Privacy Policy of r6r6r

r6r6r (referred to throughout this Privacy Policy as "r6r6r", "we", "us", or "our") is the trading name of the legal entity that owns and operates the online gaming platform accessible at https://r6r6r.org. r6r6r is an internationally operated gaming platform that provides sports betting, live casino games, slots, Dragon Tiger, Sakong, and related wagering products to eligible adult players in Indonesia.

For the purposes of data protection, r6r6r is the data controller in respect of all personal data collected through the Platform. This means we are the entity that determines the purposes and means of processing your personal information, and we are responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us at [email protected]. Contact details are also set out in full in Clause 15 below.

r6r6r collects personal data only to the extent necessary to provide the Services, comply with applicable legal and regulatory obligations, and protect the integrity of the Platform. The categories of data we may collect are described below:

r6r6r collects personal data through several channels:

• Direct submission: Information you actively provide during account registration, KYC document upload, deposit or withdrawal requests, contact form submissions, and live chat interactions.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including data gathered via cookies, session tokens, server logs, and analytics tools. See Clause 7 for full details on cookies.
• Payment providers: Transaction confirmation data received from our partner payment processors when you deposit or withdraw funds using BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, or USDT.
• KYC and identity verification partners: Identity verification outcomes and risk signals shared with us by third-party KYC providers in the course of verifying your submitted documents.
• Fraud and security tools: Risk scores, device fingerprints, and anomaly signals generated by our security infrastructure when evaluating login attempts and transactions.

r6r6r does not purchase or acquire personal data from data brokers, social media platforms, or any other third-party marketing databases.

r6r6r processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your r6r6r player account, including password resets and two-factor authentication flows.
• Service delivery: Processing bets, settling winnings, crediting bonuses, and providing access to all game categories including slots, Dragon Tiger, Sakong, live casino, and sportsbook markets.
• Financial transactions: Processing deposits and withdrawals through Indonesian banking and e-wallet channels, and recording all transaction history for your account ledger.
• Identity and age verification: Conducting KYC checks to confirm that you are at least 21 years of age and to verify the identity of the person controlling the account and associated payment methods.
• Fraud prevention and security: Detecting and investigating suspected fraud, money laundering, multiple-account abuse, bonus abuse, and any other activity that threatens the integrity of the Platform or the security of other players.
• Responsible gaming: Monitoring play patterns for signs of problem gambling behaviour and enforcing deposit limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming policy.
• Customer support: Responding to your queries, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Legal and regulatory compliance: Fulfilling any obligations imposed on r6r6r by applicable law, court order, or regulatory directive, including the production of records for audit or investigation purposes.
• Marketing (with your consent): Sending you promotional emails, bonus offers, or notifications about new games and seasonal promotions — such as those tied to Indonesian Independence Day, Idul Fitri, or Ramadhan — where you have opted in to marketing communications. You may withdraw consent at any time by contacting support.
• Platform improvement: Using anonymised and aggregated usage data to improve the design, performance, and game selection of the r6r6r Platform.

Every processing activity carried out by r6r6r rests on one of the following legal bases:

r6r6r does not sell, rent, or trade your personal data. We share data only in the following limited circumstances, and only to the extent strictly necessary for the relevant purpose:

• Payment processors: Your financial data (bank account details, e-wallet identifiers, USDT wallet addresses) is shared with our certified third-party payment processors solely to execute deposit and withdrawal transactions. These processors are contractually bound to handle your data securely and to use it for no purpose other than completing the relevant payment.
• KYC verification partners: Your identity documents and personal details are shared with our contracted KYC/AML service providers to perform identity verification. These partners operate under binding data processing agreements and are subject to equivalent data protection standards.
• Game studios: Game session data (e.g., round IDs, bet amounts, game outcomes) may be shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — solely for the purposes of game integrity verification, dispute resolution, and regulatory audit trails.
• Security and fraud services: Anonymised or pseudonymised device and behavioural data may be shared with our security infrastructure partners for the purpose of detecting and blocking fraudulent activity.
• Legal authorities: r6r6r will disclose personal data to law enforcement bodies, regulators, or courts when required to do so by a valid legal obligation, court order, or regulatory directive. We will notify you of any such disclosure where legally permitted to do so.
• Corporate restructuring: In the event of a merger, acquisition, or transfer of substantially all of r6r6r's business assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

r6r6r uses cookies and similar technologies (local storage, session tokens) to operate the Platform effectively and securely. The following types of cookies are deployed:

r6r6r does not use advertising or retargeting cookies. You may manage browser-level cookie settings through your browser preferences, but please note that disabling strictly necessary cookies will prevent you from logging in to your r6r6r account.

