rk66a Privacy Policy

1 Introduction

rk66a ("we", "us", "our") operates the online gaming and sports-betting platform accessible at https://rk66a.net (the "Platform"). We understand that the privacy of your personal information is important to you, and we take our responsibilities as a data controller seriously.

This Privacy Policy describes the types of personal data we collect from users of the rk66a Platform (collectively, "you" or "Player"), the purposes for which that data is processed, the parties with whom it may be shared, and the choices and rights available to you. It applies to all interactions with the Platform, including account registration, deposits and withdrawals, gameplay, customer support communications, and marketing opt-ins.

This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the agreement between you and rk66a.

If you are a resident of Indonesia and are 21 years of age or older, you are our intended audience for this Policy. By registering an Account on rk66a, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly — including name, email address, date of birth, Indonesian national identity number (NIK), bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means rk66a, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of rk66a under a contractual arrangement — for example, payment service providers and KYC verification vendors.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Cookie" means a small text file placed on your device by the Platform for the purpose of recognising your browser, maintaining session state, or tracking usage patterns.
• "KYC" means Know Your Customer — the identity verification procedure rk66a uses to confirm the identity, age, and payment details of Players, in line with anti-money-laundering obligations.
• "Platform" means the rk66a website at https://rk66a.net, including all game interfaces, cashier functions, customer support channels, and associated mobile experiences.

3 Data We Collect

rk66a collects the following categories of Personal Data:

We do not collect or store full payment card numbers. Where card payments are processed, this is handled directly by our licensed payment service providers, and rk66a receives only a tokenised reference.

4 How We Collect Your Data

rk66a collects Personal Data through the following channels:

• Direct interactions: You provide Identity Data, Contact Data, and Financial Data when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automated technologies: When you access the Platform, we automatically collect Technical Data via cookies, server logs, and similar tracking technologies. This data is collected regardless of whether you are logged in.
• Third-party sources: We may receive identity verification results from our licensed KYC and AML service providers, fraud-screening signals from payment processors, and, where you have consented, marketing engagement data from email or messaging platforms.
• Gameplay activity: Our gaming systems automatically log all wagering and gaming activity associated with your Account in real time for operational, security, and responsible gaming monitoring purposes.

5 How We Use Your Personal Data

rk66a processes your Personal Data only where we have a lawful basis to do so. The primary bases we rely on are: (a) performance of our contract with you; (b) compliance with a legal obligation; (c) our legitimate interests in operating a secure and commercially viable platform; and (d) your consent, where explicitly given.

Specifically, we use your data to:

• Create and manage your Account, including verifying your identity and confirming you are 21 years of age or older and a resident of Indonesia;
• Process deposits and withdrawals through your chosen payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja) in Indonesian Rupiah (IDR);
• Provide access to sports betting, live casino, slot games, and all other features of the rk66a Platform;
• Deliver customer support via live chat, WhatsApp (07:00–24:00 WIB), and email;
• Monitor gameplay patterns to fulfil our responsible gaming obligations, including applying deposit limits, session limits, and self-exclusion where requested;
• Detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
• Comply with anti-money-laundering (AML) regulations and respond to lawful requests from competent authorities;
• Improve Platform performance, fix technical issues, and develop new features based on aggregated, anonymised usage data;
• Send promotional communications, special offers, and personalised bonuses — but only where you have explicitly opted in to receive such communications.

We do not use your Personal Data to make fully automated individual decisions (including profiling) that produce legal effects concerning you, without a human review step available upon request.

6 Data Sharing & Disclosure

6.1 Service Providers. rk66a engages carefully selected third-party Data Processors to help us deliver the Platform. These include payment processing partners (banks and e-wallet operators), KYC and identity verification vendors, cloud hosting and infrastructure providers, fraud-detection services, and customer support platform providers. All such processors are bound by data processing agreements that restrict them from using your data for any purpose other than providing the contracted service to rk66a.

6.2 Game Studios. Live casino and slot games on rk66a are powered by licensed third-party studios, including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Pocket Games Soft. These studios may receive your session token and anonymised player identifier for the purpose of delivering and auditing game outcomes. They do not receive your full identity or financial details.

6.3 Legal and Regulatory Obligations. rk66a may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, by court order, or where we reasonably believe disclosure is necessary to protect the safety of any person, to prevent or investigate fraud or illegal activity, or to protect rk66a's legal rights.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of rk66a's business, your Personal Data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and of any resulting change to this Privacy Policy via a notice on the Platform or by email.

6.5 No Sale of Data. rk66a does not sell, rent, or commercially transfer your Personal Data to any third party for their own marketing or commercial purposes. This commitment is absolute and applies regardless of whether you are an active or former Player.

7 Cookies & Tracking Technologies

7.1 What We Use. rk66a uses cookies, web beacons, and similar tracking technologies to operate the Platform. These technologies allow us to maintain your logged-in session, remember your preferences, detect suspicious access patterns, and analyse how Players interact with different features.

