Privacy Policy

1. Introduction

This Privacy Policy describes how rp8com ("we", "us", "our", or the "Company") collects, uses, stores, protects, and discloses personal information from users ("you", "your", or "User") of our online gaming platform accessible at https://rp8com.cam (the "Platform"). We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws and industry best practices.

By creating an account on rp8com, accessing the Platform, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any provision of this Privacy Policy, you must immediately cease using the Platform and refrain from creating an account.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy. We recommend reviewing all these documents to fully understand your rights and our obligations regarding your personal information.

2. Data Controller Information

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is the entity operating rp8com. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection requirements.

If you have questions about how we handle your personal data or wish to exercise any of your privacy rights, please contact our Data Protection Officer using the contact information provided in Section 14 of this Privacy Policy.

3. Information We Collect

rp8com collects various types of personal information necessary to provide our Services, comply with legal obligations, and improve user experience. The categories of information we collect include:

3.1 Information You Provide Directly

• Registration Information: When you create an account, we collect your full name, date of birth, residential address, email address, mobile phone number, and chosen username and password.
• Identity Verification Documents: To comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations, we collect copies of your Indonesian National Identity Card (KTP), proof of address documents, and selfie photographs for identity verification purposes.
• Payment Information: We collect payment method details including bank account numbers, e-wallet account identifiers, and transaction history when you deposit or withdraw funds. Note that we do not store complete credit card numbers or sensitive authentication data.
• Communications: When you contact customer support via live chat, email, or phone, we collect the content of your communications, including any attachments or supporting documents you provide.
• Preferences and Settings: We collect information about your account preferences, deposit limits, responsible gaming settings, communication preferences, and other customization choices.

3.2 Information Collected Automatically

• Device Information: We automatically collect information about the device you use to access the Platform, including device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: We collect information about how you interact with the Platform, including pages visited, games played, bets placed, bet amounts, winnings and losses, session duration, click patterns, and navigation paths.
• Location Data: We collect geolocation information to verify that you are physically located within Indonesia when accessing the Platform, as required by our licensing terms and local regulations. This may include IP address, GPS coordinates (if you grant permission), and Wi-Fi access point information.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing behavior, preferences, and session management. See Section 10 for detailed information about our cookie practices.

3.3 Information from Third Parties

• Payment Processors: We receive transaction confirmation, payment status, and fraud detection information from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: We may use third-party identity verification services to validate the authenticity of documents you submit and to screen against government watchlists and databases.
• Game Providers: When you play casino games or slot games, we receive game session data, results, and random number generator (RNG) logs from our third-party game providers.

4. How We Use Your Information

rp8com uses your personal information for the following purposes:

4.1 Service Provision

• Creating, maintaining, and managing your Account
• Processing deposits, withdrawals, and other financial transactions
• Enabling you to place bets and play games on the Platform
• Calculating and paying out winnings
• Providing customer support and responding to inquiries
• Personalizing your gaming experience based on your preferences and history

4.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement)
• Complying with Know Your Customer (KYC) and anti-money laundering (AML) obligations
• Detecting and preventing fraud, money laundering, and other illegal activities
• Responding to legal requests, court orders, and government inquiries
• Maintaining records required by applicable laws and regulations
• Enforcing our Terms and Conditions and other policies

4.3 Responsible Gaming

• Monitoring gaming behavior for signs of problem gambling
• Implementing and enforcing deposit limits, time-outs, and self-exclusion requests
• Providing reality checks and responsible gaming reminders
• Offering support resources to users who may be experiencing gambling-related harm

4.4 Security and Platform Integrity

• Protecting against security threats, cyberattacks, and unauthorized access
• Detecting and preventing collusion, cheating, and other forms of advantage play
• Identifying and blocking multiple accounts created by the same individual
• Monitoring for technical errors, bugs, and system vulnerabilities

4.5 Marketing and Communications

• Sending promotional offers, bonuses, and updates about new features (only with your consent)
• Communicating important account notifications and service updates
• Conducting surveys and gathering feedback to improve our Services
• Analyzing user preferences to develop targeted marketing campaigns

4.6 Analytics and Improvement

• Analyzing usage patterns and trends to improve Platform functionality
• Conducting research and statistical analysis to enhance user experience
• Testing new features and optimizing existing Services
• Measuring the effectiveness of marketing campaigns

5. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., providing gaming services as described in our Terms and Conditions). This includes account management, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including KYC/AML requirements, age verification, tax reporting, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests or those of third parties, including fraud prevention, security protection, Platform improvement, and marketing (where not overridden by your fundamental rights and freedoms).
• Consent: For certain processing activities, such as optional marketing communications and non-essential cookies, we obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Information Sharing and Disclosure

rp8com does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

6.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: Indonesian banks and e-wallet providers to process deposits and withdrawals
• Identity Verification Providers: Specialized services that verify the authenticity of identity documents
• Game Providers: Suppliers of casino games, live dealer games, and slot content
• Cloud Hosting Providers: Infrastructure and data storage services
• Customer Support Tools: Live chat platforms and ticketing systems
• Analytics Services: Website and user behavior analysis tools
• Email Service Providers: Platforms used to send transactional and promotional emails

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

6.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, courts, and regulatory bodies when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Investigate and prevent fraud, money laundering, or other criminal activities
• Protect the rights, property, or safety of rp8com, our users, or the public
• Respond to claims that content on the Platform violates third-party rights

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

6.4 Affiliated Entities

We may share information with affiliated companies within our corporate group for internal administrative purposes, fraud prevention, and service improvement, subject to the same privacy protections described in this Policy.

