Privacy Policy

Introduction and Scope

This Privacy Policy applies to rp66c, accessible at https://rp66c.cam, and to all associated services, mobile-optimized pages, and APIs operated under the rp66c brand (collectively, the "Platform"). It governs the collection and processing of personal data belonging to all users who register, browse, deposit, wager, or otherwise interact with the Platform.

rp66c is operated by an internationally licensed entity. While the Platform primarily serves players accessing from Indonesia, this policy applies globally to all users regardless of their country of residence. Where local data protection laws impose obligations beyond this policy's minimum standards, rp66c will honor those obligations to the extent reasonably practicable.

We may update this Privacy Policy periodically. The "Last Updated" date at the top of this document reflects the most recent revision. Material changes will be communicated via an on-Platform notice. Continued use of the Platform after any update constitutes acceptance of the revised policy.

Definitions

The following definitions apply throughout this Privacy Policy:

Personal Data We Collect

rp66c collects Personal Data through multiple touchpoints across the Platform lifecycle. The categories of data we collect are outlined below:

3.1 Registration Data

When you create an account, we collect your full name, date of birth, email address, mobile phone number, country of residence, and a self-selected username and password. This data is required to establish and manage your account.

3.2 KYC and Identity Verification Data

To comply with anti-money laundering (AML) obligations and to verify your eligibility (you must be at least 21 years of age), we may collect copies of government-issued identification (KTP, passport), proof of address documents, and evidence of payment method ownership. This data is processed and stored securely with restricted access.

3.3 Financial Transaction Data

We record all deposit and withdrawal transactions associated with your account, including amounts in IDR (Indonesian Rupiah), timestamps, payment method type (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction reference numbers. We do not store full bank account numbers or full card numbers; only masked references are retained.

3.4 Gameplay and Wagering Data

We record your betting history, game session logs, wager amounts, outcomes, and bonus redemption history. This data supports account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical and Device Data

We automatically collect certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and session timestamps. This data is used for security, fraud prevention, and platform performance optimization.

3.6 Communications Data

Records of your communications with rp66c's support team — including support tickets, live chat transcripts, and email correspondence — are retained for service quality assurance and dispute resolution purposes.

How We Use Your Personal Data

rp66c processes your Personal Data on the following legal bases and for the following purposes:

We do not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review, except where required by anti-fraud systems in which case you may request a manual review by contacting support.

Data Sharing and Third-Party Disclosure

rp66c does not sell or rent your Personal Data to third parties. We may share your data with carefully selected categories of recipients only where necessary and under appropriate data protection agreements:

• Payment processors and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals. These entities operate under their own regulatory obligations.
• Identity verification services: Third-party KYC providers may process copies of your identification documents to confirm your identity. These providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive session tokens and anonymized gameplay data necessary to deliver their games. They do not receive your full personal profile.
• Regulatory and law enforcement authorities: We may disclose Personal Data where required by law, court order, or the directive of a competent regulatory authority — including where disclosure is necessary to prevent or investigate financial crime.
• Platform infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors that support Platform operations may process technical data under contractual data processing agreements with rp66c.

In all cases of third-party sharing, rp66c takes reasonable steps to ensure that recipient parties maintain appropriate security standards and process your data only for the specified purpose.

Cookies and Tracking Technologies

rp66c uses cookies and similar technologies to operate and improve the Platform. The categories of cookies we deploy are as follows:

• Strictly necessary cookies: Essential for session management, authentication, and core Platform functionality. These cannot be disabled without impairing the service.
• Performance and analytics cookies: Used to measure how users interact with the Platform — page load times, navigation paths, error rates — in anonymized or aggregated form. This data helps us improve Platform reliability.
• Fraud prevention cookies: Used to detect suspicious session behavior, multiple-account attempts, and unauthorized access patterns. These are an integral part of our security infrastructure.
• Preference cookies: Used to remember your Platform settings such as language preference and display options across sessions.

rp66c does not deploy third-party advertising cookies or cross-site behavioral tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent the Platform from functioning correctly.

Data Retention

rp66c retains Personal Data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable regulatory obligations. Our general retention schedule is as follows:

• Account and registration data: Retained for the duration of your account, plus a minimum of 5 years following account closure to meet AML and gaming license requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, or longer where required by applicable law.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Gameplay and wagering logs: Retained for a minimum of 2 years for dispute resolution and responsible gaming purposes.
• Support communications: Retained for 2 years from the date of the most recent interaction.
• Technical and device logs: Retained for up to 12 months, after which they are aggregated or deleted.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymized. Anonymized data that can no longer identify any individual may be retained indefinitely for statistical and analytical purposes.

