Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by rsvip3 ("we," "us," "our," or "the Platform") and applies to all personal data we collect, process, store, and share in connection with the rsvip3 online gaming platform, accessible at rsvip3.cam and any associated subdomains, mobile applications, APIs, or services (collectively, the "Service").

This Policy applies to all users who access the Service, whether you are a registered Member, a visitor browsing the Platform without an account, or a third party interacting with our systems. By using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

rsvip3 operates in the Indonesian market and complies with applicable Indonesian data protection regulations, including Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi / UU PDP), as well as internationally recognized data protection principles. Where Indonesian law provides additional protections, those protections apply. Where international best practices exceed Indonesian legal minimums, we endeavor to meet those higher standards.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, email address, or one or more factors specific to the physical, economic, cultural, or social identity of that individual.
• "Processing" means any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means rsvip3, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of rsvip3, under our instruction, pursuant to a written data processing agreement.
• "Member" means any individual who has completed registration and holds an active or closed account with rsvip3.
• "KYC" means Know Your Customer — the identity and age verification process required before first withdrawal and during enhanced due diligence checks.
• "Cookies" means small text files placed on your device by our website or third-party services to store preferences, session data, and analytical information.

3. Information We Collect

3.1 Information You Provide Directly

We collect information you actively provide when you interact with rsvip3, including:

• Registration data: Full legal name, date of birth, residential address (including city and province within Indonesia), email address, and mobile phone number.
• Identity verification (KYC) documents: Government-issued photo identification (Indonesian KTP, passport, or driver's license), proof of address, and, where required, source-of-funds documentation.
• Payment information: Bank account details for transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, Permata, OCBC NISP, or BSI; e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja); and, where applicable, masked card numbers for Visa and Mastercard transactions.
• Communications: Content of messages you send to our customer support team via live chat, email, or any other channel, together with metadata such as timestamps and chat session identifiers.
• Responsible gaming declarations: Any self-imposed limits, self-exclusion requests, or problem gambling disclosures you make through your account settings or via our support team.

3.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain technical and behavioral data, including:

Data Category	Examples	Purpose
Device & Technical Data	IP address, device type, operating system, browser type and version, screen resolution	Security, fraud prevention, technical compatibility
Usage & Behavioral Data	Pages visited, session duration, click paths, game history, bet amounts and outcomes, feature usage	Platform improvement, personalization, responsible gaming monitoring
Location Data	Approximate geographic location inferred from IP address (city, province, country)	Jurisdictional eligibility checks, fraud detection
Transaction Data	Deposit and withdrawal timestamps, amounts, payment method used, transaction reference numbers	Account management, AML compliance, customer support
Cookie & Tracking Data	Session tokens, preference cookies, analytics identifiers	Session managemen t, analytics, marketing attribution

3.3 Information from Third Parties

We may receive additional personal data about you from trusted third-party sources, including:

• Payment processors and banking partners: Transaction confirmation data, fraud signals, and chargeback notifications from BCA, BRI, BNI, Mandiri, and other local banking partners, as well as e-wallet providers such as OVO, DANA, and GoPay.
• Identity verification services: Results of automated document verification checks performed by our KYC technology partners.
• Fraud prevention and AML services: Risk scores, watchlist matches, and politically exposed person (PEP) screening results from third-party compliance data providers.
• Analytics and marketing attribution providers: Aggregated traffic and campaign performance data to help us understand how Members discover rsvip3.

4. How We Use Your Information

rsvip3 processes your personal data for the following defined purposes, each of which has a corresponding legal basis:

• Account creation and management: To register your account, verify your identity and age, maintain your account settings, and communicate account-related information. Legal basis: contract performance.
• Payment processing: To process deposits and withdrawals via your chosen Indonesian banking or e-wallet provider, reconcile transactions, and investigate payment disputes. Legal basis: contract performance.
• Legal and regulatory compliance: To meet our obligations under anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) regulations, including record retention requirements. Legal basis: legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent unauthorized access, fraudulent transactions, bonus abuse, collusion, and other activities that violate our Terms & Conditions or applicable law. Legal basis: legitimate interests.
• Platform operation and improvement: To analyze usage patterns, diagnose technical problems, test new features, and improve the overall quality of the Service. Legal basis: legitimate interests.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance with account, payment, and gameplay issues. Legal basis: contract performance.
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce self-exclusion and deposit limit requests, and provide appropriate interventions where required. Legal basis: legal obligation and legitimate interests.
• Personalization and marketing communications: To send you promotions, bonus offers, and platform updates relevant to your interests, where you have not opted out of marketing communications. Legal basis: consent.

