Privacy Policy

1. Introduction

1.1 rpvp4 ("we", "us", "our", "the Platform") operates as an international online sports betting and casino platform primarily serving Users in Indonesia. We recognize that privacy is a fundamental right and take our obligations as a data controller seriously.

1.2 This Privacy Policy sets out our practices with respect to the collection, use, storage, sharing, and protection of personal data provided by or generated about Users ("you", "your") in connection with your use of the Services. It also describes the rights you hold over your personal data and how to exercise them.

1.3 If you have questions about any aspect of this Policy, you may contact our Data Protection team at [email protected] at any time.

2. Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, national identity number (KTP), bank account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, combination, restriction, or deletion.
• "Data Controller" — rpvp4, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" — a third party that Processes Personal Data on behalf of rpvp4 under a written data-processing agreement.
• "User" — any individual who registers an account or otherwise accesses and uses the rpvp4 platform.
• "KYC Data" — identity verification documents submitted in connection with the Know Your Customer process, including copies of Indonesian KTP, passport, proof of address, and selfie photographs.
• "Cookies" — small text files placed on a User's device by the rpvp4 website for session management, analytics, and personalization purposes.

3. Data We Collect

3.1 rpvp4 collects the following categories of Personal Data:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, KTP / passport number	Account registration, KYC verification, age confirmation (21+)
Contact Data	Email address, phone number, registered city / province	Account communication, support, promotional notifications
Financial Data	Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history	Payment processing, withdrawal verification, AML compliance
KYC Documents	Scanned KTP, passport, selfie with ID, proof of address	Identity verification, fraud prevention, regulatory compliance
Technical Data	IP address, device type, operating system, browser type and version, time-zone (default WIB, UTC+7)	Security monitoring, fraud detection, platform optimization
Usage Data	Pages visited, games played, bets placed, session duration, click paths	Service improvement, personalization, responsible gaming monitoring
Communications Data	Live chat transcripts, support emails, in-app messages	Customer support, dispute resolution, quality assurance

3.2 We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health information is voluntarily provided in the context of a responsible gaming self-exclusion or problem gambling support request.

4. How We Collect Data

4.1 Directly from You. We collect Personal Data that you actively provide, including during account registration, KYC document upload, deposit and withdrawal requests, support interactions, and promotional opt-ins.

4.2 Automatically. When you access the rpvp4 platform, our systems automatically collect Technical Data and Usage Data via server logs, cookies, and similar tracking technologies.

4.3 From Third Parties. We may receive Personal Data from:

• KYC verification partners who confirm identity document authenticity.
• Payment processors and Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) who confirm transaction status.
• Fraud prevention and AML screening services.
• E-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for transaction confirmation.

5. Purpose & Legal Basis for Processing

5.1 rpvp4 processes Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to register your account, process deposits and withdrawals, settle bets, and deliver the Services you have requested.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, and lawful orders from regulatory or judicial authorities.
• Legitimate Interests: Processing for fraud detection, security monitoring, platform analytics, and responsible gaming oversight — where these interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, where you have explicitly opted in. You may withdraw consent at any time by contacting support.

5.2 rpvp4 will not use your Personal Data for any purpose that is incompatible with the purposes listed in this Section without first obtaining your explicit consent or establishing another lawful basis for the new processing activity.

6. Data Sharing

6.1 rpvp4 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the limited circumstances described below:

• KYC & Identity Verification Partners: Third-party providers who authenticate government-issued identification documents. These partners are bound by strict data-processing agreements and may not use your data for any other purpose.
• Payment Processors & Financial Institutions: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the minimum data required to authorize and settle a specific financial transaction.
• Fraud Prevention & AML Services: Specialist screening tools that cross-reference User data against international sanctions lists and known fraud databases. Data shared is limited to identity and transaction data strictly necessary for screening.
• Regulatory & Law Enforcement Authorities: We may disclose Personal Data in response to a lawful court order, regulatory directive, or law enforcement request. We will notify you of any such disclosure where legally permitted to do so.
• IT Infrastructure & Cloud Providers: Hosting and infrastructure partners who store and process data on our behalf. All such partners operate under binding data-processing agreements that prohibit independent use of your data.
• Professional Advisers: Lawyers, auditors, and accountants who require access to certain data to provide professional services to rpvp4, subject to professional confidentiality obligations.

6.2 In the event that rpvp4 is acquired by or merged with another entity, your Personal Data may be transferred to the successor organization. We will notify you via in-app notification or email before your data becomes subject to a materially different privacy policy.

7. International Data Transfers

7.1 rpvp4 operates on international infrastructure. Your Personal Data may be transferred to and stored on servers located outside Indonesia, including in jurisdictions that may have different data protection standards from those applicable in your country.

7.2 Where such transfers occur, rpvp4 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses recognized under international data protection frameworks.
• Binding corporate rules where transfers occur within a group of companies.
• Transfers to countries recognized as providing an adequate level of data protection by relevant international standards.

