Privacy Policy

1. Introduction & Scope

rp8vip operates an international online gaming platform primarily serving players in Indonesia. As a business that handles sensitive personal and financial data, we regard the protection of that data as a fundamental obligation rather than a regulatory formality. This Policy sets out in plain, accessible terms how we collect, use, store, share, and protect your personal information.

This Policy applies to:

• All current and former registered Players on the rp8vip platform.
• Visitors who browse the rp8vip website without registering an Account.
• Individuals who communicate with rp8vip via email, live chat, or any other support channel.
• Applicants for any employment or partnership arrangement with rp8vip.

This Policy does not apply to third-party websites, payment processors, or game providers whose services you may access via links or embedded content within the Platform. We encourage you to review the privacy policies of those third parties independently.

2. Definitions

For the purposes of this Policy, the following terms have the meanings given below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, address, email address, telephone number, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, rp8vip.
• "Processor" means an entity that processes Personal Data on behalf of the Controller under a written data processing agreement.
• "Data Subject" means the natural person to whom Personal Data relates — in most cases, you as a registered Player or website visitor.
• "Sensitive Data" means a special category of Personal Data that warrants enhanced protection, including data relating to health, biometrics, political opinions, or criminal records. rp8vip does not routinely process Sensitive Data except where required for responsible gaming assessments or legally mandated identity checks.
• "Cookie" means a small data file placed on your device by a website to record information about your visits and preferences.

3. Data We Collect

The following table summarises the categories of Personal Data we collect, together with specific examples:

We do not collect payment card numbers, CVV codes, or full bank account PIN codes at any stage. Sensitive financial authentication is handled exclusively by your designated bank or payment service provider.

4. How We Collect Your Data

4.1 Directly from You

The majority of your Personal Data is collected directly from you during the registration process, KYC verification, deposit and withdrawal requests, customer support interactions, and any voluntary correspondence you initiate with us.

4.2 Automatically

When you access the rp8vip Platform, our servers and analytics systems automatically collect Technical Data and Usage Data via server logs, cookies, and similar tracking technologies. This data is collected regardless of whether you are logged in to an Account.

4.3 From Third Parties

We may receive Personal Data about you from the following third-party sources:

• Payment processors and banks — transaction confirmation data from BCA, BRI, BNI, Mandi ri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja to confirm deposit and withdrawal status.
• Identity verification services — third-party KYC providers who cross-reference your submitted documents against authoritative databases to confirm authenticity.
• Fraud prevention services — specialist third-party platforms that flag IP addresses, device fingerprints, or behavioral patterns associated with known fraudulent activity.
• Affiliate partners — where you arrive at rp8vip via a tracked referral link, the affiliate may share a limited set of anonymised referral data with us for commission attribution purposes only.

5. Purposes of Processing

rp8vip processes your Personal Data for the following clearly defined purposes:

• Account administration: Creating, maintaining, and closing your Account; verifying your identity; managing your Account preferences and security settings.
• Service delivery: Enabling you to access and participate in all gaming products on the Platform, including slots, live dealer games, sports betting, togel (Indonesia's traditional numbers lottery), and bandar bola (football sportsbook) markets.
• Payment processing: Processing deposits and withdrawals via your selected local payment method; reconciling transactions; investigating payment disputes.
• KYC and AML compliance: Verifying your identity and the source of your funds in accordance with international anti-money-laundering standards.
• Fraud prevention and security: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, collusion, and other prohibited conduct described in our Terms & Conditions.
• Customer support: Responding to your enquiries, resolving disputes, and improving service quality through support interaction analysis.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators; administering self-exclusion requests and deposit limits; fulfilling our duty of care obligations.
• Platform improvement: Analysing aggregated usage data to improve website performance, game selection, user experience design, and payment method coverage for Indonesian players.
• Marketing communications: Where you have provided consent, sending you information about promotions, bonuses, and new game launches that may interest you.
• Legal compliance: Retaining records as required by applicable law; responding to lawful requests from regulatory or law enforcement authorities.

6. Lawful Basis for Processing

Every processing activity performed by rp8vip rests on one or more of the following lawful bases:

Where our lawful basis is legitimate interest, we have conducted a balancing assessment confirming that our interest does not override your fundamental rights and freedoms. You may request a copy of that assessment by contacting us at [email protected].

7. Data Sharing & Disclosure

rp8vip does not sell your Personal Data. We share your data only in the following circumstances and only to the extent strictly necessary:

7.1 Service Providers (Processors)

We engage carefully vetted third-party service providers who process data on our behalf under binding data processing agreements. These include payment gateway operators, KYC verification platforms, fraud prevention services, cloud hosting providers, and customer support software vendors. All processors are contractually prohibited from using your data for any purpose beyond the specific service they provide to rp8vip.

7.2 Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operate the game engines that power content on the rp8vip Platform. These providers may receive limited technical session data (e.g., session tokens and bet amounts) that is necessary for game functionality, fairness certification, and dispute resolution. They do not receive your full personal profile.

7.3 Financial Institutions

Your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) will receive the transaction data necessary to execute your deposit or withdrawal instruction. These institutions operate under their own regulatory frameworks and privacy obligations.

