Privacy Policy

Your privacy and data security are our top priorities. Learn how rp77 collects, uses, and protects your personal information.

Last Updated: January 15, 2026

Effective Date: January 1, 2026

1. Introduction

Welcome to the Privacy Policy of rp77, an online gaming platform serving players throughout Indonesia. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access our website, register an account, or use our gaming services. We are committed to safeguarding your privacy and handling your data in compliance with international data protection standards and applicable Indonesian regulations.

By accessing or using rp77 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this Privacy Policy, you must discontinue use of our services immediately. We reserve the right to update or modify this Privacy Policy at any time, and changes will take effect immediately upon posting on our website.

2. Data Controller Information

rp77 acts as the data controller for all personal information collected through our platform. We are responsible for determining the purposes and means of processing your personal data in accordance with this Privacy Policy. For questions, concerns, or requests regarding your personal data, please contact our Data Protection Officer using the contact details provided at the end of this document.

3. Information We Collect

3.1 Personal Information You Provide

When you register an account on rp77, we collect personal information that you voluntarily provide, including but not limited to:

  • Identity Information: Full legal name, date of birth, gender, and nationality
  • Contact Information: Residential address, email address, and mobile phone number
  • Account Credentials: Username, password (stored in encrypted form), and security questions
  • Financial Information: Bank account details, e-wallet information (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records
  • Verification Documents: Government-issued ID (Indonesian KTP), passport, driver's license, utility bills, or other documents required for KYC (Know Your Customer) compliance
  • Communication Records: Chat transcripts, email correspondence, support tickets, and survey responses

3.2 Automatically Collected Information

When you access our platform, we automatically collect certain technical and usage information through cookies and similar technologies:

  • Device Information: IP address, device type, operating system, browser type and version, screen resolution, language preferences
  • Usage Data: Pages visited, time spent on pages, clickstream data, referring/exit pages, date and time of access, game play history, bet amounts, wins and losses
  • Location Data: Approximate geographic location based on IP address to verify compliance with jurisdictional restrictions
  • Cookies and Tracking: Session cookies, persistent cookies, and similar tracking technologies to enhance user experience and platform functionality

3.3 Information from Third Parties

We may receive information about you from third-party sources including payment processors, fraud prevention services, identity verification providers, and marketing partners. This information is used to verify your identity, prevent fraud, comply with legal obligations, and improve our services.

4. How We Use Your Information

rp77 processes your personal information for the following legitimate purposes:

4.1 Account Management and Service Provision

  • Creating and managing your gaming account
  • Authenticating your identity and preventing unauthorized access
  • Processing deposits, withdrawals, and payment transactions
  • Providing access to games, sports betting, and lottery services
  • Maintaining accurate transaction records and account balances
  • Enabling customer support and responding to inquiries

4.2 Legal and Regulatory Compliance

  • Verifying your age (21+ requirement) and identity through KYC procedures
  • Complying with anti-money laundering (AML) regulations
  • Detecting and preventing fraud, cheating, and prohibited activities
  • Fulfilling reporting obligations to licensing authorities
  • Responding to legal requests, court orders, and law enforcement inquiries

4.3 Platform Improvement and Security

  • Analyzing usage patterns to improve website functionality and user experience
  • Monitoring and preventing technical issues, bugs, and security vulnerabilities
  • Detecting suspicious activity and protecting against cyber threats
  • Conducting internal audits and quality assurance testing

4.4 Marketing and Communications

  • Sending promotional offers, bonuses, and personalized marketing communications (with your consent)
  • Notifying you about changes to our services, terms, or policies
  • Conducting surveys and gathering feedback to improve our offerings

4.5 Responsible Gaming

  • Monitoring gaming behavior to identify potential problem gambling patterns
  • Implementing deposit limits, self-exclusion, and other responsible gaming tools
  • Providing support and resources for players experiencing gambling-related issues

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

Data Type Retention Period
Account Information Duration of active account + 7 years after closure
Transaction Records 7 years from transaction date (AML compliance)
KYC Documents 7 years after account closure (regulatory requirement)
Chat/Support Logs 3 years from communication date
Marketing Consent Until consent withdrawn + 1 year
Cookie Data Up to 12 months (session-dependent)

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data deletion procedures.

