Privacy Policy

1. Introduction

At rr99, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect the personal data you provide when using our online gaming platform at rr99.beer (the "Platform").

This Privacy Policy applies to all users of rr99 services, including visitors to our website, registered players, and anyone who interacts with our customer support or marketing communications. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

We take data protection seriously and comply with applicable data protection laws and regulations, including international standards for privacy and security. If you have any questions or concerns about how we handle your personal data, please contact us using the information provided at the end of this document.

2. Data Controller

rr99 is the data controller responsible for your personal information collected through the Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.

Our contact information for privacy-related inquiries:

• Company Name: rr99
• Website: rr99.beer
• Email: [email protected]
• Support Hours: 24/7 (Indonesian and English)

3. Information We Collect

To provide our services, ensure platform security, and comply with legal obligations, rr99 collects several categories of personal information. The information we collect includes:

3.1 Information You Provide Directly

When you register an account, make transactions, or interact with our services, you provide the following information:

• Account Registration Data: Full name, date of birth, gender, residential address, email address, phone number, username, and password.
• Identity Verification Documents: Government-issued identification (Indonesian KTP, passport, or driver's license), proof of address (utility bills or bank statements), selfie photographs for identity confirmation, and payment method verification documents.
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet identifiers (OVO, DANA, GoPay account information), transaction history, deposit and withdrawal records, and betting history.
• Communications: Messages sent to customer support, survey responses, feedback submissions, and any other correspondence with rr99.
• Marketing Preferences: Your choices regarding promotional emails, SMS notifications, and other marketing communications.

3.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and usage information:

• Device Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, games played, bets placed, clickstream data, referral sources, and navigation paths through the Platform.
• Location Data: Approximate geographic location based on IP address (we do not collect precise GPS location data).
• Cookie and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies as described in Section 10.
• Session Information: Login times, session duration, device fingerprints for security purposes, and session activity logs.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment method validation, and fraud detection data from banks and payment service providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay).
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party verification providers.
• Marketing Partners: Information from affiliate programs or advertising networks if you access rr99 through their referral links.
• Public Sources: Publicly available information used for fraud prevention and compliance purposes.

4. How We Use Your Information

rr99 uses your personal information for the following purposes:

4.1 Service Provision and Account Management

• Creating and managing your user account
• Processing deposits and withdrawals
• Enabling gameplay and betting activities
• Managing bonuses, promotions, and loyalty rewards
• Providing customer support and responding to inquiries
• Authenticating your identity and preventing unauthorized access
• Maintaining transaction records and account history

4.2 Security and Fraud Prevention

• Verifying your identity and age (21+ requirement)
• Detecting and preventing fraudulent activities, money laundering, and other illegal activities
• Identifying duplicate accounts and bonus abuse
• Monitoring for suspicious betting patterns or gameplay anomalies
• Protecting against unauthorized access and security breaches
• Enforcing our Terms and Conditions

4.3 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Maintaining records as required by licensing authorities
• Responding to legal requests, court orders, and government inquiries
• Reporting suspicious activities to relevant authorities
• Verifying eligibility to use online gambling services

4.4 Platform Improvement and Analytics

• Analyzing user behavior to improve platform functionality and user experience
• Testing new features and services
• Conducting market research and customer satisfaction surveys
• Optimizing platform performance and resolving technical issues
• Understanding which games and features are most popular

4.5 Marketing and Communications

• Sending promotional emails about bonuses, tournaments, and special offers (with your consent)
• Providing personalized game recommendations based on your preferences
• Notifying you about platform updates, new games, and service changes
• Sending transactional communications (account notifications, deposit confirmations, withdrawal updates)

You can opt out of marketing communications at any time by adjusting your account preferences or clicking "unsubscribe" in our emails. Transactional communications are necessary for service provision and cannot be opted out of while maintaining an active account.

5. Legal Basis for Processing

Under applicable data protection laws, rr99 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing transactions, managing your account).
• Legal Obligation: Processing is required to comply with legal and regulatory obligations including KYC/AML requirements, licensing conditions, and financial reporting.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, platform security, service improvement, and direct marketing (where permitted).
• Consent: Where required by law, we obtain your explicit consent before processing certain data categories, particularly for marketing communications and optional cookies.

You have the right to object to processing based on legitimate interests. See Section 9 for information about your privacy rights.

6. Data Sharing and Disclosure

rr99 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described in this Privacy Policy:

6.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Services: Third-party verification providers that help us confirm your identity and age.
• Game Providers: Software providers that supply casino games, live dealer tables, and sports betting platforms.
• Customer Support Tools: Third-party platforms used to provide live chat and email support services.
• Cloud Storage Providers: Services that host our databases and store data securely.
• Analytics Providers: Tools that help us understand platform usage and improve user experience.

All third-party service providers are contractually obligated to protect your data and use it only for the specific purposes we authorize.

6.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, regulators, law enforcement agencies, and courts when:

• Required by law, regulation, or legal process
• Necessary to comply with licensing requirements
• Requested through valid legal proceedings (subpoenas, court orders)
• Needed to report suspected illegal activities including money laundering or fraud
• Required to protect our legal rights and interests

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and ensure the acquiring party honors this Privacy Policy.

