Your Privacy Matters
at rk556

rk556 operates an online betting and gaming platform accessible at rk556.pro, serving English-preference players based in Indonesia including in Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, Palembang, Makassar, and Yogyakarta. To provide this service, we necessarily process certain personal data about our members.

This Privacy Policy describes the categories of personal data rk556 collects, the purposes for which that data is used, the parties with whom it may be shared, the measures we take to protect it, and the rights that members have in relation to their data.

When we refer to "rk556", "we", "us" or "our" in this policy, we mean the entity operating the rk556 platform. When we refer to "you", "member" or "user", we mean any individual who accesses or uses rk556, whether registered or not.

This policy is written in English as the platform's operating language. If you require clarification on any aspect of this policy, our Indonesian-speaking support agents are available 24/7 via live chat and can assist you in understanding your rights and our practices.

rk556 collects personal data in the following categories, depending on how you interact with the platform:

rk556 collects personal data through the following channels:

• Direct Submission: Information you provide when registering your account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated Technologies: Technical and usage data collected automatically when you visit rk556.pro, including through cookies, web beacons, pixel tags, and server access logs. See Clause 7 for details on our cookie practices.
• Payment Providers: Transaction confirmation data shared with rk556 by your bank (BCA, BRI, BNI, Mandiri, etc.) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) when you process a deposit or withdrawal.
• Identity Verification Partners: Where rk556 engages a third-party KYC or anti-fraud provider to assist with identity verification, that provider may return enriched verification data to rk556 (e.g., confirmed identity match status). rk556 does not receive raw credit file data from these checks.
• Publicly Available Sources: In limited circumstances relating to fraud investigation or responsible gaming compliance, rk556 may consult publicly available sources such as self-exclusion registers or court records.

rk556 uses your personal data for the following purposes:

• Service Delivery: To create and manage your account, process bets and transactions in Indonesian Rupiah (IDR), verify your identity, and provide access to sportsbook, casino, slot, and togel (Indonesia's traditional numbers lottery) products.
• KYC & Regulatory Compliance: To verify that you meet the 21+ age requirement, confirm your identity before processing withdrawals, and comply with applicable anti-money laundering (AML) obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, duplicate account registrations, bot activity, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling, enforce deposit limits and self-exclusion periods you have set, and proactively reach out if our systems detect potentially harmful wagering behaviour.
• Customer Support: To respond to your support queries, resolve disputes, and maintain a record of your case history so that agents can assist you efficiently.
• Platform Improvement: To analyse aggregated usage data, identify popular features, troubleshoot technical issues, and develop new products and features that better serve Indonesian players.
• Marketing Communications: To send you promotional offers, bonus alerts, and seasonal campaign notifications (such as those tied to Ramadhan, Idul Fitri, or Indonesian Independence Day on 17 August) by email or SMS, where you have not opted out of receiving such communications.
• Legal Obligations: To comply with any court order, regulatory request, or legal obligation that requires rk556 to disclose or retain personal data.

rk556 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and rk556 — for example, processing deposits, settling bets, and managing your account — is carried out on the basis that it is necessary to fulfil our obligations to you.
• Legal Obligation: Certain processing, such as KYC identity verification and AML transaction monitoring, is required by law and is carried out on the basis of legal compliance.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is carried out on the basis of rk556's legitimate interest in operating a secure and sustainable gaming platform. We have balanced these interests against your privacy rights and concluded that our legitimate interests are not overridden.
• Consent: Marketing communications by email or SMS are sent on the basis of your consent, given at the time of registration or subsequently in your account settings. You may withdraw consent at any time by updating your notification preferences or by contacting support.

rk556 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment Processing Partners: Your financial data is shared with the payment processors, banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) necessary to execute your deposit and withdrawal transactions.
• Identity Verification Providers: Your identity documents may be processed by a third-party KYC verification partner engaged by rk556 to confirm your identity. These partners are bound by strict data processing agreements and may only use your data for the purpose of identity verification on behalf of rk556.
• Game Studio Providers: When you play games provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, certain technical and gameplay data is processed by those studios' servers. These studios are bound by contractual data protection obligations.
• Fraud Prevention Networks: In cases of suspected fraud, we may share relevant account data with industry-recognised fraud prevention databases and networks to prevent harm to other operators and players.
• Legal and Regulatory Bodies: rk556 will disclose personal data to law enforcement agencies, courts, or regulatory authorities where required by a valid legal process, court order, or applicable law. Where permitted, rk556 will inform you of such a request.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of rk556's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third parties with whom rk556 shares personal data are required by contract to implement appropriate technical and organisational security measures and to use the data only for the purposes specified by rk556.

rk556 uses cookies and similar tracking technologies on rk556.pro to enhance your experience, maintain your session, and analyse platform performance. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and ensure security features work correctly. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your account preferences — such as your preferred deposit method or notification settings — to personalise your experience. They are set on your first visit and persist until cleared.
• Analytics Cookies: rk556 uses first-party analytics to understand how members navigate the platform, which games are most popular, and where technical errors occur. This data is aggregated and does not identify individual members.
• Anti-Fraud and Security Cookies: Device fingerprinting and session integrity cookies are used to detect suspicious behaviour, prevent account takeover, and identify duplicate account registrations.

