Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how rk123 ("we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "User", "Player") who access or use the rk123 online betting platform at rk123.cam and all associated services, including sports betting, live casino, slots, togel (Indonesia's traditional numbers lottery), and any promotional or customer support functions.

This Policy applies to all personal data processed by rk123 regardless of the country from which you access our services. By registering an Account, making a deposit, or using any rk123 Service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you must discontinue use of rk123 Services immediately.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy. In the event of any conflict between this Policy and our Terms & Conditions, this Policy shall govern in respect of data protection matters.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable individual, including name, national identity number, date of birth, address, phone number, email address, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means rk123, the entity that determines the purposes and means of processing your Personal Data.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or criminal records.
• "Third Party" means any person or organization other than you and rk123.
• "Cookies" means small text files placed on your device by the rk123 platform to store session information, preferences, and analytics data.

3. Information We Collect

3.1 Information You Provide Directly

When you register an Account, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide us with the following categories of personal information:

• Identity Data: Full legal name, date of birth, nationality, gender, and government-issued identification number (Indonesian KTP number, passport number, or driver's license number).
• Contact Data: Email address, mobile phone number, and residential address (including city, province, and postal code within Indonesia).
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon account numbers and account holder names), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction records.
• Verification Data: Copies of government-issued photo identification, proof of address documents, and — where required by our AML program — source of funds documentation.
• Communications Data: Records of your interactions with our customer support team, including live chat transcripts, emails, and any feedback or complaint you submit.

3.2 Information Collected Automatically

When you access and use rk123's platform, we automatically collect certain technical and behavioral data, including:

• Device Data: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features accessed, bets placed, games played, session duration, click patterns, and navigation paths within the platform.
• Location Data: IP address and — where permission is granted — GPS-derived approximate location, used solely for fraud prevention, regulatory compliance, and localization of content.
• Transaction Data: Complete records of all deposits, withdrawals, bets, wins, losses, and bonus activations associated with your Account.
• Cookie Data: Session cookies, preference cookies, analytics cookies, and — with your explicit consent — marketing cookies. See Section 10 (Cookies) for full details.

3.3 Information from Third Parties

We may receive Personal Data about you from the following sources:

• Identity Verification Providers: Third-party KYC service providers who verify the authenticity of your identity documents and confirm your age.
• Payment Processors: Your bank or e-wallet provider may share transaction confirmation details with us to reconcile deposits and withdrawals.
• Fraud Prevention Services: External fraud detection databases that flag suspicious activity, device fingerprinting services, and IP intelligence providers.
• Publicly Available Sources: Sanctions lists, politically exposed persons (PEP) databases, and adverse media screens used for AML compliance purposes.

4. How We Use Your Personal Data

rk123 processes your Personal Data for specific, documented purposes only. The table below summarizes our primary processing activities:

Purpose of Processing	Categories of Data Used	Legal Basis
Account registration and management	Identity, Contact, Verification	Contract performance
Processing deposits and withdrawals	Financial, Identity	Contract performance
Identity and age verification (KYC)	Identity, Verification	Legal obligation (AML)
Fraud detection and prevention	Device, Location, Transaction, Usage	Legitimate interests
Responsible gaming monitoring	Transaction, Usage, Communications	Legal obligation & public interest
Customer support and dispute resolution	Identity, Contact, Communications	Contract performance
Platform analytics and improvement	Usage, Device, Cookie	Legitimate interests
Promotional communications (opt-in)	Contact, Transaction, Usage	Consent
Regulatory reporting and audit	Identity, Financial, Transaction	Legal obligation

5. Data Sharing and Disclosure

5.1 Service Providers and Processors

rk123 engages carefully vetted third-party service providers to perform functions on our behalf. These providers are authorized to process your Personal Data only to the extent necessary to fulfill the contracted service and are contractually bound by strict data protection obligations. Categories of service providers include:

• KYC and identity verification platforms
• Payment gateways and bank transfer facilitators
• Cloud hosting and data center infrastructure providers
• Fraud prevention and cybersecurity services
• Customer support software providers (live chat platforms)
• Analytics and platform performance monitoring tools

5.2 Game Content Providers

To deliver our full game catalog, rk123 integrates content from licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe. These providers may receive limited technical identifiers (such as a hashed User ID) to manage session continuity and game fairness certification. They do not receive your name, banking details, or contact information.

5.3 Regulatory and Law Enforcement Disclosure

rk123 may disclose your Personal Data to regulatory authorities, law enforcement agencies, or other government bodies where we are legally compelled to do so, or where disclosure is necessary to:

• Comply with a lawful court order, subpoena, or legal process.
• Report suspicious transactions under applicable anti-money laundering regulations.
• Investigate or prevent fraud, security breaches, or illegal activity.
• Protect the rights, property, or safety of rk123, its staff, or its users.

We will notify you of such disclosure where legally permitted to do so.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of rk123's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will provide notice via this Privacy Policy prior to any such transfer taking effect and will ensure that any acquiring entity maintains equivalent data protection standards.

