Privacy Policy

For clarity throughout this Privacy Policy, the following terms carry the meanings defined below:

• "Platform" — the rrvip website at rrvip.cam and all associated interfaces, including mobile-optimised views and any API integrations.
• "Personal Data" — any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, date of birth, national identity number, IP address, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the rrvip Platform, the Data Controller is rrvip (details in Section 2).
• "Data Processor" — a third party that processes Personal Data on rrvip's behalf under a data processing agreement, such as payment providers and cloud hosting partners.
• "Player" / "you" / "your" — any individual who has registered an account on the Platform or who is visiting the Platform without a registered account.
• "KYC" — Know Your Customer, the identity and age verification process required under rrvip's operating licence.
• "Cookie" — a small text file placed on your device by the Platform to enable session management, personalisation, and analytics functions.
• "IDR" / "Rp" — Indonesian Rupiah, the primary transaction currency on the Platform.

2.1 rrvip operates the Platform and acts as the Data Controller for all Personal Data collected through rrvip.cam. As Data Controller, rrvip is responsible for ensuring that your Personal Data is processed in accordance with this Privacy Policy and applicable data protection legislation.

2.2 For data protection enquiries, requests to exercise your rights, or to report a concern, you may contact rrvip's data protection team at:

2.3 Please note that the email address above is provided as plain text only and is not a clickable link. Copy the address manually into your email client to initiate contact.

3.1 Registration Data. When you create an account on rrvip, we collect:

• Full legal name;
• Date of birth (for age verification — players must be 21 or older);
• Email address;
• Mobile telephone number;
• Residential address, including city (e.g., Jakarta, Surabaya, Medan, Bandung, Bali) and postal code;
• Chosen username and encrypted password hash.

3.2 KYC & Identity Verification Data. To comply with our international operating licence obligations, we collect:

• Government-issued photo identification — Indonesian National Identity Card (KTP), passport, or SIM;
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days);
• Selfie photograph with ID document;
• Source-of-funds documentation for high-value withdrawal requests (above Rp 50.000.000).

3.3 Financial Data. When you make deposits or withdrawals, we collect:

• Bank account details for transfers via BCA, BRI, BNI, Mandiri, or CIMB Niaga;
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja;
• Transaction amounts, timestamps, and reference numbers;
• Running account balance history.

3.4 Betting & Gaming Activity Data. We maintain records of:

• All Wagers placed — sport, event, market, odds, stake, and outcome;
• Casino, lottery (togel — Indonesia's traditional numbers lottery), and crash-game session data;
• Bonus credits claimed and wagering progress;
• VIP tier status and loyalty point accumulation.

3.5 Technical & Device Data. Automatically collected when you use the Platform:

• IP address and inferred geolocation;
• Device type, operating system, and browser version;
• Session duration, page navigation paths, and feature interaction logs;
• Cookie identifiers and local storage data (see Section 9).

3.6 Communications Data. If you contact our support team, we retain:

• The content of your emails, live chat transcripts, and support ticket exchanges;
• The date, time, and outcome of each interaction;
• Any attachments you submit (e.g., screenshots, documents).

rrvip collects your Personal Data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, initiate a financial transaction, or contact the support team;
• Automatically: through server logs, cookies, session tracking, and analytics tools as you navigate the Platform;
• From third-party payment providers: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment partners share transaction confirmation data with us to reconcile your account balance;
• From identity verification partners: rrvip uses licensed third-party KYC service providers to cross-reference identity documents against public and proprietary databases for fraud prevention;
• From fraud prevention services: device fingerprinting, IP reputation databases, and behavioural analytics tools that help us detect and prevent account fraud, bonus abuse, and money laundering.

rrvip processes your Personal Data on one or more of the following legal grounds:

6.1 Account Operations. We use your registration and financial data to create and maintain your account, authenticate your identity at login, process deposits and withdrawals in IDR via your chosen local bank or e-wallet, and manage your VIP tier and bonus entitlements.