Most web browsers are set to accept cookies by default. You may adjust your browser settings to decline non-essential cookies, but doing so may affect the functionality of your rk556 account. rk556 does not currently support a cookie preference centre — if you have questions about specific cookies, contact [email protected].

rk556 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with any applicable legal retention obligations. The following retention periods apply as a baseline:

• Account and Identity Data: Retained for the duration of your active account relationship with rk556, plus a minimum of 5 years following account closure. This period supports our AML compliance obligations and the resolution of any post-closure disputes.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping requirements.
• Betting and Gaming History: Retained for a minimum of 3 years from the date of activity. Aggregated, anonymised gambling pattern data may be retained indefinitely for responsible gaming research purposes.
• KYC Documentation: Identity documents submitted for KYC verification are retained for a minimum of 5 years following account closure.
• Support Communications: Live chat transcripts, emails, and support ticket records are retained for 2 years from the date of the last interaction in the relevant case.
• Technical and Usage Logs: Server access logs and device fingerprint data are retained for 12 months. Aggregated analytics data may be retained longer in anonymised form.
• Marketing Consent Records: Records of your consent or opt-out from marketing communications are retained for the life of your account plus 3 years.

When the applicable retention period expires, rk556 securely deletes or anonymises the relevant personal data so that it can no longer be associated with you.

rk556 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Encryption: All data exchanged between your browser or mobile device and rk556 is encrypted using TLS 1.2 or higher. Our SSL certificate is verified and maintained continuously.
• Data Encryption at Rest: Personal data and financial records stored in rk556 databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to member data within rk556 is governed by a strict role-based access control (RBAC) system. Staff are granted only the minimum access required for their specific job function. All internal data access is logged and subject to periodic audit.
• Two-Factor Authentication (2FA): rk556 strongly encourages all members to enable 2FA on their accounts. Internal administrative access to member data requires 2FA for all rk556 staff.
• Penetration Testing: rk556's platform undergoes regular security assessments including vulnerability scanning and periodic penetration testing by qualified security professionals.
• Incident Response: rk556 maintains a documented data breach response procedure. In the event of a confirmed breach that poses a risk to member data, we will notify affected members by email as promptly as practicable, and no later than 72 hours after becoming aware of the breach.

As a member of rk556, you have the following rights in relation to your personal data. To exercise any of these rights, contact us via live chat or email [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data rk556 holds about you. We will provide this in a commonly used electronic format within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Where the data in question has been shared with a third party, we will inform them of the correction where reasonably practicable.
• Right to Erasure: You may request that rk556 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that rk556 is not obliged to erase data that we are required by law to retain (such as KYC and financial transaction records).
• Right to Restrict Processing: You may request that rk556 temporarily pause processing of your personal data where you contest its accuracy, where processing is unlawful, or where rk556 no longer needs the data but you require it for a legal claim.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that rk556 provide your personal data in a structured, machine-readable format so that you may transfer it to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of rk556's legitimate interests, although rk556 may continue processing if we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before you withdrew consent.

rk556 will respond to all data rights requests within 30 days. If a request is complex or we have received a large number of requests simultaneously, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.

rk556 is strictly an adults-only platform. No person under the age of 21 may register for or use rk556, and we do not knowingly collect personal data from individuals under 21 years of age. All members are required to confirm they are 21 or older during registration, and age verification is enforced during the KYC process.

If rk556 discovers that it has inadvertently collected personal data from a person under 21, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the originating payment method, net of any applicable processing fees.

The rk556 platform may contain links to third-party websites, game studio portals, or payment provider pages. These third-party sites operate independently of rk556 and are governed by their own privacy policies. rk556 is not responsible for the privacy practices of any third-party website and makes no representation as to the adequacy of the data protection measures applied by those third parties.

We encourage you to review the privacy policy of any third-party site you visit before providing personal information. The presence of a link on rk556 does not constitute rk556's endorsement of that third party's privacy practices.

rk556 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify you by posting a prominent notice on the rk556 platform homepage or by sending an email to your registered address, at least 7 days before the updated policy takes effect.

The "Last Updated" date shown at the top of this page indicates when the policy was most recently revised. We encourage you to review this page periodically. Your continued use of rk556 after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

If rk556 intends to process your personal data in a materially different way from that described in the version of this policy in effect at the time your data was collected, we will obtain your consent before doing so where consent is the applicable legal basis for the new processing activity.

If you have any questions, concerns, or requests relating to this Privacy Policy or rk556's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the rk556 platform. Indonesian-speaking agents are available on every shift and can assist you with data rights requests in your preferred language.
• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so that your message is routed to the correct team. We aim to respond to privacy-related emails within 5 business days.

rk556 is committed to working cooperatively with you to resolve any privacy concern. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.