Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how rk444 ("rk444", "the Company", "we", "us", "our"), the operator of the online gaming platform at https://rk444.cam, collects, uses, discloses, stores, and protects personal information provided by or generated about users ("Player", "User", "you") of the Platform. This Policy applies to all services offered through the rk444 website, mobile interfaces, customer support channels, and any associated applications.

By registering an account, accessing the Platform, or otherwise interacting with rk444's services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the Platform.

This Policy should be read in conjunction with rk444's Terms & Conditions, which govern the overall relationship between rk444 and its Players. In the event of any conflict between this Policy and the Terms & Conditions on a data-protection matter, this Policy prevails.

2. Definitions

For clarity throughout this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either directly (e.g., full name, national ID number) or indirectly (e.g., device identifier combined with usage data).
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, rk444.
• "Data Processor" means a third party that processes Personal Data on behalf of rk444 under contractual obligations.
• "KYC Data" means identity and verification documents collected as part of the Know Your Customer procedure, including government-issued identification, facial photographs, and proof of payment method.
• "Cookies" means small text files stored on your device by the Platform to facilitate session management, analytics, and personalization.
• "Platform" means the rk444 website, mobile site, and any associated applications accessible at https://rk444.cam.

3. Data We Collect

rk444 collects the following categories of Personal Data depending on your level of engagement with the Platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, KTP (Indonesian national ID) number, photograph	Account registration & KYC verification
Contact Data	Email address, Indonesian mobile telephone number, WhatsApp number	Account registration & support interactions
Financial Data	Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet account details (OVO, DANA, GoPay, ShopeePay), deposit and withdrawal history, transaction amounts in IDR	Deposit, withdrawal & KYC verification
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, session timestamps	Automatic — on each Platform visit
Usage Data	Pages visited, games played, bet history, session duration, click-path data, search queries within the Platform	Automatic — during active sessions
Location Data	Country and city-level geolocation derived from IP address (e.g., Jakarta, Surabaya, Bandung, Bali)	Automatic — on each Platform visit
Communications Data	Live chat transcripts, email correspondence, support ticket content, recorded voice calls where applicable	During customer support interactions
Responsible Gaming Data	Self-imposed deposit limits, self-exclusion status, session time preferences, problem gambling indicators	When tools are configured or flagged by risk systems

We do not knowingly collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data processed solely for identification purposes, health data, or data concerning sexual orientation, beyond what is strictly necessary for KYC compliance (e.g., a photograph on a government-issued ID document).

4. How We Collect Your Data

4.1 Directly From You

The majority of the Personal Data we hold is provided directly by you during the account registration process, when completing KYC verification, when making deposits or withdrawal requests, when contacting our customer support team, or when configuring responsible gaming preferences.

4.2 Automatically Through Technology

When you access the Platform, our servers automatically record Technical Data and Usage Data. This is collected via server logs, Cookies, pixel tags, and similar tracking technologies built into the Platform's infrastructure. This data is essential for maintaining session continuity, detecting fraud, and optimizing Platform performance. For full details on how we use Cookies, see Section 11 of this Policy.

4.3 From Third Parties

We may receive Personal Data from the following categories of third parties:

• Payment processors and banks — confirmation data related to deposits and withdrawals, used to reconcile transactions and verify payment method ownership.
• KYC and identity verification services — supplementary verification results from specialized identity-checking partners.
• Fraud and risk management providers — behavioral risk scores and flagged patterns that help us identify suspicious account activity.
• Analytics partners — aggregated, anonymized audience data used to understand how users engage with the Platform at a population level.

5. Purposes of Processing

rk444 processes your Personal Data only for clearly defined, lawful purposes. The primary purposes are as follows:

• Account management: Creating, maintaining, and securing your player account; processing password resets; enforcing the single-account policy.
• Transaction processing: Receiving deposits and disbursing withdrawals to verified Indonesian bank accounts and e-wallets; maintaining accurate transaction records.
• Identity verification (KYC): Confirming that you are who you say you are, that you meet the minimum age requirement of 21, and that your payment methods are registered in your name.
• Regulatory compliance and fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple accounts, and other prohibited behaviors described in our Terms & Conditions.
• Customer support: Responding to queries, resolving disputes, and providing technical assistance through live chat, email, and WhatsApp support.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behavior; administering deposit limits and self-exclusion requests.
• Platform improvement: Analyzing usage patterns to improve game selection, navigation, loading times, and overall user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and relevant gaming news to Players who have not opted out — subject to the consent and opt-out provisions in Section 12.
• Legal obligations: Maintaining records required by applicable law; responding to lawful requests from authorities; defending legal claims.

6. Legal Basis for Processing

rk444 relies on the following legal grounds when processing your Personal Data:

• Contractual necessity: Processing that is necessary to perform our contract with you (i.e., to operate your account, process transactions, and deliver gaming services). This covers the majority of data processing activities described in this Policy.
• Legal obligation: Processing required by applicable laws and regulations, including anti-money-laundering requirements, KYC obligations, and record-keeping mandates.
• Legitimate interests: Processing carried out to pursue rk444's legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, informed consent — for example, receiving optional marketing communications. You may withdraw consent at any time by contacting our support team or using the opt-out link in any marketing email.

7. Sharing Your Data

rk444 does not sell or rent your Personal Data to any third party. We share your data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

7.1 Service Providers and Data Processors

We engage carefully selected third-party companies to perform services on our behalf. These Data Processors are contractually bound to process your data only on our instructions and to maintain appropriate security standards. Categories of processors we use include:

• Payment gateway and banking partners facilitating IDR transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay.
• KYC and identity verification technology providers.
• Cloud hosting and infrastructure providers that store Platform data on secure servers.
• Customer support software platforms that power our live chat and ticketing systems.
• Fraud detection and risk assessment technology providers.
• Web analytics services that help us understand aggregate user behavior on the Platform.

