rpvip2 Privacy Policy

01 Definitions

02 Data Controller

rpvip2 acts as the Data Controller for all Personal Data collected through this Platform. rpvip2 operates as an internationally licensed offshore gaming operator and is responsible for ensuring that all data processing activities comply with the requirements imposed by its licensing authority and applicable international data-protection standards.

For all data-related enquiries, requests, or complaints, You may contact our Data Protection Officer directly:

03 Data We Collect

rpvip2 collects the following categories of Personal Data:

rpvip2 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers, unless specifically required by its licensing authority for identity-verification purposes (in which case, only the minimum necessary data will be collected).

04 How Data Is Collected

4.1 Data You Provide Directly

Most Personal Data is collected directly from You when You: register an Account; complete the KYC verification process; make a deposit or submit a withdrawal request; contact our customer-support team via live chat or email; opt into a promotional offer; or respond to a Platform survey.

4.2 Data Collected Automatically

When You access the Platform, certain Technical Data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, the pages you visit on the Platform, the duration of your session, and the device and browser used to access the service. This data is used primarily for security monitoring, fraud prevention, and service performance analytics. See Section 9 for detailed cookie information.

4.3 Data from Third Parties

rpvip2 may receive limited Personal Data from third-party sources including: (a) identity-verification service providers during the KYC process; (b) payment service providers confirming the ownership of bank accounts (BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) or e-wallets (OVO, DANA, GoPay) linked to your Account; and (c) fraud-screening services that validate transaction legitimacy. In all cases, data received from third parties is used only for the specific purpose that triggered its collection and is subject to the same data-protection standards applied to directly collected data.

05 Purpose & Legal Basis for Processing

rpvip2 processes Personal Data only where we have a lawful basis to do so. The purposes and corresponding legal bases are set out below:

06 Data Sharing

6.1 We Do Not Sell Your Data

rpvip2 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. Your data is not a product. This commitment is unconditional and applies regardless of any change in our business model or ownership structure.

6.2 Authorised Data Processors

rpvip2 works with a limited number of third-party Data Processors who access your Personal Data only to the extent necessary to perform specific contracted services. All Data Processors are bound by written data-processing agreements that impose data-protection obligations equivalent to those in this Policy. Categories of Data Processors include:

• Payment processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay) — limited to transaction data required to execute payments;
• KYC and identity-verification vendors: Third-party providers that assist in verifying the authenticity of identity documents and screening against watchlists;
• Cloud infrastructure and hosting providers: Secure data-centre operators that store Platform data on behalf of rpvip2 under strict contractual and technical controls;
• Fraud prevention and cybersecurity services: Providers that analyse transaction patterns and login behaviour to detect and prevent fraudulent activity;
• Customer-support platform providers: Software vendors whose tools facilitate live chat and email support communications.

6.3 Legal Disclosures

rpvip2 may disclose Personal Data to government authorities, law-enforcement agencies, or the Platform's licensing regulator where required by a valid legal obligation, court order, or regulatory demand. We will always seek to limit such disclosures to the minimum data required and will, where legally permissible, notify the affected User of any such disclosure.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of rpvip2's assets, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified by email and by a notice on the Platform at least 30 days prior to any such transfer, and you will have the right to close your Account before the transfer takes effect if you do not consent to the new data controller.

07 Data Retention

rpvip2 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active Account, plus a minimum of 5 years following Account closure, to comply with anti-money-laundering regulations;
• Transaction and wager history: Retained for a minimum of 5 years following the date of each transaction;
• KYC documentation: Retained for a minimum of 5 years following the submission date, or longer if required by the licensing authority;
• Customer-support correspondence: Retained for 3 years from the date of the last interaction;
• Technical and session logs: Retained for 12 months from the date of collection, then anonymised or deleted;
• Marketing consent records: Retained for the duration of any consent-based communication, plus 3 years thereafter as evidence of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised in accordance with the Platform's data-disposal procedures.

08 Security Measures

rpvip2 implements a multi-layered security framework to protect your Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security (TLS) / SSL: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS encryption;
• Data-at-rest encryption: Personal Data stored on Platform servers is encrypted using AES-256 encryption;
• Access controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access-control systems;
• Two-factor authentication (2FA): Available and strongly recommended for all User Accounts to protect against unauthorised login;
• Intrusion detection and monitoring: Continuous real-time monitoring of the Platform infrastructure for anomalous access patterns, data exfiltration attempts, and other security events;
• Regular security audits: Periodic penetration testing and vulnerability assessments conducted by independent security specialists;
• Staff training: All personnel with access to Personal Data undergo mandatory data-protection training at least annually.

09 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the Platform. They allow the Platform to recognise your device across sessions, maintain your login state, and collect usage analytics. rpvip2 uses both first-party cookies (set directly by the Platform) and limited third-party cookies (set by contracted service providers).

9.2 Types of Cookies Used

9.3 Cookie Control

You can control and delete cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in or using core Platform features. Disabling functional or analytics cookies will not prevent Platform access but may affect your user experience. Detailed browser instructions for managing cookies are available through your browser's help documentation.

10 Your Rights

As a User of the rpvip2 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verifiable request. In some cases, identity verification may be required before the request is processed.

11 Minors & Age Policy

The Platform is strictly for adults aged 21 years and above. rpvip2 does not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory step in the Account registration and KYC process, and all Accounts where age cannot be confirmed will be suspended pending verification.

If you are a parent or legal guardian and believe that a person under 21 in your care has created an Account or submitted Personal Data to the Platform, please contact us immediately at [email protected]. We will promptly investigate, close the Account, and securely delete any associated Personal Data upon confirmation.

12 International Data Transfers

As an internationally licensed offshore operator, rpvip2 may process and store Personal Data on servers located outside Indonesia. Where Personal Data is transferred outside its country of origin, we ensure that appropriate safeguards are in place to protect it, including: data-processing agreements with standard contractual clauses; transfers only to jurisdictions that provide an adequate level of data protection as determined by the relevant licensing authority; and technical security measures consistent with those described in Section 8 of this Policy.

By registering an Account and using the Platform, you acknowledge and consent to the transfer of your Personal Data to our server infrastructure, which may be located in countries outside Indonesia. rpvip2 will always apply the data-protection standards described in this Policy regardless of where your data is processed or stored.

13 Third-Party Links

The Platform does not contain links to external third-party websites. Where third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Spribe) are integrated into the Platform, their software operates within the rpvip2 platform environment and is subject to the same session and data-handling standards described in this Policy. rpvip2 is not responsible for the privacy practices of game studios as independent corporate entities — those studios' own privacy policies govern any data they may collect in the operation of their studios.

14 Policy Amendments

rpvip2 reserves the right to update or amend this Privacy Policy at any time. Material changes to the Policy — particularly any changes that expand the categories of data collected, alter the purposes of processing, or change the User's rights — will be communicated by email to the registered address on your Account at least 14 days before the changes take effect. The updated Policy will also be published on this page with a revised "Last Updated" date.

Continued use of the Platform after the notification period constitutes acceptance of the updated Policy. If you do not agree to any amendment, you should close your Account before the effective date of the change. Closing your Account does not affect our right to retain data where retention is required by law.

15 Contact & Complaints

For any questions, requests, or complaints relating to this Privacy Policy or the handling of your Personal Data by rpvip2, please contact our Data Protection team:

If you are not satisfied with our response to a data-privacy complaint, you may escalate the matter to the data-protection authority of the jurisdiction in which rpvip2 holds its primary offshore operating licence. Contact details for that authority will be provided upon request.