Privacy Policy — r6r6 Data Protection Statement

Definitions

Throughout this Privacy Policy, the following terms carry the meanings defined below. Defined terms apply equally in their singular and plural forms and regardless of capitalization context.

Who We Are

r6r6 is an internationally operated online betting and casino platform serving Indonesian adults (21+) who wish to engage in sports betting, live casino gaming, togel (Indonesia's traditional numbers lottery), and other gaming products. The Platform is accessible at https://r6r6.lat and is operated by r6r6 as the Data Controller responsible for your Personal Data.

r6r6 serves members across Indonesia, including major cities such as Jakarta, Surabaya, Medan, Bandung, Semarang, Makassar, Palembang, Bali, and Yogyakarta. Given the geographic distribution of our member base, all data processing activities are structured to maintain high standards of security and privacy regardless of a member's location within the archipelago.

For all privacy-related inquiries, you may contact our Data Protection Officer (DPO) using the contact information provided in Section 16 of this policy.

Personal Data We Collect

The categories of Personal Data we collect depend on how you interact with the r6r6 Platform. The following table summarizes the data categories, the specific data points within each, and the primary purpose for which they are collected.

How We Collect Your Data

r6r6 collects Personal Data through a variety of channels, all of which are disclosed transparently in this policy:

• Direct Registration: When you create an r6r6 account, you voluntarily provide Identity Data and Contact Data through our registration form. This includes your name, date of birth, email, phone number, and residential address.
• Payment Method Registration: When you add a deposit or withdrawal method, you provide Financial Data (bank account details or e-wallet identifiers) so that r6r6 can process your transactions.
• KYC Document Upload: When you submit identity documents for verification (KTP, passport, utility bill), we collect Identity Documents via our secure encrypted upload interface or by email to our support address.
• Platform Interaction: As you use the r6r6 Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and session analytics tools. This includes your IP address, device identifiers, pages visited, and games played.
• Customer Support: When you contact r6r6 via email, live chat, or support ticket, we collect Communication Data, including the content of your messages and any additional documentation you choose to share.
• Third-Party Sources: In certain limited circumstances, r6r6 may receive data from third parties, such as fraud prevention services that flag suspicious activity patterns, payment processors confirming transaction status, or publicly available identity verification databases used for KYC cross-checks.

How We Use Your Personal Data

r6r6 processes your Personal Data exclusively for the purposes outlined below. We will never process your data for purposes incompatible with those for which it was collected, unless we obtain your explicit consent or are legally obligated to do so.

• Account Management: To create, maintain, and administer your r6r6 account; to authenticate your identity at login; to process changes to your account details; and to manage account closures or self-exclusion requests.
• Transaction Processing: To process deposits from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja; to execute withdrawal requests to your verified payment method; and to maintain accurate transaction records.
• KYC & AML Compliance: To verify your identity and age (21+), to comply with anti-money laundering (AML) regulations, to detect and prevent fraud, and to fulfill our legal obligations under applicable gambling regulatory frameworks.
• Service Delivery: To provide access to sports betting markets (including BRI Liga 1, English Premier League, La Liga, Champions League), live casino tables, togel draws, sabung ayam betting, and other gaming products; to calculate and credit winnings; to apply and track bonus promotions.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance via email, live chat, or phone.
• Security & Fraud Prevention: To detect and prevent unauthorized account access, fraudulent transactions, collusion, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor your gaming behavior for signs of problem gambling; to enforce deposit limits, loss limits, and self-exclusion requests; to provide access to responsible gaming tools and resources.
• Legal & Regulatory Compliance: To respond to lawful requests from government authorities; to cooperate with investigations; to enforce our legal rights; and to comply with applicable laws and regulations.
• Platform Optimization: To analyze usage patterns, measure platform performance, identify bugs and errors, and improve the user experience through A/B testing and analytics.
• Marketing Communications (with Consent): To send you promotional offers, bonus announcements, betting tips for BRI Liga 1 or other major tournaments, and seasonal campaigns (Idul Fitri, Ramadhan, Indonesian Independence Day) — only if you have explicitly opted in to receive marketing communications. You may withdraw consent at any time.

Legal Basis for Processing

r6r6 processes your Personal Data on the following legal bases, depending on the specific processing activity:

• Performance of Contract: Most processing activities — including account creation, transaction processing, game provision, and customer support — are necessary to perform the contract between you and r6r6 as set out in our Terms & Conditions. If you do not provide the required data, r6r6 cannot provide you with its services.
• Legal Obligation: r6r6 processes certain data categories (particularly Identity Data, Financial Data, and Identity Documents) to comply with KYC and AML legal obligations, regulatory reporting requirements, and lawful requests from authorities.
• Legitimate Interests: r6r6 has a legitimate interest in fraud prevention, security monitoring, platform optimization, and responsible gaming monitoring. These interests are carefully balanced against your privacy rights, and we implement appropriate safeguards to minimize intrusion.
• Consent: Marketing communications and the use of non-essential cookies are based on your explicit opt-in consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal.

How We Share Your Personal Data

r6r6 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We share your data only in the specific circumstances described below, and only with parties who are contractually obligated to protect your data and use it solely for the purposes we authorize.

