rrp55 Privacy Policy

rrp55 ("we", "us", "our") operates the online casino and sportsbook platform accessible at https://rrp55.net (the "Platform"). We are committed to protecting the personal data of every individual who visits, registers on, or otherwise interacts with the Platform.

This Privacy Policy ("Policy") explains in clear terms what personal data rrp55 collects, the lawful bases on which we process it, how it is stored and protected, with whom it may be shared, and the rights you hold as a data subject. It applies to all Members and visitors of the Platform, including Indonesian players who access rrp55 from Jakarta, Surabaya, Bandung, Bali, Medan, and other cities across Indonesia.

This Policy should be read together with the rrp55 Terms & Conditions, which govern your overall use of the Platform. By registering an account or continuing to use the Platform after any update to this Policy, you acknowledge that you have read and understood the practices described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• Personal Data — Any information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to that person's identity.
• Processing — Any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• Data Controller — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, rrp55 is the Data Controller in respect of all Member data collected via the Platform.
• Data Processor — A natural or legal person that processes personal data on behalf of the Data Controller. This includes our payment processing partners, KYC verification providers, and cloud infrastructure providers.
• Member — Any natural person who has successfully registered a verified account on the rrp55 Platform.
• Visitor — Any person who accesses the Platform without completing full registration, including persons who browse the Platform prior to account creation.
• KYC — Know Your Customer; the identity and age verification process that rrp55 is required to conduct on Members as part of its compliance obligations.
• Cookies — Small text files placed on your device by the Platform to store preferences, session information, and analytics data.

rrp55 collects several categories of personal data depending on your relationship with the Platform. The table below summarises the categories of data we collect and examples of the specific data points within each category.

We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued identity document incidentally reveals such information as part of a mandatory KYC submission.

rrp55 collects personal data through a number of mechanisms, depending on the nature of your interaction with the Platform:

Direct Collection

Information you provide voluntarily when creating an account, completing the KYC verification process, making a deposit or withdrawal request, contacting our support team, or participating in any promotion or survey.

Automated Collection

Technical and usage data is collected automatically when you access the Platform, through server logs, session tracking technologies, and first-party analytics tools. This includes your IP address, device identifiers, browser fingerprint, and behavioural navigation data within the Platform.

Third-Party Sources

We may receive data about you from third-party partners in the following circumstances:

• Payment Processors: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to validate deposit and withdrawal instructions.
• KYC Verification Providers: Identity verification results and risk scores from our licensed third-party KYC partners, who cross-check your submitted documents against authoritative databases.
• Fraud Detection Services: Device reputation data and IP risk scores from fraud prevention tools integrated into the Platform's security layer.
• Affiliate Partners: If you arrive at rrp55 via a referral link, we may receive limited data (such as a referral code or click identifier) from the referring partner solely to attribute the registration correctly.

rrp55 processes personal data only where a lawful basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each.

rrp55 does not sell, rent, or otherwise trade your personal data. We share data only in the limited circumstances described below, and always under contractual data protection obligations where a third-party processor is involved.

Payment Partners

To process your deposits and withdrawals, we share the minimum necessary financial and identity data with our banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners process your data solely for the purpose of executing the payment instruction and are bound by their own data protection obligations.

KYC & Fraud Prevention Providers

Your identity documents and personal details may be shared with our licensed KYC verification partners and fraud detection service providers for the purpose of completing identity checks and assessing account risk. These providers act as Data Processors under contract with rrp55 and are prohibited from using your data for any other purpose.

Game Studio Providers

When you access live casino games operated by third-party studios such as Evolution Gaming or Pragmatic Play Live, a session token and limited account identifier are shared with the studio's platform solely to facilitate your game session. Game studios do not receive your full identity or financial data.

Legal & Regulatory Authorities

rrp55 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, a court order, or a binding legal demand. We will, where legally permissible, notify the affected Member of any such disclosure request prior to complying.

Corporate Transactions

In the event of a merger, acquisition, asset sale, or restructuring of rrp55's business operations, Member personal data may be transferred to the acquiring or successor entity as part of the transaction. In such cases, rrp55 will provide advance notice to Members and ensure that the receiving entity is bound by data protection standards no less protective than those set out in this Policy.

rrp55 operates as an internationally licensed platform. Personal data collected from Indonesian Members — whether from Jakarta, Surabaya, Bali, Bandung, or elsewhere across the archipelago — may be transferred to and stored on servers located outside Indonesia.