7.2 Game Content Providers

Where you play games supplied by third-party studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Pocket Games Soft — limited technical data (such as a pseudonymous player identifier and bet history) may be shared with the relevant studio solely for the purpose of rendering game content, processing game outcomes, and resolving disputes. These studios are contractually prohibited from using your data for any other purpose.

7.3 Legal and Regulatory Disclosures

We may disclose your Personal Data to government bodies, law enforcement agencies, courts, or other authorities where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of rk444, its Players, or the public. We will notify you of such a disclosure where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rk444's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

8. International Data Transfers

rk444 operates internationally, and your Personal Data may be processed in countries outside Indonesia where our service providers or infrastructure partners are located. Whenever we transfer Personal Data internationally, we implement appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy. These safeguards may include contractual clauses that obligate the recipient to protect your data, or reliance on the recipient's participation in a recognized data-protection framework.

If you have questions about the specific safeguards applicable to a particular international transfer, please contact our Data Protection contact using the details in Section 16.

9. Data Retention

We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

Data Category	Retention Period	Rationale
Account registration data	Duration of account + 5 years after closure	Contractual obligation; fraud prevention
KYC documents	5 years after account closure	Anti-money-laundering compliance
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Customer support communications	3 years from last interaction	Dispute resolution; quality assurance
Technical & usage logs	13 months on a rolling basis	Security monitoring; fraud detection
Marketing consent records	Until consent withdrawn + 3 years	Evidence of lawful marketing basis
Responsible gaming records	Duration of exclusion + 5 years	Duty of care; regulatory compliance

When Personal Data is no longer required, we securely delete or anonymize it so that it can no longer be linked to an identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical and research purposes.

10. Security Measures

rk444 implements a layered, defense-in-depth approach to data security, combining technical controls, organizational procedures, and ongoing staff training. Our key security measures include:

• TLS/SSL encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), ensuring that data in transit cannot be intercepted in readable form.
• Encryption at rest: Sensitive Personal Data stored on our servers — including KYC documents and financial records — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access necessary for their role, and all access is logged and audited.
• Two-factor authentication (2FA): Administrative access to systems that process Personal Data requires multi-factor authentication to prevent unauthorized entry even if credentials are compromised.
• Penetration testing: We conduct regular security assessments and penetration tests carried out by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: We maintain a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and relevant authorities within the timeframes required by applicable law.

11. Cookies & Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the Platform. They allow the Platform to recognize your device across page requests within a session and across repeat visits, enabling features such as keeping you logged in, remembering your preferences, and measuring how the site is used.

11.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential to the operation of the Platform. Without these cookies, services such as account login, session management, and secure transaction processing cannot function. These cookies cannot be disabled.
• Performance & Analytics Cookies: Collect anonymized information about how visitors use the Platform — which pages are visited most, where users drop off, and how long sessions last. This data helps us improve the Platform experience.
• Functionality Cookies: Remember your preferences, such as your preferred language, display settings, or last-played game category, to personalize your experience on return visits.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorized Account access, including bot detection and session integrity checks.

11.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies, or to be notified when a cookie is set. Please note that disabling certain cookies may impair the functionality of the Platform — for example, you may be required to log in on every visit, or your game preferences may not be saved. Consult your browser's help documentation for instructions on adjusting cookie settings.

12. Your Privacy Rights

Subject to applicable law and certain legal limitations, you have the following rights with respect to your Personal Data held by rk444:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may ask us to correct any Personal Data that is inaccurate or incomplete. Minor corrections (e.g., typos in contact details) can often be made directly within your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful — subject to our overriding legal obligations to retain certain records.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your data while a dispute about its accuracy or the lawfulness of its processing is resolved.
• Right to Data Portability: You may request a copy of Personal Data you have provided to us in a structured, commonly used, machine-readable format, for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will stop that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days. We may ask you to verify your identity before processing your request to ensure we do not disclose or modify data in response to fraudulent claims.

13. Protection of Minors

The rk444 Platform is strictly for individuals aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and we reserve the right to close any Account where the Player is found to be under the minimum age, with forfeiture of any balance held in that Account.

If you are a parent or guardian and believe that a minor has created an Account or provided Personal Data on the Platform without your consent, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action, including deletion of the minor's data and closure of the Account.

14. Third-Party Links and Services

The rk444 Platform may contain references to third-party services, such as game studios or payment processors, whose own privacy practices are governed by their respective privacy policies. rk444 is not responsible for the privacy practices, content, or security of any third-party service. We encourage you to review the privacy policy of any third-party service you interact with in connection with our Platform. For the avoidance of doubt, this Policy applies solely to data collected and processed by rk444 directly.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational procedures. When we make material changes, we will notify registered Players via email and/or a prominent notice on the Platform at least 7 days before the updated Policy takes effect. The "Last Reviewed" date at the top of this page will always reflect the most recent revision. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we protect your information.

16. Contact & Data Protection

If you have any questions, concerns, or complaints about this Privacy Policy or about rk444's data practices, or if you wish to exercise any of your privacy rights, please contact us through the following channel:

• Email: [email protected]
• Subject line for privacy matters: "Privacy Policy Inquiry" or "Privacy Rights Request"
• Response time: We aim to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within 30 calendar days of receiving a verifiable request.
• Support hours: Our customer support team is available 24/7, with specialized data-protection queries handled by a dedicated team during WIB business hours (09:00–22:00 WIB).