Privacy Policy

1. Information We Collect

rp10k collects several categories of personal information to provide our gaming services, comply with legal obligations, and ensure a secure gaming environment. The information we collect falls into the following categories:

1.1 Account Registration Information

When you create an account on rp10k, we collect the following personal details:

• Full Legal Name: As it appears on your government-issued identification (KTP - Kartu Tanda Penduduk)
• Date of Birth: To verify that you meet the minimum age requirement of 21 years
• Email Address: For account communications, security alerts, and promotional messages (with your consent)
• Mobile Phone Number: For account verification, security notifications, and customer support
• Residential Address: Including street address, city (e.g., Jakarta, Surabaya, Medan, Bandung), province, and postal code
• Username and Password: Your chosen login credentials (passwords are encrypted and never stored in plain text)

1.2 Identity Verification Documents (KYC)

To comply with anti-money laundering regulations and prevent fraud, we collect identity verification documents:

• Government-Issued Photo ID: Typically your KTP (Indonesian National Identity Card), showing your full name, photo, date of birth, and NIK (Nomor Induk Kependudukan)
• Proof of Address: Recent utility bills, bank statements, or government correspondence dated within the last 3 months
• Selfie Verification: A photograph of you holding your ID next to your face to prevent identity theft

1.3 Financial and Payment Information

When you deposit or withdraw funds, we collect:

• Bank Account Details: Bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI), account number, and account holder name
• E-Wallet Information: Account details for OVO, DANA, GoPay, ShopeePay, or LinkAja
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, and account balance changes
• Payment Method Verification: Documentation proving that payment methods are registered in your legal name

1.4 Gaming and Betting Activity

We automatically collect information about your gaming activity:

• Games played (sports betting, live casino, slots, togel, sabung ayam)
• Bets placed, bet amounts, odds selected, and bet outcomes
• Session duration, gameplay patterns, and game preferences
• Bonus activations, wagering progress, and promotional participation

1.5 Technical and Device Information

We automatically collect technical data when you access rp10k:

• IP Address: Your internet protocol address and approximate geographic location (city-level)
• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version
• Usage Data: Pages visited, time spent on pages, navigation paths, and referral sources
• Cookies and Tracking Technologies: See Section 7 for details

1.6 Communications and Customer Support

When you contact rp10k customer support, we collect:

• Live chat transcripts, email correspondence, and phone call recordings
• Support ticket details, complaint descriptions, and resolution notes
• Feedback, surveys, and reviews you provide

2. How We Use Your Data

rp10k uses your personal information for the following legitimate business purposes:

2.1 Account Management and Service Provision

• Creating and maintaining your gaming account
• Processing deposits, withdrawals, and payment transactions
• Providing access to sports betting, live casino, slots, and traditional Indonesian games
• Managing bonuses, promotions, and loyalty rewards
• Maintaining accurate records of your gaming activity and account balance

2.2 Legal Compliance and Security

• Verifying your identity and age (21+ requirement for Indonesian players)
• Complying with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Preventing fraud, collusion, bonus abuse, and other prohibited activities
• Detecting and investigating suspicious transactions or betting patterns
• Responding to legal requests from law enforcement or regulatory authorities
• Enforcing our Terms and Conditions and resolving disputes

2.3 Customer Service and Support

• Responding to your inquiries, complaints, and support requests
• Providing technical assistance and troubleshooting account issues
• Sending important account notifications, security alerts, and service updates
• Improving our customer service quality through training and quality assurance

2.4 Platform Improvement and Analytics

• Analyzing user behavior to improve platform functionality and user experience
• Testing new features, games, and betting markets
• Optimizing website performance, loading speeds, and mobile responsiveness
• Understanding player preferences to curate relevant game and sports content

2.5 Marketing and Promotions (With Your Consent)

Only if you have opted in to receive marketing communications, we may use your data to:

• Send promotional offers, bonus announcements, and special event notifications
• Provide personalized game recommendations based on your gaming preferences
• Invite you to participate in tournaments, competitions, and loyalty programs
• Share updates about new games, sports betting markets, and platform features

2.6 Responsible Gaming and Player Protection

• Monitoring gameplay patterns to identify potential problem gambling behavior
• Enforcing deposit limits, session time limits, and self-exclusion requests
• Providing access to responsible gaming tools and support resources
• Complying with responsible gaming regulations and best practices

3. Data Sharing and Third-Party Disclosure

rp10k does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with trusted third-party service providers and partners in the following limited circumstances:

3.1 Payment Processors

We share necessary financial information with licensed payment processors to facilitate deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors are contractually obligated to maintain strict data security standards.

3.2 Game Providers

We share limited technical data with certified game providers who supply our live casino, slots, and sports betting platforms. This data is necessary to deliver game content but does not include your financial information.

3.3 Identity Verification Services

We use third-party KYC verification services to authenticate identity documents and prevent fraud. These services process your ID documents and selfie photos in compliance with data protection regulations.

3.4 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, or government authorities when required by law, court order, or regulatory investigation. This includes compliance with anti-money laundering regulations and gambling licensing requirements.

3.5 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer and provide information about how the new entity will handle your data.

3.6 With Your Consent

We may share your information with other third parties when you have provided explicit consent for such disclosure.

