Privacy Policy
rrk55 Data Commitment

01 Introduction

rrk55 (referred to in this policy as "we", "us", "our", or "rrk55") is committed to protecting the personal data of all individuals who interact with our platform. We operate an online sports betting and gaming platform specifically designed for the Indonesian market, and we understand that our users place significant trust in us when they share their personal information.

This Privacy Policy applies to all personal data collected through the rrk55 website at https://rrk55.cam, including data collected during account registration, identity verification (KYC), deposit and withdrawal transactions, customer support interactions, and general platform browsing. It applies to all users located in Indonesia, as well as any individual accessing the platform from any other location.

rrk55 acts as the data controller for all personal data processed under this policy. Where we engage third-party processors — such as payment providers, game studios, or fraud detection services — we ensure appropriate data processing agreements are in place to protect your data to the same standard we apply internally.

02 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably identify a living individual, directly or indirectly. This includes name, national identity number, email address, device identifiers, and transaction records.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, and any other handling.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. rrk55 is the data controller for all data described in this policy.
• "Data Processor" — a third party that processes personal data on behalf of rrk55 under a contractual data processing agreement.
• "KYC" — Know Your Customer. The identity verification process required under international anti-money laundering (AML) and fraud prevention standards.
• "Cookies" — small text files placed on a user's device by a website to store session and preference information, facilitate analytics, and support fraud detection.
• "User" — any individual who accesses, registers for, or interacts with the rrk55 platform in any capacity.
• "Platform" — the rrk55 website at https://rrk55.cam and all associated services, features, and tools.

03 Data We Collect

rrk55 collects personal data across several categories, each serving a specific operational or compliance purpose. The table below summarizes the categories of data we collect:

04 How We Collect Your Data

4.1 Direct Collection

The majority of personal data we hold about you is provided directly by you through the following interactions:

• Completing the account registration form on rrk55;
• Submitting KYC documents during identity verification;
• Making deposits or requesting withdrawals via Indonesian bank transfer or e-wallet;
• Contacting our customer support team via live chat or email;
• Participating in promotional campaigns or bonus programs.

4.2 Automated Collection

When you use the rrk55 platform, certain technical and behavioral data is collected automatically through our platform systems and cookies. This includes your IP address, the pages you visit, how long you spend in each game, and the sequence of actions taken during a session. This automated data collection is essential for security monitoring, fraud detection, and the responsible gaming behavioral analysis we conduct to protect vulnerable users.

4.3 Third-Party Sources

In limited circumstances, rrk55 may receive data about you from third-party sources, including:

• Identity verification bureaus used to cross-check KYC documents;
• Payment processing partners who provide transaction confirmation data;
• Fraud intelligence networks that share risk signals associated with known fraudulent identities or payment instruments;
• Game providers (such as Pragmatic Play, Evolution Gaming, and Spribe) who may share session data relevant to dispute resolution.

05 Purposes of Processing

rrk55 processes your personal data for the following specific purposes. We do not process personal data for any purpose beyond what is described here without first obtaining your explicit consent:

• Account Management: Creating, maintaining, and securing your rrk55 account; authenticating your identity at login; managing password resets and two-factor authentication.
• Financial Transactions: Processing deposits and withdrawals via BCA, BRI, BNI , Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja; reconciling account balances; issuing bonus credits and processing wagering fulfillment.
• Identity Verification (KYC): Confirming that all users are who they claim to be, are at least 21 years of age, and are submitting legitimate payment instruments registered in their own name — in compliance with international AML standards.
• Fraud Prevention & Security: Detecting and preventing unauthorized account access, duplicate account creation, payment fraud, money laundering, and any other activity that violates our Terms & Conditions or applicable law.
• Responsible Gaming: Monitoring betting patterns and session behavior to identify signs of problem gambling; enforcing deposit limits, self-exclusion periods, and cooling-off restrictions set by the user or imposed by rrk55 under its responsible gaming obligations.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and regulatory compliance purposes.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering regulations, gaming licensing requirements, and any lawful request from a competent authority.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience — this analysis does not involve personally identifiable data.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may withdraw consent for marketing communications at any time by contacting our support team.

06 Legal Basis for Processing

rrk55 processes personal data on the following legal bases, consistent with internationally recognized data protection principles:

07 Data Sharing with Third Parties

7.1 Categories of Recipients

rrk55 shares personal data only with the following categories of third parties, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Indonesian bank transfer networks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive financial data necessary to execute deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Third-party identity bureaus that assist in verifying the authenticity of documents submitted during the KYC process. These providers process data solely on our behalf and are contractually prohibited from retaining or using data for any other purpose.
• Game Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized or pseudonymized session data for the purpose of game integrity verification and dispute resolution.
• Fraud Intelligence Networks: Industry-standard fraud prevention services may receive technical data (such as device fingerprints and IP addresses) to cross-reference against known fraud databases.
• Regulatory & Legal Authorities: We will disclose personal data to competent governmental, regulatory, or law enforcement authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of rrk55, its users, or the public.
• Professional Advisers: Lawyers, auditors, and insurers who require access to data in the course of providing professional services to rrk55, subject to strict confidentiality obligations.

