Privacy Policy

1 Introduction & Scope

rsvip6 ("we", "us", "our", or "the Platform") operates an internationally licensed online gaming platform providing sports betting, live casino games, premium slot titles, and togel (Indonesia's traditional numbers lottery) to eligible players. This Privacy Policy ("Policy") sets out in full our practices regarding the collection, processing, storage, transfer, and deletion of personal data belonging to visitors and registered players ("you", "your", or "the User").

This Policy applies to all personal data collected through:

• The rsvip6 website at rsvip6.net and all subdomain pages;
• Any rsvip6 mobile application distributed via authorised channels;
• Email, live chat, and telephone communications with rsvip6 customer support;
• Third-party integrations or affiliate sign-up flows that direct users to rsvip6.

This Policy does not apply to third-party websites, payment processors, or game studios that operate under their own, independently published privacy notices. We encourage you to review those notices separately before submitting personal data to any third party.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or in combination with other data held by rsvip6, including name, email address, phone number, national identity number, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, alignment, restriction, erasure, or destruction.
• "Data Controller" — rsvip6, the entity that determines the purposes and means of processing Personal Data on this Platform.
• "Data Processor" — a third-party service provider that processes Personal Data on behalf of rsvip6 under a written data-processing agreement.
• "KYC" — Know Your Customer identity verification procedures required by our licensing obligations, including document verification and liveness checks.
• "Rupiah / IDR / Rp" — Indonesian Rupiah, the primary currency accepted for deposits and withdrawals on the Platform.

3 Data We Collect

3.1 Account Registration Data

When you create a rsvip6 account, we collect the following data, which is required to establish and maintain your player account:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify the 21+ age requirement);
• Email address;
• Mobile phone number;
• Residential address (including city — e.g. Jakarta, Surabaya, Bandung, Bali);
• Preferred currency (IDR / Rp);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with our international licensing obligations and anti-money-laundering (AML) requirements, we may request:

• A copy of your government-issued photo ID (e.g. Indonesian national identity card — KTP, passport, or driver's licence);
• A recent utility bill or bank statement as proof of address;
• A selfie or liveness-check video to confirm identity;
• Source-of-funds documentation for high-value transactions.

3.3 Financial Data

rsvip6 collects transaction records necessary to process deposits and withdrawals. We do not store full bank account credentials on our servers. Financial data collected includes:

• Bank account name and last-four digits for transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP;
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions;
• Deposit and withdrawal history, amounts in IDR, timestamps, and transaction reference numbers.

3.4 Technical & Usage Data

We automatically collect the following data when you access the Platform:

Data Type	Examples	Purpose
Device & browser	Device model, OS version, browser type	Platform optimisation, fraud detection
IP address	IPv4/IPv6 address, geo-location (country, city)	Geo-restriction enforcement, security
Session data	Login timestamps (WIB/UTC+7), session duration	Responsible gaming monitoring
Gameplay data	Games played, bets placed, wagering amounts in Rp	Account management, bonus eligibility
Referral data	Affiliate source, UTM parameters	Marketing attribution

3.5 Communications Data

When you contact rsvip6 customer support via live chat, email, or any other channel, we retain records of the communication — including the content of messages, timestamps, and the support agent's responses — for service quality monitoring and dispute resolution purposes.

4 How We Use Your Data

rsvip6 processes your Personal Data for the following purposes:

• Account creation and management — to register, maintain, and close your player account;
• Identity verification — to fulfil KYC obligations under our international gaming licence;
• Payment processing — to process IDR deposits and same-day withdrawals via Indonesian banks and e-wallets;
• Fraud and security — to detect and prevent fraudulent activity, money laundering, underage gambling, and platform abuse;
• Responsible gaming — to monitor gambling patterns, enforce deposit limits, and apply self-exclusion requests in compliance with our responsible gaming policy;
• Legal compliance — to comply with applicable laws, regulations, licensing conditions, and court orders;
• Customer support — to respond to enquiries, process disputes, and deliver account notifications;
• Platform improvement — to analyse aggregated, anonymised usage data to improve site performance, game selection, and user experience;
• Marketing communications — to send promotional offers, bonus notifications, and event announcements to users who have opted in to receive them.

5 Legal Bases for Processing

rsvip6 processes Personal Data on the following legal grounds:

• Contract performance — processing required to deliver the services you have contracted for when registering an account (account management, payment processing, gameplay);
• Legal obligation — processing required to comply with KYC, AML, licensing, and other legal requirements applicable to our operations;
• Legitimate interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your fundamental rights;
• Consent — processing for marketing communications and optional analytics cookies, where you have given clear, freely withdrawable consent.

