Privacy Policy

rp678 ("we", "us", "our") operates the online sports betting and casino platform accessible at https://rp678.app. We are committed to handling the personal data of every Member, visitor, and prospective user with the highest standards of care, transparency, and security.

This Privacy Policy describes the categories of personal data rp678 collects, the purposes for which that data is processed, the conditions under which it may be shared with third parties, the security measures we employ to protect it, and the rights you hold with respect to your own information.

This policy applies to all users who access rp678, whether through a desktop web browser or mobile device, from any location — including users based in Jakarta, Surabaya, Bandung, Bali, Medan, Semarang, and across the Indonesian archipelago. By creating an account or continuing to use the rp678 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

rp678 collects the following categories of personal data, depending on how you interact with the platform:

rp678 does not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, political opinions, health records, or biometric data, except where such data is incidentally present in an identity document submitted for KYC purposes — in which case it is disregarded and not stored in any structured form.

rp678 collects personal data through three primary channels:

• Directly from you: Information you submit voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, participating in promotions, or updating your account profile.
• Automatically: Technical and usage data collected via server logs, cookies, pixel tags, and session-tracking technologies when you browse or interact with the rp678 platform. This data is collected regardless of whether you are logged in to an account.
• From third parties: Identity verification results and fraud-risk scores from our KYC and anti-money-laundering (AML) partners; transaction confirmation data from payment processors including local Indonesian banks and e-wallet operators; and, where applicable, geolocation data from IP intelligence providers used to enforce jurisdictional access controls.

rp678 processes personal data only where a valid lawful basis exists. The lawful bases we rely on are as follows:

• Contractual Necessity: Processing required to register your account, execute bets and transactions, and deliver the core rp678 service under our Terms & Conditions;
• Legal Obligation: Processing necessary to comply with anti-money-laundering regulations, KYC requirements, fraud-prevention obligations, and any lawful requests from competent authorities;
• Legitimate Interests: Processing carried out to protect the security and integrity of the rp678 platform, prevent unauthorised access, detect and investigate fraud and bonus abuse, and improve the quality of our services — provided that our legitimate interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for direct marketing communications (promotional emails, SMS, and push notifications) where you have given explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

rp678 uses the personal data it collects for the following purposes:

• Opening, maintaining, and securing your rp678 Member account;
• Processing deposits and withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, and others) and local e-wallets;
• Conducting KYC identity and age verification to ensure all Members are at least 21 years of age;
• Detecting, investigating, and preventing fraud, money laundering, multi-accounting, and bonus abuse;
• Personalising your experience on rp678 — for example, surfacing relevant BRI Liga 1 sportsbook markets or slot gacor (Indonesia's popular high-RTP slot) titles based on your play history;
• Providing customer support in response to your queries, complaints, or account-related requests;
• Sending you transactional notifications — including deposit confirmations, withdrawal status updates, and security alerts — via email or SMS;
• Sending promotional communications — including bonus offers tied to BRI Liga 1 fixtures, the UEFA Champions League, Idul Fitri, and the Ramadhan period — where you have opted in to receive them;
• Conducting internal analytics to understand platform usage, improve user experience, and optimise game and betting product offerings;
• Enforcing our Terms & Conditions, Responsible Gaming Policy, and other applicable platform rules.

rp678 does not sell, rent, or trade your personal data. We share personal data only in the following strictly defined circumstances:

• Authorised Service Providers: Third-party vendors engaged by rp678 to perform specific operational functions, including payment processing (local Indonesian banks and e-wallet operators), KYC and AML verification, game platform hosting (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and other studios), customer support software providers, and cloud infrastructure partners. All such providers are bound by contractual data-processing agreements that prohibit them from using your data for any purpose beyond the specific service they deliver to rp678.
• Legal and Regulatory Obligations: Where rp678 is required by law, court order, or the direction of a competent regulatory or law-enforcement authority to disclose personal data. In such cases, rp678 will disclose only the minimum data necessary to satisfy the legal obligation and will, where legally permissible, notify the affected Member.
• Fraud and Crime Prevention: Where rp678 has reasonable grounds to believe that sharing data with another operator, financial institution, or law-enforcement body is necessary to prevent or detect fraud, money laundering, or other criminal activity targeting rp678 or its Members.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of rp678's assets, personal data may be transferred to the acquiring entity. Members will be notified of any such transfer and the privacy protections applicable to their data under the new entity.