7.2 Data Processing Agreements

All third-party processors who handle personal data on behalf of rrk55 are required to enter into a formal Data Processing Agreement (DPA) that obligates them to: process data only on rrk55's documented instructions; implement appropriate technical and organizational security measures; not engage sub-processors without rrk55's prior written authorization; and delete or return all personal data upon termination of the service relationship.

08 International Data Transfers

As a platform that engages internationally licensed game providers and compliance services, rrk55 may transfer certain personal data to servers or processors located outside Indonesia. Where such transfers occur, rrk55 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses (SCCs) or equivalent data transfer mechanisms recognized under applicable data protection law;
• Transfer only to jurisdictions that provide an adequate level of data protection as assessed by rrk55's compliance review;
• Binding corporate rules or equivalent intragroup data transfer frameworks where transfers occur between affiliated entities.

The primary data processing infrastructure for rrk55 is hosted on servers with strong physical and network security controls, protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Server access is restricted to authorized personnel only, with full audit logging of all access events.

09 Data Retention

rrk55 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention schedules apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction methods. Anonymized data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

10 Your Data Rights

As a user of the rrk55 platform, you have the following rights in relation to your personal data. rrk55 is committed to honoring these rights promptly and without undue restriction:

• Right of Access: You may request a copy of all personal data rrk55 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For account details, many fields are editable directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to our legal obligation to retain certain data (e.g., AML records) for specified minimum periods.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while a dispute over data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, where your particular situation warrants it. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, submit a written request to our support team at [email protected]. We will acknowledge your request within 2 business days (WIB) and provide a full response within 30 calendar days. In complex cases, we may extend this period by a further 30 days, with written notice to you explaining the reason for the extension.

11 Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you visit the rrk55 platform. They enable us to recognize your browser, maintain your session state, remember your preferences, and collect analytical and security data. rrk55 also uses similar technologies including web beacons, pixel tags, and local storage objects for equivalent purposes.

11.2 Cookie Categories Used by rrk55

The following categories of cookies are used on the rrk55 platform. The visual below illustrates which categories are essential (always active) and which are optional (user-controlled):

11.3 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling strictly necessary cookies will impair your ability to use the rrk55 platform, as session and authentication cookies are required for login and gameplay. Instructions for managing cookies in popular browsers are widely available from each browser vendor's support documentation.

12 Security Measures

rrk55 applies a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the rrk55 platform is encrypted in transit using industry-standard TLS 1.3 protocol.
• AES-256 Encryption at Rest: All personal data stored on rrk55 servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): All rrk55 user accounts support two-factor authentication via SMS OTP or authenticator app to protect against unauthorized login.
• Access Control: Internal access to personal data is restricted on a strict need-to-know basis. All internal access events are logged with full audit trails reviewed regularly by our security team.
• Penetration Testing: The rrk55 platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses proactively.
• Incident Response Plan: In the event of a data breach that is likely to result in risk to users, rrk55 will notify affected users and relevant authorities within 72 hours of becoming aware of the incident, in accordance with applicable data protection law.
• Staff Training: All rrk55 personnel with access to personal data undergo mandatory data protection and information security training as part of their onboarding and annually thereafter.

13 Protection of Minors

The rrk55 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21 years of age, you must not register for or use the rrk55 platform in any capacity.

Where rrk55 discovers or is notified that an account has been registered by, or personal data has been collected from, a person under the age of 21, we will immediately suspend the account, delete all associated personal data to the extent permitted by our legal obligations, and report the incident internally. If you believe a minor has registered on the rrk55 platform, please notify us immediately at [email protected].

Our KYC process — which requires submission of a valid Indonesian KTP or passport — serves as a primary safeguard against underage registration, as these documents contain date-of-birth information that is independently verifiable.

14 Amendments to This Policy

rrk55 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this policy, we will:

• Update the "Last Updated" date displayed at the top of this document;
• Notify registered users by email to the address on file at least 7 days before the amended policy takes effect;
• Display a prominent notice on the rrk55 platform for a period of at least 14 days following the effective date of any significant change.

Your continued use of the rrk55 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended terms, you should cease using the platform and contact us to arrange account closure and data handling in accordance with your rights under Section 10.

15 Contact & Data Protection Enquiries

For any questions, concerns, or requests related to this Privacy Policy or rrk55's data processing practices, please contact us using the details below. We take all privacy enquiries seriously and aim to respond promptly and transparently.