Privacy Policy — rp678

1 Introduction & Scope

rp678 ("we", "us", "our") is the operator of the online betting and gaming platform accessible at rp678.cam. We are committed to protecting the personal data of every individual who visits, registers on, or interacts with our platform. This Privacy Policy sets out our practices regarding the collection, use, storage, disclosure, and protection of personal data in connection with the rp678 platform and all associated services.

This policy applies to:

• All registered Members of rp678 who hold an active or previously active account.
• All visitors to the rp678.cam website, regardless of whether they have registered an account.
• All individuals who contact rp678's customer support team, whether by live chat, email, or any other channel.
• All individuals who participate in rp678 promotions, surveys, or other marketing activities.

By accessing or using the rp678 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the platform and contact us to close your account.

This policy is published in English. In the event of any inconsistency between this English-language version and any translated summary, the English version prevails.

2 Definitions

The following defined terms are used consistently throughout this Privacy Policy:

3 Data We Collect

rp678 collects Personal Data across several categories. We collect only what is necessary for the purposes described in this policy and do not retain data beyond the periods outlined in Clause 9.

3.1 Registration & Identity Data

Collected at the point of account registration. Required to create and maintain your Member account, communicate with you about your account, and fulfill our legal identity-verification obligations.

3.2 KYC & Verification Documents

Collected as part of our KYC process. These documents contain sensitive identity and financial information and are subject to heightened security controls. We partner with an accredited third-party KYC provider for document validation; that provider is bound by a data processing agreement with equivalent data protection standards.

3.3 Financial & Transaction Data

Collected for every deposit and withdrawal transaction processed through the Platform. Full bank account numbers are not stored on rp678 servers; only masked references sufficient to identify the account owner are retained after transaction completion.

3.4 Betting & Gaming Activity Data

Collected automatically as you use the Platform. This data is used to operate the services, detect fraud, enforce responsible gaming limits, and settle disputes. It is also used in aggregate, anonymized form to improve Platform performance and game offerings.

3.5 Technical & Device Data

Collected automatically via server logs and cookies when you access the Platform. Used for security monitoring, fraud prevention, geographic access control, and service optimization. IP addresses are pseudonymized in long-term analytics storage.

3.6 Communications Data

When you contact rp678 via live chat, email ([email protected]), or any other support channel, we retain a record of the communication — including your message content, timestamps, and the resolution applied. This data is used for quality assurance, dispute resolution, and staff training. Communication records are retained for 3 years from the date of the interaction.

3.7 Responsible Gaming Data

If you activate self-management tools — such as deposit limits, session timers, cooling-off periods, or self-exclusion — we record the parameters of those controls and their activation and modification history. This data is used solely to enforce the controls you have set and to support our responsible gaming obligations. It is never used for marketing purposes.

4 How We Collect Your Data

rp678 collects your Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or participate in a promotion.
• Automatically via the Platform: When you browse or interact with the Platform, our servers and cookies automatically collect technical and behavioral data as described in Clause 3.5.
• From payment processors: When you initiate a deposit or withdrawal, our payment processing partners (including BCA, BRI, BNI, Mandiri, and e-wallet operators OVO, DANA, GoPay, ShopeePay, and LinkAja) may share transaction confirmation data with rp678 for reconciliation purposes.
• From KYC verification providers: Our third-party KYC provider shares the outcome of document authenticity checks and identity-matching scores with rp678. The raw document images are handled by the KYC provider and are not transmitted to or stored on rp678 application servers.
• From fraud prevention services: Our fraud-detection infrastructure may receive risk signals and device fingerprint data from third-party fraud intelligence services. This data is used only for fraud prevention and is not combined with your profile for marketing purposes.

