Introduction & Scope
This Privacy Policy ("Policy") is issued by rp77rp ("the Company", "we", "us", or "our") and applies to all personal data processed in connection with your access to and use of the rp77rp Platform, accessible at https://rp77rp.asia ("the Platform"). It covers data collected from registered Account holders, visitors who browse the Platform without registering, and any individual who communicates with us through our customer support channels.
By accessing the Platform, creating an Account, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy supplements, and should be read alongside, our Terms & Conditions and Responsible Gaming Policy.
Scope: This Policy applies regardless of whether you access the Platform via a desktop browser, mobile browser, or any other interface. It governs all personal data collected through any of these channels in connection with the rp77rp service.
rp77rp primarily serves users based in Indonesia, and this Policy reflects applicable international data protection principles as well as the expectations of Indonesian data subjects under Law No. 27 of 2022 on Personal Data Protection (UU PDP) and related regulations. We are committed to handling your personal data lawfully, fairly, and transparently.
Definitions
For the purposes of this Policy, the following terms shall carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable individual, including name, email address, date of birth, device identifiers, and financial information. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, retention, and deletion. |
| "Data Subject" | The natural person to whom Personal Data relates — in most cases, you as the Account holder or Platform visitor. |
| "Controller" | The Company, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Processor" | A third party that processes Personal Data on behalf of the Company under a contractual arrangement, such as payment processors and identity verification providers. |
| "KYC" | Know Your Customer — the identity and document verification process required to comply with anti-money laundering and age-restriction obligations. |
| "Cookies" | Small text files placed on your device by the Platform to maintain session state, store preferences, and collect aggregated usage analytics. |
Data We Collect
Depending on how you interact with the Platform, rp77rp may collect the following categories of personal data:
| Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (KTP) | Account registration; KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, residential address | Account registration; support enquiries |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit and withdrawal requests; KYC |
| Gaming Data | Wager history, game preferences, session durations, win/loss records | Ongoing Platform use |
| Technical Data | IP address, device type, browser version, operating system, session tokens | All Platform visits |
| Usage Data | Pages visited, features used, click patterns, referral source | All Platform visits (via cookies and server logs) |
| Communications Data | Support chat transcripts, emails, and live chat logs | Customer support interactions |
Sensitive Data: We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health information, or political opinions. If you voluntarily disclose such information through a support channel, it will be treated with the highest level of confidentiality and not used for any processing purpose beyond the resolution of your specific enquiry.
How We Collect Data
rp77rp collects personal data through the following primary channels:
- Direct Submission: Information you provide voluntarily when registering an Account, completing KYC, making a deposit or withdrawal request, or contacting customer support.
- Automated Technologies: Technical and usage data collected automatically when you visit the Platform, including data gathered via cookies, server logs, and similar technologies as described in Section 11.
- Third-Party Service Providers: Identity and address data received from KYC verification partners, fraud detection services, and payment processors as part of account authentication and transaction processing.
- Public Sources: In limited circumstances where required for fraud prevention or regulatory compliance, we may suppleme nt our records with information from publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and other regulatory registries.
We do not purchase personal data from data brokers or marketing list providers. All data collected by rp77rp originates either directly from you or from service providers engaged specifically to support the operation of the Platform.
Purposes of Processing
rp77rp processes your personal data for the following specific, documented purposes:
- Account Management: Creating, maintaining, and administering your rp77rp Account, including authentication, password resets, and account security alerts.
- Identity Verification (KYC): Verifying your age (21+), identity, and place of residence to comply with our licensing conditions and anti-money laundering obligations.
- Payment Processing: Facilitating deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
- Service Delivery: Providing access to sports betting markets — including judi bola (sports wagering), mix parlay (accumulator bets), and togel (Indonesia's traditional numbers lottery) — as well as live casino games, slot gacor (high-RTP slots), and other gaming content on the Platform.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, and other prohibited activities.