r6r6r retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention periods are as follows:

• Active account data: Retained for the full duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship, in line with internationally recognised AML standards.
• Transaction records: Retained for a minimum of five (5) years for financial record-keeping and fraud audit purposes.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless a complaint or dispute remains open — in which case records are kept until the matter is fully resolved.
• Marketing consent records: Retained for the duration of your account or until you withdraw consent, whichever is sooner, plus an additional 12 months to evidence the consent status.
• Analytics data (anonymised): Retained in anonymised, aggregated form indefinitely for Platform improvement purposes. This data cannot be linked back to any individual player.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

r6r6r implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data in transit between your device and r6r6r servers.
• Encryption at rest for all sensitive personal data stored in our databases, including financial data and KYC documents.
• Access controls: Strict role-based access controls ensure that only authorised personnel with a legitimate operational need can access personal data. All access is logged and audited.
• Password hashing: Account passwords are hashed using a modern, salted cryptographic algorithm. r6r6r staff cannot read your password in plain text under any circumstances.
• Intrusion detection: Continuous automated monitoring for anomalous activity patterns, including multiple failed login attempts, unusual IP activity, and abnormal transaction volumes.
• Penetration testing: Regular third-party security assessments of the Platform's infrastructure and web application layer.
• Data breach response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, r6r6r will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

You have the following rights in relation to the personal data r6r6r holds about you. To exercise any of these rights, contact us at [email protected] with your registered username and a description of your request. We will respond within 30 days of receiving a valid request, and we will not charge a fee for standard requests.

r6r6r is strictly a platform for adults. You must be at least 21 years of age to register, deposit funds, or place any wager on the Platform. This 21+ age restriction is actively enforced through our KYC verification procedures.

r6r6r does not knowingly collect personal data from any individual under the age of 21. If we discover that personal data has been collected from a person under this age, we will immediately suspend the relevant account, refund any deposits where possible, void any associated wagering activity, and permanently delete the minor's personal data from our systems without undue delay.

The r6r6r Platform integrates third-party services — including payment processors, game studios, KYC verification providers, and analytics tools — that may process certain elements of your personal data in the course of delivering their services to r6r6r. Each of these third parties operates under its own privacy practices and is bound by contractual data processing agreements with r6r 6r.

r6r6r performs due diligence on all third-party service providers before engagement and requires that they maintain security standards equivalent to or exceeding those described in Clause 9 of this policy. We do not permit third-party service providers to use your personal data for their own purposes beyond the specific service they are contracted to deliver.

The following categories of third-party service providers are currently engaged by r6r6r:

• Payment processors: Entities that facilitate deposits and withdrawals via Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency (USDT).
• KYC and identity verification providers: Specialist third parties that verify government-issued identity documents and perform liveness checks against submitted selfie photographs.
• Licensed game studios: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe, whose game engines are integrated into the r6r6r Platform and which receive game session data for integrity and audit purposes.
• Security and fraud detection platforms: Services that analyse device fingerprints, IP reputation, and behavioural signals to detect and block fraudulent or abusive activity on the Platform.
• Customer support tooling: Live chat and ticketing software providers through which support interactions are conducted and archived.

r6r6r does not currently integrate any social media login buttons, social media pixel trackers, or third-party advertising networks into the Platform.

As an internationally operated platform, r6r6r may transfer your personal data to servers or service providers located outside of Indonesia. Such transfers may occur when, for example, a game studio's servers are hosted in a jurisdiction other than Indonesia, or when our KYC verification partner operates data centres in a different country.

Where personal data is transferred internationally, r6r6r takes appropriate safeguards to ensure that your data receives a level of protection equivalent to that described in this Privacy Policy. These safeguards include:

• Transferring data only to countries or organisations that maintain adequate data protection standards as recognised by internationally accepted frameworks.
• Executing data processing agreements that include standard contractual clauses or equivalent binding commitments with all third-party recipients of personal data outside Indonesia.
• Applying end-to-end encryption for all data in transit across international networks.

By registering an account on the r6r6r Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia for the purposes described in this Privacy Policy, subject to the safeguards described above.

r6r6r reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address on file or by posting a prominent notice on the Platform, at least 14 days before the amended policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised policy.

If you do not accept an amended Privacy Policy, you must cease using the Platform and contact support to request account closure and data handling in accordance with your rights under Clause 10.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data r6r6r holds about you, please contact our Data Protection team using the details below. All privacy-related enquiries are handled by a dedicated team with response times as set out in Clause 10.

This Privacy Policy was last reviewed and approved by r6r6r management on 1 January 2026 and supersedes all previous versions.