At rr899, the privacy of our Members is a core operational commitment, not a compliance checkbox. This Privacy Policy explains exactly what personal data we collect from Indonesian players, why we collect it, how it is stored and secured, and what rights you hold over your own information. We encourage you to read it fully before using our platform.
The following terms carry the meanings set out below throughout this Privacy Policy. Where a term also appears in rr899's Terms & Conditions, the definition in this Policy applies specifically to data-protection contexts.
rr899 collects only the Personal Data that is strictly necessary to provide, secure, and continuously improve the Services. The categories of data we collect are described below.
When you create a rr899 account, we collect: full legal name, date of birth, Indonesian residential address, mobile phone number, email address, and the username and password you choose. This information is required to create and maintain your account and to perform identity verification.
To comply with our anti-money laundering obligations and to protect our Members from fraud, we collect: scanned copies or photographs of your government-issued identity document (KTP, passport, or SIM), proof of address documents, and proof of ownership of your nominated payment method. This constitutes Sensitive Data and is subject to additional safeguards described in Section 9.
When you make a deposit or withdrawal, we record: the payment method used (bank name and masked account number, or e-wallet provider and masked identifier), transaction amounts in IDR, transaction timestamps, and transaction reference numbers. We do not store full bank account credentials — payment processing is handled by our certified payment Processors.
We maintain a record of all betting and gaming activity on your account, including: markets wagered on, stakes placed, game sessions entered, winnings and losses, bonus claims, and any account adjustments made by our operations team. This data is used for account integrity monitoring, dispute resolution, and responsible gaming oversight.
When you access rr899 via a browser or mobile device, we automatically collect: IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited within rr899.vu, session duration, and approximate geolocation derived from IP. This data is used for platform security, fraud detection, and service optimization.
When you contact rr899 support — whether via live chat, email to [email protected], or any in-platform feedback mechanism — we retain a record of that communication, including the content of messages, timestamps, and resolution notes. This enables us to track complaint history, maintain service quality, and meet regulatory requirements.
We record your opt-in or opt-out status for marketing communications (promotional emails, SMS alerts, platform notifications). You may update your preferences at any time from within your account settings or by contacting support.
rr899 collects Personal Data through the following channels:
rr899 processes your Personal Data on one or more of the following legal grounds, depending on the specific processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (our Terms & Conditions) to which you are a party |
| KYC identity verification | Legal obligation (AML compliance) and legitimate interests (fraud prevention) |
| Processing deposits and withdrawals | Performance of contract; legal obligation |
| AML transaction monitoring | Legal obligation; legitimate interests in preventing financial crime |
| Fraud detection and platform security | Legitimate interests in protecting Members and the integrity of the platform |
| Responsible gaming monitoring | Legal obligation; legitimate interests in player protection |
| Customer support communications | Performance of contract; legitimate interests in service quality |
| Sending promotional communications | Consent (you may withdraw at any time) |
| Platform analytics and improvement | Legitimate interests in improving the Services |
rr899 uses your Personal Data for the following specific purposes:
To create and maintain your account, authenticate your rr899 login sessions, process deposits from and withdrawals to Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), settle bets and game outcomes, award bonuses, and provide customer support.
To verify your identity and age (21+), screen against sanctions and politically exposed person (PEP) lists, monitor transactions for AML indicators, detect and investigate suspected fraud, bonus abuse, or multi-accounting, and meet any reporting obligations required by our international licensing authority.
To monitor your gambling behavior for signs of problem gambling, enforce deposit limits, session time limits, time-out periods, and self-exclusion requests you have set, and send responsible gaming communications where our monitoring systems identify a potential concern.
To detect unauthorized access attempts, investigate account compromise incidents, protect the rr899 platform against DDoS attacks and other technical threats, and enforce our single-account policy.
Where you have provided consent, to send you information about rr899 promotions, new game launches, seasonal offers tied to Indonesian holidays (Idul Fitri, Ramadhan, Indonesian Independence Day on 17 August, Nyepi, and others), and VIP loyalty program updates. You may opt out at any time without affecting your access to the platform.
To understand how Members use rr899.vu — which sports markets, slot titles, or live casino tables are most popular, where navigation friction occurs, and how our mobile experience performs across device types — and to use those insights to improve the platform. Analytics data is aggregated and anonymized wherever possible.
rr899 does not sell or rent your Personal Data to any third party. We share your data only in the following limited, controlled circumstances:
We engage trusted third-party Processors who handle data strictly on our instructions under binding agreements. These include: KYC and identity verification providers, payment gateway operators, cloud hosting and infrastructure providers, fraud detection and risk-scoring vendors, and live-chat customer support tooling providers. All Processors are contractually prohibited from using your data for any purpose beyond the specific service they deliver to rr899.
