This Privacy Policy explains how rp55t collects, uses, stores, and protects the personal data of its members across Indonesia. We are committed to handling your information transparently, securely, and in accordance with internationally recognised data protection principles. By using the rp55t platform, you acknowledge and accept the practices described in this document.
Our Privacy Commitments
These cards summarise the core principles that govern rp55t's data practices. Full legal details are set out in the clauses below.
rp55t collects only the personal data that is strictly necessary to provide our services, verify your identity, process transactions in Rupiah, and comply with applicable regulations. We do not collect data speculatively or beyond what is proportionate to our operational needs.
All data transmitted between your device and rp55t's servers is encrypted using industry-standard TLS 1.3. Stored personal data is protected by AES-256 encryption at rest. Access to member data is restricted to authorised personnel on a strict need-to-know basis, with full audit logging.
Members registered with rp55t have the right to access, correct, and request deletion of their personal data. You may also object to certain processing activities or request a portable copy of your data. All such requests are handled by our dedicated Data Protection team within 30 days.
rp55t does not sell your personal data. Data is shared with third parties — such as BCA, BRI, BNI, Mandiri payment processors, KYC verification providers, and game studios like Pragmatic Play and Evolution Gaming — only under strict data processing agreements and solely to the extent necessary to deliver our services to you.
rp55t uses cookies and similar tracking technologies only for essential platform functionality, session management, fraud prevention, and — where you have consented — analytics and personalised promotions. You retain full control over non-essential cookies via your browser settings at any time.
In the unlikely event of a data security incident affecting your personal data, rp55t will notify affected members promptly — within 72 hours of becoming aware of the breach — and take immediate remediation steps. We maintain a dedicated incident-response team available around the clock.
Before you proceed: This Privacy Policy forms part of your agreement with rp55t and should be read alongside our Terms & Conditions and Responsible Gaming policy. By registering an account or continuing to use the rp55t platform, you confirm that you have read and understood this policy in full.
The following terms carry the meanings assigned to them throughout this Privacy Policy.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living individual, either on its own or in combination with other data — including name, date of birth, national ID number, email address, device identifiers, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction, whether by automated or manual means. |
| "Controller" | rp55t, the entity that determines the purposes and means of processing your Personal Data. |
| "Processor" | Any third party that processes Personal Data on rp55t's behalf under a written data processing agreement. |
| "Member" / "You" | Any individual who has registered and maintains an active account on the rp55t platform. |
| "KYC" | Know Your Customer — the identity verification process rp55t conducts to confirm a Member's identity, age, and eligibility before processing withdrawals or upon request by the compliance team. |
| "Cookies" | Small text files placed on your device by rp55t's platform for the purposes of session management, analytics, and personalisation. |
| "Sensitive Data" | A subset of Personal Data requiring heightened protection, including national identity numbers (KTP), bank account details, and information relating to health or financial status collected for responsible gaming purposes. |
2.1 Registration Data. When you create a rp55t account, we collect your full legal name, date of birth, residential address in Indonesia (including city — e.g., Jakarta, Surabaya, Bandung, Medan, Bali), email address, and the phone number you choose to associate with your account. This information is required to open your account and cannot be omitted.
2.2 Identity Verification (KYC) Data. To comply with our anti-money-laundering obligations and to confirm you meet the 21+ age requirement, rp55t may request copies of: your national identity card (KTP or equivalent government-issued photo ID), your passport (if applicable), proof of residential address (utility bill, bank statement, or official correspondence dated within three months), and a selfie or live-photo verification image.
2.3 Financial Data. We collect details of the payment methods you use to deposit and withdraw funds in Indonesian Rupiah (IDR), including bank account names and masked account numbers for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata, and registered e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. rp55t does not store full card numbers or full bank account numbers on its own servers; these are tokenised and held by our PCI-DSS-compliant payment processors.
2.4 Transactional Data. We maintain a full record of all deposits, withdrawals, bets placed (including sportsbook wagers on BRI Liga 1, Timnas Indonesia matches, EPL, Champions League and other competitions), casino game sessions, togel (Indonesia's traditional numbers lottery) entries, and scratch card purchases associated with your account.
2.5 Technical & Device Data. We automatically collect your IP address, browser type and version, operating system, device model, screen resolution, time zone (defaulting to WIB, UTC+7), session duration, pages visited, and click paths within the platform. This data is used for fraud prevention, platform optimisation, and security monitoring.
2.6 Communications Data. When you contact rp55t's customer support team — whether via live chat, email to [email protected], or any other channel — we retain a record of those communications, including the content of messages and any attachments you send, for quality assurance, dispute resolution, and regulatory compliance purposes.
2.7 Responsible Gaming Data. If you use rp55t's responsible gaming tools — including deposit limits, session time limits, loss limits, time-out periods, or self-exclusion — we record these elections and any assessments conducted by our responsible gaming team. This data is held with heightened sensitivity controls and is not used for commercial profiling.
3.1 Directly From You. The majority of your Personal Data is collected directly when you register an account, complete the KYC process, make a deposit or withdrawal, place a bet, contact support, or update your account profile.
