rpvi4 Privacy Policy

1Introduction

rpvi4 is committed to protecting the privacy of everyone who uses our Platform. As an international online betting and casino operator serving players across Indonesia, we handle a significant volume of sensitive personal data — from identity documents submitted during verification to financial records generated by every deposit and withdrawal transaction.

This Policy applies to all personal data collected via the rpvi4 website, its mobile-optimized interface, our customer support channels (live chat, email, WhatsApp), and any other service through which you interact with us directly. It does not apply to the data practices of third-party game providers, payment processors, or other external services that operate under their own privacy frameworks.

We take a data-minimization approach wherever practical: we collect only the information necessary to provide our services, fulfill our legal obligations, and protect the security and integrity of the Platform. We do not collect data speculatively or for purposes that are not described in this Policy.

2Definitions

The following terms are used throughout this Policy with the meanings set out below:

3Information We Collect

rpvi4 collects Personal Data through several channels. The categories of data we collect, along with the specific items within each category, are described below.

3.1 Registration Data

When you create an account, we collect the information you provide directly, including:

• Full legal name, as it appears on your government-issued identity document.
• Email address and chosen account password (stored as a salted cryptographic hash — we never store passwords in plain text).
• Date of birth, for the purpose of confirming you meet the 21+ age requirement.
• Preferred username or display name.
• Indonesian bank account number or registered e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja) for payment processing.

3.2 KYC Verification Data

To comply with our anti-money laundering obligations and to protect the security of the Platform, we collect identity verification documents including:

• Copy of government-issued photo identification: Indonesian National Identity Card (KTP), valid passport, or equivalent.
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days).
• Selfie photograph taken on the day of submission, holding the identity document.
• Source-of-funds documentation where required by our compliance team for high-volume accounts.

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and transaction reference numbers.
• Payment method identifiers (bank account number suffix, e-wallet account identifier).
• Bonus allocations, wagering activity records, and account balance history.

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP lookup.
• Browser type, version, and operating system.
• Device type (mobile, tablet, desktop) and screen resolution.
• Session start and end timestamps, pages visited, and in-Platform navigation paths.
• Referring URL (the page from which you arrived at the Platform, if applicable).

3.5 Communications Data

• Content of messages sent to our support team via live chat, email, or WhatsApp.
• Records of complaints, dispute submissions, and their resolutions.
• Marketing preference settings and opt-in/opt-out records for promotional communications.

3.6 Responsible Gaming Data

• Deposit limit settings, cooling-off period elections, and self-exclusion records.
• Session duration logs used to trigger responsible gaming prompts.
• Voluntary self-assessment questionnaire responses, where submitted.

4How We Use Your Data

rpvi4 uses the Personal Data it collects for the following purposes:

5Legal Basis for Processing

rpvi4 processes your Personal Data on one or more of the following legal grounds, depending on the specific purpose of the processing:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification mandates, and lawful requests from competent authorities.
• Legitimate interests: Processing carried out for our legitimate business interests, including fraud detection, platform security, abuse prevention, and improving service quality — provided those interests do not override your fundamental privacy rights.
• Consent: Processing based on your explicit, freely given consent — specifically for optional marketing communications and for analytics cookies beyond those essential to Platform operation. You may withdraw consent at any time without prejudice to the lawfulness of processing already carried out.

6Data Sharing & Third Parties

rpvi4 does not sell, rent, or trade your Personal Data. We share data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors and banking partners: We share transaction data with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja to facilitate deposits and withdrawals. Each partner operates under its own privacy and security framework and is contractually bound to handle your data responsibly.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe receive session tokens and certain technical data necessary to deliver game content. These providers do not receive your full identity profile.
• KYC and identity verification services: We may use accredited third-party identity verification providers to assist with document authentication and fraud screening. These providers act as Processors under a written data processing agreement and may not use your data for any purpose other than verification.
• Cloud hosting and infrastructure providers: rpvi4's Platform runs on enterprise-grade cloud infrastructure. Our hosting providers act as Processors and are contractually prohibited from accessing customer data for any purpose other than infrastructure operation.
• Legal and regulatory authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of rpvi4 or its users.
• Professional advisers: Our legal counsel, auditors, and compliance consultants may access limited Personal Data on a need-to-know basis, subject to professional confidentiality obligations.

