rvip2 Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "rvip2" / "we" / "us" / "our" refers to the rvip2 platform, operated at rvip2.vu, and its associated operating entities responsible for the collection and processing of personal data.
• "Member" / "you" / "your" refers to any individual who has registered or is in the process of registering an account on the rvip2 platform, as well as any visitor who accesses or browses the rvip2.vu website without registering.
• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including but not limited to: full name, date of birth, email address, mobile number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Platform" refers to the rvip2 website, mobile-optimized interface, live chat system, and any other digital service operated by rvip2.
• "KYC" (Know Your Customer) refers to the identity and document verification process required before a Member may process withdrawals from their rvip2 wallet.
• "Third-Party Service Providers" refers to payment processors, KYC verification vendors, game studios, and analytics providers that rvip2 engages to deliver the Platform's services.

2 Data Controller

rvip2 acts as the data controller in respect of the Personal Data collected through the Platform. As the data controller, rvip2 determines the purposes and means by which your Personal Data is processed. All data-related inquiries, access requests, correction requests, and deletion requests should be directed to rvip2 through the contact channels described in Section 15 of this Policy.

Where rvip2 engages third-party processors — such as payment providers or KYC verification services — those parties act strictly as data processors under rvip2's instructions and are contractually bound to handle your data only for the specific purpose for which it was shared.

3 Personal Data We Collect

3.1 Registration Data

When you create an rvip2 account, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify you meet the 21+ age requirement);
• Indonesian mobile phone number;
• Email address;
• Username and encrypted password;
• Preferred deposit and withdrawal method.

3.2 KYC Verification Data

To comply with anti-money laundering requirements and to process withdrawals, rvip2 may collect:

• Copies of government-issued identity documents (KTP, passport, or SIM);
• Proof of payment method ownership (e.g., e-wallet screenshots showing your registered name for OVO, DANA, GoPay, ShopeePay, or LinkAja; bank statement header for BCA, BRI, BNI, Mandiri, or other supported banks);
• Selfie verification photographs where required by our KYC procedures.

3.3 Transaction Data

Each financial transaction on the Platform generates a record that includes: transaction type (deposit or withdrawal), amount in IDR, timestamp (WIB), payment channel used, and transaction status. We do not store full bank account numbers or e-wallet PINs — only the details necessary to reconcile your account balance.

3.4 Gameplay & Betting Data

We record details of your wagering activity on the rvip2 Platform, including: games played (slots, live casino, sportsbook, poker tournaments, and other categories), bet amounts, outcomes, session durations, and bonus utilization. This data is used for account management, responsible gaming monitoring, fraud detection, and platform improvement.

3.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geographic location derived from that IP;
• Device type, operating system, and browser version;
• Session timestamps and page interaction data;
• Cookie identifiers and similar tracking technologies (see Section 8).

3.6 Communications Data

When you contact rvip2 support via live chat, WhatsApp, or email, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome. These records enable us to maintain service quality and provide consistent support.

4 How We Collect Your Data

rvip2 collects Personal Data through the following channels:

• Directly from you: through account registration forms, KYC document submissions, deposit and withdrawal requests, support communications, and any other form you complete on the Platform.
• Automatically: through cookies, web beacons, server logs, and similar technologies that record your interaction with the Platform each time you visit or use rvip2 services.
• From third-party providers: KYC verification partners may provide identity confirmation results; payment processors may provide transaction status updates; fraud detection services may provide risk-scoring signals.

We do not purchase personal data from data brokers or acquire personal data from social media platforms without your explicit consent.

5 Purposes of Processing

The table below summarizes the primary purposes for which rvip2 processes your Personal Data:

rvip2 does not use your Personal Data for any purpose not listed above without first obtaining your consent or establishing a separate legitimate legal basis for that processing.

6 Legal Basis for Processing

rvip2 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the services you have requested under the rvip2 Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, age verification obligations, and any other legal duty imposed on rvip2 as a platform operator.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics where those interests are not overridden by your rights and interests.
• Consent: Processing for optional promotional communications, where you have explicitly opted in. You may withdraw this consent at any time by contacting rvip2 support or using the opt-out mechanism in any marketing communication.

7 Data Sharing & Disclosure

7.1 Payment Processors

To process deposits and withdrawals, rvip2 shares the minimum necessary transaction and identity data with supported local payment providers including BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, BSI (Bank Syariah Indonesia), Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. Each of these providers operates under its own privacy policy and security standards.

7.2 KYC Verification Providers

Identity documents submitted as part of the KYC process may be shared with our contracted KYC verification partners for the sole purpose of confirming the authenticity of the documents and the accuracy of the information provided. These partners are contractually prohibited from using your data for any other purpose.

7.3 Game Studios

When you play games on the rvip2 Platform — including titles from Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — your session data (such as bet amounts and game outcomes) is processed by the game studio's certified RNG systems. The studios receive only the data necessary to operate the game and record the result; they do not receive your full profile or payment details.

7.4 Legal and Regulatory Disclosure

rvip2 may disclose Personal Data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, or where rvip2 has a good-faith belief that such disclosure is necessary to prevent fraud, protect the safety of any person, or defend the legal rights of rvip2.

