rr666 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

rr666 collects Personal Data in several ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party service providers involved in delivering our services. The categories of data we collect are described in the table below.

rr666 uses your Personal Data only for the purposes described below. We do not use your data for any purpose incompatible with these stated uses without first obtaining your explicit consent or as otherwise required by law.

• Account Management: To create, maintain, and administer your rr666 member account, including processing your registration, verifying your identity through KYC, and authenticating your logins.
• Service Delivery: To provide access to the full suite of rr666 services, including the sportsbook, live casino, slot games, blackjack tables, and togel (Indonesia's traditional numbers lottery) markets, and to process all associated financial transactions in IDR.
• Payments Processing: To process your deposits and withdrawals via your selected Indonesian payment method (bank transfer or e-wallet), including communicating with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja as required.
• Fraud Prevention & Security: To detect, investigate, and prevent unauthorized access, fraudulent transactions, money laundering, multiple-account abuse, and other prohibited conduct outlined in our Terms & Conditions.
• Responsible Gaming: To enforce your self-exclusion preferences, deposit limits, session reminders, and cooling-off periods, and to identify members who may be showing signs of problem gambling behavior so that appropriate support can be offered.
• Legal & Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, record-keeping requirements, and any lawful requests from competent authorities.
• Customer Support: To respond to your enquiries, resolve complaints, and provide ongoing platform support via live chat and email.
• Platform Improvement: To analyze aggregate usage patterns (using anonymized or pseudonymized data where possible) to improve the rr666 platform, optimize game performance, and develop new features that better serve Indonesian members.
• Promotional Communications: To send you relevant offers, bonus notifications, and seasonal promotions (such as those tied to Idul Fitri, Ramadhan, BRI Liga 1 events, or AFF Cup fixtures) — but only where you have opted in to receive marketing communications. You may withdraw this consent at any time via your account settings.

rr666 processes your Personal Data on one or more of the following legal bases, depending on the purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your account, deliver the services you have signed up for, and process your financial transactions.
• Legitimate Interests: Processing is necessary for rr666's legitimate business interests, such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your privacy rights.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including AML regulations, KYC mandates, and record-retention requirements imposed by rr666's licensing authority.
• Consent: For marketing communications and any non-essential cookies, processing is based on your explicit, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

rr666 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment Processors: Your financial data is shared with the relevant bank or e-wallet provider (e.g., BCA, BRI, OVO, DANA, GoPay) solely to execute your deposit or withdrawal transaction. These providers act as independent data controllers under their own privacy policies.
• Game Studios: Technical identifiers (such as a pseudonymized player ID) are shared with certified third-party game studios — including Evolution Gaming, Pragmatic Play, Spribe, Pocket Games Soft, NetEnt, and Microgaming — to deliver their game products through the rr666 platform. No directly identifiable personal information (name, bank details, NIK) is shared with studios.
• Identity Verification Services: During KYC processing, your identity documents and associated data are shared with our appointed identity verification partner. This partner is contractually bound to use your data solely for verification purposes and to delete it once verification is complete.
• Analytics Providers: Aggregated, anonymized usage data may be shared with analytics providers to support platform performance monitoring. No directly identifiable Personal Data is included in these analytics datasets.
• Legal Authorities: rr666 may disclose your Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, warrant, or applicable law. rr666 will notify you of such a disclosure where legally permitted.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of rr666's business, your Personal Data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and afforded the opportunity to close your account if you object.

rr666 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The table below summarizes our standard retention periods:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Where deletion is not immediately possible due to technical constraints, the data is isolated and protected from further processing until deletion can be completed.

rr666 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your session security, and analyze how the platform is used. By continuing to use the rr666 platform, you consent to the use of cookies in accordance with this policy.

• Essential Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without preventing access to the platform.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and last-visited game category to provide a more personalized experience on return visits.
• Analytics Cookies: Collect aggregated, anonymized data about how Members use the platform — such as which game categories are most popular, how long sessions last on average, and which deposit methods are preferred in cities like Jakarta, Surabaya, and Bandung. This data helps rr666 improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, multiple account registrations, and unauthorized login attempts by tracking device fingerprints and behavioral patterns.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may impair the functionality of the rr666 platform or prevent specific features from working as intended. rr666 does not use third-party advertising cookies or behavioral retargeting technologies.

rr666 has implemented a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the rr666 platform is encrypted using industry-standard TLS 1.3 protocols. Our SSL certificate is current and regularly renewed.
• Encryption at Rest: Sensitive data fields — including financial account numbers, identity document references, and password hashes — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Two-Factor Authentication: rr666 offers optional but strongly recommended 2FA for all member accounts. Login attempts from unrecognized devices trigger a one-time passcode delivered to your registered Indonesian mobile number or authenticator app.
• Access Controls: Access to member Personal Data within rr666's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo background screening and privacy training. Access logs are maintained and reviewed regularly.
• Security Audits: rr666 conducts periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: rr666 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, rr666 will notify affected Members as quickly as practicable and take all reasonable steps to contain and remedy the incident.

As a Member of the rr666 platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact rr666 support via live chat or email at [email protected]. rr666 will respond to all valid requests within 30 days.

The rr666 platform serves Members resident in Indonesia. As an internationally licensed and regulated platform, rr666 may transfer certain categories of your Personal Data to servers or service providers located outside of Indonesia — including those involved in platform hosting, identity verification, and game delivery.

Where such international transfers occur, rr666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within our platform. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, the use of providers certified under recognized international data protection frameworks, or transfers to jurisdictions that provide an adequate level of data protection as determined by rr666's licensing authority.

By using the rr666 platform, you acknowledge and consent to the international transfer of your Personal Data as described in this clause, subject to the protections outlined above.

The rr666 platform is strictly intended for adults aged 21 and over. rr666 does not knowingly collect Personal Data from individuals under the age of 21. Age is declared at registration and verified through the KYC process.

If rr666 discovers that Personal Data has been submitted by or on behalf of an individual under the age of 21 — whether through a false age declaration or any other means — the associated account will be immediately suspended, all funds will be withheld pending investigation, and the relevant Personal Data will be deleted as quickly as legally permissible. Any parent or guardian who believes that their child under 21 has registered on the rr666 platform should contact support immediately at [email protected].

rr666 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. When material changes are made, rr666 will notify active Members via their registered email address and by posting a prominent notice on the platform.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the rr666 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the changes, you should cease using the platform and may request account closure through rr666 support.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how rr666 handles your Personal Data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 from the rr666 platform dashboard. Average response time under 5 minutes during WIB business hours (09:00–21:00 WIB).
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered email address so we can verify your identity before processing your request.
• Response Commitment: rr666 aims to acknowledge all privacy-related enquiries within 24 hours and to resolve them fully within 30 calendar days. Complex requests involving large volumes of data or requiring legal review may take longer; you will be kept informed throughout the process.