4. Security Measures and Data Protection

rp10k employs comprehensive security measures to protect your personal and financial information:

4.1 Encryption and Secure Transmission

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL (Secure Socket Layer) encryption
• HTTPS Protocol: Our entire website operates on HTTPS to ensure secure browsing
• Encrypted Password Storage: User passwords are hashed and salted using advanced cryptographic algorithms and are never stored in plain text

4.2 Infrastructure Security

• Secure Data Centers: Personal data is stored on servers located in secure, access-controlled data centers with 24/7 physical security monitoring
• Firewalls and Intrusion Detection: Multiple layers of firewalls and intrusion detection systems protect against unauthorized access
• Regular Security Audits: Independent third-party security firms conduct regular penetration testing and vulnerability assessments
• DDoS Protection: Advanced distributed denial-of-service (DDoS) protection ensures platform availability

4.3 Access Controls

• Role-Based Access: Employee access to personal data is restricted based on job responsibilities and the principle of least privilege
• Two-Factor Authentication: Administrative accounts require two-factor authentication for access
• Activity Logging: All access to sensitive data is logged and monitored for suspicious activity

4.4 Employee Training

All rp10k employees undergo mandatory data protection and security awareness training. Employees are bound by strict confidentiality agreements and face disciplinary action for data misuse.

5. Data Retention

rp10k retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, and resolve disputes.

5.1 Active Account Data

While your account is active, we retain all account information, transaction history, and gaming records to provide continuous service and comply with regulatory requirements.

5.2 Closed Account Data

After you close your account, we retain certain information for legal and compliance purposes:

• Financial Records: Transaction history, deposits, withdrawals, and tax-related information are retained for a minimum of 7 years to comply with Indonesian financial record-keeping regulations
• Identity Verification Documents: KYC documents are retained for 5 years after account closure to comply with anti-money laundering regulations
• Gaming Activity: Betting history and game records are retained for 5 years for dispute resolution and regulatory audit purposes

5.3 Marketing Data

If you have consented to receive marketing communications, we retain your contact information until you withdraw consent or close your account. After opt-out, your data is suppressed from marketing lists but may be retained in suppression lists to prevent future contact.

5.4 Data Deletion

Once the retention period expires and there are no legal or regulatory reasons to retain your data, we securely delete or anonymize your personal information in accordance with data protection standards.

6. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of all personal data rp10k holds about you. This includes account information, transaction history, gaming activity, and KYC documents. To request your data, contact our customer support team.

6.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most account details directly through your account settings. For corrections to verified information (such as legal name or date of birth), contact customer support with supporting documentation.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances. However, we may be legally required to retain certain information for regulatory compliance, fraud prevention, or dispute resolution. When you request account closure, we will delete or anonymize data that is no longer legally required to be retained.

6.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal data under certain circumstances, such as while a dispute is being resolved or if you contest the accuracy of your data.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider.

6.6 Right to Object

You have the right to object to certain types of data processing, including:

• Processing for direct marketing purposes (you can opt out anytime)
• Processing based on legitimate interests (we will cease processing unless we have compelling legitimate grounds)

6.7 Right to Withdraw Consent

If we rely on your consent to process personal data (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

6.8 How to Exercise Your Rights

To exercise any of these privacy rights, contact rp10k customer support via email ([email protected]) or live chat. Please include sufficient information to verify your identity. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, keep you logged in, and provide personalized experiences. rp10k uses cookies and similar tracking technologies to enhance platform functionality and user experience.

7.2 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality, including account login, session management, and security features. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymous information about how users interact with rp10k, helping us identify areas for improvement and optimize performance.
• Functionality Cookies: Remember your preferences (such as language settings) to provide a personalized experience.
• Marketing Cookies: Track your browsing behavior to deliver relevant promotional content (only used with your consent).

7.3 Third-Party Cookies

Some cookies are set by third-party services we use, including game providers and analytics tools. These third parties have their own privacy policies governing how they use cookies and tracking data.

7.4 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling essential cookies will affect platform functionality and may prevent you from accessing certain features. Disabling marketing cookies will not affect your ability to use rp10k but may result in less relevant promotional content.

8. Children's Privacy Protection

rp10k is an adult-only gaming platform. We strictly prohibit use of our services by anyone under the age of 21 years. We do not knowingly collect personal information from minors.

If we discover that we have inadvertently collected personal data from a user under 21 years of age, we will immediately suspend the account, void all bets and winnings, confiscate all funds, and delete all associated personal information from our systems.

If you are a parent or guardian and believe your child has created an account on rp10k, please contact our customer support immediately so we can take appropriate action.

9. Changes to This Privacy Policy

rp10k reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email (if you have opted in to communications)
• Display a prominent notice on the rp10k homepage
• Require acceptance of the updated policy upon your next login (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the rp10k platform after policy updates constitutes acceptance of the revised terms.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how rp10k handles your personal data, please contact us:

• Email: [email protected] (please copy and paste this address into your email client; do not click)
• Live Chat: Available 24/7 through the rp10k platform
• Subject Line for Privacy Inquiries: Please include "Privacy Inquiry" or "Data Protection Request" in your subject line for faster processing

For formal data protection complaints or if you believe your privacy rights have been violated, you may also contact your local data protection authority or regulatory body.