7.3 By registering an account with rpvp4, you acknowledge and consent to the international transfer of your Personal Data in accordance with this Policy.

8. Data Retention

8.1 rpvp4 retains your Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, including any legal, regulatory, or audit obligations. The following indicative retention periods apply:

Data Category	Retention Period	Rationale
Account & Identity Data	Duration of account + 5 years post-closure	AML regulatory requirements and dispute resolution
KYC Documents	Duration of account + 5 years post-closure	Regulatory compliance and fraud investigation
Financial Transaction Records	7 years from transaction date	Financial audit trail and AML obligations
Technical & Usage Data	13 months from collection	Security monitoring and analytics
Support & Communications Data	3 years from last interaction	Dispute resolution and quality assurance
Marketing Consent Records	Until consent is withdrawn + 1 year	Proof of lawful marketing basis

8.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual.

9. Security Measures

9.1 rpvp4 employs a layered security architecture to protect Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our technical and organizational measures include:

• Transport Encryption: All data in transit is protected by TLS 1.2 or higher (256-bit SSL).
• At-Rest Encryption: Sensitive data stored on our servers — including KYC documents and financial records — is encrypted using AES-256.
• Access Controls: Role-based access control (RBAC) ensures that staff members can only access the Personal Data necessary for their specific job function. All access events are logged.
• Multi-Factor Authentication (MFA): Administrative access to systems holding Personal Data requires MFA in addition to a strong password.
• Penetration Testing: rpvp4 conducts periodic third-party penetration tests to identify and remediate security vulnerabilities.
• Incident Response: A documented data breach response plan is in place. In the event of a breach that is likely to result in a high risk to Users, rpvp4 will notify affected individuals without undue delay.

9.2 While rpvp4 takes all reasonable steps to protect your Personal Data, no method of transmission over the internet or electronic storage is completely secure. You should also take steps to protect your account by using a strong, unique password and enabling any additional security features available in your account settings.

10. Cookies & Tracking Technologies

10.1 rpvp4 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in during an active visit. They cannot be disabled.
• Performance & Analytics Cookies: Collect anonymized data about how Users navigate the platform (e.g., which pages are most visited, error rates). This data helps us optimize the User experience.
• Functional Cookies: Remember your preferences such as language selection, preferred betting market, and display settings to provide a personalized experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

10.2 You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the rpvp4 platform. rpvp4 does not use third-party advertising cookies or behavioral profiling cookies for the purpose of selling advertising inventory.

10.3 Session cookies are automatically deleted when you close your browser. Persistent cookies remain on your device for the duration specified in their expiry attribute, which in rpvp4's case does not exceed 13 months.

11. Your Rights Over Your Personal Data

11.1 Subject to applicable law and certain exceptions (such as retention obligations required under AML regulations), you have the following rights with respect to your Personal Data held by rpvp4:

11.2 To exercise any of the rights above, submit a written request to [email protected]. rpvp4 will respond within 30 days of receipt. Complex or high-volume requests may be extended by an additional 60 days, in which case we will notify you of the extension and its reason within the initial 30-day period.

11.3 We may require you to verify your identity before processing a data rights request to ensure that Personal Data is not disclosed to unauthorized parties.

12. Minors

12.1 rpvp4 is strictly an adults-only platform. The Services are not directed at or intended for use by any person under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years of age.

12.2 If rpvp4 becomes aware that Personal Data has been collected from a person under 21, we will immediately close the associated account, void any bets placed, and securely delete all Personal Data associated with that account. Any deposited funds will be returned to the payment source after verification.

12.3 If you believe that a minor has registered an account on rpvp4, please contact us immediately at [email protected].

13. Third-Party Links

13.1 The rpvp4 platform does not contain links to third-party websites. Any external websites or services referenced in support communications or promotional materials are independent of rpvp4, and this Privacy Policy does not apply to them.

13.2 rpvp4 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any external platforms you interact with independently.

14. Policy Amendments

14.1 rpvp4 reserves the right to update this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated effective date. Continued use of the Services following publication of a revised Policy constitutes acceptance of the updated terms.

14.2 Where changes are material — for example, a new category of data being collected or a new sharing arrangement with a third party — rpvp4 will provide advance notice via in-app notification or email at least 7 days before the changes take effect.

14.3 We recommend reviewing this Policy periodically to stay informed about how rpvp4 protects your Personal Data.

15. Contact Us

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the Processing of your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the in-app chat widget — Indonesian-speaking agents available
• Response Time: Privacy-related requests are acknowledged within 48 hours and fully responded to within 30 days

15.2 This Privacy Policy is governed by and construed in accordance with the laws of the jurisdiction in which rpvp4 is incorporated. For further information about your rights or the legal framework applicable to our data processing activities, please refer to our Terms & Conditions.