Privacy Policy — rpvi5

1 Introduction

rpvi5 ("rpvi5", "We", "Us", "Our") operates the online casino and sportsbook platform accessible at rpvi5.net, offering services including live casino games, slot games, keno, video poker, togel (Indonesia's traditional numbers lottery) markets, and sports betting across BRI Liga 1, EPL, La Liga, Bundesliga, Champions League, AFF Cup, and other leagues — all denominated in Indonesian Rupiah (IDR) and accessible to members located across Indonesia, including Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Makassar, and beyond.

In providing these Services, rpvi5 necessarily collects, stores, and processes certain personal data relating to its Members and platform visitors. This Policy sets out in detail the categories of personal data we process, the purposes for which it is processed, the legal bases upon which processing rests, and the rights that data subjects hold in respect of their information. We have written this Policy in plain English to make it as clear and accessible as possible, while maintaining the legal precision required of a formal privacy notice.

If you have any questions about this Policy or how rpvi5 handles your data, please contact our Data Protection team at the address provided in Section 15 of this document.

2 Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to names, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means rpvi5, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of rpvi5 under a formal data processing agreement.
• "Member" means any individual who has registered a valid account on the rpvi5 Platform.
• "Services" means all products and features available through the rpvi5 Platform, including sportsbook, live casino, slots, keno, video poker, and togel markets.
• "KYC" (Know Your Customer) means the identity and age verification process required of Members by rpvi5's compliance obligations.
• "Cookies" means small text files placed on a user's device by a web browser for the purpose of storing session information, preferences, or tracking data.

3 Personal Data We Collect

rpvi5 collects the following categories of personal data from Members and platform visitors:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, nationality, Indonesian national ID (KTP) number or passport number	Account registration & KYC verification
Contact Data	Email address, Indonesian mobile phone number, residential address (city and province)	Account registration & profile updates
Financial Data	Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records	Deposit, withdrawal, and KYC processes
Technical Data	IP address, browser type and version, operating system, device type, screen resolution, time zone (WIB/WITA/WIT), session tokens	Automatic collection upon platform access
Usage Data	Pages visited, games played, bet history, wager amounts, session duration, feature interactions, search queries within the platform	Automatic collection during platform use
Communications Data	Live chat transcripts, support email correspondence, feedback submissions	When you contact rpvi5 customer support
Marketing Data	Bonus and promotion uptake history, communication preferences, email open and click data	Ongoing during active membership

rpvi5 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a Member voluntarily discloses such information in the context of a responsible gaming self-assessment or support interaction. Any such disclosures are treated with the highest level of confidentiality and are used solely to provide appropriate member support.

4 How We Collect Your Data

rpvi5 collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technologies: Data collected automatically when you access and interact with the rpvi5 Platform, including via cookies, web beacons, pixel tags, server logs, and session-recording technologies.
• Third-Party Payment Providers: Confirmation and reference data received from Indonesian payment processors (e.g., bank transfer gateways, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a financial transaction.
• Identity Verification Services: Data received from third-party KYC and identity verification providers used to validate the accuracy of the documents you submit during account verification.
• Fraud Prevention and AML Screening Services: Risk-signal data received from internationally recognised fraud-detection and anti-money-laundering screening services used to protect the integrity of the Platform.

5 Legal Basis for Processing

rpvi5 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between rpvi5 and the Member — including account creation, processing deposits and withdrawals, managing game play, and delivering customer support.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML obligations, record-keeping requirements, and responses to lawful regulatory or law-enforcement requests.
• Legitimate Interests: Processing conducted on the basis of rpvi5's legitimate business interests, where such interests are not overridden by the Member's fundamental rights and freedoms. This includes fraud prevention, platform security, product improvement, and analytical purposes.
• Consent: Where rpvi5 relies on consent as a legal basis — for example, for direct marketing communications or non-essential cookies — we will obtain your explicit consent prior to processing and you may withdraw that consent at any time without detriment to your account.

6 How We Use Your Personal Data

rpvi5 uses your personal data for the following purposes:

• Creating, verifying, and managing your rpvi5 Member account.
• Processing deposits and withdrawals through your nominated Indonesian bank accounts (BCA, BRI, BNI, Mandiri, and others) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Enabling participation in all rpvi5 Services, including sportsbook betting, live casino, slot games, keno, video poker, and togel markets.
• Conducting age verification and KYC identity checks to ensure all Members are at least 21 years of age and have provided accurate personal details.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited or unlawful activities on the Platform.
• Providing personalised promotions, bonuses, and marketing communications where you have opted in to receive them.
• Responding to your customer support enquiries via live chat or email, including maintaining a record of correspondence for quality assurance and compliance purposes.
• Analysing platform usage patterns to improve the quality, performance, and security of rpvi5's Services.
• Complying with applicable legal and regulatory obligations, including responding to lawful requests from authorities.
• Administering responsible gaming tools including deposit limits, session limits, cooling-off periods, and self-exclusion requests.

7 Data Sharing & Disclosure

7.1 Third-Party Service Providers

rpvi5 shares personal data with carefully selected third-party service providers who assist in delivering our Services. These providers act as Data Processors under binding data processing agreements and are permitted to use your data only for the specific purposes for which they have been engaged. Categories of third-party processors include: payment processing gateways, KYC and identity verification providers, fraud prevention and AML screening services, cloud hosting and infrastructure providers, customer support platform operators, and email delivery services.