rp678 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and gather analytics data that helps us improve performance. The cookies we use fall into the following categories:

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the rp678 platform. Disabling functional cookies will result in a less personalised experience. Disabling analytics cookies will have no effect on platform functionality.

rp678 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active membership plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC Documents: Retained for a minimum of five (5) years following the completion of verification, and for the full duration of any open investigation or dispute;
• Customer Support Communications: Retained for three (3) years from the date of resolution of the relevant query or complaint;
• Analytics and Usage Data: Retained in aggregated, anonymised form indefinitely; individual-level usage data retained for up to twelve (12) months;
• Marketing Preference Records: Retained for the duration of your account membership to evidence opt-in consent or opt-out requests.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints (e.g., data stored in backup archives), the data will be isolated and protected from further active processing until deletion becomes practicable.

rp678 employs a layered security architecture to protect the personal data of its Members against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS): All data in transit between your browser and the rp678 platform is encrypted using 256-bit TLS (SSL). Our SSL certificate is issued by a globally trusted certificate authority and is renewed on a rolling basis.
• Data Encryption at Rest: Sensitive data fields — including identity document files, financial account numbers, and password hashes — are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Internal access to Member personal data is restricted on a strict need-to-know basis. All employees and contractors with access to personal data undergo background screening and are bound by confidentiality agreements.
• Multi-Factor Authentication: Privileged internal system access requires multi-factor authentication. Members are strongly encouraged to enable two-step verification on their own rp678 accounts.
• Intrusion Detection and Monitoring: rp678 operates continuous network monitoring, anomaly-detection systems, and regular third-party penetration testing to identify and remediate security vulnerabilities proactively.
• PCI-DSS Compliance: Payment card and financial data is processed exclusively by PCI-DSS-compliant payment processors. rp678 does not store raw card numbers or CVV codes on its own servers.

As a Member of rp678, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via the live chat function or by email at [email protected] (plain text — not a clickable link). rp678 will respond to all verified rights requests within thirty (30) days.

Please note that the exercise of certain rights — particularly erasure and restriction — may result in the suspension or closure of your rp678 account where the data in question is necessary for the provision of the service. rp678 will advise you of any such consequences before acting on your request.

Parents and guardians who believe that a minor has registered an account on rp678 should contact our support team immediately. rp678 will investigate and take prompt remedial action. We also recommend that parents and guardians use parental-control software to restrict minors' access to online gambling platforms.

rp678 operates infrastructure and engages service providers that may be located in jurisdictions outside Indonesia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Indonesia, rp678 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or data-processing agreements that impose equivalent data-protection obligations on the receiving party;
• Transfers only to jurisdictions that have received an adequacy determination from a recognised data-protection authority;
• Binding corporate rules where data is transferred within the rp678 corporate group.

By using the rp678 platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the purposes described in this Privacy Policy, subject to the safeguards outlined above.

rp678 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, rp678 will update the "Last Updated" date at the top of this page and — where practicable — notify active Members via email or a prominent on-platform notice at least seven (7) days before the changes take effect.

Your continued use of the rp678 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the platform and may request account closure by contacting our support team. We encourage you to review this Privacy Policy periodically to stay informed of how rp678 protects your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rp678 handles your personal data, please reach out to our dedicated Data Privacy team. Our Indonesian-speaking support agents are available 24/7 via live chat on the rp678 platform.

For formal written data-privacy enquiries — including rights requests, data-breach notifications, or regulatory correspondence — please use the following contact:

rp678 aims to acknowledge all formal data-privacy requests within 72 hours and to provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

For guidance on responsible gambling tools — including self-exclusion, deposit limits, and cooling-off periods — please visit the Responsible Gaming page.