rx88 Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, device identifiers, and transaction records.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means rx88, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means a third party that processes Personal Data on behalf of rx88 under a contractual data-processing agreement, such as a KYC verification provider or payment gateway.
• "Player" / "You" means any individual who accesses, registers on, or uses the rx88 platform.
• "Platform" means the rx88 online betting and casino service at https://rx88.cam and all associated sub-domains and mobile interfaces.
• "IDR" means Indonesian Rupiah, the denomination currency of all player accounts on the platform.
• "KYC" means Know Your Customer identity verification, a mandatory process for confirming the identity of players before processing withdrawals above applicable thresholds.
• "Cookies" means small text files placed on a user's device by the platform to facilitate session management and analytics.

Data Controller

The Data Controller responsible for Personal Data collected through the rx88 platform is the rx88 operating entity, accessible at https://rx88.cam. For all privacy-related enquiries, data rights requests, or formal complaints, players may contact the Data Controller through the channels specified in Section 15 of this Policy.

rx88 has appointed a dedicated Data Protection point of contact within its support team. All data-related enquiries are handled separately from general customer support and are subject to enhanced confidentiality procedures.

Data We Collect

rx88 collects the following categories of Personal Data from Players:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (used to verify the mandatory minimum age of 21 years).
• Email address (used as the primary account identifier and communication channel).
• Country of residence and, where applicable, province or city within Indonesia (e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta).
• Phone number (optional at registration; may be required for two-factor authentication).

3.2 KYC Verification Data

• Scanned or photographed copies of government-issued photo identification (KTP, Passport, or SIM for Indonesian residents).
• Proof of residential address (utility bill, official bank statement, or government correspondence dated within three months).
• Proof of payment method ownership (bank statement header, e-wallet account screenshot) for BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Source of funds declarations for high-volume accounts, where required under AML procedures.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts in IDR, timestamps (WIB), channel used, and processing status.
• Bank account numbers or e-wallet identifiers associated with the Player's verified payment methods.
• Bonus allocation, wagering activity, and balance history.

3.4 Betting & Gaming Activity Data

• Wager history including event, market, odds, stake, and settlement outcome.
• Game session logs for casino, live dealer, slots, and togel (numbers lottery) products.
• Responsible gaming tool settings, including active deposit limits, loss limits, and self-exclusion status.

3.5 Technical & Device Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Session duration, pages visited, and feature interaction logs.
• Cookie identifiers and local storage values (see Section 10).

3.6 Communications Data

• Live chat transcripts and email correspondence between the Player and rx88 support staff.
• Records of marketing communication preferences (opt-in or opt-out status for promotional emails and platform notifications).

How Data Is Collected

rx88 collects Personal Data through the following channels:

• Directly from You: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your account profile.
• Automatically: When you browse or interact with the platform, our servers and analytics tools automatically record technical and device data as described in Section 3.5.
• From Third-Party Service Providers: KYC verification providers may return enriched identity data; payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) confirm transaction status; fraud detection partners may flag risk signals based on anonymized behavioral patterns.
• Publicly Available Sources: In limited circumstances, rx88 may cross-reference registration data against publicly available databases for fraud prevention or sanctions screening purposes.

Purpose & Legal Basis for Processing

The table below summarizes the primary purposes for which rx88 processes Personal Data and the legal basis applicable to each purpose:

Where rx88 relies on consent as the legal basis for processing (e.g., promotional emails), you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting support via live chat. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Sharing

rx88 does not sell, rent, or commercially transfer your Personal Data to third parties. We share data only where strictly necessary, with the following categories of recipient:

6.1 Payment Service Providers

To process IDR deposits and withdrawals, rx88 shares the minimum necessary transaction data with the relevant payment channel operator. This includes local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). Each provider processes data under its own privacy policy and applicable Indonesian financial regulation.

6.2 KYC and Identity Verification Partners

Identity documents and verification data are transmitted to accredited third-party KYC providers via encrypted channels. These providers are contractually bound to process your data solely for the purpose of identity verification and to delete or return the data upon completion of the verification process.

6.3 Fraud Detection and AML Partners

Anonymized or pseudonymized behavioral and transaction signals may be shared with specialist fraud-detection and anti-money-laundering screening services. These partners do not receive full identity data unless a specific investigation requires it under applicable legal authority.

6.4 Game Studio Technology Providers

To deliver casino, live dealer, slots, and togel products, rx88 integrates with licensed game studios including Evolution Gaming, Pragmatic Play, Microgaming, Spribe, NetEnt, and Pocket Games Soft. These integrations may involve transmission of an anonymized player session token and stake amount to the studio's gaming server. Studios do not receive your name, email, or financial account details.

6.5 Regulatory and Law Enforcement Authorities

rx88 will disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where it is legally compelled to do so by a valid order, warrant, or statutory requirement. rx88 will, where legally permissible, notify the affected Player before making such a disclosure.

6.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the rx88 business, Player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained by the successor entity. Players will be notified of any such transfer via the email address registered to their account no later than 30 days before the transfer takes effect.

