Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected by rr889 through our website at rr889.cam, mobile applications, and related services (collectively, the "Platform"). This policy is designed to comply with international data protection standards and Indonesian privacy regulations, ensuring that your personal information is handled responsibly, securely, and transparently.

rr889 operates as an online betting and gaming platform serving Indonesian players with sports betting, live casino, slots, and other entertainment products. As part of our operations, we necessarily collect and process personal data to provide our services, comply with legal obligations, prevent fraud, and enhance user experience. We are committed to using your data only for legitimate purposes and implementing industry-leading security measures to protect it from unauthorized access, misuse, or disclosure.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform. If you have questions about how we handle your data or wish to exercise your privacy rights, please contact our Data Protection Officer at [email protected].

2. Information We Collect

To provide and improve rr889 services, we collect various types of personal information from you. The categories of data we collect include:

2.1 Account Registration Information

When you create an rr889 account, we collect:

• Personal Identification: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address
• Account Credentials: Username, password (stored in encrypted format)
• Security Information: Security questions and answers, two-factor authentication settings

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and verify that you meet age requirements, we collect:

• Government-issued identification documents (Indonesian KTP, passport, driver's license)
• Proof of address documents (utility bills, bank statements, government correspondence)
• Selfie photographs for identity verification purposes
• Bank account details or e-wallet information for payment verification

2.3 Financial and Transaction Data

When you deposit funds, place bets, or withdraw winnings, we collect:

• Payment method details (bank account information, e-wallet accounts - OVO, DANA, GoPay, etc.)
• Transaction history (deposits, withdrawals, bet placements, game play)
• Betting and gaming activity (games played, bet amounts, winnings, losses)
• Bonus and promotion participation records
• Account balance and transaction timestamps

2.4 Technical and Usage Data

We automatically collect technical information when you access rr889:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Connection Data: IP address, internet service provider, connection speed
• Usage Analytics: Pages visited, features used, time spent on Platform, referral sources
• Cookies and Similar Technologies: Session cookies, persistent cookies, web beacons, local storage data
• Geolocation Data: Approximate location based on IP address to verify jurisdiction compliance

2.5 Communication and Support Data

When you contact customer support or communicate with rr889, we collect:

• Support ticket contents, live chat transcripts, email correspondence
• Phone call recordings (with your consent, for quality assurance and training purposes)
• Feedback, reviews, and survey responses you provide
• Social media interactions and public posts mentioning rr889

2.6 Marketing Preferences and Behavioral Data

• Marketing communication preferences (email, SMS, push notification opt-ins)
• Promotional campaign participation and referral activity
• Gaming preferences and favorite games for personalized recommendations
• Responsible gaming settings (deposit limits, time-out periods, self-exclusion)

3. How We Use Your Information

rr889 uses your personal data for the following legitimate purposes:

3.1 Service Provision and Account Management

• Creating, maintaining, and securing your rr889 account
• Processing deposits, withdrawals, and financial transactions
• Facilitating sports betting, casino gaming, and other entertainment services
• Settling bets and crediting winnings to your account
• Managing bonuses, promotions, and loyalty rewards
• Providing customer support and responding to inquiries

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) through KYC processes
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
• Detecting and preventing fraud, collusion, cheating, and other illegal activities
• Investigating and reporting suspicious transactions to relevant authorities
• Responding to legal requests, court orders, and regulatory inquiries
• Maintaining records for audit and compliance purposes as required by law

3.3 Security and Fraud Prevention

• Monitoring for unusual betting patterns, multiple accounts, and bonus abuse
• Implementing account security measures (two-factor authentication, login notifications)
• Detecting and blocking unauthorized access attempts
• Verifying payment method ownership to prevent payment fraud
• Protecting rr889 and our users from cybersecurity threats

3.4 Platform Improvement and Personalization

• Analyzing user behavior to improve website functionality and user experience
• Personalizing game recommendations based on your preferences and playing history
• A/B testing new features and optimizing Platform performance
• Developing new products and services tailored to Indonesian player preferences
• Conducting market research and statistical analysis

3.5 Marketing and Communications

• Sending promotional offers, bonus notifications, and special event announcements (with your consent)
• Providing personalized betting tips and game suggestions
• Delivering transactional communications (deposit confirmations, withdrawal notifications, bet receipts)
• Sharing important account updates, policy changes, and security alerts
• Inviting you to participate in surveys and feedback programs

3.6 Responsible Gaming Support

• Implementing and enforcing deposit limits, loss limits, and session time restrictions you set
• Processing self-exclusion and cool-off period requests
• Monitoring for signs of problem gambling behavior and offering support resources
• Preventing underage gambling through age verification
• Providing access to responsible gaming tools and educational materials

4. Legal Basis for Processing Your Data

Under applicable data protection laws, rr889 processes your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., our Terms and Conditions) and provide rr889 services you have requested, including account management, payment processing, and game access.
• Legal Obligation: Processing is required to comply with legal and regulatory requirements, including KYC/AML obligations, age verification, tax reporting, and responding to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for rr889's legitimate business interests, such as fraud prevention, security protection, service improvement, marketing to existing customers, and enforcing our terms and policies, provided these interests do not override your fundamental rights.
• Consent: For certain processing activities such as marketing communications and non-essential cookies, we rely on your explicit consent, which you can withdraw at any time without affecting the lawfulness of prior processing.