5 Legal Basis for Processing

Every processing activity carried out by rp678 is grounded in one or more of the following legal bases:

• Performance of a contract: Processing your registration data, financial data, and transaction data is necessary to perform the contract between rp678 and you (the rp678 Terms & Conditions). Without this processing, we cannot provide the Services.
• Legal obligation: KYC verification, AML transaction monitoring, and the retention of certain financial and identity records are required by the terms of rp678's international gaming license and applicable anti-money laundering regulations.
• Legitimate interests: Fraud prevention, security monitoring, responsible gaming enforcement, service improvement, and aggregate analytics are processed on the basis of rp678's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Marketing communications (where applicable) and the placement of non-essential cookies are processed only where you have given explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 How We Use Your Data

rp678 uses your Personal Data for the following purposes:

1. Account Management: Creating, maintaining, and securing your rp678 account; authenticating your identity at login; enabling account recovery.
2. Service Delivery: Processing deposits and withdrawals; settling bets; delivering promotional bonuses; operating live casino and RNG game sessions.
3. KYC & Compliance: Verifying your identity and age (21+ requirement); screening against sanctions lists and PEP registers; fulfilling reporting obligations under applicable anti-money laundering rules.
4. Fraud Prevention & Security: Detecting and preventing unauthorized account access, collusion, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
5. Responsible Gaming: Enforcing deposit limits, session controls, cooling-off periods, and self-exclusion requests; identifying Members whose betting patterns may indicate problem gambling behavior and contacting them proactively.
6. Customer Support: Responding to queries, resolving disputes, and maintaining records of support interactions for quality and audit purposes.
7. Platform Improvement: Analyzing aggregate, anonymized usage data to improve the Platform's performance, game selection, payment flow, and user experience.
8. Legal & Regulatory: Responding to lawful requests from regulatory authorities, law enforcement agencies, or courts; defending rp678's legal rights in dispute resolution or arbitration proceedings.

7 Sharing Your Data

rp678 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the following circumstances and only to the minimum extent necessary:

• Payment Processors: Your payment details are shared with the relevant bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) or e-wallet operator (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit or withdrawal transaction. These providers operate under their own published privacy policies and applicable Indonesian financial regulations.
• KYC Verification Provider: Your identity documents are processed by our accredited third-party KYC partner under a binding data processing agreement. The KYC provider may not use your data for any purpose other than identity verification on behalf of rp678.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a pseudonymized Member identifier and session parameters sufficient to operate the game. They do not receive your full name, contact details, or financial data.
• Fraud Prevention & Security Services: Pseudonymized device and behavioral data may be shared with third-party fraud intelligence providers for risk scoring purposes. No directly identifying data (name, email, bank account) is transmitted to these providers.
• Legal & Regulatory Authorities: We will disclose Personal Data to regulators, law enforcement agencies, or courts where required by law, court order, or our licensing obligations. We will notify affected Members of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of the rp678 business, Member data may be transferred to the acquiring entity, subject to equivalent data protection commitments. Members will be notified of any such transfer in advance.

8 Cookies & Tracking Technologies

rp678 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Required for core Platform functionality — session authentication, load balancing, fraud prevention signals, and responsible gaming limit enforcement. These cookies cannot be disabled without breaking core service functionality.
• Performance & Analytics Cookies: Used to measure page load times, navigation paths, error rates, and game-loading performance in aggregate, anonymized form. This data helps us identify and resolve technical issues promptly.
• Functional Cookies: Store your display preferences — such as time-zone setting (WIB/WITA/WIT), odds format preference, and language display preference — to improve your experience on return visits.
• Marketing Cookies: Used only where you have opted in to marketing communications. These cookies track which promotions you have viewed or engaged with, so we can present relevant offers without repeating content you have already seen.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in or accessing your account. Disabling marketing cookies will not affect your ability to use the Platform but will mean that promotional communications may be less relevant to your activity.

9 Data Retention

rp678 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. The following retention schedule applies:

Upon expiry of the applicable retention period, data is securely deleted or anonymized in a manner that prevents re-identification. Where data is anonymized rather than deleted, it may be retained indefinitely in aggregate statistical form for Platform improvement purposes.