6 Sharing & Disclosure

rsvip6 does not sell your Personal Data. We share data only in the following limited circumstances:

• Payment processors and e-wallet providers — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja receive only the minimum data needed to complete a specific transaction;
• KYC and fraud-prevention partners — licensed identity verification and AML screening providers acting as our Data Processors under binding agreements;
• Game studios — providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised session tokens; no identifiable personal data is shared with game studios;
• Regulatory and law-enforcement bodies — where required by a valid court order, subpoena, or regulatory request from a competent authority with jurisdiction over our operations;
• Business successors — in the event of a merger, acquisition, or sale of the Platform, Personal Data may be transferred to the acquiring entity subject to the same protections described in this Policy.

All third-party Data Processors are contractually required to process Personal Data only for specified, permitted purposes and to implement security measures at least as stringent as those maintained by rsvip6.

7 Cookies & Tracking Technologies

rsvip6 uses the following categories of cookies and similar technologies on its platform:

Category	Purpose	Can be disabled?
Strictly Necessary	Session management, authentication, security tokens, load balancing	No — required for platform function
Functional	Language preferences, game history, display settings	Yes — may limit features
Analytical	Aggregated usage statistics to improve the platform (anonymised)	Yes — via account settings
Affiliate Tracking	Attribution of sign-ups to referral partners (first-party only)	Yes — after account creation

rsvip6 does not deploy third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences through your browser settings at any time; however, disabling strictly necessary cookies will prevent you from accessing your account.

8 Data Security

rsvip6 implements a multi-layered security programme to protect your Personal Data, including:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment references;
• Bcrypt hashing with per-user salts for all account passwords — rsvip6 staff cannot retrieve your plaintext password;
• Multi-factor authentication (MFA) available on all accounts and required for administrative access;
• Intrusion detection and 24/7 monitoring by our security operations team;
• Regular penetration testing conducted by independent third-party security auditors;
• Role-based access controls ensuring that staff access only the data necessary for their specific operational function.

9 Data Retention

rsvip6 retains Personal Data for the periods specified below, after which data is securely deleted or anonymised:

Data Category	Retention Period	Basis
Account & registration data	Duration of account + 5 years post-closure	AML / licensing obligation
KYC documents	5 years from submission or account closure	Regulatory requirement
Financial transaction records	7 years from transaction date	Financial record-keeping obligation
Customer support communications	3 years from last interaction	Dispute resolution / legitimate interest
Analytical / usage data (anonymised)	Indefinite (non-identifiable aggregates only)	Platform improvement / legitimate interest
Marketing consent records	Until consent withdrawn + 3 years	Proof of consent / legal obligation

10 Your Rights

Subject to applicable law and our legitimate processing interests, you hold the following rights in relation to your Personal Data held by rsvip6:

• Right of Access — you may request a copy of all Personal Data we hold about you;
• Right of Rectification — you may request correction of inaccurate or incomplete data;
• Right to Erasure — you may request deletion of your Personal Data where no overriding legal obligation requires its continued retention;
• Right to Restriction — you may request that we limit processing of your data in certain circumstances;
• Right to Data Portability — you may request your data in a structured, machine-readable format for transfer to another controller;
• Right to Object — you may object to processing based on legitimate interests, including any direct marketing;
• Right to Withdraw Consent — where processing is based on consent (e.g. marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact our Data Protection team at the email address provided in Section 14. We will acknowledge your request within 5 business days and respond in full within 30 calendar days. We may request proof of identity before fulfilling your request to prevent unauthorised access to your data.

11 International Data Transfers

rsvip6 is operated by an internationally incorporated entity and may process or store Personal Data on servers located outside Indonesia. Where such transfers occur, rsvip6 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by applicable supervisory authorities;
• Transfers only to jurisdictions that provide an adequate level of data protection as determined by our legal team;
• Binding data-processing agreements with all overseas Data Processors.

By using the rsvip6 platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia. We take all reasonable steps to ensure your data receives consistent protection regardless of where it is processed.

12 Children & Minors

13 Changes to This Policy

rsvip6 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational structure. When material changes are made, we will:

• Update the "Last updated" date at the top of this page;
• Display a prominent notice on the rsvip6 platform for a minimum of 14 days after the change takes effect;
• Send an email notification to all registered players whose accounts are active at the time of the update.

Your continued use of the platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree with the changes, you must close your account before the effective date.

14 Contact & Complaints

For any questions, requests, or complaints relating to this Privacy Policy or rsvip6's data practices, please contact our Data Protection team:

• Email: support [at] rsvip6.net
• Response time: within 5 business days (Monday–Friday, 09:00–18:00 WIB)
• Postal enquiries: address available on request via the support email above

If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the supervisory authority with jurisdiction over rsvip6's data-processing activities, or to seek judicial remedy through the courts of the applicable jurisdiction.