7.2 Types of Cookies. The cookies placed by rk66a fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, load-balancing cookies, and security tokens. You cannot opt out of these without logging out entirely.
• Functional Cookies: Store your preferences such as language settings, last visited game category, and display preferences. These persist between sessions to improve your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how Players navigate the Platform — which pages are visited most frequently, where users drop off, and how features are used. This information is used to improve the Platform.
• Marketing Cookies: Used only where you have opted in to promotional communications. These help us deliver relevant offers and measure the effectiveness of our promotional campaigns.

7.3 Managing Cookies. You may control non-essential cookies through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect the quality of your experience. Disabling strictly necessary cookies will prevent you from logging in and using the Platform entirely.

8 Data Security

rk66a implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption at rest for all databases containing Personal Data and Financial Data;
• Role-based access controls that restrict internal access to Personal Data to employees who require it to perform their job functions;
• Multi-factor authentication requirements for all staff accessing production systems containing Player data;
• Regular independent penetration testing and vulnerability assessments of Platform infrastructure;
• Automated fraud and anomaly detection systems that flag unusual account activity in real time.

Despite these measures, no digital system is entirely immune to security threats. In the unlikely event of a data breach that poses a risk to your rights or interests, rk66a will notify affected Players without undue delay and will take all reasonable steps to contain and remediate the breach.

You share responsibility for the security of your Account. You should use a strong, unique password, never share your login credentials with anyone, and log out of your Account on shared devices. If you suspect your Account has been compromised, contact rk66a support immediately at [email protected].

9 Data Retention & Deletion

9.1 Retention Periods. rk66a retains your Personal Data for as long as your Account remains active and for a period thereafter as required to fulfil legal, regulatory, and contractual obligations. The following indicative retention periods apply:

• Account and Identity Data: Retained for the lifetime of your Account and for a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping requirements.
• Gaming Activity Logs: Retained for three (3) years from the date of the relevant session, for dispute resolution and responsible gaming audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the interaction, unless associated with an ongoing dispute or legal matter.
• Marketing Preference Data: Retained until you withdraw your consent or close your Account, whichever is earlier.

9.2 Deletion. When Personal Data is no longer required for the purposes for which it was collected and no legal obligation requires its continued retention, rk66a will securely delete or anonymise it. Anonymised aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

10 Your Rights Over Your Personal Data

rk66a respects your rights in relation to your Personal Data. You have the right to:

• Access: Request a copy of all Personal Data rk66a holds about you. We will provide this within 30 days of receiving your verified request;
• Rectification: Ask us to correct any Personal Data that is inaccurate or incomplete. You can update basic profile information directly from your Account settings;
• Erasure: Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. Note that we may be legally required to retain certain data even after an erasure request;
• Restriction: Ask us to pause processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified;
• Portability: Receive a copy of your Personal Data in a structured, commonly used, machine-readable format for transfer to another controller, where technically feasible;
• Objection: Object to processing carried out on the basis of our legitimate interests where your individual circumstances warrant it. We will assess your objection and cease processing unless we can demonstrate compelling grounds that override your interests;
• Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and fulfil it within 30 calendar days. We may require identity verification before processing certain requests to protect against unauthorised access to your data.

11 Minors & Age Restriction

rk66a strictly prohibits the use of its Platform by anyone under the age of 21. The Platform is intended exclusively for adults aged 21 and over who are residents of Indonesia. We do not knowingly collect Personal Data from individuals under 21 years of age.

During registration and KYC verification, rk66a takes active steps to confirm that each Player meets the minimum age requirement. Where we discover or have reasonable grounds to suspect that a Player is under 21 years of age, we will immediately suspend the Account, void all associated transactions, and delete the Account holder's Personal Data to the extent permitted by our legal obligations.

If you are a parent or guardian and believe your child has registered an Account on rk66a, please contact us immediately at [email protected] and we will investigate and take appropriate action without delay.

12 Changes to This Privacy Policy

rk66a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will provide notice by posting the updated policy on the Platform with a revised effective date and, where the changes are significant, by sending a notification to the email address associated with your Account.

Your continued use of the rk66a Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should stop using the Platform and close your Account by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how rk66a protects your information.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way rk66a processes your Personal Data, please reach out to us through any of the following channels:

• Email: [email protected] — for formal data rights requests, privacy concerns, or documentation submissions. Please include "Privacy Policy" or "Data Rights Request" in your subject line.
• Live Chat: Available 24/7 directly on the Platform — the fastest route to a real-time response from our support team.
• WhatsApp: Available 07:00–24:00 WIB for Indonesian-language or English-language support.

All privacy-related queries submitted by email will be acknowledged within 72 hours and fully resolved within 30 calendar days. Complex requests involving data erasure or portability may take up to the full 30-day window; we will keep you updated on progress throughout.

For questions about responsible gaming tools, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page.