rp888 Privacy Policy

rp888 ("rp888", "We", "Us", "Our") operates the online betting and casino platform accessible at rp888.games and associated domains. rp888 is the data controller responsible for the personal data of registered players and visitors to the rp888 platform.

This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by rp888 in connection with your use of the platform, including your account registration, deposits and withdrawals, betting and gaming activity, customer support interactions, and your use of any rp888 promotional features.

This Privacy Policy should be read alongside our Terms and Conditions, which govern your use of the rp888 platform. Where terms used in this Privacy Policy are defined in the Terms and Conditions, those definitions apply here unless otherwise stated.

rp888 is committed to processing your personal data in accordance with applicable data protection principles — including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We collect only what we need, retain it only as long as necessary, and protect it with appropriate technical and organisational measures at all times.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

rp888 collects the following categories of personal data in the course of operating its platform:

3.1 Identity & Contact Data

• Full legal name (as on a government-issued identity document);
• Date of birth (for age verification — 21+ requirement);
• Email address;
• Indonesian mobile telephone number;
• Residential address (collected at enhanced KYC stage).

3.2 Identity Verification (KYC) Documents

• Copies of government-issued identity documents (e.g., KTP — Indonesian National Identity Card — or passport);
• Selfie photographs or video verification images submitted for liveness checks;
• Proof of address documents where required for enhanced verification;
• Source of funds documentation where required by our AML compliance procedures.

3.3 Financial Data

• Bank account details (bank name, account number, account holder name) for Indonesian bank transfers — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata;
• E-wallet account details (GoPay, OVO, DANA, ShopeePay, LinkAja) — account identifiers only; rp888 does not store e-wallet credentials or passwords;
• Transaction history — deposit amounts, withdrawal amounts, dates, and method used;
• Betting and gaming history — wagers placed, outcomes, winnings, and losses.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type;
• Session duration, pages visited, features accessed, and click-stream data;
• Login timestamps and login location history;
• Error logs and performance data collected for platform stability monitoring.

3.5 Communications Data

• Records of live chat, WhatsApp, and email communications with the rp888 support team;
• Feedback, complaints, and dispute submissions;
• Survey responses and promotional opt-in preferences.

rp888 collects personal data through the following channels:

• Directly from you: when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or participate in a promotion;
• Automatically: through cookies, server logs, and analytics tools when you access or use the rp888 platform — including pages you visit, actions you take, and the device and network you use;
• From third-party KYC and AML service providers: who process identity verification checks on our behalf and return verification results to rp888;
• From payment processors: who confirm the status and details of deposit and withdrawal transactions processed through Indonesian banks and e-wallets;
• From fraud detection and security monitoring services: who flag suspicious activity patterns associated with your device or IP address.

rp888 processes your personal data for the following specific purposes:

rp888 does not use your personal data for automated decision-making that produces significant legal effects on you, without human review being available. Where automated tools are used to flag accounts for security or AML review, a trained compliance team member reviews all flagged cases before any material action is taken.

rp888 processes personal data on the following legal bases:

• Contractual necessity: processing required to perform our contract with you — including account registration, payment processing, delivering betting and gaming services, and handling support requests;
• Legal obligation: processing required to comply with applicable AML regulations, KYC obligations, responsible gaming requirements, and any lawful requests from regulatory or law enforcement authorities;
• Legitimate interests: processing for fraud prevention, platform security, analytics, and service improvement — balanced against your rights, and subject to your ability to object in appropriate cases;
• Consent: processing for optional activities such as direct marketing communications and non-essential cookies — where rp888 relies on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

rp888 shares personal data only in the following circumstances, and only to the extent necessary for the stated purpose:

7.1 Service Providers and Data Processors

rp888 engages third-party service providers who process data strictly on our instructions and are contractually bound to maintain appropriate data protection standards. These include:

• KYC and identity verification providers — to conduct age and identity checks required by our responsible gaming and AML obligations;
• Payment processors — Indonesian bank transfer infrastructure providers and e-wallet operators (GoPay, OVO, DANA, ShopeePay, LinkAja) to facilitate deposits and withdrawals;
• Game content providers — Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Spribe, and others who require certain transaction and session data to serve game content and settle results;
• Fraud detection and cybersecurity services — to identify and prevent suspicious account activity, multi-accounting, and financial crime;
• Cloud hosting and infrastructure providers — who store and process platform data on servers subject to appropriate security controls.

