords are never stored in plain text. They are hashed using bcrypt with a work factor calibrated to current hardware performance, making brute-force recovery computationally infeasible.
• Intrusion Detection: rp66c's infrastructure is monitored 24/7 by automated intrusion-detection systems (IDS) that generate alerts for anomalous access patterns, unusual data-export volumes, and known attack signatures.
• Vulnerability Management: rp66c conducts periodic penetration testing of the Platform and its supporting infrastructure, remedying identified vulnerabilities according to a risk-tiered remediation schedule.
• Staff Training: All rp66c personnel with access to Personal Data receive data-security and privacy training at onboarding and on a regular refresher schedule.

11.1 Data Breach Response

In the event of a Personal Data breach that poses a risk to your rights and freedoms, rp66c will notify you without undue delay and in any event within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate volume of data involved, the likely consequences, and the measures rp66c has taken or proposes to take to address the breach.

Despite these measures, no system connected to the internet can be guaranteed absolutely secure. You are encouraged to use a strong, unique password for your rp66c Account and to enable two-factor authentication (2FA) in your Account security settings.

rp66c operates globally, and some of the third-party service providers it engages (for example, game studios such as Evolution Gaming or Pragmatic Play, or KYC verification platforms) may process your Personal Data on servers located outside Indonesia.

Where Personal Data is transferred to a jurisdiction that does not provide a level of data protection equivalent to applicable Indonesian standards, rp66c ensures that appropriate safeguards are in place before the transfer takes place. Such safeguards may include:

• Contractual clauses in Data Processing Agreements that bind the recipient to data-protection standards equivalent to those applicable in Indonesia.
• Transfers to recipients in jurisdictions recognised as providing adequate data protection by virtue of their domestic legal frameworks or bilateral agreements.
• Binding corporate rules where applicable to group-level data transfers.

You may request further information about the specific safeguards in place for any particular international transfer by contacting rp66c at [email protected].

The Platform may from time to time display references to third-party services, game providers, or informational resources. rp66c does not control the content or data practices of any third-party website or service, and this Privacy Policy does not apply to any website or service outside the rp66c Platform.

rp66c strongly recommends that you review the privacy policy of any third-party service before providing it with any of your personal information. rp66c accepts no responsibility or liability for the privacy practices or content of any third-party website, even where a link to that website was accessed from within the rp66c Platform.

rp66c reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data-processing practices, or the services available on the Platform. The "Last Updated" date at the top of this document will be revised each time the Policy is amended.

Where an amendment materially affects your rights or the way rp66c processes your Personal Data, we will notify you by email to the address registered on your Account and by displaying a prominent notice on the Platform for a minimum of 14 days before the amended Policy takes effect. Your continued use of the Platform after the effective date of an amended Policy constitutes your acknowledgement of the changes. If you do not agree with an amended Policy, you should close your Account and cease using the Platform before the amendment takes effect.

Previous versions of this Privacy Policy are available on request by contacting our support team. rp66c retains archived versions for a minimum of 5 years from the date they were superseded.

If you have any questions, concerns, or requests relating to this Privacy Policy or to rp66c's processing of your Personal Data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the rp66c Platform. This is the fastest way to reach our support team for urgent privacy matters.
• Email: [email protected] — responses within 2–6 hours (WIB, UTC+7). For privacy-related requests, please include "Privacy Request" in the subject line and provide your registered email address and Account username to help us process your request efficiently.

rp66c is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data-protection authority in your jurisdiction.