7.2 Game Content Providers

Certain aggregated and anonymised usage data may be shared with licensed game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to support game analytics, RTP auditing, and technical performance monitoring. No personally identifiable information is shared with game providers beyond what is strictly required for the operation of their games within the rpvi5 environment.

7.3 Legal and Regulatory Disclosure

rpvi5 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required or compelled to do so, or where disclosure is necessary to protect the legal rights, property, or safety of rpvi5, its Members, or the public.

7.4 Business Transfers

In the event that rpvi5 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account, and the successor entity will be bound by the terms of this Privacy Policy or a materially equivalent policy.

7.5 No Sale of Personal Data

rpvi5 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is used solely as described in this Policy.

8 Cookies & Tracking Technologies

rpvi5 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity, and gather analytical data. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens, load-balancing cookies, and security cookies. They cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data on how Members interact with the Platform — pages visited, time on page, error events — to help us improve performance and user experience.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Marketing & Targeting Cookies: Used, where you have provided consent, to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These cookies may be set by rpvi5 or by trusted third-party advertising partners.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the rpvi5 Platform. Withdrawing consent for marketing cookies does not affect the validity of any processing carried out prior to withdrawal.

9 Data Retention

rpvi5 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Retained for the duration of your active rpvi5 membership and for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Communications: Retained for up to three (3) years from the date of each interaction, for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent for marketing communications, at which point it will be suppressed from future campaigns within a reasonable timeframe.
• Technical and Usage Data: Typically retained in identifiable form for up to twelve (12) months, after which it may be aggregated and anonymised for longer-term analytical purposes.

Upon expiry of the applicable retention period, rpvi5 will securely delete or anonymise your personal data in accordance with industry-standard data disposal procedures.

10 Data Security

rpvi5 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS 1.3 encryption for all data transmitted between your device and the rpvi5 Platform.
• Encryption of sensitive data fields (including financial data and identity document copies) at rest using AES-256 encryption.
• Role-based access controls limiting internal access to personal data to only those rpvi5 employees and contractors whose job functions require it.
• Multi-factor authentication requirements for all rpvi5 internal systems that store or process Member personal data.
• Regular independent penetration testing and vulnerability assessments of the rpvi5 Platform and underlying infrastructure.
• Continuous monitoring of platform traffic for anomalous behaviour patterns indicative of fraud, account takeover attempts, or data exfiltration.
• Formal data breach response procedures, including notification protocols to affected Members and relevant authorities where required by law.

11 Your Data Rights

As a data subject, you hold the following rights in respect of your personal data held by rpvi5. To exercise any of these rights, please contact our Data Protection team using the details provided in Section 15:

• Right of Access: You have the right to request confirmation of whether rpvi5 processes personal data about you, and to receive a copy of that data along with supplementary information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For most profile data, you can update this directly within your rpvi5 account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to rpvi5's legal record-keeping obligations, which may require us to retain certain data for minimum statutory periods notwithstanding an erasure request.
• Right to Restriction of Processing: You have the right to request that rpvi5 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing based on legitimate interests pending verification of those interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of rpvi5's legitimate interests, and to processing for direct marketing purposes. Where you object to direct marketing, rpvi5 will cease processing your data for that purpose immediately.
• Rights Related to Automated Decision-Making: Where rpvi5 makes decisions about you using solely automated processes (including profiling) that produce legal or similarly significant effects, you have the right to request human review of that decision.

rpvi5 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

12 Minors & Age Restriction

The rpvi5 Platform is strictly for adults aged 21 and over. rpvi5 does not knowingly collect personal data from individuals under the age of 21. If rpvi5 becomes aware that it has inadvertently collected personal data from a minor, that data will be deleted immediately and the associated account will be permanently suspended. If you are a parent or guardian and believe that your child has registered an account on rpvi5, please contact our support team without delay at [email protected].

13 International Data Transfers

rpvi5 operates internationally and may transfer your personal data to countries outside Indonesia for processing by our third-party service providers, including cloud infrastructure providers, KYC verification services, and customer support platform operators. Where such transfers occur, rpvi5 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under internationally recognised data protection frameworks. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that have received formal adequacy recognition.

By using the rpvi5 Platform, you acknowledge and consent to the international transfer of your personal data on the basis described above.

14 Changes to This Privacy Policy

rpvi5 reserves the right to update or modify this Privacy Policy at any time. Where changes are material, we will notify you by email to your registered address or via a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the rpvi5 Platform after the effective date of any revised Policy constitutes acceptance of the updated terms.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how rpvi5 protects your personal data. Previous versions of this Policy are available on request via our customer support team.

15 Contact & Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rpvi5 processes your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within the rpvi5 Platform — the fastest route for general privacy enquiries and account-related data requests.
• Email: [email protected] — for formal written data rights requests, complaints, and data breach notifications. Please use the subject line "Privacy Request" or "Data Rights Request" to ensure prompt routing to the Data Protection team. Allow up to 30 calendar days for a substantive response.

When submitting a data rights request, please include your registered email address and rpvi5 username to assist us in verifying your identity before processing the request. rpvi5 will not action data rights requests that cannot be matched to a verified Member account.