7Cookies & Tracking Technologies

rpvi4 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and — with your consent — to understand how users navigate the site. The cookies we use fall into the following categories:

You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will impair Platform functionality and may prevent you from logging in to your account.

8Data Security

rpvi4 implements a layered security framework to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Our technical and organizational security measures include:

• Encryption in transit: All data transmitted between your browser or app and our servers is encrypted using TLS 1.3. Plain-text HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Personal Data, KYC documents, and financial records stored in our database and document vault are encrypted using AES-256.
• Password security: Account passwords are never stored in plain text. We use bcrypt with a per-user salt to store password credentials.
• Access controls: Internal access to personal data is governed by role-based access controls. Staff members access only the data necessary for their specific function, and all access is logged.
• Fraud monitoring: Our security team operates a 24/7 fraud detection system that monitors for suspicious login patterns, unusual transaction activity, and indicators of account compromise.
• Regular security audits: The Platform undergoes periodic penetration testing and security audits conducted by independent third-party specialists.
• Incident response: In the event of a data breach that poses a material risk to affected players, rpvi4 will notify impacted users promptly and take immediate remedial action to contain the breach and prevent further unauthorized access.

9Data Retention

rpvi4 retains Personal Data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to an identifiable individual.

10Your Rights

As a data subject, you hold the following rights with respect to your Personal Data held by rpvi4. These rights may be subject to limitations where their exercise would conflict with rpvi4's legal obligations or the rights of other individuals.

To exercise any of the above rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days (WIB) and provide a full response within 30 calendar days. In complex cases, this period may be extended by a further 30 days with notice to you.

11International Data Transfers

rpvi4 operates from an offshore jurisdiction and uses cloud infrastructure and third-party service providers whose servers may be located in countries other than Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside Indonesia.

Wherever Personal Data is transferred internationally, rpvi4 takes steps to ensure that an adequate level of protection is maintained. These steps include entering into data processing agreements with Processors that incorporate appropriate data transfer safeguards, and selecting service providers operating in jurisdictions with data protection frameworks recognized as adequate by leading international standards.

By using the rpvi4 Platform and providing your Personal Data, you acknowledge and consent to the international transfer of your data in accordance with this Policy.

12Minors & Age Restriction

If you are a parent or guardian and believe that a minor in your care has registered an account on rpvi4 without your knowledge, please contact us immediately at [email protected]. We will investigate promptly and take all necessary remedial action.

rpvi4 uses both automated age-screening at registration and manual KYC review to enforce this restriction. We invest in responsible gaming technology specifically designed to identify and flag behavioral patterns consistent with underage access.

13Changes to This Policy

rpvi4 reserves the right to update this Privacy Policy at any time. When we make a material change — one that affects your rights or how we handle your data in a meaningful way — we will notify you via a prominent notice on the Platform and, where appropriate, by email to your registered address.

The "Last updated" date at the top of this page will reflect the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree to the revised terms, you should cease using the Platform and request deletion of your data in accordance with Clause 10.

14Contact & Data Requests

For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a privacy-related concern, please contact the rpvi4 Data & Compliance team through the following channels:

• Email: [email protected] — mark your subject line with "Privacy Request" for faster routing to the compliance team. Response within 5 business days (WIB).
• Live Chat: Available 24/7 on the Platform. For data subject requests, our agents will escalate your query to the compliance team within one business day.
• Postal: Written requests may also be submitted to the registered address of the licensing entity operating the rpvi4 Platform. Contact us via email for the current registered address.

All formal privacy complaints will be acknowledged within 24 hours and investigated in accordance with our internal data governance procedures. Where a complaint cannot be resolved to your satisfaction, you have the right to escalate the matter to the relevant data protection authority in the jurisdiction in which you reside.