7.4 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of rp8vip, its players, or the public. We will notify you of any such disclosure where legally permissible to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your Personal Data may be transferred to the successor entity. We will notify affected Players by email prior to any such transfer taking effect and will ensure that the successor entity is bound by privacy obligations no less protective than those in this Policy.

7.6 No Other Disclosure

Beyond the categories listed above, rp8vip will not disclose your Personal Data to any third party without your explicit prior consent.

8. International Data Transfers

As an internationally operated platform, some of the third-party service providers engaged by rp8vip are located in countries outside Indonesia. Where your Personal Data is transferred to a country that may not provide the same level of data protection as Indonesia's applicable laws, we implement appropriate safeguards to protect that data, which may include:

• Standard contractual clauses approved by recognised international data protection authorities.
• Binding corporate rules where the recipient is part of the same corporate group.
• Adequacy decisions or equivalent frameworks applicable to the recipient country.

You may request further information about the specific safeguards we have in place for international transfers by contacting our Data Protection team at [email protected].

9. Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10. Security Measures

rp8vip implements a layered approach to information security, combining technical controls, organisational policies, and ongoing staff training. Our current security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data stored in our databases, including hashed passwords and financial identifiers.
• Multi-factor authentication (MFA) options for Player Accounts and mandatory MFA for all internal staff system access.
• Regular penetration testing by independent cybersecurity firms to identify and remediate vulnerabilities proactively.
• Role-based access controls ensuring that internal staff can only access Personal Data that is necessary for their specific job function.
• Intrusion detection and prevention systems (IDS/IPS) monitoring network traffic 24 hours a day, 7 days a week.
• Automated fraud and anomaly detection systems that flag suspicious account activity in real time.
• Regular staff training on data protection obligations, phishing awareness, and incident response procedures.

Despite these measures, no digital system can guarantee absolute security. In the event of a data breach that poses a material risk to your rights and freedoms, rp8vip will notify you and any relevant authorities as required by applicable law, and will take all reasonable steps to mitigate the impact of the breach.

11. Cookies & Tracking Technologies

The rp8vip Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, prevent fraud, and analyse Platform performance. The following categories of cookies are in use:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They maintain your login session, remember your security preferences, and prevent cross-site request forgery attacks. No personal data collected by strictly necessary cookies is used for marketing purposes.

11.2 Performance & Analytics Cookies

These cookies collect anonymous information about how visitors interact with the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used exclusively to improve Platform performance and user experience. Where analytics providers process this data, they do so under strict data processing agreements.

11.3 Functional Cookies

Functional cookies remember choices you have made on previous visits, such as your preferred game category, display settings, or language of our support chat widget. Disabling these cookies may reduce the personalisation of your experience but will not prevent you from using core Platform functionality.

11.4 Marketing & Targeting Cookies

Where you have consented to receive marketing communications, marketing cookies may be used to present relevant promotional content and to measure the effectiveness of our campaigns. You may withdraw this consent at any time by contacting our support team.

11.5 Managing Cookies

You may control cookie settings through your browser's privacy settings. Please note that disabling certain cookies may impair Platform functionality, including your ability to remain logged in. For detailed instructions on managing cookies in popular browsers, refer to the help documentation provided by your browser vendor.

12. Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by rp8vip:

• Right of Access: You may request a copy of all Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. Minor corrections (e.g., email address updates) can often be made directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal obligations (e.g., AML record-keeping requirements).
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances, such as where you contest its accuracy or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. We will respond within 30 days of receiving a valid request. We may ask you to verify your identity before processing your request to prevent unauthorised access to your data.

13. Minors & Age Restriction

The rp8vip Platform is strictly for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes an age declaration requirement, and our KYC verification programme is specifically designed to detect and reject underage applicants.

If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will take immediate steps to delete that data and permanently close the associated Account. If you believe that a minor has registered an Account on our Platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

14. Responsible Gaming & Your Data

rp8vip processes certain categories of Personal Data specifically in support of our responsible gaming obligations. This includes monitoring gaming frequency, session duration, deposit patterns, and self-reported concerns to identify players who may be experiencing problem gambling.

Where our systems or staff identify indicators of problem gambling behaviour, we may proactively contact you to offer support tools such as deposit limits, session reminders, or self-exclusion. This processing is conducted on the basis of our legitimate interest in fulfilling our duty of care to players and, where applicable, compliance with responsible gaming regulatory requirements.

Responsible gaming data — including self-exclusion records — is retained indefinitely even after Account closure to prevent the inadvertent reinstatement of excluded players. This retention is necessary to protect your long-term wellbeing and cannot be overridden by a standard erasure request. For more information on responsible gaming tools and support resources, please visit our dedicated Responsible Gaming page.

15. Changes to This Policy

rp8vip reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where changes are material, we will notify you by email to your registered address and by posting a prominent notice on the Platform homepage at least 14 days before the revised Policy takes effect.

We encourage you to review this Policy periodically. The Effective Date at the top of this document will be updated each time a revision is made. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you object to any change, you must cease using the Platform and request Account closure before the revised Policy takes effect.

16. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which rp8vip handles your Personal Data, please contact our Data Protection team using the details below:

If you are not satisfied with our response to your complaint, you have the right to escalate your concern to the relevant supervisory authority in your jurisdiction. We will cooperate fully with any such regulatory inquiry.