Privacy Policy — rp2vip

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" — Any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, or erasure.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For rp2vip users, the Data Controller is the legal entity operating the rp2vip Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of rp2vip, under documented instructions, including KYC verification providers, payment processors, and analytics services.
• "Platform" — The rp2vip website at https://rp2vip.cam, including all associated services, tools, features, and applications.
• "Player" / "You" — Any individual who accesses the Platform, registers an account, or interacts with rp2vip services.
• "KYC" — Know Your Customer: the identity verification process required for full account functionality, including withdrawal processing.

2. Data Controller Information

rp2vip acts as the Data Controller in respect of all Personal Data collected through the Platform. The Platform is operated by the legal entity holding the rp2vip international gaming license. For any data-related queries, Players may contact the designated Data Protection contact at:

Email: [email protected] (plain text — not a clickable link)

rp2vip serves English-preference players across Indonesia, with particular relevance to users in Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Bali, and other Indonesian cities. Indonesian Rupiah (IDR / Rp) is the default account currency. This Policy applies to all Players regardless of their specific location within Indonesia.

3. Personal Data We Collect

3.1 Registration Data

When you create an rp2vip account, we collect: your full legal name, date of birth, email address, country of residence, and your chosen username. This data is mandatory — without it, we cannot create or maintain a valid account.

3.2 Identity Verification (KYC) Data

To comply with AML regulations and to verify your identity before processing withdrawals, we collect: a copy of your government-issued photo ID (Indonesian KTP or passport for Indonesian nationals), proof of address where required, and payment method ownership documentation (e.g., a screenshot of your BCA, BRI, BNI, or Mandiri account in your own name). KYC documents are processed by our accredited third-party verification partner and stored in an encrypted format.

3.3 Financial Transaction Data

We collect records of all deposits and withdrawals made through your rp2vip account, including transaction amounts (in Rp / IDR), payment method identifiers (e.g., last four digits of bank account number, e-wallet ID for OVO, DANA, GoPay, ShopeePay, or LinkAja), transaction timestamps, and processing status. Full financial account numbers are not stored by rp2vip.

3.4 Gaming Activity Data

We record all wagering activity on your account, including bet amounts, game types (football betting, slot games, live casino, crash games, togel (Indonesia's traditional numbers lottery), and others), session duration, win/loss outcomes, and active promotions claimed. This data is used for account integrity, responsible gaming monitoring, and bonus-compliance verification.

3.5 Technical and Device Data

We automatically collect technical data when you access the Platform, including your IP address, browser type and version, device type and operating system, screen resolution, referring URL, session start and end times, pages visited, and click-stream data. This data is used to optimize Platform performance, detect fraud, and enhance security.

3.6 Communications Data

If you contact rp2vip support via email, live chat, or WhatsApp, we retain records of those communications — including message content, timestamps, and resolution status — for a period of up to five years for quality assurance, training, and dispute-resolution purposes.

3.7 Voluntary Data

Any additional information you voluntarily provide — such as preferences shared in surveys, feedback submitted through support interactions, or promotional competition entries — is also collected and processed as described in this Policy.

4. How We Use Your Personal Data

rp2vip uses the Personal Data we collect for the following specific purposes:

rp2vip does not use automated decision-making (including profiling) in ways that produce legal or similarly significant effects on Players without human oversight. Automated risk-scoring systems are used for fraud detection and responsible gaming triggers, but final account-suspension decisions involve human review.

5. Legal Basis for Processing

rp2vip relies on the following legal bases for processing Personal Data, consistent with internationally recognized data-protection frameworks:

• Contract Performance: Processing necessary to provide the Platform services described in our Terms & Conditions, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CFT requirements, KYC verification obligations, and tax-reporting requirements under our licensing jurisdiction.
• Legitimate Interests: Processing necessary for rp2vip's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: For optional processing activities such as marketing emails or third-party analytics cookies, we rely on your explicit, freely given, and revocable consent. You may withdraw consent at any time by contacting [email protected].

6. Sharing Your Personal Data

6.1 Authorized Third-Party Processors

rp2vip shares Personal Data with carefully selected third-party service providers who process data strictly on our behalf and under documented data-processing agreements. Categories of authorized processors include:

• KYC / Identity Verification Providers: To verify ID documents, age, and address in compliance with AML requirements.
• Payment Processors: Including Indonesian bank transfer networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), solely to facilitate your transactions.
• IT Infrastructure & Hosting Providers: To maintain the secure servers and network infrastructure on which the Platform operates.
• Fraud Detection & Cybersecurity Services: To detect, investigate, and prevent fraudulent activity and account compromise.
• Analytics Providers: For aggregated, anonymized Platform performance and user-experience analytics only.

6.2 Legal Disclosures

rp2vip may disclose Personal Data to regulatory authorities, law-enforcement agencies, or courts when required to do so by applicable law, court order, or enforceable regulatory demand. We will, where legally permitted, notify you of such disclosures.

6.3 No Commercial Data Sales

rp2vip does not sell, rent, auction, or otherwise transfer your Personal Data to any third party for that party's own marketing or commercial purposes. This prohibition is unconditional and applies regardless of business changes or corporate restructuring, except as disclosed in a future update to this Policy.

