rk99 Privacy Policy

This page describes what we collect when you use rk99 and how we keep that data protected. We at rk99 take account security seriously. When you create an account, verify your identity, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or place bets on Liga 1, Piala Indonesia, or live-dealer tables, we collect certain information. This policy explains what we collect, how we use it, and your rights over your data.

Our privacy commitments are straightforward: we do not sell your personal data to third parties for marketing purposes. We do share data with payment processors, fraud-detection services, and legal authorities where required by law. We encrypt sensitive data in transit and at rest. We retain your data only as long as needed to operate our service or comply with legal obligations.

This policy applies to all rk99 users regardless of device (desktop, mobile browser, or app) or payment method. Our services are available only where applicable law permits — users are responsible for verifying their own jurisdiction's privacy and gambling regulations.

What Data We Collect on rk99

We collect data at account creation, verification, and ongoing use. At signup, we collect your email address, chosen username, and password. During verification, we collect your full name, phone number, date of birth, and a scan of your identity document (KTP, passport, or driver's license). We use this information to confirm your identity and prevent fraud.

When you deposit, we collect transaction details: the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank), the amount, the timestamp, and your transaction ID from your payment provider. Your payment provider also shares your account details (name, account number or wallet ID) with us — we need this to process refunds or investigate disputes.

When you use rk99, we collect behavioral data: what markets you view (Liga 1 fixtures, Champions League, live-dealer tables), what bets or games you engage with, your stakes, your wins and losses, and your session timestamps. We use this data to calculate your weekly cashback, detect abuse, and understand platform usage patterns. We do not sell this data to advertisers.

Account data

Email, username, password hash, name, phone, date of birth, identity document scan.

Payment data

Transaction history, payment method details, amount, timestamp, provider transaction ID.

Activity data

Bets placed, games played, stakes, results, session IP address, user-agent (browser / app info).

Cookie data

Session identifier, language preference, device type. We use cookies to keep you logged in and remember your settings.

We also collect your IP address and browser fingerprint (user-agent, screen resolution, browser type) for security screening. This helps us detect suspicious logins from new locations or devices and alert you to potential unauthorized access.

How We Use Your Data

We use your data for three main purposes: service delivery, fraud prevention, and legal compliance. For service delivery, we use your account data to keep your account active, process your deposits and withdrawals, calculate your balance and weekly cashback, and deliver customer support. Your payment data is used to reconcile transactions with your payment provider and investigate deposit failures or withdrawal disputes.

For fraud prevention, we analyze your behavioral data (login patterns, betting patterns, withdrawal timing) to detect account takeover attempts, money-laundering signals, or collusion with other accounts. Our fraud-detection service may flag unusual activity and trigger a secondary verification step (e.g., SMS code confirmation). We do not automatically block your account — we notify you and ask for verification.

For legal compliance, we retain your data to meet tax reporting obligations, gambling-license audits, and anti-money-laundering (AML) requirements. Depending on your jurisdiction and transaction history, we may retain your account data for 5–7 years after account closure.

Third-Party Processors and Data Sharing

We do not sell your personal data. We do share it with third parties who help us operate rk99:

• Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment — we share your transaction details with these providers to process deposits and withdrawals.
• Fraud-detection services: Third-party APIs that screen your IP address, payment method, and behavioral signals against known fraud databases. These services do not use your data for advertising.
• Identity verification services: Third-party vendors who validate your identity document during account verification. They see your scan but do not retain it after verification completes.
• Email and SMS providers: Services that send you verification codes, cashback notifications, and account alerts. They receive only your email and phone number.
• Cloud hosting providers: Our servers may sit outside your jurisdiction (e.g., in Southeast Asia or internationally). Your data is encrypted in transit and at rest on these servers.

We include data-processing agreements with all third-party processors. These agreements require them to use your data only for the services we contract and to maintain security standards equivalent to ours. We do not authorize them to use your data for their own marketing or analytics.

Your Rights and Data Access

You have the right to access, correct, or delete your personal data. To request a copy of your account data, contact our support team with your account email and full name. We will provide a downloadable export of your account details, transaction history, and betting records within a reasonable timeframe.

To update or correct your data (e.g., change your phone number or address), log into your rk99 account and edit your profile. Identity document information (name, date of birth) cannot be self-edited — contact support if you need to correct it.

To request account deletion, email our support team. We will close your account and anonymize or delete your personal data, except for information we are legally required to retain (e.g., transaction records for tax purposes). This process typically takes 30 days. After deletion, your account cannot be recovered.

Cookies and Tracking

We use cookies to manage your rk99 session. Session cookies keep you logged in while you use the platform; they expire when you close your browser or log out. We also use persistent cookies to remember your language preference and device type across visits.

We do not use third-party tracking cookies (e.g., Google Analytics, Facebook Pixel) to follow you across other websites. We may use first-party analytics to count page views and monitor site performance, but these analytics do not identify you personally.

You can disable cookies in your browser settings, but doing so may break rk99 login and session management. We recommend keeping cookies enabled for normal platform operation.

Data Retention and Account Closure

We retain your account data while your account is active and for a defined period after closure. Transaction data (deposits, withdrawals, bets) is retained for 5–7 years to comply with tax and gambling-license audits. Identity documents (KTP scans) and payment-method details are retained for 3 years post-closure, unless local law requires longer retention.

If your account is suspended due to violation of our terms (e.g., underage access, fraud, money laundering), we may retain your data indefinitely for investigative and compliance purposes. We will not reopen suspended accounts.

Our Commitments on rk99

We commit to the following practices: First, we encrypt all sensitive data (passwords, payment details, identity documents) in transit using SSL/TLS and at rest using AES-256 encryption. Second, we limit access to your data to employees who need it for their job (e.g., customer support, fraud investigation). Third, we conduct regular security audits and penetration testing to identify and fix vulnerabilities. Fourth, we do not use your data for marketing emails unless you explicitly opt in.

If we experience a data breach, we will notify affected users within a reasonable timeframe and comply with any legal notification requirements. We maintain cyber-liability insurance to cover potential data-breach costs.

Our services are available only where applicable law permits. Your use of rk99 implies that you have verified your jurisdiction allows access. We do not collect data from users in embargoed regions or jurisdictions where online gambling is prohibited.

This privacy policy may be updated periodically to reflect changes in our practices or applicable law. We will notify users of material changes via email or in-app notification. Continued use of rk99 after a policy update implies acceptance of the new policy. For questions about this policy or to exercise your data rights, contact our support team.