Where such cross-border transfers occur, rrp55 takes appropriate safeguards to ensure that your personal data continues to receive a level of protection that is consistent with this Policy. These safeguards may include:

• Entering into standard contractual clauses with data recipients that impose binding data protection obligations.
• Transferring data only to jurisdictions that provide an adequate level of data protection as determined by applicable international standards.
• Applying encryption and access controls to data in transit and at rest, regardless of the destination jurisdiction.

By registering an account with rrp55, you acknowledge and consent to the transfer of your personal data to international servers as described in this section, subject to the protections outlined above.

rrp55 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

rrp55 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include, but are not limited to:

• Transport Layer Security: All data transmitted between your browser or mobile device and the rrp55 Platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Database Encryption: Sensitive fields within our databases — including payment method details and identity document references — are stored in encrypted form using industry-standard encryption algorithms.
• Access Controls: Access to systems that hold personal data is restricted on a strict need-to-know basis, governed by role-based access control policies and multi-factor authentication requirements for all administrative accounts.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning to identify and remediate potential attack vectors.
• Staff Training: All rrp55 personnel with access to personal data undergo mandatory data protection and security awareness training as part of their onboarding and on an annual refresher basis.
• Incident Response: rrp55 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify affected Members and relevant authorities within the timeframes required by applicable law.

rrp55 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, remember your preferences, maintain your login session, and collect analytics data to improve our services.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred game categories, and notification preferences to provide a more personalised experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform — such as which pages are visited most frequently, average session duration, and navigation paths. This data helps us identify areas for improvement.
• Security Cookies: Used by our fraud detection systems to identify suspicious behaviour patterns, such as unusual login locations or rapid repeated failed authentication attempts.

Managing Cookies

Most modern browsers allow you to control cookies through their settings — you can block all cookies, delete existing cookies, or configure your browser to alert you when a cookie is set. Please note that blocking strictly necessary cookies will prevent you from logging into your rrp55 account and using core Platform features.

For instructions on managing cookies in your specific browser, refer to your browser's help documentation. rrp55 does not currently respond to browser "Do Not Track" signals, as no universal standard for such signals has been established.

As a data subject whose personal data is processed by rrp55, you hold a number of rights in respect of that data. rrp55 is committed to honouring these rights promptly and without undue obstruction. Your rights are as follows:

• Right of Access: You have the right to request a copy of the personal data rrp55 holds about you, along with information about how it is being processed. We will provide this within 30 days of a valid request.
• Right to Rectification: If you believe that any personal data we hold is inaccurate or incomplete, you may request that we correct or complete it. Where the data in question affects your account operation, please also update it directly in your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. Note that certain data must be retained for the regulatory retention periods set out in Section 8 and cannot be deleted on request during those periods.
• Right to Restriction: You may request that we restrict the processing of your data — meaning we retain it but do not actively use it — in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that occurred before the withdrawal.

To exercise any of the above rights, contact our support team via live chat or by emailing the support address listed in Section 14. We will verify your identity before processing any request to protect against unauthorised access to your data. We aim to respond to all data subject requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

rrp55 strictly enforces a minimum age requirement of 21 years for all Members. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21.

If rrp55 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, we will:

• Immediately suspend the account and freeze any associated balance.
• Delete the personal data of the underage individual from our active systems as promptly as practicable, retaining only the minimum information necessary to document the incident and prevent re-registration.
• Return any deposited funds to the source payment method after completing the necessary verification steps.
• Escalate the matter internally in accordance with our responsible gaming protocols.

If you are a parent or guardian and believe that a minor in your care has registered on rrp55, please contact us immediately via live chat or at the support email address in Section 14. We will investigate and take action within 24 hours of a confirmed report.

rrp55 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform operations. When material changes are made, we will notify registered Members by email at the address associated with their account and by displaying a prominent notice on the Platform for a period of at least 7 days prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page under "Last Updated". We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgement of the updated terms.

If you have concerns about any change to this Policy, please contact our support team before the change takes effect. If you do not accept the revised terms, you must cease using the Platform and may close your account by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rrp55 handles your personal data, our support team is available 24 hours a day, 7 days a week via live chat on the Platform.

For privacy-specific written enquiries — including data access requests, rectification requests, deletion requests, and objections to processing — you may also contact us by email. Our support address is provided below as plain text; please copy it manually into your email client:

When submitting a data subject rights request by email, please include your registered username and a clear description of the right you wish to exercise. We will verify your identity before processing the request. Our target response time is 30 calendar days from receipt of a complete and valid request.

For all other account queries, bonus enquiries, and technical support, please use the live chat feature available on every page of the Platform for the fastest response. Live chat agents are available in WIB (Western Indonesia Time, UTC+7) around the clock.