6. Data Retention

rk123 retains your Personal Data for the period necessary to fulfill the purposes described in this Policy, after which data is securely deleted or anonymized. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active Account plus 5 years following Account closure, in accordance with AML and financial record-keeping obligations.
• Transaction Records: Retained for 7 years from the date of the transaction for tax, audit, and regulatory compliance purposes.
• Customer Support Communications: Retained for 3 years from the date of the last interaction.
• Device and Usage Data: Retained for 24 months and then aggregated or anonymized for analytical purposes.
• Marketing Preferences: Retained until you withdraw consent or for 2 years from last opt-in activity, whichever comes first.

Where rk123 is required by law to retain data for a longer period, we will comply with that requirement. Where data is no longer needed for any documented purpose and no legal retention obligation applies, it will be permanently deleted using industry-standard secure deletion protocols.

7. Your Privacy Rights

As a user of rk123 services, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact our data protection team at [email protected] (plain text, not a clickable link):

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: You may request deletion of your Personal Data where we have no ongoing legal basis for retaining it. Note that AML regulations require us to retain certain data for prescribed periods and may override erasure requests.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances, such as while a correction request is pending.
• Right to Data Portability: You may request a structured, machine-readable export of the Personal Data you have provided to rk123.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any ti me without affecting the lawfulness of processing that occurred prior to withdrawal.

We will respond to all verified privacy rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days and will notify you accordingly. We may require proof of identity before processing any request to protect against unauthorized access to your data.

8. Data Security

rk123 employs a comprehensive, multi-layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, loss, or destruction. Our key security measures include:

• Encryption in Transit: All data transmitted between your browser or mobile device and the rk123 platform is protected using 256-bit SSL/TLS encryption. Our SSL certificate is renewed regularly and independently verified.
• Encryption at Rest: Sensitive data stored in our databases — including financial account details and identity document copies — is encrypted using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All rk123 staff with access to user data undergo background screening and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): All internal administrative systems are protected by 2FA. We strongly encourage all players to enable 2FA on their rk123 Accounts.
• Penetration Testing: rk123 engages independent cybersecurity firms to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your Personal Data, we will notify you and relevant authorities within the timeframes required by applicable law.

While rk123 takes every reasonable measure to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials and for ensuring that any devices you use to access rk123 are adequately secured.

9. International Data Transfers

rk123 operates internationally, and your Personal Data may be transferred to and processed in countries outside Indonesia where our infrastructure providers, game studios, or service partners are based. When transferring data internationally, rk123 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring receiving parties to uphold equivalent data protection standards.
• Transfers only to jurisdictions that maintain recognized data protection frameworks.
• Regular review and audit of cross-border data transfer arrangements.

By using rk123 Services, you acknowledge and consent to the transfer of your Personal Data to servers and processors located outside Indonesia, subject to the safeguards described above.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

rk123 uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for the platform to function. These enable login sessions, security tokens, language preferences, and bet slip management. These cookies cannot be disabled.
• Performance and Analytics Cookies: Used to measure platform usage, identify errors, and improve user experience. Data collected is aggregated and does not identify individual users.
• Functional Cookies: Remember your preferences such as preferred deposit method, display settings, and notification choices to provide a personalized experience.
• Marketing Cookies (Consent Required): Used — only with your explicit consent — to deliver relevant promotional offers and measure the effectiveness of marketing campaigns. You may withdraw consent at any time via your Account settings.

10.2 Managing Cookie Preferences

You can control non-essential cookies through your Account settings or by configuring your browser to block or delete cookies. Note that disabling certain cookies may affect platform functionality, including session persistence and personalized features. For full details on cookie management, please contact our support team.

11. Children's Privacy

rk123 Services are strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or store Personal Data belonging to any individual under the age of 21. If we become aware that a minor has provided us with Personal Data or has registered an Account, we will immediately close that Account, void all associated bets, and permanently delete the associated data.

Parents and guardians who believe that a minor in their care has accessed rk123 should contact us immediately at [email protected] so that we can take prompt remedial action.

12. Third-Party Links and Platforms

The rk123 platform does not include links to external third-party websites or services. However, if you access rk123 through an affiliate link or referral, please be aware that we are not responsible for the privacy practices of referring websites. We encourage you to review the privacy policies of any third-party platform you interact with before sharing your personal information.

13. Changes to This Privacy Policy

rk123 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the rk123 platform informing you of the change.
• Where required by law or where changes are significant, seek your renewed consent before the updated Policy takes effect.

Your continued use of rk123 Services following the posting of an amended Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically to stay informed about how we protect your data.

14. Contact and Data Protection Inquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way rk123 processes your Personal Data, please contact our data protection team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week on the rk123 platform
• Response Time: We aim to acknowledge all privacy inquiries within 48 hours and provide a substantive response within 30 calendar days.

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.