6.4 Business Transfers

In the event of a merger, acquisition, asset sale, or other corporate restructuring involving rp2vip, Player data may be transferred to the successor entity. You will be notified by email at least 30 days before your data is subject to any materially different privacy practices as a result of such a transaction.

7. Cookies & Tracking Technologies

rp2vip uses cookies and similar tracking technologies to operate the Platform, recognize returning users, and improve the overall experience. The following cookie categories are in use:

You can manage cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. We do not use cookies to track your browsing activity on websites outside of rp2vip.

8. Data Retention

rp2vip retains Personal Data for the periods set out below, after which data is securely deleted or anonymized:

• Account Data: Retained for the duration of the account relationship and for a period of 5 years following account closure, to comply with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years following the end of the business relationship, in line with international AML standards.
• Transaction Records: Retained for 7 years from the date of each transaction, as required by our licensing jurisdiction's financial record-keeping obligations.
• Communications Records: Retained for 5 years from the date of the communication, for dispute-resolution and quality-assurance purposes.
• Technical / Device Logs: Retained for a maximum of 12 months, after which log data is anonymized and used only in aggregate form.
• Marketing Consent Records: Retained for the duration of your consent plus 3 years to evidence the consent and its withdrawal.

Where you exercise your right to erasure (see Section 10), rp2vip will comply within 30 days, subject to any overriding legal obligation to retain specific categories of data (principally AML and transaction records).

9. International Data Transfers

rp2vip's servers and operational infrastructure may be located in jurisdictions outside Indonesia. When your Personal Data is transferred to a country that does not provide an equivalent level of data protection, rp2vip implements appropriate safeguards, including:

• Standard contractual clauses (SCCs) or equivalent data-transfer agreements with all receiving entities;
• Binding corporate rules where data is transferred to affiliated entities;
• Transfers to certified third-party processors that maintain independently audited security standards.

By using rp2vip, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia. rp2vip takes all reasonable steps to ensure that such transfers are made securely and under equivalent protections to those described in this Policy.

10. Your Data Protection Rights

As a Player on rp2vip, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Request". We will respond within 30 calendar days.

11. Data Security

rp2vip implements a layered security architecture to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction:

• Encryption at Rest and in Transit: All stored Personal Data is encrypted. All data in transit is protected by 256-bit TLS.
• Access Controls: Access to Personal Data within rp2vip's organization is restricted to personnel with a documented operational need. All internal access is logged and audited.
• Two-Factor Authentication (2FA): Available to all Players and mandatory for all internal staff with database access.
• Intrusion Detection Systems: Automated monitoring of network traffic and server activity for anomalous patterns indicative of attack or unauthorized access.
• Regular Security Audits: rp2vip commissions independent penetration tests and security reviews on a scheduled basis.
• Data Breach Response: In the event of a confirmed Personal Data breach that poses a risk to your rights, rp2vip will notify affected Players by email within 72 hours of becoming aware of the breach, and will simultaneously notify the relevant regulatory authority where required.

While rp2vip takes all reasonable technical and organizational measures to protect your data, no system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials and for notifying us promptly if you suspect unauthorized account access.

12. Children's Privacy

rp2vip strictly enforces a minimum age requirement of 21 years for all registered Players in Indonesia. The Platform is not directed at, and does not knowingly collect Personal Data from, any person under the age of 21. If rp2vip becomes aware that Personal Data has been collected from a person under 21 — whether through failed KYC verification, parental report, or other means — the associated account will be closed immediately, all data will be deleted within 30 days (subject to mandatory AML retention obligations), and any deposited funds will be returned via the original deposit method after verification.

If you believe that a minor has registered on rp2vip or accessed the Platform, please contact us immediately at [email protected].

13. Amendments to this Privacy Policy

rp2vip reserves the right to update this Privacy Policy at any time. When material changes are made — changes that affect how we collect, use, or share your Personal Data in ways that are meaningfully different from what is described here — we will:

• Notify all registered Players by email to the address on file, at least 14 days before the changes take effect;
• Update the "Effective Date" and version number at the top of this page;
• Maintain a changelog summary of material changes within the Policy itself where feasible.

For non-material changes (such as typographical corrections, clarifications that do not alter data-processing practices, or updates required immediately by law), rp2vip may update the Policy without advance notice. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact & Complaints

For all data-related enquiries, including subject access requests, consent withdrawals, rectification requests, or erasure requests, contact the rp2vip Data Protection team:

• Email: [email protected] (please include "Data Subject Request" in the subject line)
• Response Time: All data subject requests are acknowledged within 5 business days and substantively addressed within 30 calendar days. More complex requests may require up to 90 days — you will be informed if this applies.
• Language: Requests may be submitted in English or Indonesian (Bahasa Indonesia).

If you are not satisfied with how rp2vip has handled your Personal Data or responded to your request, you have the right to lodge a complaint with the supervisory authority in your jurisdiction or with the data-protection regulator in rp2vip's licensing jurisdiction. rp2vip will cooperate fully with any such regulator inquiry.

For information about our approach to responsible gaming and player protection tools, please visit our Responsible Gaming page. For full Platform terms, see our Terms & Conditions.