7.2 Regulatory and Legal Disclosure

rp888 may be required to disclose personal data to regulatory bodies, law enforcement agencies, tax authorities, or courts when required by applicable law or in response to a lawful request. rp888 will, where legally permissible, notify you of such a request before disclosure.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving rp888, personal data held by rp888 may be transferred to the relevant acquiring or successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer via your registered email address before your data is transferred to a new controller.

rp888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Where personal data is no longer required for any of the above purposes and there is no legal obligation to retain it, rp888 will securely delete or anonymise it without undue delay.

rp888 implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal data from unauthorised access, loss, alteration, or disclosure. Specific measures in place include:

• SSL/TLS encryption for all data transmitted between your device and the rp888 platform;
• Encryption at rest for sensitive data categories including KYC documents and financial records stored on rp888 servers;
• Password hashing using industry-standard one-way hashing algorithms — rp888 staff cannot read your password;
• Two-factor authentication (2FA) available to all Players and enforced for internal staff access to systems containing personal data;
• Access controls — strict role-based access so that only personnel with a documented business need can access specific categories of personal data;
• Regular security assessments and penetration testing of the rp888 platform infrastructure;
• Incident response procedures — in the event of a data breach, rp888 will assess the scope and impact, take immediate containment steps, and notify affected Players where required by applicable data protection obligations.

rp888 uses cookies and similar technologies (local storage, session tokens) to operate, secure, and improve the platform. The categories of cookies rp888 uses are as follows:

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to place bets or access your rp888 Account, but may affect personalisation features and the accuracy of our platform analytics.

As a Data Subject, you hold the following rights in respect of your personal data held by rp888. These rights are subject to applicable legal limitations — in particular, data subject to a legal retention obligation (such as KYC and AML records) cannot be erased before the applicable retention period has expired:

• Right of access: you may request a copy of all personal data rp888 holds about you, along with information about how it is used;
• Right to rectification: you may request correction of inaccurate or incomplete personal data — for example, a name spelling error or an outdated contact number;
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention obligations;
• Right to restriction: you may request that rp888 restrict processing of your data in certain circumstances — for example, while a complaint is being investigated;
• Right to data portability: you may request a copy of the personal data you provided to rp888 in a structured, commonly used, machine-readable format;
• Right to object: you may object to processing based on rp888's legitimate interests, and to any direct marketing processing at any time without restriction;
• Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact rp888 using the contact details set out in Clause 15. rp888 will acknowledge your request within 5 business days and will respond substantively within 30 days. In cases of complexity, this period may be extended by a further 30 days with notice.

The rp888 platform is designed exclusively for adults aged 21 and over. Age verification is a mandatory step before any deposit can be processed. Where rp888 discovers — or has reasonable grounds to suspect — that personal data belonging to a person under 21 has been collected, that data will be deleted and the associated Account will be closed immediately. Any balance held in such an Account will be returned to the originating payment method after identity confirmation.

If you are a parent or guardian and believe a minor has registered on rp888, please contact our support team immediately at [email protected] so that the matter can be investigated and resolved promptly.

The rp888 platform embeds third-party game content from licensed providers including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and others. When you launch a game, your session data is transmitted to the relevant provider to enable game functionality and result settlement. These providers operate under their own privacy and data processing agreements, and rp888 takes reasonable contractual steps to ensure they maintain appropriate data protection standards.

rp888 is not responsible for the privacy practices of third-party platforms, payment services, or websites that may be linked to or from the rp888 platform — except where rp888 has entered into a data processing agreement with that party. We encourage you to review the privacy policies of any third-party service you interact with independently of rp888.

rp888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, rp888 will notify registered Players via email to the address on their Account and will update the "Last Updated" date at the top of this page.

Your continued use of the rp888 platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of the updated Policy. If you have material objections to the amended Policy, you should cease using the platform and close your Account. Account closure requests can be submitted via the rp888 support team.

For any privacy-related questions, data subject requests, or concerns regarding how rp888 processes your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line so that your message is routed to the correct team;
• Live Chat: available through the rp888 platform, 08:00–24:00 WIB daily;
• WhatsApp: available 24/7 — contact details provided within your rp888 Account dashboard.

When submitting a data subject request by email, please include your registered username, the email address associated with your Account, and a clear description of the right you wish to exercise. rp888 may ask you to verify your identity before processing a data subject request, to ensure that data is not disclosed to an unauthorised party.