7.5 No Sale of Data

rvip2 does not, under any circumstances, sell, rent, or otherwise transfer your Personal Data to third parties for their own commercial use or marketing purposes. Any data sharing arrangement is strictly governed by a data processing agreement that limits the recipient's use of your data to the specific purpose for which it was shared.

8 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognize your device on subsequent visits and to store certain preferences or session information. rvip2 uses cookies and similar technologies (such as web beacons and local storage objects) to operate and improve the Platform.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged into your rvip2 account. These cannot be disabled without preventing access to core Platform features.
• Functional Cookies: Remember your preferences such as language display, preferred deposit method, and last-visited game category, enabling a more personalized experience on your return visit.
• Analytics Cookies: Collect aggregated, anonymized information about how Members use the Platform — such as which pages are visited most frequently and where users spend the most session time. This data informs Platform improvements and is not used to identify individual Members.
• Security Cookies: Support fraud detection by recording device fingerprint signals and flagging unusual access patterns, such as a sudden change in the geographic origin of login attempts.

8.3 Managing Cookies

You may control cookie settings through your browser's privacy or settings menu. Most browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to or using core features of the rvip2 Platform. Disabling analytics cookies will not affect your ability to use the Platform but will reduce our ability to optimize your experience over time.

9 Data Retention

rvip2 retains your Personal Data for as long as your account remains active and for such additional period as may be required by applicable law or regulation. Specific retention guidance is set out below:

• Account registration data: Retained for the duration of your account and for a minimum of 5 years following account closure, consistent with standard anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the last communication, or longer if the communication is relevant to an open dispute or legal matter.
• Technical and device data: Aggregated analytics data is retained indefinitely in anonymized form. Raw IP logs are retained for up to 12 months.
• Marketing preferences: Retained until you withdraw your consent or request deletion.

Following the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer be attributed to an identifiable individual.

10 Security Measures

rvip2 maintains a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• Transport encryption: All data in transit between your device and rvip2 servers is protected by 256-bit SSL/TLS encryption.
• Data-at-rest encryption: Sensitive data stored on rvip2 servers — including KYC documents and financial records — is encrypted at rest.
• Access controls: Access to Personal Data within rvip2 systems is restricted on a strict need-to-know basis. All internal access is logged and subject to periodic audit.
• Password security: Member passwords are stored using one-way cryptographic hashing. rvip2 staff cannot retrieve your password in plain text; they can only reset it at your verified request.
• Intrusion detection: rvip2's infrastructure is monitored 24 hours a day for anomalous activity, unauthorized access attempts, and other security threats.
• Vendor security standards: All third-party service providers engaged by rvip2 are assessed for their data security standards before engagement and are required to maintain appropriate protections contractually.

While rvip2 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own rvip2 account credentials. If you suspect unauthorized access to your account, contact rvip2 support immediately via live chat or email at [email protected].

11 Your Data Rights

As an rvip2 Member, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact rvip2 support through the channels listed in Section 15.

• Right of Access: You may request a copy of the Personal Data that rvip2 holds about you, along with information about how it is being used.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that require us to retain it.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while you contest the accuracy of the data or while a complaint is being investigated.
• Right to Object: You may object to the processing of your Personal Data where that processing is based on our legitimate interests, including processing for direct marketing purposes.
• Right to Data Portability: Where technically feasible and where processing is carried out by automated means, you may request that we provide your Personal Data to you in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

rvip2 targets an initial response to data rights requests within 5 business days. Complex requests may take up to 30 calendar days to fulfil in full, in which case we will notify you of the expected timeline.

12 Minors

The rvip2 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory step in the rvip2 registration and KYC processes.

If rvip2 becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the data concerned, and — where legally required — report the matter to the appropriate authorities. If you believe that a minor may have created an rvip2 account, please notify us immediately at [email protected].

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. For guidance on responsible gaming tools available to rvip2 account holders, please visit our Responsible Gaming page.

13 Third-Party Links & Services

The rvip2 Platform may contain references to third-party game studios and payment providers whose services are embedded within the Platform. While rvip2 takes care to partner only with reputable, security-conscious providers, we do not control the privacy practices of those third parties and accept no responsibility for data handled by them beyond the data processing agreements we have in place.

The rvip2 Platform does not contain links to external websites outside of the rvip2 domain. If you navigate away from the rvip2 Platform to any external site, that site's own privacy policy will apply to any data you provide there, and rvip2 has no visibility into or control over that processing.

14 Changes to This Privacy Policy

rvip2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered Members via email to their registered address and display a prominent notice on the rvip2 Platform home page, with a minimum of 7 days' notice before the revised Policy takes effect.

The effective date of the most recent version of this Privacy Policy is displayed at the top of the page. We recommend that you review this page periodically to remain informed about how we protect your data. Your continued use of the rvip2 Platform after a revised Policy becomes effective constitutes your acceptance of the changes.

If you do not agree with any material change to this Privacy Policy, you must discontinue use of the Platform and may request account closure and withdrawal of any remaining real-money wallet balance by contacting rvip2 support.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way rvip2 handles your Personal Data, please reach out to our support team through the following channels:

For formal data rights requests, use the email channel with the subject line: "Data Rights Request — [Your Account Username]". rvip2 targets an initial response within 2–5 minutes for general support queries and within 5 business days for formal data rights requests.