6. How We Share Your Information

rp77 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for legitimate business purposes:

6.1 Service Providers and Business Partners

  • Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) to process deposits and withdrawals
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other licensed game suppliers
  • Cloud Hosting: Secure data centers and cloud infrastructure providers
  • KYC/AML Vendors: Identity verification and fraud prevention services
  • Customer Support: Third-party support platforms for live chat and ticketing systems
  • Marketing Partners: Email service providers and analytics platforms (only with your consent)

6.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, courts, or government agencies when required by law, legal process, or to protect our rights, property, or safety, or that of our users or the public.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

7. Data Security

rp77 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

  • Encryption: All sensitive data is encrypted using 256-bit SSL/TLS encryption during transmission and AES-256 encryption at rest
  • Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis
  • Secure Infrastructure: Data stored in ISO 27001-certified data centers with physical security, redundancy, and disaster recovery protocols
  • Regular Audits: Periodic security audits, penetration testing, and vulnerability assessments conducted by independent third parties
  • Password Protection: Passwords are hashed using bcrypt or similar secure algorithms and never stored in plain text
  • Two-Factor Authentication: Optional 2FA available for enhanced account security
  • Employee Training: Regular data protection and security awareness training for all staff members

Your Security Responsibility

While we implement robust security measures, you also have a responsibility to protect your account. Keep your password confidential, do not share your login credentials, log out after each session, and notify us immediately if you suspect unauthorized access to your account.

8. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

8.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. You can update most account details directly through your account settings or by contacting customer support.

8.3 Right to Erasure

You may request deletion of your personal information, subject to legal retention obligations for financial records, KYC documents, and regulatory compliance (typically 7 years).

8.4 Right to Restriction

You may request that we restrict processing of your personal information in certain circumstances, such as while verifying data accuracy or investigating a complaint.

8.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider where technically feasible.

8.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time by clicking the unsubscribe link in marketing emails or contacting us directly.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. However, withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through our customer support channels. We will respond to your request within 30 days and may require identity verification to protect your information.

9. Cookies and Tracking Technologies

rp77 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

9.1 Types of Cookies We Use

  • Essential Cookies: Necessary for platform functionality, authentication, and security (cannot be disabled)
  • Performance Cookies: Collect anonymous usage statistics to improve website performance
  • Functional Cookies: Remember your preferences and settings for a personalized experience
  • Marketing Cookies: Track your activity across websites to deliver targeted advertising (requires consent)

9.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect website functionality. You may also opt out of interest-based advertising through industry opt-out tools. Note that opting out of cookies does not mean you will receive fewer advertisements, only that they will be less personalized.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside Indonesia where our service providers, data centers, or business partners are located. These countries may have different data protection laws than Indonesia. When transferring data internationally, we ensure adequate safeguards are in place through standard contractual clauses, adequacy decisions, or other approved transfer mechanisms to protect your information in accordance with this Privacy Policy.

11. Children's Privacy

rp77 services are strictly restricted to individuals aged 21 years and older. We do not knowingly collect personal information from minors. If we become aware that a user is under 21 years of age, we will immediately suspend the account, delete all personal information, and forfeit any remaining balance. Parents or guardians who believe their child has provided information to us should contact us immediately at [email protected].

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on our website or sending an email to your registered address. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Your continued use of rp77 services following any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy inquiries within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

14. Consent

By using rp77 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, disclosure, and storage of your personal information as described herein. If you do not agree with this Privacy Policy, please discontinue use of our services immediately.

Our Privacy Commitments

Bank-Level Encryption

All data encrypted with 256-bit SSL/TLS during transmission and AES-256 at rest, matching standards used by major financial institutions.

Strict Access Controls

Only authorized personnel can access your data on a need-to-know basis, with all access logged and audited regularly.

Regulatory Compliance

Fully compliant with KYC/AML regulations and international data protection standards to safeguard your information.

No Data Selling

We never sell your personal information to third parties. Your data is used solely for providing and improving our services.

Privacy by Design

Privacy protection is built into every feature and process from the ground up, not added as an afterthought.

Transparency & Control

You have full control over your data with rights to access, correct, delete, or export your information at any time.

Questions About Your Privacy?

Our team is here to help. Contact us anytime or review our other policies for more information.

Visit FAQ Terms & Conditions Return Home