- Responsible Gaming: Monitoring betting behaviour to identify potential problem gambling indicators, enforcing self-exclusion requests, and complying with our Responsible Gaming obligations.
- Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes.
- Legal & Regulatory Compliance: Complying with applicable laws, court orders, regulatory directions, and the requirements of our international gaming licence.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and feature development.
- Promotional Communications: Sending you information about bonuses, promotions, and Platform updates, where you have opted in to receive such communications or where we have a legitimate interest in doing so. You may opt out at any time.
Purpose Limitation: rp77rp will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your explicit consent.
Legal Basis for Processing
Every instance of personal data processing carried out by rp77rp rests on one or more of the following lawful bases:
- Contractual Necessity: Processing required to perform the contract between you and rp77rp — including account creation, payment execution, and service delivery — where processing is essential to fulfilling our obligations to you.
- Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering reporting, and age-restriction enforcement.
- Legitimate Interests: Processing carried out in pursuit of the Company's legitimate business interests — such as fraud prevention, Platform security, and service improvement — where those interests are not overridden by your privacy rights and expectations.
- Consent: Processing based on your freely given, specific, and informed consent, most notably for the sending of promotional and marketing communications. You may withdraw consent at any time without prejudice to the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
rp77rp does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:
- Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) receive the financial data necessary to execute your deposit and withdrawal instructions.
- Identity Verification Providers: Specialist KYC and AML compliance vendors receive identity documents and related data to perform verification checks on our behalf. All such vendors are contractually bound to use the data solely for verification purposes.
- Game Content Providers: Third-party gaming studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) may receive your account identifier and session token to facilitate seamless game launch. They do not receive your full identity or payment data.
- IT Infrastructure & Security Providers: Cloud hosting, content delivery, and cybersecurity service providers who support the technical operation of the Platform may process technical and usage data in the course of delivering their services.
- Regulatory Authorities & Law Enforcement: We may disclose personal data to government agencies, regulators, or law enforcement bodies when required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where legally permitted to do so.
- Professional Advisors: Our legal counsel, auditors, and financial advisors may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your personal data may be transferred to the acquiring entity. We will notify you via the email address registered to your Account prior to any such transfer and ensure that the recipient provides equivalent data protection standards.
International Data Transfers
As an internationally licensed online gaming platform, rp77rp may store and process personal data on servers located outside Indonesia. Where personal data is transferred to countries that do not provide an equivalent level of data protection to that afforded under Indonesian law, we implement appropriate safeguards to ensure your data remains protected, including:
- Contractual clauses binding the recipient to apply data protection standards consistent with this Policy;
- Technical security measures, including encryption in transit and at rest;
- Restricting access to personal data to only those personnel and systems that require it for legitimate operational purposes.
By using the Platform, you acknowledge and consent to the transfer of your personal data to servers and processors located in other jurisdictions, subject to the safeguards described above.
Data Retention
rp77rp retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account + 5 years after closure | Legal / regulatory obligation |
| Financial Transaction Data | 7 years from the date of each transaction | AML compliance requirement |
| KYC Documents | 5 years after Account closure or last transaction | AML / licensing obligation |
| Gaming History | 3 years from the date of each session | Responsible Gaming / dispute resolution |
| Support Communications | 3 years from the date of each interaction | Legitimate interest / dispute resolution |
| Technical & Usage Data | 12 months on a rolling basis | Platform security and performance analysis |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and performance analysis purposes.
Security Measures
rp77rp applies a layered set of technical and organisational security controls to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:
- Encryption in Transit: All data transmitted between your device and our servers is protected by TLS 1.2 or higher (256-bit SSL). Plain-text transmission of personal or financial data is not permitted on the Platform under any circumstance.
- Encryption at Rest: Sensitive data fields — including identity documents, bank account numbers, and authentication credentials — are encrypted at the database level using industry-standard symmetric encryption algorithms.
