Please Read Carefully: This Privacy Policy applies to all personal data collected by rp369 through the website at https://rp369.ws, its associated subdomains, mobile interfaces, and API services. By creating an Account or otherwise using the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree, you must not use the Platform.
1 Definitions
The following defined terms, when capitalised, carry the meanings set out below throughout this Privacy Policy:
| Term |
Meaning |
| "Platform" |
The rp369 website at https://rp369.ws and all associated subdomains, mobile interfaces, and API services operated under the rp369 brand. |
| "Member" / "You" |
Any individual who has registered an Account on the Platform or who accesses the Platform as a visitor without registering. |
| "Personal Data" |
Any information that identifies or could reasonably be used to identify a specific individual, including name, email address, phone number, national identity number, IP address, device identifiers, and financial account details. |
| "Processing" |
Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, and anonymisation. |
| "KYC" |
Know Your Customer — the identity and age-verification process rp369 uses to confirm a Member's eligibility, identity, and source of funds. |
| "Data Controller" |
rp369, the entity that determines the purposes and means of Processing Personal Data collected via the Platform. |
| "Third-Party Processor" |
Any external service provider that processes Personal Data on rp369's behalf under a written data-processing agreement, including payment partners, game studios, and IT infrastructure providers. |
| "Cookies" |
Small text files placed on your device by the Platform to recognise your browser, remember preferences, and enable analytics and session management. |
2 Data We Collect
rp369 collects Personal Data in the following categories, depending on the nature of your interaction with the Platform:
2.1 Registration & Identity Data. When you create an Account, we collect:
- Full legal name as it appears on your government-issued identity document;
- Date of birth (to verify that you meet the 21+ age requirement);
- Email address and Indonesian mobile phone number;
- Chosen username and hashed account password;
- Indonesian bank account details or e-wallet identifier (OVO, DANA, GoPay, ShopeePay, or LinkAja account number) linked to your Account for deposit and withdrawal purposes.
2.2 KYC & Verification Documents. To comply with responsible gaming and anti-money laundering (AML) obligations, we may collect:
- A copy of your National Identity Card (KTP) or passport;
- Proof of address (recent utility bill, bank statement, or government correspondence dated within 90 days);
- Bank statement or e-wallet transaction history confirming source of funds;
- A selfie photograph held alongside your identity document, if requested.
2.3 Financial Transaction Data. We retain records of all financial activity on your Account, including:
- Deposit amounts, timestamps, and originating payment channel (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata);
- Withdrawal requests, amounts, destination accounts, and processing status;
- Bonus credits, rollover progress, and bonus forfeiture events.
2.4 Betting & Gaming Activity Data. We record all wagering transactions, including:
- Sportsbook bets (market, selection, stake, odds, settlement result) for events including BRI Liga 1 fixtures, EPL, La Liga, Serie A, Champions League, and Timnas Indonesia international matches;
- Casino game sessions (game title, studio, stake, outcome, session duration);
- Poker hand histories and tournament participation records;
- Slot game spin records and RTP audit trails.
2.5 Technical & Device Data. When you access the Platform, we automatically collect:
- IP address and approximate geolocation derived from IP;
- Device type, operating system, browser type and version;
- Session timestamps, page views, click paths, and referral source;
- Cookie identifiers and local storage tokens (see Section 7).
2.6 Communications Data. If you contact our support team via live chat or email at [email protected], we retain a record of the conversation, including the content of messages, the date and time of contact, and the resolution outcome.
3 How We Collect Data
rp369 collects Personal Data through the following mechanisms:
- Directly from you: through Account registration forms, KYC document uploads, deposit and withdrawal requests, support chat interactions, and any feedback or correspondence you initiate;
- Automatically: through server logs, cookies, pixel tags, and session-tracking scripts that run as part of the Platform's normal operation when you browse or use any feature of the site;
- From payment partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) may confirm transaction status, bank account ownership, and payment channel identity to rp369's payment processing layer;
- From game studios: third-party game providers including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, and Habanero may share session-level wagering data with rp369 for settlement, audit, and responsible gaming monitoring purposes;
- From identity verification services: third-party KYC providers engaged by rp369 may return identity verification scores, document authenticity assessments, and fraud-risk signals based on the documents you submit.
