1.1 Scope. This Policy applies to all personal data processed in connection with your use of the rpv3 platform, including the website at https://rpv3.cam, any associated mobile web interfaces, and all customer support and promotional communications delivered by rpv3. It covers data collected both online and through any offline interactions with rpv3 support personnel.
1.2 Data Controller. rpv3 acts as the data controller in respect of the personal data described in this Policy. This means that rpv3 determines the purposes and means by which your personal data is processed. Where rpv3 engages third-party processors (such as KYC verification vendors or payment processors), those parties act as data processors under rpv3's instruction and are bound by appropriate data processing agreements.
1.3 Primary Market. rpv3 is operated with Indonesian players as its primary target audience. As such, this Policy reflects relevant data protection standards applicable to Indonesian residents, supplemented by internationally recognized principles including those found in the General Data Protection Regulation (GDPR) where those principles represent global best practice.
rpv3 collects the following categories of personal data, depending on how you interact with the platform:
| Data Category | Specific Data Points | Required / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, Indonesian national identity number (NIK), gender, nationality, photograph | Required (KYC) |
| Contact Data | Email address, mobile phone number, city/province of residence (e.g., Jakarta, Surabaya, Bandung, Bali) | Required |
| Identity Documents | Scanned copy or photograph of KTP (Indonesian national ID), passport, or SIM (driving license) | Required (KYC) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records | Required |
| Account Data | Username, hashed password, account creation date, membership tier, bonus history, betting and gaming history | Required |
| Technical Data | IP address, device type and operating system, browser type and version, session timestamps, login history | Automatic |
| Behavioral Data | Pages visited, games played, bet types and amounts, session duration, feature interactions | Automatic |
| Communications Data | Records of emails, live chat transcripts, and support tickets exchanged with rpv3 | Interaction-based |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and SMS, preferred contact channels | Optional |
rpv3 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where an identity document photograph incidentally contains such information as part of the mandatory KYC process.
3.1 Directly from You. The majority of personal data rpv3 holds is provided directly by you during the account registration process, the KYC verification process, when making deposits or requesting withdrawals, and when contacting our support team.
3.2 Automatically. When you access and use the rpv3 platform, we automatically collect Technical Data and Behavioral Data through server logs, session tracking technologies, and analytics tools. This data is collected to ensure platform security, optimize performance, and detect fraudulent activity.
3.3 From Third Parties. rpv3 may receive data about you from the following third-party sources:
- Payment processors and banks: Transaction confirmation data from BCA, BRI, BNI, Mandiri, and partner e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify deposits and process withdrawals.
- KYC verification partners: Identity verification results from third-party KYC service providers used to confirm the authenticity of documents you submit.
- Fraud and AML screening providers: Data returned from sanctions-list and fraud-risk screening services used as part of our compliance obligations.
- Game providers: Session and outcome data from game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft, used for dispute resolution and account integrity purposes.
rpv3 processes your personal data only where a valid legal basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your Account | Performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| Verifying your identity (KYC) | Legal obligation & performance of contract |
| Fraud detection and prevention | Legitimate interests |
| Anti-money-laundering (AML) compliance | Legal obli gation |
| Providing customer support | Performance of contract |
| Sending transactional communications | Performance of contract |
| Sending promotional communications | Consent (opt-in) |
| Platform analytics and performance optimization | Legitimate interests |
| Responsible gaming monitoring | Legal obligation & legitimate interests |
| Enforcing our Terms & Conditions | Legitimate interests & legal obligation |
4.1 Legitimate Interests. Where rpv3 relies on legitimate interests as a legal basis, we have assessed that our interests in maintaining platform security, preventing fraud, and improving our services do not override your fundamental rights and freedoms, given the safeguards we have in place and the reasonable expectations of players using an online betting platform.
4.2 Withdrawal of Consent. Where processing is based on your consent (for example, receiving promotional SMS or email communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, update your preferences in your Account settings or contact support at [email protected].
5.1 Principle of Minimum Disclosure. rpv3 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. Data is shared externally only in the specific circumstances described in this section.
5.2 Service Providers (Data Processors). rpv3 shares personal data with trusted third-party service providers who process data strictly on our behalf and under our instruction. These include:
- Payment infrastructure partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — limited to the account name, account number, and transaction amounts necessary to process your deposits and withdrawals.
- KYC and identity verification vendors: Third-party providers who verify the authenticity of your identity documents on rpv3's behalf.
- Fraud prevention and AML screening services: Providers who screen transactions and account data against sanctions lists and fraud risk databases.
- Cloud infrastructure and hosting providers: Secure data center and cloud service operators responsible for hosting the platform and storing encrypted data.
- Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive only the technical session data required to deliver and settle game outcomes.
- Customer support platform: The software tools used by our support agents to manage chat, email, and ticketing interactions.
5.3 Legal Disclosures. rpv3 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, including in response to a valid court order, subpoena, or government investigation. Where permitted by law, rpv3 will notify you of such a disclosure.