- Access Controls: Access to personal data within our organisation is granted on a strict need-to-know basis and governed by role-based access control (RBAC) policies. Staff members are required to complete data protection training before being granted access to systems containing personal data.
- Intrusion Detection & Monitoring: Our infrastructure is monitored continuously for anomalous activity, including failed login attempts, unusual transaction patterns, and indicators of account takeover.
- Penetration Testing: The Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, conducted by third-party cybersecurity specialists.
- Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights, we will notify affected Account holders via their registered email address within 72 hours of becoming aware of the breach, to the extent technically and legally practicable.
Your Responsibility: While rp77rp takes every reasonable precaution to secure the Platform, the security of your Account also depends on you maintaining a strong, unique password and keeping your login credentials confidential. Notify us immediately at support@rp77rp.asia if you suspect any unauthorised access to your Account.
Cookies & Tracking Technologies
rp77rp uses cookies and similar client-side technologies to ensure the Platform functions correctly and to better understand how it is used. The following cookie categories are in use:
- Strictly Necessary Cookies: Essential for the Platform to operate. These cookies maintain your logged-in session state, store your security tokens, and remember your language and currency preferences. They cannot be disabled without preventing core Platform functionality from working.
- Performance & Analytics Cookies: Collect anonymised, aggregated information about how visitors use the Platform — such as which pages are visited most frequently and where users encounter errors. This data helps us improve the Platform experience. No personally identifiable information is collected via these cookies.
- Functional Cookies: Remember optional settings you have configured, such as notification preferences and display options, so that you do not need to re-enter them on each visit.
rp77rp does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. You may control cookie behaviour through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use core Platform features.
Session Expiry: For your security, authenticated session cookies are configured with a finite expiry period. If your session has been inactive for an extended period, you will be required to log in again to resume Platform use.
Your Data Rights
As a data subject, you are entitled to exercise the following rights in relation to your personal data held by rp77rp. To submit a request, contact us at support@rp77rp.asia with the subject line "Data Rights Request". We will respond within 30 calendar days.
Please note that certain rights are subject to limitations where legal retention obligations apply — for example, we cannot delete transaction records that we are legally required to retain for AML compliance purposes. We will always explain the basis for any limitation on the exercise of your rights.
Children's Privacy
The rp77rp Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we discover that personal data has been submitted by an individual who is under the minimum age, that data will be deleted immediately and the associated Account will be permanently closed.
If you are a parent or guardian and believe that a minor has registered on the Platform without your knowledge, please contact us immediately at support@rp77rp.asia so that we can take prompt remedial action.
Third-Party Links
The Platform may, on occasion, reference or display content associated with third-party game studios or payment providers. rp77rp does not operate or control those third-party services and is not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you interact with independently of the rp77rp Platform.
This Policy applies solely to personal data processed by rp77rp through the Platform. It does not extend to the practices of any third-party service provider beyond the contractual obligations we impose on them as data processors acting on our behalf.
Policy Amendments
rp77rp reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When we make material changes, we will notify registered Account holders via the email address on file at least 7 calendar days before the updated Policy takes effect.
The most current version of this Policy will always be available at rp77rp.asia/privacy-policy, and the "Last Updated" date at the top of this page will be revised accordingly. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the amended terms, you must cease using the Platform and close your Account before the effective date.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the rp77rp Data Protection team through the following channel:
Email: support@rp77rp.asia
Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
Response Time: We aim to acknowledge all privacy-related enquiries within 3 business days and provide a substantive response within 30 calendar days (WIB, UTC+7).
Support Languages: English and Indonesian.
If you are not satisfied with our response to your privacy enquiry or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, this is the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital) in accordance with Law No. 27 of 2022 on Personal Data Protection.
We are committed to resolving all privacy-related concerns promptly, transparently, and in good faith. Your trust in rp77rp depends on us handling your personal data with the care and respect it deserves, and we take that responsibility seriously.