3.2 Automatically. Technical and device data (see Clause 2.5) is collected automatically via server logs, cookies, and similar technologies each time you access the rp55t platform from any device.
3.3 From Third Parties. rp55t may receive Personal Data about you from: (a) identity verification agencies used to confirm your KTP or passport details; (b) payment providers (BCA, BRI, GoPay, etc.) confirming transaction status and account holder names; (c) fraud-prevention databases that flag known fraudulent identities or devices; (d) our licensed game studio partners (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming) where their platform logs are required to resolve disputes about game outcomes.
rp55t does not purchase contact lists or marketing databases from brokers. All Personal Data we hold originates either directly from you or from service providers engaged specifically to deliver rp55t's platform services.
rp55t processes your Personal Data on one or more of the following legal bases, depending on the specific purpose:
We do not use your Personal Data for fully automated decision-making that produces legal or similarly significant effects without human review, except where expressly permitted by law and disclosed to you at the point of data collection.
5.1 Service Providers (Processors). rp55t shares Personal Data with third-party service providers acting as data Processors on our behalf. These include: payment processors (covering BCA, BRI, BNI, Mandiri, and e-wallets such as OVO, DANA, and GoPay), KYC and identity-verification agencies, cloud infrastructure providers hosting rp55t's platform, customer-support software vendors, and fraud-prevention services. All Processors are bound by written data processing agreements that require them to process data only on rp55t's documented instructions and to maintain security standards equivalent to or exceeding those described in Clause 9.
5.2 Game Studio Partners. When you play casino games or slots, limited transactional data (session ID, bet amounts, game outcomes) is shared with the relevant game studio — such as Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, or NetEnt — solely for the purpose of game delivery, result verification, and dispute resolution. Game studios do not receive your KYC documents, bank account details, or contact information.
5.3 Regulatory and Law-Enforcement Authorities. rp55t will disclose Personal Data to competent governmental, regulatory, law-enforcement, or judicial authorities when required to do so by a valid legal order, subpoena, or applicable law. Where legally permissible, rp55t will notify the affected Member before making such a disclosure.
5.4 Business Transfers. In the event that rp55t undergoes a merger, acquisition, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquirer as part of that transaction. You will be notified in advance of any such transfer and of any consequent changes to this Privacy Policy.
5.5 No Sale of Data. rp55t does not sell, rent, or trade your Personal Data to any third party for their independent marketing or commercial purposes. This commitment applies unconditionally and without exception.
6.1 Active Accounts. While your rp55t account remains active, rp55t retains all Personal Data associated with your account as necessary to provide services, maintain transaction records, and comply with legal obligations.
6.2 Closed Accounts. Following closure of your account — whether initiated by you or by rp55t — we retain your Personal Data for a minimum of five (5) years from the date of closure. This retention period reflects our obligations under applicable AML and financial record-keeping requirements.
6.3 KYC Documents. Identity verification documents (copies of KTP, passport, proof of address) are retained for five (5) years following account closure or the last transaction date, whichever is later. After this period, documents are securely deleted or anonymised.
6.4 Communications. Records of customer support interactions are retained for three (3) years from the date of the last communication in a given thread, or for the duration of any unresolved dispute plus one year, whichever is longer.
6.5 Technical Logs. Server logs and device data are retained for a rolling period of twelve (12) months for security and fraud-investigation purposes, after which they are automatically purged.
Where retention is required solely to comply with a legal obligation, data is stored in a restricted archive environment and is not accessible for any operational purpose. Access to archived data requires a formal compliance-team authorisation process.
7.1 What Are Cookies. Cookies are small text files stored on your device when you visit the rp55t platform. We also use similar technologies such as pixel tags, local storage objects, and session storage where appropriate.
7.2 Cookie Categories. rp55t uses the following categories of cookies:
7.3 Managing Cookies. You can control cookie preferences through your web browser settings. Most modern browsers allow you to block or delete cookies by category. Please note that disabling strictly necessary cookies will prevent you from logging in to rp55t. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
As a Member of rp55t, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our Data Protection Officer (DPO) at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving a valid request.
| Right | What It Means | Available? |
|---|---|---|
| Right of Access | Obtain a copy of all Personal Data rp55t holds about you, together with information about how it is processed. | Yes |
| Right to Rectification | Request correction of any inaccurate or incomplete Personal Data held in your account. Corrections to KYC data require re-verification. | Yes |
| Right to Erasure | Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to overriding legal retention obligations (see Clause 6). | Yes* |
| Right to Restriction | Request that rp55t restricts processing of your Personal Data — for example, while a correction request is being verified. | Yes |
| Right to Data Portability | Receive a structured, machine-readable copy of the Personal Data you provided directly to rp55t, for transfer to another service provider. | Yes |
| Right to Object | Object to processing based on rp55t's legitimate interests, including profiling for personalised promotions. rp55t will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests. | Yes |
| Right to Withdraw Consent | Withdraw consent for analytics cookies and marketing communications at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal. | Yes |
* Erasure requests will be fulfilled to the extent permitted by law. Data subject to mandatory financial or AML retention obligations cannot be deleted before the applicable retention period expires.
