rr9999 Privacy Policy — Your Data, Our Responsibility

1. Introduction

rr9999 ("we", "us", "our", "the Company") operates the online gaming platform accessible at https://rr9999.cam (the "Platform"). We are fully committed to protecting the privacy and personal data of every individual who visits, registers with, or otherwise interacts with our Platform ("you", "User", "Member").

This Privacy Policy ("Policy") describes in detail the personal information we collect from you, the purposes for which that information is used, the legal basis for such processing, the parties with whom it may be shared, the security measures we employ to protect it, and the rights available to you regarding your own data. This Policy forms part of our broader legal framework alongside our Terms & Conditions and Responsible Gaming Policy, all of which govern your use of the Platform.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, location data, online identifiers, or factors specific to that individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, deletion, or destruction.
• "Data Controller" means rr9999, the entity that determines the purposes and means of processing your Personal Data.
• "Third Party" means any natural or legal person other than you, rr9999, or rr9999's authorized staff who are permitted to process data under our direct authority.
• "KYC" means Know Your Customer — the mandatory identity verification process requiring submission of valid Indonesian identification documents.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics, and personalization.

3. Personal Data We Collect

rr9999 collects different categories of personal data depending on how you interact with the Platform. The following table summarizes the main categories and specific data points we collect:

We do not knowingly collect sensitive categories of personal data (such as racial origin, political opinions, religious beliefs, health data, or biometric data) beyond the photograph submitted for KYC identity-matching purposes.

4. How We Collect Your Data

4.1 Direct Collection

The majority of personal data we hold is provided directly by you during the following interactions: completing the registration form; submitting KYC verification documents; making or requesting payments; contacting our customer support team via live chat, email, or WhatsApp; participating in promotions or surveys; or updating your Account settings.

4.2 Automated Collection

When you access the Platform, our servers automatically collect certain technical data about your device and browsing session. This includes your IP address, browser type and version, operating system, referring URLs, pages visited, time spent on each page, and interaction patterns. This data is collected via server logs, cookies, and similar tracking technologies described in Section 10 of this Policy.

4.3 Third-Party Sources

In certain circumstances, we may receive personal data about you from third-party sources, including: fraud prevention agencies and identity verification services used during KYC processing; payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) who confirm transaction details; analytics providers who supply aggregated behavioral data; and gaming software providers (such as Pragmatic Play, Evolution Gaming, Microgaming, and Spribe) who log game-round data on our behalf.

5. How We Use Your Personal Data

rr9999 processes your personal data only for legitimate, specified purposes. The primary purposes for which we use your data are set out below:

• Account Management: To create, maintain, and administer your rr9999 Account, including authentication, password recovery, and profile updates.
• Identity Verification: To conduct KYC checks confirming your identity, age (21+), and residency in Indonesia, as required for regulatory compliance and fraud prevention.
• Payment Processing: To process deposits from and withdrawals to your verified Indonesian bank accounts and e-wallets, and to maintain accurate transaction records.
• Service Delivery: To provide access to sports betting, live casino, slot games, and all other Platform features you have registered to use.
• Customer Support: To respond to your inquiries, resolve disputes, investigate complaints, and provide technical assistance via live chat, email, or WhatsApp.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other prohibited activities.
• Responsible Gaming: To monitor gambling behavior patterns, enforce deposit limits and self-exclusion requests, and reach out if our systems identify potentially problematic activity.
• Legal Compliance: To fulfill our obligations under applicable international gaming regulations, anti-money-laundering (AML) requirements, and data protection laws.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the functionality, performance, and user experience of the Platform.
• Personalization: To tailor your Platform experience, including recommending games, sports, and promotions relevant to your stated preferences and activity history.

6. Legal Basis for Processing

rr9999 processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions), including providing gaming services, managing your Account, and processing financial transactions.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements (21+), and regulatory reporting duties.
• Legitimate Interests: Processing is necessary for our legitimate business interests — such as fraud detection, platform security, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: For optional processing activities such as marketing communications and certain cookie placements, we rely on your freely given, specific, and informed consent, which you may withdraw at any time.

7. Data Sharing and Disclosure

7.1 Authorized Service Providers

rr9999 may share your personal data with carefully selected third-party service providers who assist us in operating the Platform. These providers act as data processors under our instruction and are contractually bound to process your data solely for the purposes we specify and to maintain appropriate security standards. Such providers include:

• KYC and identity verification service providers;
• Payment processors and Indonesian banking partners;
• Gaming software and content providers (e.g., Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe);
• Cloud infrastructure and data hosting providers;
• Customer support platform operators;
• Cybersecurity and fraud detection service providers;
• Analytics and performance monitoring platforms.

