rp2vip Privacy Policy

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

rp2vip collects only the data that is necessary to provide, maintain, and improve our services and to comply with our legal obligations. The categories of Personal Data we may collect include:

2.1 Registration Data. When you create an account, we collect your full name, date of birth, email address, chosen username, and the mobile phone number you provide during sign-up. This data is required to establish and maintain your account.

2.2 Identity Verification (KYC) Data. To process withdrawal requests and comply with anti-money-laundering (AML) standards, we collect scanned copies or photographs of government-issued identity documents (such as your Indonesian national identity card — KTP — or passport), proof of address, and in some cases a live selfie holding the submitted document.

2.3 Financial Data. We collect details of the payment methods you use to deposit and withdraw funds, including bank account names, bank account numbers (for BCA, BRI, BNI, Mandiri, CIMB Niaga transfers), and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja). We do not store full debit or credit card numbers. USDT wallet addresses are recorded for cryptocurrency transactions.

2.4 Transaction Data. We maintain records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance changes. These records are essential for resolving disputes, detecting fraud, and meeting our audit obligations.

2.5 Technical & Device Data. When you access rp2vip, our servers automatically record your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps.

2.6 Communications Data. If you contact our support team via live chat or email, we retain a record of that correspondence, including any attachments, for the purposes of quality assurance, training, and dispute resolution.

2.7 Responsible Gaming Data. Any deposit limits, session time reminders, cooling-off periods, or self-exclusion requests you submit through your account dashboard are recorded and stored separately from standard member data, with enhanced access restrictions.

We collect Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, claim a bonus, submit a support ticket, or interact with any form or input field on the platform.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate the rp2vip website. See Section 7 (Cookies) for full details.
• From payment processors — when a payment provider confirms or declines a deposit or withdrawal transaction, we receive a transaction status notification that may include limited financial identifiers.
• From fraud prevention partners — third-party fraud and AML screening services may provide us with risk signals associated with an IP address, device fingerprint, or payment method that we cross-reference against your account activity.
• From publicly available sources — in limited circumstances connected with AML compliance, we may cross-reference publicly available sanctions lists or politically exposed persons (PEP) databases.

rp2vip uses your Personal Data for the following purposes:

Where international data protection principles require us to identify a legal basis for processing your Personal Data, we rely on the following grounds:

• Contractual necessity — processing required to perform our obligations under the Terms & Conditions you accepted at registration, including account management, payment processing, and KYC.
• Legitimate interests — processing carried out to pursue rp2vip's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights.
• Legal obligation — processing required to comply with applicable AML, CTF, and other regulatory obligations.
• Consent — for marketing communications and non-essential cookies, where we rely on your explicit, freely given, and revocable consent.

rp2vip does not sell or rent your Personal Data. We may share data with the following categories of recipients only to the extent strictly necessary:

• Payment processors and banking partners — including local Indonesian bank transfer facilitators and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), solely for the purpose of processing your transactions.
• Identity verification and KYC providers — third-party services that assist us in verifying submitted identity documents and screening against sanctions and PEP lists.
• Fraud detection and cybersecurity providers — services that analyze device fingerprints, IP addresses, and behavioral patterns to protect the platform and its members against fraudulent activity.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited session and wagering data necessary to deliver their games and calculate outcomes.
• Legal and regulatory authorities — where we are required by law, court order, or a competent regulatory authority to disclose information, we will do so. We will, where legally permissible, notify the affected Member before complying.
• Professional advisors — our legal counsel, auditors, and insurers may access limited Personal Data as necessary to provide their professional services, under binding confidentiality obligations.

All Third-Party Processors engaged by rp2vip are bound by data-processing agreements that prohibit them from using your data for any purpose beyond the specific task for which they were engaged, and from further disclosing or selling your data.

rp2vip uses cookies and similar technologies to deliver a functional, secure, and personalized experience on the platform. The types of cookies we use are described below:

You may manage cookie preferences through your browser settings at any time. Please note that disabling functional or analytics cookies may affect your experience on the platform but will not prevent you from accessing core services. Strictly necessary and fraud-prevention cookies cannot be disabled without breaking core platform functionality.

rp2vip retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account and registration data: retained for the duration of your account's active life, plus a minimum of five (5) years after account closure, to meet AML record-keeping requirements.
• KYC and identity documents: retained for a minimum of five (5) years after the date of submission or account closure, whichever is later.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: retained for three (3) years from the date of the most recent communication in a given thread.
• Technical and device logs: retained for twelve (12) months, after which they are automatically deleted or anonymized.
• Responsible gaming records: retained indefinitely for self-exclusion records to prevent re-registration during an exclusion period; other responsible gaming preferences are retained for the life of the account plus two (2) years.

When Personal Data is no longer required, it is securely deleted or irreversibly anonymized. Anonymized, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and business-analysis purposes.

As a Member of rp2vip, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 5 business days and provide a full response within 30 days.

rp2vip implements a multi-layered technical and organizational security framework designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Key measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser and our servers is encrypted using TLS 1.3, the current gold standard for in-transit data protection.
• Encryption at Rest: Sensitive data stored on our servers — including KYC documents and financial account identifiers — is encrypted using AES-256 encryption.
• Access Controls: Internal access to Member Personal Data is restricted on a strict need-to-know basis. All staff access is logged, and access rights are reviewed quarterly.
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion-detection systems. Any anomalous access patterns trigger immediate security alerts and investigation protocols.
• Penetration Testing: rp2vip commissions independent security penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Password Security: Member passwords are stored using a salted cryptographic hashing algorithm. We never store passwords in plain text, and our system cannot retrieve your password — only reset it.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, rp2vip will notify affected Members without undue delay, and in any case within 72 hours of becoming aware of the breach, providing details of the nature of the incident, the data affected, and the steps we are taking in response.

While we take all reasonable precautions, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorized access to your account.

rp2vip is strictly an adult platform. Access is limited to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from anyone under 21. If we discover that a Member has provided false information about their age during registration and is in fact under 21, we will immediately close the account, delete all associated Personal Data to the extent not required for legal retention purposes, and return any deposits net of withdrawals already made.

If you are a parent or guardian and believe that a minor in your care has accessed rp2vip and provided Personal Data, please contact us immediately at [email protected]. We will act promptly to investigate and, where confirmed, delete the minor's data and close the account.

rp2vip strongly recommends that parents and guardians use reputable internet filtering software to prevent minors from accessing gambling websites. A strict 21+ policy is enforced at the point of registration and at the point of first withdrawal via KYC verification.

rp2vip may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform services. Where changes are material — meaning they affect how we use your data in a way that may impact your rights — we will provide at least seven (7) days' advance notice by posting a prominent notice on the platform homepage and, where your email address is on file and verified, by sending a notification to your registered email address.

Minor clarifications, corrections of typographical errors, or updates that do not affect your substantive rights may be applied immediately upon publication. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of rp2vip following the effective date of any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy Inquiry" for general questions or "Data Rights Request — [Your Username]" for formal data-subject requests.
• Live Chat: Available 24/7 via the chat widget on the rp2vip platform. For formal data-subject requests, written email communication is preferred to ensure a documented record.

Our support team includes native Indonesian-speaking agents available at all hours, including during Idul Fitri, Lebaran, and Ramadhan. All formal written privacy requests will receive a written response within 30 calendar days of receipt.

For questions specifically relating to responsible gaming data, deposit limits, or self-exclusion records, please also refer to our dedicated Responsible Gaming page.