9.1 Technical Controls. rp55t employs the following technical security controls to protect your Personal Data: TLS 1.3 encryption for all data in transit; AES-256 encryption for data at rest; multi-factor authentication (MFA) on all internal administrative systems; regular third-party penetration testing; a Web Application Firewall (WAF) filtering malicious traffic in real time; and an Intrusion Detection System (IDS) monitoring for anomalous access patterns around the clock.
9.2 Organisational Controls. Access to Member Personal Data is restricted to rp55t employees and contractors with a documented operational need. All staff with data access receive mandatory annual data-protection training. Privileged access is reviewed quarterly and revoked immediately upon role change or termination of employment.
9.3 Payment Security. Financial data — including bank account identifiers for BCA, BRI, BNI, Mandiri, and e-wallet accounts — is handled exclusively by PCI-DSS Level 1 certified payment processors. rp55t does not store full account numbers or card details on its own infrastructure.
9.4 Incident Response. rp55t maintains a documented incident response plan. In the event of a data breach affecting your Personal Data, rp55t will: (a) contain and assess the breach within 24 hours of discovery; (b) notify affected Members within 72 hours where the breach is likely to result in a high risk to their rights and interests; (c) take all reasonable remediation steps and publish a post-incident report within 30 days.
No online platform can guarantee absolute security. While rp55t applies industry-leading controls, you also play a role in keeping your account secure. Use a strong, unique password for your rp55t account, enable two-factor authentication (2FA) in your account settings, and never share your login credentials with any third party.
10.1 rp55t's services are strictly restricted to individuals aged 21 and above. We do not knowingly collect Personal Data from anyone under the age of 21. Age verification is a mandatory step in our KYC process, and rp55t takes all reasonable technical and organisational measures to prevent access by minors.
10.2 If rp55t discovers or has reasonable grounds to believe that a Member is under 21 years of age, the account will be suspended immediately pending investigation. If the Member is confirmed to be underage, the account will be permanently closed, all Bonus Funds will be forfeited, and any deposits will be refunded after deducting withdrawals already processed, in accordance with rp55t's Terms & Conditions.
10.3 If you are a parent or guardian and believe your child has registered a rp55t account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action within 24 hours of receiving your report.
11.1 rp55t's primary operations serve the Indonesian market, and the majority of Member data is processed within data centres in the Asia-Pacific region. However, some of our service providers — particularly game studio partners and cloud infrastructure vendors — operate servers in jurisdictions outside Indonesia.
11.2 Where Personal Data is transferred to a country that may not provide the same level of data protection as Indonesia, rp55t ensures appropriate safeguards are in place before any transfer occurs. These safeguards include: contractual clauses binding the recipient to data protection standards equivalent to those in this Privacy Policy; and technical measures such as pseudonymisation and encryption to reduce the risk associated with the transfer.
11.3 You may request details of the specific safeguards applied to any international transfer of your Personal Data by contacting our DPO at [email protected].
12.1 With your consent, rp55t may send you promotional communications by email or in-platform notification. These may include offers related to sportsbook events — such as BRI Liga 1 match promotions, Piala AFF specials, or Champions League accumulators — as well as casino bonuses, new slot releases, and seasonal promotions around events like Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August).
12.2 You can opt out of marketing communications at any time by: (a) clicking the "Unsubscribe" link in any promotional email; (b) updating your communication preferences in your account settings; or (c) contacting support at [email protected]. Opt-out requests are processed within 5 business days.
12.3 Opting out of marketing communications does not affect essential service communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and account security alerts — which will continue to be sent regardless of your marketing preference settings.
13.1 The rp55t platform may contain references to third-party sports data providers, official league websites (such as those of BRI Liga 1 or FIFA), or payment-method information pages. rp55t does not control the privacy practices of these external entities and is not responsible for their content or data-handling procedures.
13.2 This Privacy Policy applies exclusively to data processed by rp55t and its authorised Processors. When you navigate away from rp55t to a third-party website or service, you are subject to that third party's own privacy policy. rp55t strongly recommends reviewing the privacy policies of any third-party services you interact with.
14.1 rp55t reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The revised policy will be published on this page with an updated effective date.
14.2 For material changes — particularly those that affect how we use your Personal Data or your rights — rp55t will provide advance notice via email to the address registered on your account, or via a prominent in-platform notification displayed upon your next login, at least 14 days before the change takes effect.
14.3 Your continued use of the rp55t platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised policy, you must cease using the platform and may request account closure in accordance with rp55t's Terms & Conditions.
If you have any questions, concerns, or complaints regarding this Privacy Policy or rp55t's data practices, or if you wish to exercise any of the rights described in Clause 8, please contact our Data Protection Officer (DPO) using the details below. All communications should be in English or Bahasa Indonesia.
rp55t is committed to resolving all data-related concerns promptly and transparently. If you are not satisfied with our response to your request or complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.
Ready to Play?
Now that you understand how we protect your data, dive into our full range of sports betting, live casino games, and slot gacor titles — all secured by industry-leading encryption and trusted by over 2 million members across Indonesia.