rpvip2 Privacy Policy

rpvip2 ("Company", "We", "Us", "Our") is committed to protecting the privacy and personal data of every individual who interacts with the rpvip2 platform ("You", "Member", "User"). This Privacy Policy describes how we act as the data controller for personal information collected through our online gaming platform, which is accessible at rpvip2.bio.

This Policy applies to all current and former registered Members, prospective members who have commenced but not completed the registration process, visitors to the rpvip2 website who have not registered an account, and any individual who contacts rpvip2 through our live chat, email, or other communication channels.

The rpvip2 platform serves players across all of Indonesia — from Jakarta, Surabaya, Medan, and Bandung to Bali, Yogyakarta, Semarang, Makassar, and beyond. Our default time-zone reference for data processing activities is Western Indonesia Time (WIB, UTC+7), though our systems operate continuously across all Indonesian time zones including WITA (UTC+8) and WIT (UTC+9).

This Policy does not extend to the privacy practices of third-party websites or services that may be linked from our platform, including but not limited to payment processors, game software providers, or identity verification services. We encourage you to review the privacy policies of those third-party providers independently.

rpvip2 collects only the personal data that is necessary to provide a safe, compliant, and high-quality gaming experience. The categories of data we collect are set out in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health-related data, except where a Member voluntarily discloses such information in the context of a responsible gaming interaction (for example, disclosing a gambling-related health concern to our support team). Any such voluntarily disclosed sensitive data is handled with the highest level of care and used solely for the purpose for which it was provided.

rpvip2 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or filling in any form on the rpvip2 platform.
• Automated collection: Technical data gathered automatically when you access the rpvip2 website or platform, including IP addresses, device identifiers, browser fingerprints, session cookies, and page-interaction logs. This data is collected via server logs, cookies, and similar tracking technologies — see Clause 9 (Cookies & Tracking) for full details.
• Third-party providers: Identity and address verification data received from our KYC verification partners when you submit identification documents. Financial transaction data received from our payment processing partners (banks and e-wallet operators) in connection with deposits and withdrawals. Fraud-risk signals received from our anti-fraud and AML compliance service providers.
• Gaming activity generation: Data generated automatically through your use of games on the platform — including bet placement, game outcomes, session duration, and account balance movements — which are recorded in our gaming system logs.
• Customer communications: Information you provide voluntarily in live chat conversations, email correspondence, or any other communication directed to the rpvip2 support or compliance teams.

rpvip2 processes your personal data for the following specific, legitimate, and documented purposes:

• Account management: To create, administer, and maintain your rpvip2 Member Account, including authentication, balance management, and account settings.
• Identity verification (KYC): To verify your identity and age (21+ requirement) in compliance with our international operating licence obligations and anti-money laundering (AML) policies before processing withdrawal requests or as required by our risk team.
• Payment processing: To execute deposit and withdrawal transactions via Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records of all transactions.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other financial crimes on the platform. This includes the use of automated risk-scoring systems and human review by our compliance team.
• Responsible gaming: To monitor gaming patterns and identify Members who may be displaying signs of problem gambling, and to administer self-exclusion requests, deposit limits, session time-outs, and other responsible gaming tools requested by Members.
• Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or other support channels.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, security, and user experience of the rpvip2 platform.
• Marketing communications: To send you personalised promotional offers, bonus notifications, and updates about new games or features — but only where you have provided explicit consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Legal compliance: To meet our obligations under applicable international gaming regulations, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.

rpvip2 processes your personal data only where a valid legal basis exists. Depending on the specific processing activity, we rely on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including Account creation, payment processing, game provision, and customer support — is carried out on the basis of contractual necessity. Without this processing, we would be unable to provide you with access to the rpvip2 platform.
• Legal obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and the retention of financial records — are required by our international operating licence conditions and applicable financial crime prevention regulations.
• Legitimate interests: We process Technical Data and Gaming Activity Data to detect fraud, improve platform security, and conduct internal analytics. In each case, we have assessed that our legitimate interests are not overridden by your privacy rights.
• Consent: Where we send you marketing communications or place non-essential cookies on your device, we rely on your explicit consent. You may withdraw consent at any time by adjusting your Account communication preferences or by contacting our support team.

rpvip2 shares your personal data only with the categories of third parties described below, and only to the extent necessary for each stated purpose. All third-party recipients are bound by contractual data processing agreements that require them to protect your data to standards consistent with this Privacy Policy:

rpvip2 does not share your personal data with advertising networks, data brokers, social media platforms, or any other entity for commercial marketing, profiling, or audience-targeting purposes.