5. How We Share Your Information

rr889 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients for legitimate business purposes:

5.1 Service Providers and Business Partners

• Payment Processors: Banks, e-wallet providers (OVO, DANA, GoPay, etc.), and payment gateways that facilitate deposits and withdrawals
• Gaming Software Providers: Companies like Pragmatic Play, Evolution Gaming, PG Soft that supply casino games and sports betting platforms
• Identity Verification Services: Third-party KYC and age verification providers
• Cloud Hosting and IT Infrastructure: Secure data storage and server providers
• Customer Support Platforms: Live chat, ticketing, and CRM systems
• Marketing and Analytics Tools: Email service providers, analytics platforms, advertising networks

All service providers are contractually bound to protect your data and use it only for the specific purposes for which it was shared. We conduct due diligence to ensure third parties maintain adequate security standards.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, government agencies, courts, or other authorities when:

• Required by law, regulation, legal process, or court order
• Necessary to investigate, prevent, or take action regarding suspected illegal activities, fraud, or security threats
• Required to comply with AML/CTF reporting obligations
• Necessary to protect the rights, property, or safety of rr889, our users, or the public
• Requested by tax authorities for tax compliance purposes

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and/or prominent notice on our Platform of any change in ownership or control of your personal data.

5.4 With Your Consent

We may share your information with other third parties when you have given explicit consent for specific purposes not covered in this policy.

6. Data Security

rr889 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Strict access controls ensure that only authorized personnel with legitimate business needs can access personal data. All access is logged and monitored.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security measures including 24/7 surveillance, biometric access controls, and environmental monitoring.
• Regular Security Audits: We conduct regular internal security audits and engage third-party security experts to perform penetration testing and vulnerability assessments.
• Fraud Detection Systems: Advanced algorithms monitor for suspicious activity, unusual betting patterns, and potential account compromises.
• Employee Training: All rr889 staff receive mandatory data protection and security awareness training.
• Incident Response Plan: We maintain a comprehensive data breach response plan to quickly identify, contain, and remediate security incidents.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. If you have reason to believe that your account security has been compromised, please contact us immediately at [email protected].

7. Data Retention

rr889 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:

• Active Accounts: Personal data for active accounts is retained for the duration of your relationship with rr889 plus any additional period required by law.
• Closed Accounts: After account closure, we retain identification documents, transaction records, and communication history for a minimum of 5 years to comply with AML/CTF regulations, tax laws, and to defend against potential legal claims.
• Marketing Data: Marketing contact information is retained until you opt out of communications or request deletion, subject to legal retention requirements.
• Security and Fraud Data: Information related to fraud investigations, security incidents, or legal disputes is retained for up to 7 years or longer if required by ongoing investigations or litigation.
• Analytics and Aggregated Data: Anonymized and aggregated data that cannot identify you personally may be retained indefinitely for statistical and research purposes.

When personal data is no longer required, we securely delete or anonymize it in accordance with our data retention and disposal policies.

8. Your Privacy Rights

Subject to applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal data we hold about you, including information about how we process it.
• Right to Rectification: You can update or correct inaccurate or incomplete personal information through your account settings or by contacting customer support.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected. Note that we may be required to retain certain information for legal or regulatory compliance.
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain situations, such as while we verify data accuracy or investigate a complaint.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You can object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to file a complaint with a data protection supervisory authority if you believe we have violated your privacy rights.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your account details and a description of your request. We will respond to your request within 30 days. For security purposes, we may request additional information to verify your identity before processing your request.

9. Cookies and Tracking Technologies

rr889 uses cookies and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Necessary for Platform functionality, including login sessions, security, and transaction processing. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how visitors use our Platform, helping us improve functionality and user experience.
• Functionality Cookies: Remember your preferences (language, currency) and personalize your experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness (requires your consent).

You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect Platform functionality and your ability to access some features. For more information about cookies and how to control them, visit www.aboutcookies.org.

10. International Data Transfers

rr889 primarily operates in Indonesia and stores data on servers located within secure data centers. However, some of our service providers and business partners may be located in other countries. When we transfer your personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Verification that recipient countries provide adequate data protection
• Binding corporate rules for transfers within our corporate group
• Your explicit consent for specific transfers where required by law

11. Children's Privacy

rr889 services are intended exclusively for individuals aged 21 and older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that a person under 21 has provided us with personal data, we will immediately delete such information and close the associated account. If you believe we may have inadvertently collected information from someone underage, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

rr889 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated via email to your registered email address and/or through a prominent notice on our Platform at least 30 days before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of rr889 services after any modifications to this Privacy Policy constitutes acceptance of the updated policy. If you do not agree with the changes, you must discontinue use of our Platform and close your account.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how rr889 handles your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through the rr889 Platform
• Response Time: We aim to respond to all privacy inquiries within 30 days

For formal complaints or data subject access requests, please include your full name, account username, registered email address, and a detailed description of your inquiry or request. We take all privacy concerns seriously and will investigate and respond to all legitimate requests in accordance with applicable law.