When you launch a game from a third-party studio — such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, or Spribe — a session token and your Member identifier are passed to that provider's infrastructure to authenticate your game session. No additional Personal Data beyond what is necessary for game session management is shared with game studios.
rr899 may disclose Personal Data to law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally required to do so — for example, in response to a court order, a lawful request from an anti-money laundering authority, or our mandatory reporting obligations. We will notify you of such disclosures where permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or part of rr899's business, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with a reasonable period to object before the transfer takes effect.
rr899 uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and understand how the site is used. The table below summarizes the cookie categories we deploy:
| Category | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Authentication, session management, CSRF protection, load balancing. These cannot be disabled without breaking core platform functionality. | Session / up to 30 days |
| Functional | Remembering your preferred language, odds format, and game lobby layout so you do not need to reconfigure on each visit. | Up to 12 months |
| Analytics | Aggregated, anonymized data on page views, navigation paths, and session duration. Used to identify performance bottlenecks and improve UX. No individual profiling. | Up to 13 months |
| Security / Fraud Detection | Device fingerprinting signals used to detect suspicious login patterns, multi-account attempts, and bot activity. Essential for platform integrity. | Up to 24 months |
You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your rr899 account. rr899 does not use third-party advertising cookies or behavioral retargeting pixels.
rr899 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention schedules apply:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML and regulatory record-keeping requirements |
| KYC documents | Duration of account + 5 years post-closure | AML compliance; potential dispute resolution |
| Financial transaction records | 7 years from transaction date | Financial record-keeping and AML obligations |
| Betting and gaming history | 5 years from account closure | Dispute resolution; responsible gaming monitoring |
| Support communication logs | 3 years from last interaction | Service quality; complaint investigation |
| Technical / device logs | 12 months on a rolling basis | Security monitoring; fraud investigation |
| Marketing consent records | Until consent is withdrawn + 3 years | Demonstrating lawful basis for marketing |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for aggregate analytics and platform improvement purposes.
rr899 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational measures include:
As a rr899 Member whose Personal Data we process, you hold the following rights. You may exercise any of these rights at any time by contacting our support team via live chat or at [email protected]. We will respond to all rights requests within 30 days.
Please note that certain rights are subject to limitations where retention is required by law (see Section 8) or where exercising a right would prejudice an ongoing fraud or AML investigation. rr899 will clearly explain any such limitation in its response to your request.
rr899 does not knowingly collect Personal Data from any person under the age of 21. The rr899 platform is strictly restricted to adults aged 21 and over. Our KYC verification process is specifically designed to identify and reject applications from underage individuals.
If rr899 discovers that Personal Data has been collected from a person under 21 — whether through a false declaration of age at registration or any other means — the relevant account will be immediately and permanently closed, all funds forfeited, and all Personal Data associated with that account deleted as promptly as our legal obligations allow.
If you are a parent or guardian and you believe your child has registered an account on rr899 without your knowledge or consent, please contact us immediately at [email protected]. We will investigate and act without delay.
rr899.vu may contain links to third-party game studios, payment providers, or informational resources. Once you navigate away from rr899.vu to a third-party website or service, this Privacy Policy no longer applies. rr899 has no control over, and accepts no responsibility for, the privacy practices of any third-party website or service.
Game providers such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe operate their own game-delivery infrastructure. While rr899 shares only a session token with these providers, their platforms may independently collect technical data (such as device type and session duration) as part of their game-delivery services. We encourage you to review the privacy policies of any third-party service you interact with through rr899.
Payment processors including those facilitating BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions operate under their own privacy frameworks. rr899 selects payment partners who maintain security standards consistent with or exceeding our own, but their data handling beyond the scope of your rr899 transaction is governed by their own policies.
rr899 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the Services we offer. When a material change is made, we will notify active Members via the email address or phone number registered on their rr899 account, or via a prominent notice on the platform, at least 7 days before the updated Policy takes effect.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of rr899 after the effective date of any update constitutes acceptance of the revised Policy. If you do not accept the updated terms, you must cease using the platform and request account closure prior to the effective date.
The current version of this Privacy Policy is always accessible at rr899.vu/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data-subject rights, or have a concern about the way rr899 handles your Personal Data, please contact our Data Protection team through the following channel:
rr899 aims to resolve all privacy-related queries within 30 days. For complex rights requests, we may extend this period by a further 30 days where necessary, and we will notify you of any extension within the initial 30-day window.
If you are not satisfied with rr899's response to your privacy concern, you may escalate the matter to the relevant data-protection supervisory authority in your jurisdiction. rr899 will cooperate fully with any such authority in the investigation of a complaint.
Six pillars of data protection that every rr899 Member benefits from — by default, from the moment you register.
Every connection between your device and rr899's servers is secured with TLS 1.2+ and 256-bit cipher suites. Your login credentials, KYC documents, and financial transactions are never exposed in transit — the same level of protection trusted by global banking institutions.
Every rr899 Member undergoes identity verification before withdrawals are processed. Our multi-step KYC process confirms your age (21+), identity, and payment method ownership — protecting both you and the integrity of the platform against fraud and impersonation.
Sensitive Data — including KYC document files, identity numbers, and financial identifiers — is stored on isolated, access-controlled servers using AES-256 encryption at rest. Even in the unlikely event of a physical storage breach, your data remains protected and unreadable.
rr899 has never sold, rented, or traded Member Personal Data to any third party for marketing purposes — and we never will. Your information is used solely to operate your rr899 account, process your transactions, and keep the platform secure. Full stop.
Internally, access to Member Personal Data is restricted by role-based permissions. Only staff with a verified operational need can view identifiable data, and every access event is logged. No rr899 employee can access your plain-text password — ever.
rr899 commissions independent penetration tests and security audits on a regular basis. Identified vulnerabilities are triaged and remediated according to a risk-tiered schedule. We proactively harden our infrastructure before threats materialize, not only in response to incidents.
rr899 combines world-class data protection with an unbeatable selection of sports betting, live casino, and slot games — all in Indonesian Rupiah with fast local bank payouts. Your privacy is guaranteed from day one.