rpvip2 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. Our standard retention periods are as follows:

• Active Account data: Retained for the duration of your Account's active life and for a minimum of five (5) years following Account closure, in order to meet AML record-keeping obligations under our international operating licence.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with international financial crime prevention standards.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the KYC verification process, or for five years following Account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service improvement.
• Marketing consent records: Retained for the duration of your consent and for two (2) years after consent is withdrawn, to demonstrate regulatory compliance with consent obligations.
• Technical / log data: Typically retained for twelve (12) months, unless specific data is required for an ongoing fraud investigation or legal proceeding, in which case it is retained until the matter is resolved.

When retention periods expire, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to ongoing legal proceedings or regulatory requirements, it is isolated from active processing systems and access is restricted to authorised compliance personnel only.

rpvip2 implements a comprehensive, layered security framework to protect Member personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the rpvip2 platform is encrypted using industry-standard 256-bit SSL/TLS protocols — the same encryption standard used by major Indonesian financial institutions including BCA and Mandiri.
• At-rest encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption, ensuring that data remains protected even in the event of a storage-level security incident.
• Access controls: Access to Member personal data is restricted on a strict need-to-know basis. All internal rpvip2 staff with data access privileges are subject to background checks, confidentiality agreements, and role-based access controls. Multi-factor authentication is enforced for all internal system access.
• Intrusion detection and monitoring: Our infrastructure is continuously monitored by automated intrusion detection systems (IDS) and a dedicated security operations team. Suspicious activity is flagged and investigated in real time.
• Penetration testing: The rpvip2 platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Data minimisation: We apply the principle of data minimisation — collecting only the personal data that is strictly necessary for each specific processing purpose — to reduce the privacy risk surface of our platform.

While rpvip2 implements robust technical and organisational security measures, no digital system can be guaranteed to be completely immune from security incidents. You are encouraged to use a strong, unique password for your rpvip2 Account and to enable two-factor authentication (2FA) from your Account security settings.

The rpvip2 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to improve your overall experience. A cookie is a small text file stored on your device by your browser at the instruction of a website server.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that ensure stable platform performance. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and responsible gaming tool configurations, so that these settings persist between sessions without requiring you to re-enter them each visit.
• Analytical cookies: Used to understand how Members navigate and use the rpvip2 platform, enabling our product and engineering teams to identify areas for improvement. All analytical data is aggregated and anonymised — no individual Member is singled out for behavioural analysis.
• Marketing cookies: Used only where you have provided explicit consent, to deliver personalised promotional content relevant to your gaming preferences and activity patterns on the platform. You may withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser's built-in cookie management settings. Please note that disabling strictly necessary cookies will impair your ability to use the rpvip2 platform. Disabling functional or analytical cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

As a Member of the rpvip2 platform, you hold the following rights in respect of your personal data. You may exercise any of these rights at any time by contacting our support team via live chat or by emailing [email protected]:

rpvip2 will respond to all rights requests within 30 days of receipt. In complex cases requiring additional investigation, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no fee for submitting a rights request, except in cases of manifestly unfounded or excessive requests, where a reasonable administrative fee may apply.

rpvip2 employs the following age-assurance measures to prevent underage access to the platform:

• Date of birth is a mandatory field during Account registration, and the platform rejects registrations that indicate an age below 21.
• All Members are required to complete KYC identity verification — which includes submission of a government-issued photo ID — before withdrawal requests are processed. This verification confirms both identity and age.
• Our risk and compliance team conducts ongoing monitoring for indicators of potential underage use and may request additional identity documentation at any time.

If you are a parent or guardian and believe that your child has created an Account on the rpvip2 platform, please contact us immediately at [email protected]. We will investigate and take appropriate action — including Account closure and data deletion — as a matter of priority.

rpvip2 is an internationally licensed online gaming operator. As a result, some of the third-party service providers we work with — including certain game software providers, cloud infrastructure partners, and KYC verification services — may process personal data on servers located outside Indonesia.

Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to international best practice, rpvip2 ensures that appropriate safeguards are in place, including:

• Standard contractual data protection clauses incorporated into agreements with all third-party processors operating outside Indonesia.
• Technical security measures — including end-to-end encryption of all data in transit — applied to all cross-border data transfers.
• Restrictions limiting the scope of data transferred internationally to the minimum necessary for each specific processing purpose.

By using the rpvip2 platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Indonesia, subject to the safeguards described above.