5. Disclosure and Third-Party Sharing

5.1 When We Share Your Data

rsvip3 does not sell or rent your personal data. We share your data only in the following circumstances:

• Service providers and Data Processors: We share data with carefully selected third-party companies that process data on our behalf — including payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.), identity verification providers, cloud hosting partners, customer support platforms, and analytics services. All such providers are bound by contractual data processing agreements and are prohibited from using your data for their own purposes.
• Game content providers: We share game session identifiers and anonymized gameplay data with game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe) solely to enable the delivery of their games through our platform. These providers do not receive your name, payment details, or contact information.
• Law enforcement and regulators: We may disclose personal data when required by applicable Indonesian law, a valid court order, a request from an authorized regulatory body, or where disclosure is necessary to protect the rights, property, or safety of rsvip3, our members, or the public.
• Business transfers: In the event of a merger, acquisition, asset sale, or restructuring involving rsvip3, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer that materially affects this Policy.
• With your explicit consent: For any other sharing not described above, we will obtain your clear and affirmative consent before proceeding.

5.2 Aggregate and Anonymized Data

We may share aggregated, anonymized statistical information (for example, total number of active users by city, average deposit size by payment method) with business partners, researchers, or the public. This data cannot be used to identify any individual Member and is not subject to the restrictions in this Policy.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

rsvip3 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the Service. The cookies we deploy fall into four categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. You cannot opt out of these without also opting out of the Service entirely.
• Functional Cookies: Remember your preferences such as language selection, display settings, and whether you have accepted our terms. These improve your experience but are not strictly required for operation.
• Analytics Cookies: Collect anonymized data about how visitors use the Platform — which pages are visited most, how long sessions last, and where users navigate from. This data helps us improve the Service.
• Marketing and Attribution Cookies: Track which advertising campaigns directed you to rsvip3 so we can measure the effectiveness of our marketing efforts. These cookies do not track your activity on other websites.

6.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling functional or analytics cookies may affect your experience on the Platform — for example, your preferences may not be saved between sessions. Disabling strictly necessary cookies will prevent you from logging into your account. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

7. Data Security

rsvip3 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transmitted between your browser or app and our servers is protected by TLS 1.3 (Transport Layer Security) with 256-bit encryption.
• Encryption at rest: Stored personal data — including identity documents, payment details, and account credentials — is encrypted using AES-256 encryption.
• Access controls: Access to personal data within our organization is restricted on a strict need-to-know basis. All staff with data access undergo background checks and regular security awareness training.
• Infrastructure security: Our servers operate within ISO 27001-certified data centers with physical access controls, 24/7 monitoring, redundant power supplies, and automated intrusion detection systems.
• Penetration testing: We commission independent security audits and penetration tests at least annually, and address identified vulnerabilities within defined remediation timescales.
• Incident response: We maintain a formal data breach response plan. In the event of a breach that is likely to result in a high risk to your rights and freedoms, we will notify affected Members without undue delay.

While we invest heavily in security, no platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for using a secure, private device when accessing rsvip3.

8. Data Retention

We retain your personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, to comply with AML, CTF, and tax record-keeping obligations under Indonesian law.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or from the date of your last transaction, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of each interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until the matter is resolved.
• Marketing preferences and consent records: Retained for as long as your account is active or until you withdraw consent, whichever occurs first. Records of consent withdrawal are retained for 3 years.
• Technical logs and session data: Retained for 90 days for operational troubleshooting purposes and for up to 12 months where required for security investigation purposes.

When personal data is no longer required, it is securely deleted or anonymized so that it can no longer be associated with any individual.

9. Your Data Rights

As a Member of rsvip3 and a resident of Indonesia, you hold the following rights with respect to your personal data, consistent with Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and internationally recognized data protection standards:

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request." We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

We may ask you to verify your identity before processing your request to ensure we do not disclose or alter data belonging to another person. Identity verification for data rights requests is typically completed via the same KYC documents held on your account.

10. Minors and Age Restriction

The rsvip3 Service is strictly intended for adults aged 21 years or older. We do not knowingly collect, store, or process personal data from individuals under the age of 21. If we become aware that we have collected personal data from a minor, we will immediately close the associated account, void any transactions, and delete all data associated with that individual.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account with rsvip3, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of a verified report.

11. International Data Transfers

rsvip3 primarily stores and processes your personal data on servers located within or accessible from Indonesia. However, certain of our third-party service providers — including cloud infrastructure providers, game content studios, and analytics platforms — may process data in servers located outside Indonesia. Where such international transfers occur, we ensure that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses consistent with Indonesian UU PDP requirements.
• Transfer impact assessments where required by the risk profile of the recipient country.
• Encryption of all data in transit across international networks.

By using rsvip3, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia, subject to the protections described above.

12. Changes to This Policy

rsvip3 may update this Privacy Policy from time to time to reflect changes in our data practices, the Services we offer, or applicable legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send an email notification to your registered email address describing the key changes.
• Display a prominent notice on the Platform for at least 30 days following the effective date of the changes.

Your continued use of the Service after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Service and close your account before the effective date.

13. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our Data Protection team:

Email: [email protected]
Subject Line: Privacy Policy Inquiry
Live Chat: Available 24/7 via the chat widget on the Platform
Response Time: Within 5 business days for general inquiries; within 30 days for formal data rights requests

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the relevant Indonesian data protection authority in accordance with Law No. 27 of 2022 on Personal Data Protection.

By using rsvip3, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.