Voluntary Provision: You are not legally compelled to provide Personal Data to rp369. However, failure to provide the minimum data required for Account registration (name, date of birth, email, phone number, and payment channel details) will prevent us from opening and operating your Account, and failure to complete KYC verification will prevent withdrawals.
4 How We Use Your Data
rp369 uses your Personal Data exclusively for the following purposes:
- Account creation and management: registering your Account, authenticating your login sessions, maintaining your Wallet Balance, and communicating account-related notifications;
- Identity and age verification: confirming that you satisfy the 21+ eligibility requirement and that your identity matches the payment instruments linked to your Account;
- Payment processing: executing deposits from and withdrawals to your registered Indonesian bank accounts and e-wallets in Indonesian Rupiah (IDR / Rp);
- Fraud prevention and AML compliance: screening transactions for indicators of money laundering, identity fraud, underage gambling, and bonus abuse, and reporting suspicious activity to relevant authorities where required;
- Platform operation and personalisation: displaying bet histories, game recommendations, and account dashboards tailored to your activity on the Platform;
- Promotional communications: sending eligible Members information about bonuses, seasonal promotions (Ramadhan offers, Idul Fitri specials, Chinese New Year / Imlek promotions, Indonesian Independence Day campaigns), and new game launches — subject to your communication preferences, which you may update at any time from Account Settings;
- Responsible gaming: monitoring wagering patterns for indicators of problem gambling and triggering responsible gaming interventions (deposit limit notifications, session time reminders, self-exclusion referrals) in accordance with our Responsible Gaming commitments;
- Legal and regulatory compliance: retaining records as required by applicable international regulations governing online gaming operators, and responding to valid legal requests from competent authorities;
- Customer support: investigating and resolving Account queries, disputes, and complaints submitted via live chat or email.
Marketing Opt-Out: You may opt out of promotional communications at any time by updating your notification preferences in Account Settings or by contacting our support team via live chat. Opting out of marketing communications does not affect transactional notifications (deposit confirmations, withdrawal status updates, security alerts), which are necessary for account operation.
5 Legal Basis for Processing
rp369 processes your Personal Data on the following legal grounds, depending on the specific processing activity:
- Contractual necessity: Processing your registration data, payment details, and transaction history is necessary for rp369 to perform the contractual obligations set out in the Terms & Conditions — specifically to open your Account, process deposits and withdrawals, settle bets, and deliver the services you have signed up for;
- Legal obligation: KYC identity verification, age verification, AML transaction monitoring, and data retention for audit purposes are required to comply with applicable international online gaming regulatory standards and anti-financial-crime frameworks;
- Legitimate interests: Technical data collection (IP addresses, device identifiers, session logs) and fraud-detection screening are processed on the basis of rp369's legitimate interest in maintaining the integrity, security, and fair operation of the Platform — balanced against your privacy interests;
- Consent: Promotional marketing communications (bonus offers, seasonal campaigns, new product announcements) are sent only where you have actively opted in during registration or subsequently via Account Settings. You may withdraw consent at any time without affecting your Account status.
6 Data Sharing & Disclosure
rp369 does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the minimum extent necessary:
- Payment processors: To execute your deposit and withdrawal instructions, rp369 shares your bank account number, full name, and transaction amount with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) or e-wallet operator (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners act as independent data controllers for payment data in accordance with Bank Indonesia regulations;
- Game studios and RNG providers: Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, and other certified studios receive session-level wagering data for game settlement and audit trail purposes. They do not receive your identity or financial account details;
- KYC and identity verification providers: Third-party KYC service providers engaged by rp369 receive the identity documents you submit and return verification outcomes. They are bound by data-processing agreements prohibiting use of your data for any purpose beyond verification;
- IT infrastructure and security providers: Cloud hosting, content delivery, DDoS protection, and fraud-screening vendors may process technical data (IP addresses, session logs, device fingerprints) as part of Platform operations. All such providers are engaged under written data-processing agreements;
- Legal and regulatory authorities: rp369 will disclose Personal Data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a valid legal order or regulatory requirement, or where rp369 has a good-faith belief that disclosure is necessary to prevent imminent harm, fraud, or a serious crime.