7. Data Security Measures

rp8com takes data security seriously and implements comprehensive technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is protected using industry-standard SSL/TLS encryption (minimum 256-bit). Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on the principle of least privilege. All employees and contractors with access to personal data are bound by confidentiality obligations.
• Authentication: We use strong password requirements and recommend enabling two-factor authentication (2FA) for additional account security.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security monitoring to detect and respond to threats.
• Secure Data Centers: Personal data is stored in secure, professionally managed data centers with physical access controls, redundancy, and disaster recovery capabilities.
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential weaknesses.
• Incident Response: We maintain an incident response plan to address data breaches and security incidents promptly and effectively.

While we implement robust security measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your data using industry best practices.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal and regulatory requirements. Specific retention periods vary depending on the type of information and the purpose for which it was collected:

• Active Account Data: While your account remains active, we retain all account information, transaction history, and gaming records to provide ongoing Services.
• Closed Account Data: After voluntary account closure, we retain essential records for a minimum of 5 years to comply with financial regulations, AML requirements, and potential legal claims. Non-essential data may be deleted sooner.
• KYC/AML Documents: Identity verification documents are retained for a minimum of 5 years after the last transaction or account closure, as required by anti-money laundering regulations.
• Transaction Records: Financial transaction records are retained for a minimum of 7 years to comply with tax and financial reporting obligations.
• Communications: Customer support communications are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Data: If you have consented to marketing communications but later opt out, we retain your contact information on a suppression list to ensure we do not contact you again.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data retention and destruction policies.

9. Your Privacy Rights

As a user of rp8com, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible.

9.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update certain information directly through your account settings or by contacting customer support.

9.3 Right to Erasure

In certain circumstances, you have the right to request deletion of your personal information. However, this right is subject to limitations, particularly where we are legally required to retain data (e.g., for AML compliance, tax purposes, or dispute resolution).

9.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal information in certain situations, such as while we verify the accuracy of data you have contested or while we assess whether our legitimate interests override your objection to processing.

9.5 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing communications, we will immediately cease such communications while retaining your contact information on a suppression list.

9.6 Right to Data Portability

Where technically feasible, you have the right to receive your personal information in a portable format and to request that we transmit it directly to another data controller.

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time. This will not affect the lawfulness of processing conducted before withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have not handled your personal information in accordance with applicable data protection laws, you have the right to lodge a complaint with a supervisory authority in your jurisdiction.

To exercise any of these rights, please contact us using the information provided in Section 14. We will respond to your request within 30 days. In some cases, we may request additional information to verify your identity before processing your request.

10. Cookies and Tracking Technologies

rp8com uses cookies and similar tracking technologies to enhance user experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device when you visit our Platform.

10.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for Platform functionality, including session management, authentication, and security. These cannot be disabled.
• Performance Cookies: Collect information about how users interact with the Platform, including page views, navigation paths, and error messages. This helps us improve Platform performance.
• Functionality Cookies: Remember your preferences and settings, such as language selection and display options, to provide a personalized experience.
• Analytics Cookies: Help us understand user behavior, traffic sources, and content effectiveness. We use this data to optimize the Platform and improve Services.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and promotional content. These cookies may be set by third-party advertising networks.

10.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain Platform features. Disabling analytics or marketing cookies will not affect core functionality.

10.3 Third-Party Cookies

Some cookies are placed by third-party service providers, including analytics platforms and advertising networks. These third parties have their own privacy policies governing cookie use. We recommend reviewing these policies to understand how third parties collect and use your information.

11. International Data Transfers

While rp8com primarily serves users in Indonesia, some of our service providers and data processing infrastructure may be located outside Indonesia. When we transfer personal information internationally, we ensure appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent data protection standards
• Certification under recognized data protection frameworks
• Binding corporate rules for intra-group transfers

By using rp8com Services, you consent to the transfer of your information outside Indonesia under the safeguards described above.

12. Protection of Minors

rp8com is strictly intended for users who are 21 years of age or older. We do not knowingly collect personal information from individuals under 21. Our age verification processes are designed to prevent minors from creating accounts.

If we become aware that we have inadvertently collected personal information from someone under 21, we will immediately delete that information and permanently close the associated account. Any deposits from underage individuals will be refunded, and winnings will be forfeited.

Parents and guardians are encouraged to monitor their children's internet usage. If you believe a minor has created an account on rp8com, please contact us immediately at [email protected].

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Material changes will be communicated through prominent notice on the Platform or via email to registered users.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (mark correspondence "Privacy Inquiry" for priority handling)
• Data Protection Officer: Available via email for privacy-specific inquiries
• Live Chat: Available 24/7 on the Platform for general inquiries

We are committed to responding to all privacy-related inquiries within 30 days. For urgent security matters, please use live chat for immediate assistance.