Privacy Policy

1. Introduction

rpzz ("the Company", "we", "us", or "our") is committed to protecting and respecting the privacy of every individual who visits, registers with, or uses our online gaming platform at https://rpzz.cam (the "Platform"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, with whom we may share it, and what rights you hold regarding your data.

This Policy applies to all Users of the rpzz Platform, including visitors who browse without registering, registered account holders, and former members whose accounts have been closed. By accessing or using any part of rpzz's services, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. If you do not agree to this Policy, please do not use our Platform.

rpzz primarily serves players located in Indonesia, including residents of Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, and other provinces. Our data practices are designed to be consistent with internationally recognized data protection principles while accommodating the specific regulatory environment applicable to online gaming operations serving Indonesian players.

2. Data We Collect

2.1 Information You Provide Directly

When you register an account, complete identity verification (KYC), contact customer support, or interact with the Platform in other ways, you voluntarily provide us with personal information. The categories we collect include:

• Identity Information: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification document (Indonesian KTP or equivalent).
• Contact Information: Email address, mobile phone number, and residential address including city, province, and postal code.
• Financial Information: Bank account details (bank name, account number, account holder name) for payment processing via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or other supported institutions; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Verification Documents: Photographs or scans of your KTP, proof of residence, selfie images taken for identity confirmation, and any supplementary documents requested during enhanced due diligence reviews.
• Account Credentials: Username and hashed (never plaintext) password.
• Communication Records: Chat transcripts, email correspondence, and notes from customer service interactions.
• Responsible Gaming Declarations: Self-declared deposit limits, time-out preferences, and self-exclusion requests.

2.2 Information Collected Automatically

When you access the Platform, our servers and analytics systems automatically collect certain technical data:

• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Network Information: IP address, approximate geographic location derived from IP (city/region level), internet service provider, and connection type.
• Usage Data: Pages visited, features used, games played, bet history, session duration, time stamps, click-stream data, and navigation paths through the Platform.
• Transaction Data: Complete records of all deposits, withdrawals, wagers placed, game results, bonuses activated, and balance movements within your Account.
• Cookies and Similar Technologies: Session cookies, persistent cookies, local storage objects, and analytics tags (see Section 6 for full details).

3. How We Use Your Data

rpzz processes your personal information for the following purposes, each supported by a clearly identified legal basis (see Section 4):

• Account Management: Creating, maintaining, and administering your rpzz Account, including authentication, account recovery, and access management.
• Identity Verification (KYC): Fulfilling anti-money laundering (AML) and Know Your Customer obligations required by our international gaming license, ensuring you meet age (21+) and eligibility requirements.
• Payment Processing: Executing deposit and withdrawal transactions via your registered payment methods, reconciling balances, and managing financial records in Indonesian Rupiah (IDR).
• Gaming Services: Delivering the full range of gaming products including sports betting, live casino, slot machines, and togel (lottery) services; recording game outcomes and settling wagers accurately.
• Bonus and Promotions Administration: Evaluating eligibility for welcome bonuses, reload promotions, VIP rewards, and other incentive programs; tracking wagering requirements and awarding loyalty points.
• Customer Support: Responding to inquiries, resolving disputes, processing complaints, and providing technical assistance in English and Indonesian (Bahasa Indonesia).
• Security and Fraud Prevention: Detecting, investigating, and preventing unauthorized access, fraudulent transactions, money laundering, collusive behavior, and violations of our Terms and Conditions.
• Responsible Gaming: Monitoring behavioral signals associated with problem gambling; enforcing self-imposed limits and exclusions; providing access to responsible gaming resources and professional support referrals.
• Platform Improvement: Analyzing aggregate usage patterns to enhance Platform performance, fix technical issues, develop new features, and optimize the user experience for Indonesian players.
• Legal and Regulatory Compliance: Meeting reporting obligations to regulatory and licensing authorities, responding to lawful requests from law enforcement agencies, and maintaining records as required by applicable law.
• Communications: Sending account-related notifications (transaction confirmations, security alerts, verification status updates), and — where you have opted in — promotional communications about new games, bonuses, and platform updates.

4. Legal Basis for Processing

rpzz processes personal data under the following legal bases, consistent with internationally recognized data protection principles:

1. Contractual Necessity: Processing required to perform the services you have contracted with us by registering an Account and accepting our Terms and Conditions — including account management, payment processing, and game delivery.
2. Legal Obligation: Processing required to comply with AML regulations, KYC mandates, licensing authority requirements, and other applicable legal obligations.
3. Legitimate Interests: Processing for fraud prevention, platform security, analytical improvement of our services, and internal business record-keeping, provided such interests do not override your fundamental privacy rights.
4. Consent: Processing for optional marketing communications and non-essential cookies, where you have provided explicit consent and which you may withdraw at any time without detriment to your Account.

5. Data Sharing & Disclosure

5.1 Service Providers

rpzz works with carefully selected third-party service providers who assist us in operating the Platform. These providers access your data only to the extent necessary to perform their specific functions and are contractually bound to process your data exclusively on our instructions and to maintain appropriate security standards. Categories of service providers include:

• Payment gateway operators facilitating transactions with BCA, BRI, BNI, Mandiri, and e-wallet providers
• Identity verification and KYC technology providers performing document authentication
• Cloud infrastructure and hosting providers on whose servers Platform data is stored
• Customer support software providers enabling our live chat and ticketing systems
• Analytics platforms providing anonymized usage reporting (no personally identifiable data shared)
• Game content providers (Evolution Gaming, Pragmatic Play, and others) to the limited extent required to authenticate and record individual game sessions

5.2 Legal and Regulatory Disclosures

We may disclose your personal information to government authorities, law enforcement agencies, licensing bodies, or courts when we are legally obligated to do so; when disclosure is necessary to protect the rights, property, or safety of rpzz, our Users, or the public; or when required to investigate, prevent, or respond to fraud, money laundering, or other illegal activities.