No Third-Party Marketing: rp369 does not share your Personal Data with advertisers, affiliate networks, or data brokers for the purpose of targeting you with third-party marketing. Any promotions you receive from rp369 are generated and managed exclusively by rp369's own marketing team.
7 Cookies & Tracking Technologies
rp369 uses the following categories of cookies and similar tracking technologies on the Platform:
- Essential / Strictly Necessary Cookies: These cookies are required for the Platform to function. They manage your login session, maintain your authenticated state across page navigations, and store your Wallet Balance display preferences. You cannot opt out of essential cookies without disabling the Platform entirely;
- Performance & Analytics Cookies: These cookies collect anonymised data about how Members navigate the Platform — which pages are visited most frequently, how long sessions last, and which features are used. This data is used to improve Platform design and performance. rp369 uses server-side analytics tools rather than third-party analytics platforms that share data with external parties;
- Functionality Cookies: These cookies remember your preferences such as preferred deposit method, display language (English), and odds format (decimal vs. fractional) so that you do not need to reconfigure them on each visit;
- Security Cookies: These cookies store short-lived tokens used by rp369's fraud detection systems to identify anomalous login patterns and protect your Account from session hijacking.
Managing Cookies: You can configure your browser to block or delete cookies. Note that disabling essential cookies will prevent you from logging in to your rp369 Account. Disabling performance or functionality cookies will not affect your ability to use the core Platform but may degrade personalisation features. Instructions for managing cookies are available in your browser's help documentation.
rp369 does not use cross-site tracking cookies, third-party advertising pixels (e.g., Meta Pixel, Google Ads remarketing tags), or fingerprinting techniques that track your activity across other websites outside of the rp369 Platform.
8 Data Retention
rp369 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The following retention periods apply:
- Active Account data (registration details, wallet balance, active bet history): retained for the lifetime of your Account, plus a minimum of 5 years after Account closure, to satisfy audit and regulatory requirements;
- KYC and identity documents (KTP copies, passport scans, selfies, proof of address): retained for a minimum of 5 years from the date of submission, consistent with international AML record-keeping standards;
- Financial transaction records (deposit and withdrawal records, bet settlement records): retained for a minimum of 7 years from the date of each transaction, consistent with international financial record-keeping requirements;
- Support communications (live chat transcripts, email correspondence): retained for 3 years from the date of the conversation, or longer where the conversation is relevant to an ongoing dispute or investigation;
- Technical and device data (IP logs, session logs): retained for a rolling 12-month period under standard conditions, and up to 5 years where the data is associated with a fraud, AML, or security investigation;
- Marketing consent records: retained for the lifetime of your consent and for 3 years after withdrawal of consent, as evidence of the consent history.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data (e.g., total bet volumes, platform-wide RTP statistics) may be retained indefinitely for business analytics purposes.
9 Your Rights
As an rp369 Member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact the rp369 support team via live chat or at [email protected]. We will respond within 30 calendar days of receiving a verified request.
Right of Access
Request a copy of the Personal Data rp369 holds about you, including the categories of data processed and the purposes for which it is used.
Right to Rectification
Request correction of any inaccurate or outdated Personal Data in your Account. For identity data, corrections may require submission of updated KYC documentation.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to rp369's legal retention obligations described in Section 8.
Right to Restrict Processing
Request that rp369 temporarily suspend the use of your data in specific circumstances, such as while a data accuracy dispute is under review.
Right to Data Portability
Request a structured, machine-readable export of the Personal Data you provided to rp369, in a format that can be transferred to another service provider.
Right to Withdraw Consent
Where rp369 processes your data on the basis of consent (e.g., marketing emails), you may withdraw consent at any time via Account Settings without affecting the lawfulness of prior processing.