10 Data Security

rp678 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using TLS 1.3. Connections using older protocols (TLS 1.0, TLS 1.1, SSL) are rejected at the server level.
• Encryption at Rest: Sensitive data fields — including identity document references, masked financial account identifiers, and authentication credentials — are encrypted at rest using AES-256.
• Access Controls: Access to Member Personal Data within rp678's internal systems is restricted on a strict need-to-know basis. All staff with data access are subject to background checks, confidentiality agreements, and periodic access reviews.
• Pseudonymization: Where possible, Personal Data used for analytics, fraud modeling, and game performance monitoring is pseudonymized so that the dataset cannot directly identify a living individual without reference to a separately held key.
• Penetration Testing: rp678 conducts regular third-party penetration tests and vulnerability assessments of its Platform infrastructure. Critical findings are remediated within 72 hours of identification.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to Member rights, rp678 will notify affected Members and relevant regulatory authorities within 72 hours of becoming aware of the breach. Notification will be sent to your registered email address and will include the nature of the breach, the categories of data affected, and the steps rp678 is taking to contain and remediate the incident.

11 Your Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you hold the following rights over your Personal Data held by rp678:

• Right of Access: You may request a copy of all Personal Data rp678 holds about you. We will provide a structured, machine-readable response within 30 calendar days of receiving a verified request.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can be made directly via your account settings; corrections to KYC-verified fields require a support request and re-verification.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where: (a) the data is no longer necessary for the purpose it was collected; (b) you have withdrawn consent and there is no other legal basis for processing; or (c) the data was processed unlawfully. Note that erasure requests cannot be fulfilled where retention is required by our AML or licensing obligations.
• Right to Restrict Processing: You may request that rp678 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being evaluated.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format (e.g., JSON or CSV).
• Right to Object: You may object at any time to the processing of your Personal Data on the basis of legitimate interests, including profiling. rp678 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12 Children & Minors

The rp678 platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process includes an age-declaration step and is backed by KYC identity verification to enforce this requirement.

If rp678 discovers or is notified that Personal Data has been collected from a person under 21 without verifiable parental or guardian consent, we will:

• Immediately suspend the associated account pending investigation.
• Delete all Personal Data associated with that account from our active systems as quickly as practicable, subject to any legal hold obligations.
• Refund any net deposits to the originating payment account after verification of account ownership.
• Notify the relevant regulatory authority where required by our licensing obligations.

If you have reason to believe that a minor is using or has used the rp678 platform, please contact us immediately at [email protected]. We take underage access reports seriously and will act on them promptly.

13 Third-Party Links

The rp678 Platform does not contain outbound links to third-party websites. However, payment methods displayed on the Platform (such as BCA internet banking, OVO, or DANA) involve you navigating to or interacting with third-party payment interfaces. Once you leave the rp678 Platform and interact with a third-party payment provider's interface, your data is governed by that provider's own privacy policy.

rp678 is not responsible for the privacy practices, security standards, or content of any third-party service, payment provider, or platform. We encourage you to read the privacy policies of any third-party service you use in connection with your rp678 account.

14 International Data Transfers

rp678 operates under an international gaming license and uses cloud infrastructure and service providers whose data centers may be located outside Indonesia. Where your Personal Data is transferred to a country that does not offer an equivalent level of data protection to the jurisdiction in which rp678 is licensed, we implement one or more of the following safeguards:

• Standard contractual clauses approved by the relevant data protection authority, incorporated into our data processing agreements with overseas Processors.
• Binding corporate rules where the transfer is to a subsidiary or affiliate within the rp678 corporate group.
• Transfer to a country or organization that has been subject to a formal adequacy determination by the relevant supervisory authority.

You may request a copy of the safeguards applicable to any specific international transfer of your data by contacting us at [email protected].

15 Policy Amendments

rp678 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When we make material changes — meaning changes that affect the categories of data collected, the purposes for which it is used, or your rights — we will notify active Members by email to their registered address at least 7 calendar days before the changes take effect.

Non-material changes (such as typographical corrections, clarifications that do not alter the substance of our practices, or updated contact information) may take effect immediately without prior notice. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

Your continued use of the Platform after a revised Privacy Policy has taken effect constitutes your acknowledgment of the updated terms. If you do not accept the revised policy, you should cease using the Platform and request account closure in accordance with Clause 13 of our Terms & Conditions.

16 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a concern about how rp678 handles your Personal Data, please contact our support team:

If you are not satisfied with our response to a data rights request or privacy complaint, you have the right to escalate your complaint to the data protection supervisory authority or regulatory body in the jurisdiction in which rp678 holds its international gaming license. Details of the relevant supervisory authority will be provided upon request.