5.4 Business Transfers. In the event of a merger, acquisition, asset sale, or restructuring of rpv3's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy terms applicable to your data under new ownership.
rpv3 retains personal data for as long as necessary to fulfill the purposes described in this Policy, including compliance with legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Documents | 5 years from Account closure | AML regulatory obligation |
| Transaction Records | 5 years from transaction date | AML & financial regulatory obligation |
| Account Data | Duration of Account + 2 years | Contractual & dispute resolution |
| Betting & Gaming History | Duration of Account + 2 years | Contractual & responsible gaming |
| Support Communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Technical & Log Data | 12 months from collection | Platform security & fraud prevention |
| Marketing Preferences | Until consent is withdrawn | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Anonymized data (from which it is no longer possible to identify an individual) may be retained indefinitely for statistical and analytical purposes.
7.1 Technical Safeguards. rpv3 implements the following technical measures to protect your personal data against unauthorized access, loss, alteration, or disclosure:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
- AES-256 encryption for sensitive personal data and financial records stored at rest.
- Hashed and salted password storage — rpv3 never stores passwords in plain text.
- Two-factor authentication (2FA) available for all player Accounts.
- Automated intrusion detection and 24/7 security monitoring of platform infrastructure.
- Regular penetration testing and security audits by qualified third-party security firms.
7.2 Organizational Safeguards. Access to personal data within rpv3 is restricted on a strict need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training. KYC documents and sensitive financial records are accessible only to authorized compliance and finance personnel.
7.3 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, rpv3 will notify affected players without undue delay and take immediate remedial action, including securing systems, isolating affected data, and conducting a root-cause investigation.
7.4 Your Responsibilities. You are responsible for keeping your Account login credentials confidential. rpv3 strongly recommends enabling two-factor authentication and using a strong, unique password. Do not share your password with anyone — rpv3 support agents will never ask for your password.
8.1 What Are Cookies. Cookies are small text files stored on your device when you visit a website. rpv3 uses cookies and similar tracking technologies (including session storage and local storage) to operate the platform, maintain your logged-in session, remember your preferences, and analyze how players use the site.
8.2 Types of Cookies We Use.
- Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
- Functional Cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories. These improve your experience but are not essential.
- Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate the platform, which features are most used, and where technical errors occur. This data helps us improve the platform experience.
8.3 Managing Cookies. You can control and delete cookies through your browser settings. Please note that disabling Strictly Necessary Cookies will prevent you from logging into your Account and using core platform features. Disabling other cookie types will not affect your ability to use the platform but may reduce functionality and personalization.
8.4 No Third-Party Advertising Cookies. rpv3 does not permit third-party advertising networks to place tracking cookies on our platform. We do not participate in cross-site behavioral advertising programs.
rpv3 respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receipt of a verified request.
10.1 Age Minimum. The rpv3 platform is strictly for individuals aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. All Account registrations are subject to age verification as part of the KYC process.
10.2 Discovery of Underage Account. If rpv3 discovers or is notified that personal data has been collected from an individual under 21 years of age, we will immediately suspend the Account, permanently delete all associated personal data to the extent permitted by law, and return any deposited funds to the payment method of origin. Any winnings generated by an underage account will be forfeited.
10.3 Parental Notification. Parents or guardians who believe their minor child has registered an Account on rpv3 are encouraged to contact us immediately at [email protected]. We will investigate and take action within 24 hours of receiving a verified notification.
11.1 Cross-Border Processing. rpv3 operates on an internationally licensed basis and may process or store certain categories of personal data on servers or through service providers located outside Indonesia. Where such international transfers occur, rpv3 ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to that provided under this Policy.
11.2 Safeguards. International data transfers carried out by rpv3 are protected through one or more of the following mechanisms:
- Data processing agreements with receiving parties that include binding data protection obligations.
- Transfer to jurisdictions that maintain adequate data protection standards recognized by relevant international authorities.
- Application of technical safeguards (encryption, pseudonymization) to data prior to transfer where the destination jurisdiction's protections are assessed as insufficient without additional measures.
12.1 Right to Update. rpv3 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The "Last Updated" date at the top of this page will be revised whenever a material change is made.
12.2 Notification of Material Changes. Where a change to this Policy materially affects how we process your personal data, we will notify you by email to your registered address and/or by displaying a prominent notice on the platform at least 7 days before the change takes effect.
12.3 Continued Use. Your continued use of the rpv3 platform after a revised Privacy Policy takes effect constitutes your acknowledgment of the updated terms. If you do not agree with the revised Policy, you should close your Account before the effective date of the changes.
13.1 Privacy Inquiries. If you have any questions, concerns, or requests relating to this Privacy Policy or rpv3's data processing practices, please contact our privacy team using the details below. All correspondence must be submitted in English or Indonesian and will be responded to in English.
- Email: [email protected]
- Subject Line: "Privacy Inquiry" or "Data Rights Request" as appropriate
- Support Hours: 07:00–23:00 WIB (UTC+7), seven days a week
- Response Time: General inquiries within 5 business days; formal data rights requests within 30 calendar days
13.2 Complaints. If you are not satisfied with rpv3's response to a privacy inquiry, you have the right to escalate your complaint through the dispute resolution mechanism described in our Terms & Conditions. rpv3 is committed to resolving all privacy-related disputes fairly and transparently.