Summary: rp999 collects only the personal data required to operate your account, process transactions in Indonesian Rupiah (IDR), and meet our licensing and anti-money-laundering obligations. We do not sell your data to third parties for marketing purposes. All data is encrypted at rest and in transit using industry-standard SSL/TLS protocols. Players may exercise their data rights at any time by contacting [email protected].
rp999 ("we", "us", "our") operates the online gaming platform accessible at rp999.bio, offering casino games, a sportsbook, live dealer tables, esports betting markets, and related financial services to adult players — with a particular focus on serving Indonesian players aged 21 and above. As a data controller, rp999 is responsible for determining how and why personal data belonging to its players and platform visitors is processed.
This Privacy Policy applies to all personal data processed by rp999 in connection with your use of the Platform, regardless of whether you access rp999 via a desktop browser, a mobile browser, or any other device. It covers data collected at registration, during ongoing account use, during KYC verification, and during any interaction with rp999 customer support.
This policy should be read alongside the rp999 Terms & Conditions and Responsible Gaming policy, both of which form part of the legal framework governing your relationship with rp999. In the event of a conflict between this Privacy Policy and those documents on a data-protection question, this Privacy Policy prevails.
The following terms carry these meanings throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, date of birth, email address, device identifiers, and financial transaction records. |
| "Processing" | Any operation performed on personal data — including collection, storage, retrieval, use, disclosure, and deletion. |
| "Data Controller" | The entity (rp999) that determines the purposes and means of processing personal data. |
| "Data Processor" | A third party that processes personal data on behalf of rp999, such as a payment gateway or KYC verification provider. |
| "Platform" | The rp999 website (rp999.bio) and all associated services, games, and payment interfaces. |
| "Player" | Any individual who has registered an rp999 account or uses the Platform in any capacity. |
| "KYC" | Know Your Customer — the identity and age verification process conducted before full account functionality is granted. |
| "IDR" / "Rp" | Indonesian Rupiah — the sole currency used for deposits, withdrawals, and balances on the rp999 Platform. |
rp999 collects personal data in the following categories:
3.1 Identity Data
3.2 Contact Data
3.3 Financial Data
3.4 Technical Data
3.5 Gaming Activity Data
3.6 Communications Data
rp999 collects personal data through the following channels:
rp999 processes your personal data for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity, Contact, Technical |
| Age and identity verification (KYC) | Identity, Contact |
| Processing IDR deposits and withdrawals | Financial, Identity |
| Anti-money-laundering (AML) compliance | Identity, Financial, Gaming Activity |
| Fraud detection and platform security | Technical, Financial, Gaming Activity |
| Delivering and settling game and betting outcomes | Gaming Activity, Financial |
| Responsible gaming monitoring | Gaming Activity, Financial |
| Customer support and dispute resolution | Identity, Contact, Communications |
| Sending transactional account notifications | Contact |
| Sending promotional communications (where opted in) | Contact |
| Platform performance analytics and improvement | Technical, Gaming Activity (anonymised) |
| Legal and regulatory compliance | All categories as required |
Marketing communications: rp999 will only send you promotional emails, bonus notifications, or seasonal campaign messages (such as Idul Fitri or Ramadan promotions) if you have explicitly opted in at registration or through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in the rp999 account dashboard or by contacting support.
rp999 processes your personal data on the following legal bases:
rp999 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your data only in the following circumstances:
All third-party data processors engaged by rp999 are bound by written data processing agreements that require them to protect your personal data to a standard at least equivalent to this Privacy Policy.
rp999 operates as an internationally licensed platform. Some of the third-party service providers engaged by rp999 — including game software providers and KYC verification services — may be located in jurisdictions outside Indonesia. When personal data is transferred outside Indonesia, rp999 takes steps to ensure that the transfer is protected by appropriate safeguards, including contractual clauses that impose data protection obligations on the recipient equivalent to those described in this Policy.