6.4 Data Sharing for Safety and Security

We may share information when necessary to:

• Prevent fraud, illegal activities, or security threats
• Protect the safety of our users, employees, or the public
• Enforce our Terms and Conditions
• Defend against legal claims

7. Data Security Measures

rr99 implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

7.1 Technical Security

• Encryption: All data transmission is protected by 256-bit SSL/TLS encryption, the same technology used by financial institutions.
• Password Security: Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Firewall Protection: Multiple layers of firewall protection guard against external attacks.
• Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activities.
• Regular Security Audits: Independent third-party firms conduct regular security assessments and penetration testing.
• Data Segregation: Sensitive financial data is stored separately from general account data with restricted access.

7.2 Organizational Security

• Access Controls: Employee access to personal data is limited on a need-to-know basis with strict authorization protocols.
• Staff Training: All employees receive regular training on data protection and security best practices.
• Confidentiality Agreements: All staff members sign confidentiality agreements protecting customer data.
• Incident Response Plan: We maintain a comprehensive plan to respond quickly to any security breaches.

7.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Use a strong, unique password and do not share it with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Keep your contact information up to date
• Report any suspicious activity immediately

Despite our best efforts, no system is completely secure. rr99 cannot guarantee absolute security and is not liable for unauthorized access resulting from circumstances beyond our reasonable control.

8. Data Retention

rr99 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal, regulatory, and licensing obligations.

8.1 Active Account Data

While your account remains active, we retain all account information, transaction history, and gameplay records to provide continuous service and support.

8.2 Closed Account Data

After account closure, we retain certain information for specific periods:

• Transaction Records: Retained for 7 years to comply with financial record-keeping requirements and for tax and accounting purposes.
• Identity Verification Documents: Retained for 5 years to comply with KYC/AML regulations.
• Customer Support Communications: Retained for 3 years for quality assurance and dispute resolution.
• Marketing Data: Deleted immediately upon account closure or opt-out, except where required for legal purposes.
• Security and Fraud Prevention Data: Retained as long as necessary to protect against future fraudulent activities.

8.3 Legal Hold

If your data is subject to legal proceedings, investigations, or regulatory inquiries, we may retain it beyond standard retention periods until the matter is resolved.

8.4 Data Deletion

After retention periods expire, we securely delete or anonymize your personal data so that it can no longer be associated with you. You may request earlier deletion subject to our legal obligations and legitimate interests (see Section 9).

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

9.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information. You can update most account information directly through your account settings.

9.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. This right is subject to our legal obligations to retain certain data for regulatory compliance.

9.4 Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and request its transfer to another service provider where technically feasible.

9.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. To protect your privacy, we may ask you to verify your identity before processing your request.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority.

10. Cookies and Tracking Technologies

rr99 uses cookies and similar technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve functionality.

10.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly, including login authentication, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use the Platform, helping us improve performance and user experience.
• Functional Cookies: Remember your preferences and choices (language, region, display settings) to provide a personalized experience.
• Marketing Cookies: Track your browsing across websites to deliver relevant advertisements and measure campaign effectiveness (only with your consent).

10.3 Managing Cookies

You can control and delete cookies through your browser settings. However, disabling essential cookies may affect Platform functionality. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block cookies from specific websites
• Block all cookies (not recommended for rr99)

11. International Data Transfers

rr99 operates internationally and may transfer your personal data to servers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

These safeguards may include:

• Transferring data to countries recognized as providing adequate data protection
• Using standard contractual clauses approved by data protection authorities
• Implementing additional technical and organizational security measures

By using rr99 services, you acknowledge and consent to the international transfer of your personal data as described above.

12. Children's Privacy

rr99 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 21, we will immediately delete that information and close the account.

If you are a parent or guardian and believe your child has provided personal information to rr99, please contact us immediately at [email protected]. We will take prompt action to remove the information and close any associated account.

We employ age verification measures during registration and may request additional proof of age at any time to ensure compliance with this requirement.

13. Changes to This Privacy Policy

rr99 may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. We will notify you of any material changes through:

• Email notification to your registered email address
• Prominent notice on the Platform homepage
• In-account notification when you log in

Material changes will take effect 30 days after notification. Non-material changes (clarifications, formatting, minor updates) take effect immediately upon posting. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

Your continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you must close your account before they take effect.

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact our Data Protection Team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through your account dashboard
• Response Time: We aim to respond to all privacy inquiries within 5 business days

When contacting us about your personal data, please include sufficient information to verify your identity and specify the nature of your inquiry or request.

Additional Resources

For more information about rr99 policies and services:

• Terms & Conditions - Legal terms governing platform use
• Responsible Gaming - Resources for safe and responsible gambling
• FAQ - Frequently asked questions
• About Us - Information about rr99

---

By using rr99 services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. This Privacy Policy is part of and incorporated into our Terms and Conditions. Your use of the Platform constitutes acceptance of both documents.