All third-party Data Processors are selected based on their security credentials and are bound by written contracts that require them to protect your data, process it only as instructed by r6r6, and delete or return it upon contract termination.

International Data Transfers

Given r6r6's operational structure and the use of international technology vendors, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Indonesia, including countries that may not provide an equivalent level of data protection under Indonesian law.

Where such transfers occur, r6r6 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) approved by data protection authorities;
• Transfers to countries recognized as providing adequate data protection;
• Binding corporate rules for intra-group transfers;
• Certification under internationally recognized privacy frameworks.

In all cases, r6r6 remains responsible for the protection of your Personal Data and will take all reasonable steps to ensure that international transfers comply with applicable data protection standards.

Data Retention

r6r6 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory retention obligations. The specific retention periods vary by data category:

• Account Data (Identity, Contact, Financial): Retained for the duration of your active membership plus 7 years after account closure, in accordance with AML and financial record-keeping regulations.
• Identity Documents (KYC): Retained for 7 years following account closure or the date of the last transaction, whichever is later, to comply with regulatory audit requirements.
• Transaction Records: Retained for a minimum of 7 years to comply with financial auditing and tax obligations.
• Usage & Technical Data: Retained for 2 years from the date of collection for security monitoring, fraud detection, and platform optimization purposes, then anonymized or deleted.
• Communication Data (Support Tickets, Chat Logs): Retained for 3 years to support dispute resolution and quality assurance, then deleted unless retention is required for ongoing legal proceedings.
• Marketing Preferences: Retained until you withdraw consent or close your account, then deleted within 30 days.

Upon expiry of the applicable retention period, r6r6 will securely delete or anonymize your Personal Data such that it can no longer be attributed to you as an identifiable individual.

Cookies & Tracking Technologies

r6r6 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session state, and improve security. A cookie is a small text file stored on your device that allows the Platform to recognize you on subsequent visits.

We use the following categories of cookies:

r6r6 does not use third-party advertising tracking cookies or permit external ad networks to place cookies on the Platform.

Your Privacy Rights

You have the following rights regarding your Personal Data. r6r6 is committed to honoring these rights and will respond to all verified requests within 14 business days of receipt.

Children's Privacy

The r6r6 Platform is intended exclusively for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under 21 years of age. If you are under 21, you must not register an account, provide any Personal Data to r6r6, or attempt to access the Platform.

If r6r6 becomes aware that we have inadvertently collected Personal Data from a person under 21, we will take immediate steps to delete that data and close the associated account. Any winnings or balances in such accounts will be forfeited, and parents or guardians will be notified where contact information is available.

Parents and guardians are encouraged to monitor their children's internet usage and to use parental control tools to prevent access to gambling websites.

Security Measures

r6r6 implements industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and r6r6's servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (payment credentials, identity documents, passwords) is encrypted using AES-256.
• Access Controls: Personal Data is accessible only to authorized r6r6 personnel and contractors who require it to perform their duties. Access is granted on a need-to-know basis and is subject to strict confidentiality obligations.
• Two-Factor Authentication: r6r6 offers optional two-factor authentication (2FA) for member accounts, providing an additional layer of security beyond password protection.
• Secure Data Centers: r6r6 uses ISO 27001-certified data centers with physical security controls, redundant power supplies, fire suppression systems, and 24/7 monitoring.
• Regular Security Audits: r6r6 conducts periodic vulnerability assessments, penetration testing, and security audits to identify and remediate potential threats.
• Incident Response: r6r6 maintains an incident response plan to detect, contain, and remediate data breaches. In the event of a breach affecting your Personal Data, r6r6 will notify you and relevant authorities in accordance with applicable breach notification laws.

While r6r6 employs robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account.

Third-Party Links & Services

The r6r6 Platform may contain links to third-party websites, applications, or services, such as payment gateways, social media platforms, or game provider sites. This Privacy Policy applies exclusively to r6r6 and does not govern the privacy practices of any third party.

When you click on a third-party link or interact with a third-party service, you leave the r6r6 Platform and are subject to the privacy policy and terms of that third party. r6r6 is not responsible for the content, privacy practices, or security of third-party sites and services. We encourage you to review the privacy policies of any third parties before providing them with your Personal Data.

Changes to This Privacy Policy

r6r6 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or business operations. The "Last Updated" date at the top of this document indicates the date of the most recent revision.

Material changes to this Privacy Policy — such as changes to the categories of data we collect, the purposes for which we process data, or the parties with whom we share data — will be communicated to you via email to your registered address and/or via a prominent notice on the Platform at least 14 days before the changes take effect.

Continued use of the r6r6 Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the Platform and request account closure before the changes take effect.

Contact Information & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or r6r6's data processing practices, please contact our Data Protection Officer (DPO) through the following channel:

• Email: [email protected] — Use the subject line "Privacy Inquiry" or "Data Protection Officer" to ensure your message is routed correctly.
• Response Time: The DPO will acknowledge receipt of your inquiry within 3 business days and provide a substantive response within 14 business days. For complex requests, we may require up to 30 days and will inform you of any extension.
• Language: You may write in English or Indonesian (Bahasa Indonesia). The DPO and r6r6's privacy team are fluent in both languages.