7.2 Regulatory and Legal Disclosure

We may be required to disclose your personal data to competent authorities, regulators, law enforcement agencies, or courts of law where such disclosure is mandated by applicable law, court order, or regulatory directive. In all such cases, we will disclose only the minimum data necessary and will notify you of such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event that rr9999 undergoes a merger, acquisition, restructuring, or sale of all or a substantial part of its assets, your personal data may be transferred as part of that transaction. We will notify affected Users via the email address on record and provide appropriate choices where required by law.

7.4 No Sale of Personal Data

8. Data Retention

rr9999 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, tax, or accounting obligations. Our standard retention guidelines are as follows:

• Account and Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, to comply with AML and regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, as required under international financial regulations.
• KYC Documentation: Retained for a minimum of five (5) years following Account closure or the completion of any related investigation.
• Gaming and Betting History: Retained for the lifetime of your Account and for two (2) years following closure, for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, unless relevant to an ongoing dispute.
• Marketing Preferences and Consent Records: Retained for the duration of your Account and for one (1) year following opt-out or Account closure.

When your data is no longer required, it is securely deleted or anonymized in accordance with our data destruction procedures.

9. Data Security Measures

rr9999 implements a comprehensive, layered security framework to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS 1.3 protocols.
• Data Encryption at Rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure that only authorized personnel with a genuine business need can access personal data, and all access is logged and audited.
• Two-Factor Authentication (2FA): Optional 2FA is available to all Account holders and is mandatory for staff accessing internal systems.
• Regular Security Audits: Our systems undergo periodic penetration testing and vulnerability assessments conducted by independent third-party security firms.
• Incident Response: We maintain a documented data breach response plan. In the event of a security incident that poses a risk to your rights, we will notify affected Users within 72 hours of becoming aware of the breach.
• Staff Training: All rr9999 employees and contractors who handle personal data receive mandatory data protection training upon onboarding and at regular intervals thereafter.

While we take every reasonable precaution to protect your data, no transmission over the internet or electronic storage system is completely impenetrable. We therefore encourage you to use a strong, unique password for your rr9999 Account and to enable 2FA where available.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognize your device, remember your preferences, and gather analytical data about how the site is used. rr9999 uses cookies and similar tracking technologies (including web beacons and local storage objects) across the Platform.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, authentication, security tokens, and fraud prevention. These cannot be disabled without impairing core Platform functionality.
• Analytical Cookies: Used to understand how Users interact with the Platform, which pages are most visited, and where technical errors occur. This data is aggregated and anonymized where possible.
• Functional Cookies: Used to remember your preferences (e.g., preferred language, last viewed game category, display settings) to provide a more personalized experience.
• Performance Cookies: Help us monitor Platform load times, server performance, and the effectiveness of page layouts and navigation flows.

10.3 Managing Cookies

You can control or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features of the Platform. Most modern browsers allow you to view, manage, and delete cookies via their settings menus. For detailed instructions specific to your browser, refer to the browser's official help documentation.

11. Your Data Protection Rights

As a User of the rr9999 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details in Section 14:

• Right of Access: You have the right to request a copy of the personal data we hold about you, free of charge. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction or completion.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You have the right to request that we restrict the processing of your data in certain circumstances, such as while a rectification request is being verified.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, or where we process your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid data rights requests within thirty (30) calendar days. In complex cases we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day period.

12. Children's Privacy

rr9999 employs mandatory age verification procedures during the registration process, including KTP-based identity checks, to prevent underage access. Any Account found to belong to a person under 21 years of age will be immediately terminated and all funds forfeited.

13. Changes to This Privacy Policy

rr9999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the features and services offered on the Platform. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect your rights, we will notify you directly via email or a prominent notice on the Platform.

We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of any updated Policy constitutes your acknowledgment of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and contact our support team to close your Account.

14. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rr9999 handles your personal data, please reach out to our team using any of the following channels:

• 24/7 Live Chat: Available directly on the Platform — fastest response channel
• Email: [email protected] — general privacy inquiries and data rights requests
• WhatsApp: +62 812 3456 7890 — Indonesian-speaking agents available around the clock

For formal data protection queries or legal correspondence, please direct your communication to:

rr9999 Data Protection Office
Email: [email protected]

We are committed to working with you to resolve any privacy concerns promptly and transparently. All legitimate data rights requests will be acknowledged within 48 hours and resolved within the statutory timeframes described in Section 11 of this Policy.