International Data Transfers

As an internationally operated platform serving Indonesian players, rx88 may transfer Personal Data to servers or service providers located outside of Indonesia. Where such transfers occur, rx88 implements appropriate safeguards to ensure that your data receives a level of protection consistent with internationally recognized data protection standards, including:

• Standard contractual clauses incorporated into data-processing agreements with all relevant third-party processors.
• Technical security measures, including end-to-end encryption and access controls, applied to all data in transit and at rest.
• Strict vendor assessment procedures to confirm that all international Data Processors maintain security certifications and data protection practices aligned with rx88's internal standards.

Data Retention

rx88 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized using industry-standard data sanitization procedures. Players may request early deletion of specific data categories subject to the overriding legal retention obligations described above.

Data Security

rx88 maintains a comprehensive information security program designed to protect Personal Data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and rx88 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all platform interactions including deposits via BCA, BRI, BNI, GoPay, OVO, and other Indonesian payment channels.
• Encryption at Rest: Sensitive Personal Data stored in rx88 databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorized personnel on a strict need-to-know basis. All staff with data access undergo regular security awareness training.
• Penetration Testing: The platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: rx88 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to affected players, those players will be notified without undue delay via their registered email address.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. rx88 reserves the right to require 2FA for accounts that exhibit unusual login behavior.

Cookies & Tracking Technologies

The rx88 platform uses cookies and similar tracking technologies to maintain session state, enhance platform performance, and gather anonymized analytics. The cookies we use fall into the following categories:

10.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens (which keep you logged in during a browsing session), CSRF protection tokens (which prevent cross-site request forgery attacks), and load-balancing cookies (which ensure consistent server performance). No personal data is embedded in these cookies beyond a randomized session identifier.

10.2 Analytics Cookies

rx88 uses anonymized analytics cookies to understand how Players navigate the platform, which features are most used, and where technical errors occur. This data is aggregated and does not identify individual players. Analytics cookies can be disabled via your browser settings without affecting core platform functionality.

10.3 Preference Cookies

Preference cookies remember your platform settings between sessions, such as your preferred display language, notification preferences, and responsible gaming tool configurations. Disabling these cookies means your preferences will reset each session.

10.4 Managing Cookies

You can control and delete cookies through your browser settings. Major browsers including Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari provide cookie management tools under their privacy or settings menus. Please note that disabling strictly necessary cookies will prevent you from logging in to your rx88 account.

Your Privacy Rights

As a Player on the rx88 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team via live chat and clearly state the nature of your request. We will respond within 30 calendar days of receiving a verifiable request.

• Right of Access: You may request a copy of the Personal Data rx88 holds about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. For name or date-of-birth corrections, updated KYC documentation will be required.
• Right to Erasure: You may request deletion of your Personal Data. This right is subject to overriding legal retention obligations (see Section 8); data that must be retained for AML or financial record-keeping purposes cannot be deleted early.
• Right to Restriction: In certain circumstances, you may request that rx88 restrict the processing of your Personal Data — for example, while a rectification request is being investigated.
• Right to Data Portability: You may request a machine-readable export of the Personal Data you have provided to rx88, in a structured, commonly used format (such as JSON or CSV).
• Right to Object: Where rx88 processes your data on the basis of legitimate interests, you may object to that processing. rx88 will assess the objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

Minors & Age Gating

The rx88 platform is strictly for adults aged 21 years or older. rx88 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to belong to persons under 21 years of age will be immediately closed.

If a parent or guardian believes that a minor has registered an account or submitted Personal Data to rx88 without consent, they should contact our support team immediately via live chat. rx88 will investigate the report, close any confirmed underage account, delete associated Personal Data to the extent permitted by law, and cooperate fully with any lawful request from the guardian or relevant authorities.

rx88 also implements IP-level geolocation checks and device fingerprinting to identify and block access attempts from known underage user profiles, and reviews KYC documents for date-of-birth consistency as a secondary age verification layer.

Third-Party Links

The rx88 platform may contain references or informational mentions of third-party services including payment providers, sports leagues such as BRI Liga 1, and game studios. This Privacy Policy applies solely to data processed by rx88 through the platform at https://rx88.cam. rx88 is not responsible for the privacy practices of any third-party service, website, or application, and encourages Players to review the privacy policies of any external service they choose to interact with independently.

Policy Amendments

rx88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform functionality. When material changes are made, rx88 will notify active Players via their registered email address and display a prominent notice on the platform at least 7 calendar days before the updated Policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage Players to review this Policy periodically to stay informed about how their data is being handled. Continued use of the platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

Where a material amendment would involve a new category of Personal Data being processed, or a materially different purpose for existing data, rx88 will seek fresh consent from affected Players where consent is the applicable legal basis for that processing.

Contact & Complaints

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact rx88 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the platform. Please state clearly that your query is privacy-related so it can be routed to our Data Protection point of contact.
• Email (plain text — not a clickable link): support@rx88.cam

rx88 aims to acknowledge all privacy-related requests within 5 business days and to provide a full substantive response within 30 calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

If you are unsatisfied with rx88's handling of your privacy concern after contacting us directly, you may escalate the matter to the competent data protection supervisory authority in your jurisdiction. Players based in Indonesia may consult the relevant national authority responsible for electronic systems and data governance for guidance on escalation options.