5.3 Business Transfers

In the event that rpzz undergoes a merger, acquisition, restructuring, or sale of all or a portion of its assets, your personal data may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your data becomes subject to a materially different privacy policy.

5.4 No Commercial Data Sales

rpzz does not sell, rent, lease, or otherwise transfer your personal information to any third party for that party's own marketing or commercial purposes. This restriction applies unconditionally and is not subject to exception.

6. Cookies & Tracking Technologies

6.1 Types of Cookies We Use

rpzz uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: Essential for core Platform functionality including user authentication, session management, and security features. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gaming limit configurations to personalize your experience between sessions.
• Performance and Analytics Cookies: Collect anonymized information about how visitors use the Platform — which pages receive the most traffic, where errors occur, and how navigati on flows — to help us improve Platform performance. No personally identifiable information is included in analytics data.
• Marketing Cookies: Used only if you have explicitly opted in to receive promotional communications. These help us measure the effectiveness of our campaigns and avoid showing you irrelevant offers. You may withdraw this consent at any time through your Account settings.

6.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You may instruct your browser to refuse all cookies or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. For guidance on managing cookies in your specific browser, refer to your browser's help documentation. Common browsers used in Indonesia — including Chrome, Firefox, and Samsung Internet — all provide straightforward cookie management interfaces.

7. Data Retention

rpzz retains your personal data for as long as your Account is active and for a defined period thereafter, as follows:

• Active Account Data: Retained for the full duration of your Account's existence on the Platform.
• Post-Closure Retention: Following account closure, your identity, transaction, and KYC records are retained for a minimum of five (5) years to satisfy AML compliance obligations, licensing authority requirements, and potential legal proceedings.
• Marketing Data: Retained until you withdraw consent or for a maximum of two (2) years from your last meaningful interaction with promotional communications, whichever is sooner.
• Support Records: Customer service interactions are retained for three (3) years to support dispute resolution and quality assurance.
• Technical Logs: Server logs and security event data are retained for up to twelve (12) months before automatic deletion or anonymization.

When retention periods expire, data is securely deleted or irreversibly anonymized so that it can no longer be linked to any individual. We conduct periodic data audits to ensure compliance with these retention schedules.

8. Security Measures

rpzz employs a layered security architecture to protect your personal and financial data against unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.2 or higher, indicated by the padlock icon in your browser's address bar.
• At-Rest Encryption: Sensitive data stored in our databases — including identity documents, financial records, and KYC files — is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized rpzz personnel whose job functions require it. We enforce role-based access controls, multi-factor authentication for staff systems, and comprehensive access audit logs.
• Password Security: User passwords are stored exclusively as salted cryptographic hashes. rpzz staff cannot view your password in any form. If you suspect unauthorized access to your Account, contact support immediately and use the password reset facility.
• Penetration Testing: Our infrastructure undergoes regular security assessments and penetration tests conducted by independent cybersecurity specialists to identify and remediate vulnerabilities.
• Fraud Monitoring: Automated systems monitor transaction patterns and login activity 24/7 to detect and block suspicious behavior, including unauthorized login attempts, unusual withdrawal requests, and patterns consistent with account takeover attacks.

9. Your Rights

Subject to applicable law and our obligations under AML and licensing regulations, you hold the following rights with respect to your personal data held by rpzz:

• Right of Access: You may request a copy of the personal data we hold about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct it. Minor corrections (such as phone number updates) can often be made directly through your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, provided we are not legally required to retain it. Note that AML regulations typically require us to retain identity and transaction records for five years post-closure regardless of erasure requests.
• Right to Restriction: You may request that we temporarily restrict processing of your data — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. We will honor all opt-out requests for marketing communications promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and complete the action within thirty (30) days, or notify you if additional time is required. We may ask you to verify your identity before processing the request to prevent unauthorized access to your data.

10. Children's Privacy

rpzz's services are strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Our registration process requires users to confirm their age and submit identity documentation that includes a date of birth, which is verified during KYC review.

If we become aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. If you are a parent or guardian and believe your child has registered on the Platform without your knowledge, please contact our support team immediately at [email protected].

11. International Data Transfers

As an internationally operated platform serving Indonesian players, some of your personal data may be transferred to and processed in countries other than Indonesia. This may occur when data is stored on cloud servers, processed by KYC verification providers, or handled by game content developers whose infrastructure is located outside Indonesia.

When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Policy. These safeguards may include contractual clauses with data processors, privacy certification frameworks, or adequacy determinations applicable to the receiving jurisdiction. By using rpzz's services, you acknowledge and consent to such transfers where they are necessary for the delivery of our services.

12. Changes to This Privacy Policy

rpzz reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where we have your email address on file, by sending you a notification email at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any changes constitutes acceptance of the revised Policy. If you do not accept the revised terms, you should discontinue use of the Platform and may request account closure by contacting customer support.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or rpzz's data practices, please reach out through the following channel:

• Email: [email protected] (subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 through your Account dashboard
• Response Time: We aim to respond to all privacy-related inquiries within two (2) business days during WIB (Western Indonesia Time) operating hours