Data Security

rp66c employs a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, and disclosure. Our security measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and Platform servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Role-based access controls ensuring that only authorized personnel with a demonstrated business need can access Personal Data.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Multi-factor authentication options available for user accounts and mandatory for administrative access.
• 24/7 intrusion detection and anomaly monitoring on all Platform infrastructure.

While rp66c takes all reasonable precautions, no system can guarantee absolute security. In the event of a data breach that poses a high risk to your rights and freedoms, we will notify affected users without undue delay and take immediate steps to contain the incident.

International Data Transfers

rp66c operates as an offshore licensed entity and may store and process your Personal Data on servers located outside Indonesia. When Personal Data is transferred internationally, rp66c ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party processors.
• Transfer only to processors operating in jurisdictions with adequate data protection frameworks or under equivalent contractual safeguards.
• Regular review of third-party processor compliance with agreed security and privacy standards.

If you are an Indonesian resident, you acknowledge that your data may be transferred to and processed in jurisdictions outside Indonesia. By using the Platform, you consent to such transfers where they are necessary to deliver the services you have requested.

Your Rights and Choices

Subject to applicable law and reasonable verification of your identity, you have the following rights with respect to your Personal Data held by rp66c:

• Right of access: You may request a copy of the Personal Data we hold about you, along with information about how it is being used.
• Right to rectification: You may request correction of inaccurate or incomplete Personal Data. Some corrections can be made directly via your account settings; others require support team assistance.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations. Note that deletion requests cannot be fulfilled where retention is required for AML compliance or active dispute resolution.
• Right to restriction: You may request that we restrict processing of your Personal Data in certain circumstances (e.g., while the accuracy of data is being verified).
• Right to data portability: You may request a machine-readable export of Personal Data you have provided to us, where technically feasible.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing communications, we will honor that preference promptly.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days. We may need to verify your identity before fulfilling a request to prevent unauthorized disclosure.

Children and Minors

The Platform is strictly intended for adults aged 21 years and above. rp66c does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a user is under 21, the account will be suspended immediately, all funds will be returned net of any bonuses received, and all Personal Data associated with the account will be deleted from our systems.

If you believe a minor has registered on the Platform, please notify us immediately at [email protected] and we will investigate and act promptly.

Marketing Communications

rp66c may send you promotional emails, SMS notifications, or on-Platform messages relating to bonuses, new games, seasonal promotions (including those tied to Idul Fitri, Ramadhan, and Indonesian Independence Day), and platform updates — but only where you have explicitly opted in to receive such communications.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email.
• Updating your communication preferences in your account settings.
• Contacting our support team at [email protected] with a clear opt-out request.

Opting out of marketing communications will not affect the delivery of transactional messages (deposit confirmations, withdrawal notifications, security alerts, KYC requests) which are necessary for the operation of your account.

Responsible Gaming and Data Processing

As part of our commitment to responsible gaming, rp66c processes certain gameplay and financial data specifically to identify patterns that may indicate problem gambling behavior — including unusually large deposits, rapid loss sequences, or attempts to circumvent self-imposed limits. This processing is carried out in our legitimate interest and in fulfillment of our duty of care to users.

Where our responsible gaming systems flag a concern, a trained member of our support team may proactively reach out to you. This outreach is welfare-driven and confidential. For more information about our responsible gaming tools and how your data supports them, visit our Responsible Gaming page.

Changes to This Policy

rp66c reserves the right to revise this Privacy Policy at any time. When we make material changes — such as adding new categories of data collection, new purposes for processing, or new third-party sharing arrangements — we will provide at least 7 days' advance notice via an on-Platform announcement before the changes take effect.

Non-material clarifications (such as correcting typographical errors or improving readability without changing substance) may take effect immediately upon publication. The "Last Updated" date at the top of this document will always reflect the most recent revision.

Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should cease using the Platform and request account closure.

Contact and Data Subject Requests

For all privacy-related enquiries, data subject access requests, erasure requests, or concerns about how rp66c handles your Personal Data, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Privacy Request – [Your Username]" for faster routing
• Response time: Within 30 calendar days for all data subject requests; within 3 business days for urgent privacy concerns
• Languages: English and Indonesian-speaking agents available

rp66c takes all privacy enquiries seriously. If you are unsatisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.