Privacy Policy

In this Privacy Policy, the following terms carry the meanings assigned to them below:

This Privacy Policy applies to all Personal Data collected by rrp55 in connection with the Platform, including data collected via the website, live chat, email correspondence, and payment processing flows.

rrp55 acts as the data controller for the Personal Data described in this Policy. This means we determine the purposes for which, and the means by which, your Personal Data is processed. Where rrp55 engages third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to handle your data only on our documented instructions.

This Policy is intended primarily for players based in Indonesia. If you are accessing the Platform from another location, please be aware that your data may be subject to the laws of Indonesia and of the jurisdiction in which rrp55 is licensed, which may differ from the laws of your country of residence.

rrp55 collects the following categories of Personal Data depending on the nature of your interaction with the Platform:

We do not intentionally collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If any such data is inadvertently submitted through a support communication, it will be deleted as soon as practicably possible.

rrp55 collects Personal Data through the following channels:

• Direct interactions: Data you actively provide when registering an Account, completing KYC, making a deposit or withdrawal, submitting a support request, or updating your account preferences.
• Automated technologies: Technical and Usage Data collected automatically when you access the Platform, via server logs, session tracking tools, and first-party cookies. See Section 9 for full cookie details.
• Payment processors: Confirmation data returned by local payment processors when your BCA, BRI, BNI, Mandiri, CIMB Niaga, or e-wallet transaction is verified. rrp55 does not receive or store your full banking credentials; only the confirmation reference and account name are passed to us.
• KYC service providers: Where rrp55 uses a third-party identity verification provider to authenticate KTP documents, that provider may return a verification result and confidence score. The full document image is stored securely by rrp55 and is not retained by the verification provider beyond the processing session.
• Fraud prevention partners: Anonymised device fingerprint and behavioural signals used solely to detect and prevent fraudulent access to accounts.

rrp55 processes your Personal Data only where a lawful basis exists. The table below maps our key processing activities to their purpose and legal basis:

rrp55 does not sell your Personal Data. We share your data only in the following limited circumstances:

• Payment processors and banking partners: We share the minimum necessary financial data with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your transactions. These institutions operate under their own privacy policies and applicable Indonesian banking regulations.
• KYC and identity verification providers: Your identity documents and verification data are shared with our contracted KYC provider for the sole purpose of fulfilling the age and identity verification process. KYC providers are contractually prohibited from using your data for any other purpose.
• Fraud prevention and security services: Anonymised technical signals are shared with fraud detection partners to protect the Platform and all of its users from unauthorised access and financial crime.
• Game content providers: Where game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft require a player session token to launch a game, a pseudonymous session identifier (not your full name or financial data) is passed to the provider's game server.
• Legal and regulatory authorities: rrp55 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by applicable law or a valid legal order. We will notify you of such disclosure where we are legally permitted to do so.
• Group companies and successors: If rrp55 undergoes a merger, acquisition, or sale of assets, your Personal Data may be transferred to the successor entity, which will be bound by terms no less protective than this Privacy Policy.

As rrp55 operates on an internationally licensed basis, some of your Personal Data may be transferred to, and stored or processed in, countries outside Indonesia. This may include the jurisdiction in which rrp55 holds its operating licence, as well as the locations of our contracted service providers.

Wherever such transfers occur, rrp55 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include:

• Standard contractual data processing agreements with all service providers that handle Personal Data outside Indonesia;
• Technical controls including encryption in transit and at rest;
• Access controls limiting which personnel can access Personal Data based on their role and operational need.

By creating an Account on rrp55 and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data as described in this section.

rrp55 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon the expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual.

rrp55 uses first-party cookies and similar tracking technologies to operate the Platform effectively. We do not use third-party advertising cookies or cross-site tracking pixels. The cookies we use fall into the following categories:

Strictly Necessary cookies cannot be disabled as they are essential to the operation of the Platform. You may manage Functional and Analytics cookies via your browser settings. Note that disabling Functional cookies may affect your experience on the Platform.

rrp55 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. HTTPS is enforced site-wide with HSTS headers.
• Encryption at rest: Sensitive data fields including KTP numbers, bank account identifiers, and password hashes are stored using AES-256 encryption at rest.
• Access controls: Internal access to Personal Data is governed by role-based access controls. Only personnel with a documented operational need can access identifiable player data, and all such access is logged and auditable.
• Penetration testing: The Platform undergoes periodic independent security assessments. Critical findings are remediated within defined SLA timelines.
• Incident response: rrp55 maintains a documented data breach incident response plan. In the event of a breach that poses a material risk to your rights, we will notify affected players without undue delay and, where legally required, report the breach to the relevant regulatory authority.

While rrp55 takes all reasonable measures to protect your data, no internet transmission or electronic storage system is completely secure. You also play a role in keeping your data safe — never share your Account password with anyone, and contact support immediately if you suspect unauthorised access to your Account.

Subject to applicable law, you have the following rights in relation to your Personal Data held by rrp55:

To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and provide a substantive response within 14 calendar days. Complex requests may require up to 30 calendar days; we will inform you if an extension is necessary.

The Platform is strictly intended for adults aged 21 and above. rrp55 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been submitted by an underage individual, we will immediately close the associated Account, delete the data, and — where applicable — void any transactions associated with that Account.

If you are a parent or guardian and believe that a minor in your care has registered on rrp55, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of your notification.

The Platform may contain references to third-party services including payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and game studios (Pragmatic Play, Evolution Gaming, NetEnt). When you interact with these third-party services — for example, by completing a bank transfer or launching a live casino game — you may be subject to the privacy policies of those third parties.

rrp55 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your rrp55 Account. Our responsibility is limited to the data we directly collect and process on our own Platform.

rrp55 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will:

• Update the "Last Reviewed" date at the top of this page;
• Send a notification to your registered email address summarising the key changes;
• Display a prominent notice on the Platform for a minimum of 7 days following publication of the revised Policy.

Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, please close your Account and contact support to request deletion of your Personal Data in accordance with Section 11.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way rrp55 handles your Personal Data, please get in touch through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data privacy queries: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 directly on the Platform
• Response time: All privacy-related enquiries are acknowledged within 3 business days (WIB)

Our support team includes Indonesian-speaking agents available around the clock, so you may describe your query in plain terms and we will ensure it reaches the appropriate team for handling. All formal data rights responses will be issued in English as the governing language of this Policy.