Identity Verification for Requests: To protect your privacy, rp369 will verify your identity before processing any data rights request. You will be asked to confirm your registered email address and, for sensitive requests, to complete a brief identity check via live chat. This ensures that no third party can access or delete your data without your authorisation.
10 International Data Transfers
rp369 operates as an international online betting platform. Some of the Third-Party Processors engaged by rp369 — including cloud infrastructure providers, game studios such as Pragmatic Play and Evolution Gaming, and KYC verification services — may process Personal Data on servers located outside Indonesia.
Where Personal Data is transferred internationally, rp369 takes the following steps to ensure your data remains protected to a standard equivalent to that applied within the Platform:
- All Third-Party Processors are engaged under written data-processing agreements that include binding data protection obligations;
- Transfers to game studios are limited to anonymised session-level data and do not include identity or financial account details;
- Cloud infrastructure used to store KYC documents and financial records is selected from providers that maintain internationally recognised security certifications (ISO 27001 or equivalent);
- Data transferred for KYC verification purposes is subject to purpose-limitation clauses prohibiting the third-party provider from using the data for any purpose other than returning the verification outcome to rp369.
By registering an Account and using the Platform, you acknowledge and agree that your Personal Data may be transferred to and processed in countries outside Indonesia as described in this section.
11 Protection of Minors
rp369 strictly prohibits the use of its Platform by individuals under the age of 21. We do not knowingly collect Personal Data from anyone under the age of 21. If you are a parent or guardian and you believe that a minor has registered an Account on rp369 by misrepresenting their age, please contact us immediately at [email protected] or via live chat.
Upon receiving a credible report of underage registration, rp369 will:
- Immediately suspend the Account pending investigation;
- Delete all Personal Data associated with the Account to the extent permitted by AML record-keeping requirements;
- Return any real-money balance to the payment source after AML screening;
- Void all bonus funds and any winnings generated while the Account was active.
21+ Only: rp369 is an adults-only platform. If you are under 21 years of age, you must not attempt to register, access, or use any feature of the rp369 Platform. All promotional content on this site is directed exclusively at adults aged 21 and over residing in jurisdictions where online betting is not prohibited.
12 Security Measures
rp369 implements a layered, defence-in-depth security architecture to protect Personal Data against unauthorised access, loss, destruction, or alteration. Our technical and organisational security measures include:
- Transport security: TLS 1.3 encryption on all data in transit between client devices and rp369 servers;
- Password security: All Account passwords are stored as bcrypt hashes with unique per-user salts. No rp369 system or employee can retrieve a password in its original plain-text form;
- Two-factor authentication (2FA): Members are encouraged to enable 2FA via Account Settings. 2FA adds a second verification step to the login process, significantly reducing the risk of account takeover;
- Access controls: Access to Member Personal Data by rp369 employees and contractors is governed by role-based access control (RBAC). Data access is restricted to personnel who require it to perform specific operational functions — support agents see only Account management data, not full KYC documents;
- Encryption at rest: KYC documents and sensitive financial records are stored in encrypted form on access-controlled cloud infrastructure;
- Intrusion detection: rp369's infrastructure is monitored continuously for anomalous access patterns, DDoS attacks, and signs of compromise using automated threat-detection systems;
- Penetration testing: rp369 engages independent security professionals to conduct regular penetration tests of the Platform's web application and API layer.
Despite these measures, no internet-based system can guarantee absolute security. rp369 cannot warrant that unauthorised access, data loss, or security breaches will never occur. In the event of a security incident materially affecting your Personal Data, rp369 will notify you promptly and take all reasonable steps to limit the impact and remediate the vulnerability.
13 Amendments to This Policy
rp369 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, rp369 will:
- Update the "Last Reviewed" date at the top of this page;
- Display a notice on the rp369 homepage informing Members of the update;
- Where the changes materially affect how we use your Personal Data, send an email notification to all active Members at least 7 days before the revised Policy takes effect.
Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and request Account closure via the support team. We recommend reviewing this page periodically to stay informed of our current privacy practices.