By registering an rp999 account and using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia where rp999's service partners operate. rp999 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing appropriate contractual safeguards.
rp999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after account closure |
| KYC documents (ID copies) | Duration of account plus 5 years after account closure |
| Financial transaction records (IDR deposits/withdrawals) | 7 years from the date of each transaction (AML compliance) |
| Gaming activity logs | Duration of account plus 3 years after account closure |
| Customer support communications | 3 years from the date of each interaction |
| Marketing consent records | Until consent is withdrawn, then 2 years as evidence of compliance |
| Technical/session logs | 90 days from the date of each session |
When personal data is no longer required and its retention period has expired, rp999 securely deletes or anonymises it so that it can no longer be associated with an identifiable individual.
rp999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
Your responsibility: rp999 urges all players to protect their account credentials. Use a strong, unique password for your rp999 account. Do not share your login details with anyone. If you suspect your account has been compromised, contact rp999 support immediately via live chat for priority handling.
rp999 uses cookies and similar technologies on the Platform for the following purposes:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your account currency (IDR), enable secure authentication, and prevent cross-site request forgery. | No — essential for Platform function |
| Functional | Remember your display preferences, game lobby filter settings, and responsible gaming tool configurations. | Yes — via browser settings |
| Analytics | Collect anonymised data on Platform usage patterns to help rp999 improve the user experience. No personal identifiers are included in analytics reports. | Yes — via browser settings |
| Fraud Prevention | Device fingerprinting and behavioural signals used to detect account takeover attempts and identify multi-accounting violations. | No — essential for security |
You may control non-essential cookies through your browser's privacy settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect certain personalisation features. Disabling strictly necessary or fraud prevention cookies may prevent you from logging in or completing transactions.
As a player whose personal data is processed by rp999, you have the following rights. You may exercise any of these rights by contacting rp999 support at [email protected]. rp999 will respond to all rights requests within 30 days of receipt.
Request a copy of the personal data rp999 holds about you, along with information about how it is used.
Request correction of inaccurate or incomplete personal data held in your rp999 account.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected — subject to legal retention obligations.
Request that rp999 temporarily restrict the processing of your personal data while a dispute about accuracy or legal basis is resolved.
Request that rp999 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Object to the processing of your personal data where rp999 relies on legitimate interests as its legal basis, or where data is used for direct marketing.
Where processing is based on your consent (e.g., marketing emails), withdraw that consent at any time without affecting prior processing.
Lodge a complaint with the data protection authority in the jurisdiction in which you reside if you believe rp999 has handled your data unlawfully.
Please note that some rights are subject to limitations where rp999 has a legal obligation to retain data (for example, AML and licensing retention requirements override a right-to-erasure request for financial transaction records within the mandatory retention period).
rp999 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during account registration and KYC review. If rp999 discovers that personal data has been collected from an individual under 21, we will immediately suspend the associated account, delete the collected data to the extent permissible under applicable law, and return any deposited funds to the verified rightful owner.
If you are a parent or guardian and believe that a minor in your care has attempted to register or has registered an rp999 account, please contact us immediately at [email protected]. We take these reports extremely seriously and will investigate and respond as a priority matter.
rp999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our product and service offering. Where a change is material, rp999 will provide reasonable advance notice to registered players via email or a prominent notice on the Platform before the updated Policy takes effect.
The date at the top of this page always reflects when the current version of the Policy was last updated. Continued use of the rp999 Platform after an updated Policy takes effect constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should request account closure before the effective date of the change.
rp999 maintains an archive of previous versions of this Privacy Policy. You may request a copy of any prior version by contacting the rp999 support team.
For any questions, concerns, or formal data rights requests relating to this Privacy Policy or rp999's handling of your personal data, please contact us through the following channel:
rp999 aims to acknowledge all privacy-related correspondence within 48 hours WIB and to provide a substantive response within 30 calendar days. For complex requests, we may request additional time and will notify you if an extension is required.
Related Policies: For information on how rp999 handles responsible gaming data and self-exclusion records, see the Responsible Gaming page. For the full contractual framework governing your account, see the Terms & Conditions.
Six pillars of data protection that every rp999 player benefits from, every day.
Every connection between your browser and rp999 is protected by SSL/TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
rp999 has a firm, unconditional policy against selling player data to third parties for commercial or marketing purposes. Your information is used exclusively to operate your rp999 account.
All Indonesian Rupiah deposit and withdrawal records — including BCA, BRI, OVO, and DANA transactions — are encrypted at rest and accessible only to authorised rp999 compliance personnel.
rp999 responds to all data rights requests — access, rectification, erasure, portability — within 30 days. Submit requests to [email protected] with your account username in the subject line.
Independent security specialists conduct regular penetration tests and vulnerability assessments on the rp999 Platform. Issues are prioritised and remediated before they can affect players.
rp999 collects only the personal data strictly required to operate your account, process IDR payments, and meet licensing obligations. No unnecessary data categories are collected or stored.
rp999 is built on transparency, security, and trust. Login to your account, explore the casino, or read our FAQ if you have further questions.