6.2 Compliance. rrvip operates under an international gaming licence that requires us to verify the identity and age of every player. We use your KYC data to confirm that you are at least 21 years of age and that you are not a resident of a Restricted Territory. We also use transaction data and behavioural patterns to monitor for money laundering indicators in line with our AML programme.

6.3 Fraud Prevention. Device fingerprints, IP addresses, and behavioural analytics are used to detect duplicate accounts, bonus abuse, and other forms of fraudulent activity. Where fraud is confirmed, we may share relevant data with law enforcement or regulatory bodies.

6.4 Customer Support. Support ticket content and communication history are used to resolve your queries efficiently, maintain a record of disputes, and continuously improve the quality of our support service.

6.5 Responsible Gaming. We monitor your betting and deposit patterns to identify indicators of problem gambling. If our systems flag your account, we may proactively reach out with responsible gaming resources or, where required by our licence, implement protective restrictions. Full details are set out in our Responsible Gaming policy at /responsible-gaming.

6.6 Marketing Communications. If you have opted in to receive marketing communications, we will send you information about promotions, new games, and seasonal offers by email or SMS. You may withdraw your consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect the legality of processing that occurred prior to withdrawal.

6.7 Platform Improvement. Anonymised and aggregated usage data — such as which game categories receive the most traffic or which deposit methods are most popular among players in Jakarta and Surabaya — is used to improve the Platform's features, layout, and product offering.

7.1 rrvip does not sell your Personal Data. We share your data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the financial account details necessary to execute your deposit or withdrawal transactions.
• KYC & Identity Verification Partners: Licensed third-party identity verification services receive copies of your identity documents to conduct automated and manual document checks.
• Fraud Prevention Services: Device and behavioural data may be shared with specialist fraud analytics platforms that help us detect and prevent account abuse.
• Game Studios: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, or Pocket Games Soft, limited session data (stake amounts, game outcomes) is exchanged with those studios for game integrity and RTP auditing purposes.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or a competent regulatory authority, rrvip will disclose Personal Data to the relevant body. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event that rrvip undergoes a merger, acquisition, or sale of substantially all of its assets, your Personal Data may be transferred to the acquiring entity. We will notify you in advance of any such transfer and of any resulting changes to this Privacy Policy.

7.2 All third-party Data Processors are required to enter into a formal data processing agreement with rrvip that obligates them to process your data only as instructed, to maintain appropriate security standards, and to delete or return data upon termination of the agreement.

8.1 rrvip's servers and some of our Data Processors are located outside of Indonesia. As a result, your Personal Data may be transferred to, stored in, and processed in jurisdictions that have different data protection laws from those applicable in Indonesia.

8.2 Where such transfers occur, rrvip takes appropriate steps to ensure that your Personal Data continues to receive a level of protection consistent with this Privacy Policy. These steps include:

• Entering into standard contractual data transfer clauses with the receiving entity;
• Transferring data only to jurisdictions recognised as providing an adequate level of data protection;
• Applying technical safeguards — including encryption in transit and at rest — irrespective of where data is stored.

8.3 If you would like more information about the specific safeguards rrvip applies to international data transfers, please contact us at [email protected].

9.1 What Are Cookies. Cookies are small text files stored on your device by your web browser when you visit a website. They allow the Platform to recognise your device on subsequent visits and to remember your preferences and session state.

9.2 Types of Cookies Used. rrvip uses the following categories of cookies:

9.3 Managing Cookies. You may configure your browser to refuse, delete, or alert you to cookies. Note that disabling strictly necessary or fraud prevention cookies will significantly impair Platform functionality and may prevent you from logging in or placing bets. Browser-specific instructions for managing cookies are available in your browser's help documentation.

9.4 No Third-Party Advertising Cookies. rrvip does not deploy third-party advertising or retargeting cookies. We do not participate in programmatic advertising networks that track your browsing behaviour across unrelated websites.

10.1 rrvip retains your Personal Data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by our operating licence and applicable law. The following retention periods apply as a general guide:

10.2 Following the expiry of the applicable retention period, your Personal Data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to you as an individual.

10.3 Where you have requested account closure, we may retain limited data for the minimum period required by law even after the account has been deactivated. We will not use this residual data for any commercial purpose.

