rpwin2 Privacy Policy

Last Updated: January 15, 2026  |  Effective Date: January 15, 2026

1. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data": Any information that identifies or can be used to identify you as an individual, including your name, email address, date of birth, Indonesian KTP number, bank account details, and IP address.
• "Processing": Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller": rpwin2, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor": Any third-party service provider that processes Personal Data on behalf of rpwin2, under strict contractual obligations.
• "Cookies": Small text files stored on your device by your browser at the request of the rpwin2 website, used to remember preferences and improve user experience.
• "UU PDP": Indonesia's Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi), which governs the processing of personal data of Indonesian residents.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, complete identity verification, make a deposit or withdrawal, or contact customer support, you provide rpwin2 with the following personal information:

2.2 Information Collected Automatically

When you access and use the rpwin2 platform, certain technical and behavioral data is collected automatically through cookies, log files, and analytics tools:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Network Information: IP address, internet service provider (ISP), and approximate geographic location (city-level, derived from IP).
• Usage Data: Pages visited, time spent on each page, game sessions played, betting history, deposit and withdrawal transaction history, and navigation paths within the platform.
• Session Data: Login timestamps, session duration, and logout events.

2.3 Information from Third Parties

rpwin2 may receive additional information about you from the following third-party sources:

• Payment Processors: Confirmation of payment method ownership and transaction status from banks and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Results of KYC (Know Your Customer) and age verification checks conducted by third-party identity verification providers.
• Fraud Prevention Databases: Information indicating whether you have been flagged for fraudulent activity or self-excluded from gambling platforms.

3. How We Use Your Information

rpwin2 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and secure your rpwin2 account, process login authentication, and manage account settings.
• Identity Verification (KYC): To verify that you are at least 21 years of age and legally eligible to use online gambling services, in compliance with responsible gaming obligations.
• Payment Processing: To process deposits and withdrawals to and from your registered Indonesian bank account (BCA, BRI, BNI, Mandiri, or others) or e-wallet.
• Platform Operations: To deliver sports betting, casino gaming, lottery (togel), and other gambling services, and to record bet histories and transaction logs.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 Indonesian-speaking support team.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, bonus fraud, multiple account creation, and other prohibited activities.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling, enforce self-exclusion requests, and comply with age verification requirements.
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from governmental authorities, including anti-money laundering (AML) obligations.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to members who have opted in to receive marketing communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the rpwin2 user experience.

4. Legal Basis for Processing

rpwin2 processes your personal data under the following legal bases as recognized by Indonesian data protection law (UU PDP) and international privacy standards:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to when creating your account — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including KYC verification, anti-money laundering obligations, and age verification mandates.
• Legitimate Interests: Processing necessary for rpwin2's legitimate interests, including fraud prevention, platform security, and improving our services — provided these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, specific, and informed consent. You may withdraw consent at any time.

5. Cookies and Tracking Technologies

5.1 Types of Cookies Used

rpwin2 uses the following categories of cookies on our platform:

• Essential Cookies: Required for the platform to function. These cookies enable login sessions, security tokens, and core platform functionality. They cannot be disabled without breaking the service.
• Performance Cookies: Collect anonymous data on how players use the platform (pages visited, error messages, load times) to help us improve performance and fix issues.
• Functional Cookies: Remember your preferences such as language, preferred sports league, or last visited game category to personalize your experience.
• Marketing Cookies: Used only with your explicit consent to track which promotional offers you have viewed and to avoid showing you the same promotions repeatedly.

5.2 Managing Cookies

You may control non-essential cookies through your browser settings or your rpwin2 account privacy preferences. Please note that disabling certain cookies may affect the functionality of the platform, including the ability to log in or maintain your session.

6. Data Sharing and Disclosure

rpwin2 does not sell your personal data. We share your information only with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers who verify your identity and age on our behalf.
• Game Technology Providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Pocket Games Soft, who may receive session data to deliver and audit game outcomes.
• Fraud Prevention Services: Third-party analytics and fraud detection platforms that help identify suspicious account activity.
• Legal Authorities: Law enforcement agencies, regulatory bodies, or courts when required by applicable law, a court order, or to protect rpwin2's legal rights.

All third-party service providers are bound by contractual obligations to process your data solely for the stated purpose and in compliance with applicable data pr otection laws. rpwin2 does not transfer your personal data to unauthorized third parties under any circumstances.

7. Data Retention

rpwin2 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of 5 years after account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of 5 years from the date of each transaction.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years after account closure or the last transaction, whichever is later.
• Support Records: Customer support correspondence is retained for 3 years from the date of the interaction.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within 30 days.
• Technical Logs: Server logs and session data are retained for up to 12 months for security and fraud prevention purposes.

Upon expiration of the applicable retention period, your personal data is securely deleted or anonymized so that it can no longer be associated with you as an individual.

8. Your Privacy Rights

As an Indonesian resident and rpwin2 member, you have the following rights with respect to your personal data under UU PDP and applicable international data protection standards:

• Right of Access: You may request a copy of the personal data rpwin2 holds about you, including information on how it is used and with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account. You can update most details directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to rpwin2, where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, and we will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team at [email protected]. We will respond to all verified requests within 30 business days. We may need to verify your identity before processing your request.

9. Data Security

rpwin2 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Transport Layer Security: All communications between your browser or app and our servers are encrypted using TLS 1.3 with 256-bit AES encryption.
• Password Security: Account passwords are stored using one-way cryptographic hashing (bcrypt). rpwin2 staff cannot view your password in plain text under any circumstances.
• Two-Factor Authentication (2FA): Optional but strongly recommended 2FA is available for all accounts via SMS or authenticator app, adding an additional layer of login security.
• Access Controls: Access to personal data is restricted to authorized rpwin2 personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality agreements and regular security training.
• Infrastructure Security: rpwin2 servers are hosted in ISO 27001-certified data centers with physical security controls, redundant systems, and 24/7 monitoring.
• Regular Audits: We conduct periodic third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach affecting your personal data, rpwin2 will notify affected members and relevant authorities within the timeframes required by applicable law.

While rpwin2 employs industry-leading security measures, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

10. Children's Privacy

rpwin2 is an adult gambling platform. Our services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

If we become aware that a member is under 21 years of age, we will immediately suspend the account, void any bets placed, and permanently delete all associated personal data. If you believe a minor has registered an account on rpwin2, please contact our support team immediately at [email protected].

11. International Data Transfers

rpwin2's primary data processing infrastructure is located within the Asia-Pacific region. In certain circumstances, personal data may be transferred to or accessed from countries outside Indonesia — for example, when using game technology providers such as Pragmatic Play or Evolution Gaming, whose servers may be located in Europe or other jurisdictions.

Where international data transfers occur, rpwin2 ensures that appropriate safeguards are in place, including:

• Binding contractual clauses in data processing agreements with all third-party service providers.
• Transfers only to jurisdictions or recipients that offer an equivalent level of data protection to that required under Indonesian law (UU PDP).
• Regular review of all international data transfer arrangements to ensure ongoing compliance.

12. Changes to This Privacy Policy

rpwin2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a notice on the rpwin2 platform informing members of the update.
• Where required by law, seek your renewed consent for any new processing activities.

We encourage you to review this Privacy Policy periodically. Your continued use of rpwin2 following the publication of any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way rpwin2 handles your personal data, please reach out to our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the rpwin2 platform
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days and to formal data subject access requests within 30 business days.

Our Indonesian-speaking support agents are available around the clock to assist with account-level queries, while our Data Protection team handles formal privacy rights requests.