11.1 Subject to applicable law and certain conditions, you hold the following rights in relation to your Personal Data held by rrvip:

• Right of Access: You may request a copy of all Personal Data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request correction. You may update certain details — such as your email address or mobile number — directly from within your Account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right does not apply to data we are legally obliged to retain (e.g., AML transaction records).
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will cease processing immediately with no requirement to demonstrate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

11.2 Exercising Your Rights. To exercise any of the rights listed above, please send a written request to [email protected] with the subject line "Data Rights Request — [your registered email address]". We may need to verify your identity before processing your request. We will respond within 30 days; complex requests may require up to 60 days, in which case we will notify you of the extension within the initial 30-day period.

12.1 rrvip implements a layered security architecture designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our key technical and organisational measures include:

• Transport Layer Security (TLS 1.3): all data in transit between your browser and the Platform is encrypted;
• AES-256 Encryption at Rest: sensitive fields stored in our databases — including passwords, payment details, and identity document images — are encrypted;
• Two-Factor Authentication (2FA): available and strongly recommended for all Player accounts;
• Role-Based Access Controls: rrvip staff access to Personal Data is restricted to those with a demonstrated need, and all access is logged and audited;
• Regular Penetration Testing: independent security specialists conduct scheduled and ad-hoc penetration tests against the Platform;
• ISO 27001-Certified Infrastructure: our primary hosting environment is certified to the internationally recognised information security management standard.

12.2 Data Breach Response. In the event of a confirmed Personal Data breach that is likely to result in risk to your rights and freedoms, rrvip will notify affected Players without undue delay — and in any event within 72 hours of becoming aware of the breach — by email to your registered address. We will describe the nature of the breach, the data involved, the likely consequences, and the measures we have taken or propose to take to address it.

13.1 The rrvip Platform is strictly restricted to persons aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Our KYC process is designed specifically to verify that each account holder meets this minimum age requirement before they are permitted to place any Wager or withdraw any funds.

13.2 If we become aware that Personal Data has been collected from an individual who is under 21 years of age, we will immediately close the associated account, return any legitimate deposits to the originating payment method, void any bonus-derived winnings, and securely delete the relevant Personal Data from our systems.

13.3 If you believe that a minor may have registered on the Platform or that a minor in your household has gained access to gambling content, please contact us immediately at [email protected]. We will investigate and act promptly. We also strongly encourage the use of third-party parental control and filtering software to prevent underage access.

14.1 The rrvip Platform may contain references to or integrations with third-party services — such as game studios (Pragmatic Play, Evolution Gaming, Spribe), payment providers (BCA, OVO, GoPay), and sports data providers. Each of these third parties operates under its own privacy policy, which rrvip does not control.

14.2 rrvip is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policy of each third party whose services you use in connection with your rrvip account.

14.3 rrvip does not include outbound links to unrelated external websites within the Platform. All links within the Platform point to internal pages or to recognised payment and game-provider interfaces integral to Platform functionality.

15.1 rrvip reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operating licence requirements, or applicable law. The revised policy will be published on the Platform with an updated effective date at the top of the document.

15.2 Where changes are material — for example, if we introduce a new purpose for processing your data or change the categories of third parties with whom we share your data — we will notify you by email to your registered address at least 14 days before the changes take effect.

15.3 Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not accept the revised terms, you may request account closure under the Terms & Conditions at /terms-conditions.

16.1 For any questions, concerns, or requests relating to this Privacy Policy or the way rrvip handles your Personal Data, please contact our data protection team using the details below:

16.2 If you are not satisfied with rrvip's response to a data protection concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction or to the licensing body that oversees rrvip's international operating licence.

16.3 rrvip takes all privacy complaints seriously. We maintain a formal internal complaints procedure and will keep you informed of progress throughout the investigation. Where a complaint reveals a genuine data protection failing on our part, we will take prompt remedial action and update our practices to prevent recurrence.

16.4 Please note that all contact details on this page are displayed as plain text only and are not clickable links. Copy any email address manually into your email client to initiate contact with our team.