Privacy Policy

This Privacy Policy applies to all personal data processed by rsvip2 in connection with your use of the rsvip2 platform accessible at rsvip2.net, including the website, all game verticals (sports betting, live casino, slots, togel (Indonesia's traditional numbers lottery), poker tournaments, and crash games), customer support channels, and any email, SMS, or live chat communications between you and rsvip2.

By registering an account, visiting the rsvip2 website, or otherwise engaging with our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this policy, you must not use the rsvip2 platform.

This policy is designed to comply with internationally recognised data protection principles, including those reflected in the EU General Data Protection Regulation (GDPR) as adopted as a global best-practice standard, and the Indonesian Government Regulation on Electronic Systems and Transactions (PP No. 71 Tahun 2019) as it pertains to the handling of personal electronic data.

rsvip2 operates as the data controller for all personal data collected through the rsvip2 platform. As data controller, rsvip2 determines the purposes and means by which your personal data is processed. All data processing activities conducted by rsvip2 are governed by this Privacy Policy and the applicable data protection laws of the jurisdiction in which rsvip2 is incorporated.

For any data protection enquiries, subject access requests, or complaints relating to the handling of your personal data, you may contact the rsvip2 Data Protection team directly via live chat support or by email at [email protected] — please note this address is displayed for reference only and is not a clickable link.

rsvip2 collects only the personal data that is necessary to deliver our services, maintain platform integrity, comply with regulatory obligations, and provide a personalised member experience. The categories of personal data we collect are set out in the table below:

rsvip2 collects personal data through the following means:

• Direct submission: Data you provide voluntarily when completing the registration form, submitting a KYC document, updating your account profile, making a deposit or withdrawal request, or contacting customer support via live chat or email.
• Automated collection: Technical and usage data collected automatically by our servers and analytics infrastructure each time you access the rsvip2 platform, including when you browse game categories, place wagers, or interact with promotional content.
• Cookies and tracking technologies: Session cookies, persistent cookies, and similar tracking technologies deployed on the rsvip2 website to maintain session state, remember user preferences, and collect aggregate analytics data. See Section 10 for full details.
• Third-party sources: Identity verification and fraud-screening data received from our KYC verification partner, payment fraud signals from our payment processing providers, and game audit data from certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft.
• Responsible gaming interactions: Data generated when you interact with rsvip2's responsible gaming tools, including deposit limit configurations, session alert activations, cooling-off requests, and any self-exclusion requests submitted via live chat.

rsvip2 uses your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the original reason for which it was collected, and we do not engage in automated decision-making that produces significant legal effects without human review.

• Account management: To create, maintain, authenticate, and operate your rsvip2 Member account, including processing login requests, updating profile information, and managing account security settings.
• KYC and age verification: To verify that you are at least 21 years of age and to confirm your identity as required under our obligations as a responsible gaming operator. This platform is strictly for adults aged 21 and over.
• Payment processing: To process deposits received from Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to execute withdrawal payments to your nominated account, all denominated in Indonesian Rupiah (IDR).
• Service delivery and personalisation: To provide access to all rsvip2 game verticals, to deliver personalised game recommendations, to display localised content relevant to players across Jakarta, Surabaya, Bandung, Bali, Yogyakarta, and other Indonesian cities, and to serve relevant promotions aligned with your gaming preferences and the Indonesian cultural calendar (Idul Fitri, Imlek, Ramadhan, Indonesian Independence Day).
• Fraud prevention and security: To detect, investigate, and prevent unauthorised account access, bonus abuse, match-fixing, money laundering, and any other fraudulent or prohibited conduct on the rsvip2 platform.
• Regulatory and AML compliance: To fulfil our obligations under applicable anti-money laundering (AML) standards, including maintaining transaction records and responding to lawful requests from competent authorities.
• Responsible gaming monitoring: To monitor usage patterns for signs of problem gambling and to enforce responsible gaming measures such as deposit limits, self-exclusion orders, and cooling-off periods that you have voluntarily activated.
• Customer support: To respond to support queries, disputes, and complaints submitted via live chat, email, or any other support channel, and to maintain records of communications for quality assurance and training.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, payment flow, and the overall member experience on rsvip2.
• Marketing communications: To send you promotional emails, SMS notifications, and in-platform messages about rsvip2 offers, bonuses, and new game launches — provided you have not opted out of marketing communications in your account settings. You may withdraw your consent to marketing at any time.

rsvip2 processes your personal data on the following legal bases, consistent with internationally recognised data protection standards:

7.1 No Sale of Personal Data. rsvip2 does not sell, rent, or trade your personal data to any third party for commercial marketing or advertising purposes. Your data is your data.

7.2 Service Providers. rsvip2 shares personal data on a strictly need-to-know basis with the following categories of trusted service providers who process data on our behalf under binding data processing agreements:

• KYC and identity verification providers: To perform age and identity checks required before account approval and withdrawal processing.
• Payment processing partners: Indonesian bank payment gateways and e-wallet integration providers facilitating transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Game content providers: Certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) receive session-level data necessary to operate game rounds and calculate outcomes. No personally identifiable data beyond an anonymised player session token is shared with game studios.
• Cloud infrastructure and hosting providers: Secure data centre and cloud storage providers hosting the rsvip2 platform infrastructure, operating under strict data processing agreements with encryption-at-rest requirements.
• Customer support platform: The third-party live chat software provider used to power rsvip2's 24/7 support function. Chat content is stored securely and used only for support quality and training purposes.
• Fraud and AML screening tools: Transaction monitoring and risk-scoring platforms used to detect suspicious financial activity consistent with our AML compliance obligations.

7.3 Legal Disclosures. rsvip2 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by law, court order, or lawful governmental request. rsvip2 will notify affected members of such disclosures where legally permitted to do so.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of rsvip2's business, your personal data may be transferred to the acquirer as part of the transaction. rsvip2 will provide reasonable advance notice of any such transfer and ensure that the incoming controller commits to data protection standards consistent with this Privacy Policy.

rsvip2 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, rsvip2 will securely delete or anonymise your personal data in accordance with industry-standard data destruction protocols. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

rsvip2 takes the security of your personal data extremely seriously and implements a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL / TLS 1.3 encryption: All data transmitted between your device and the rsvip2 servers is encrypted using TLS 1.3 with AES-256 — the same encryption standard used by Indonesia's major banks including BCA, BRI, and Mandiri.
• Encryption at rest: Personal data stored in rsvip2 databases — including KYC documents, financial data, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to member personal data is restricted on a strict need-to-know basis within rsvip2's operations team. All internal access is logged, monitored, and subject to regular review.
• Two-factor authentication (2FA): rsvip2 offers SMS OTP-based two-factor authentication for member accounts. We strongly recommend all members enable 2FA to protect their account.
• Penetration testing and vulnerability management: The rsvip2 platform undergoes regular independent security audits and penetration tests. Identified vulnerabilities are remediated within defined SLA timeframes.
• Data breach response: rsvip2 maintains a documented incident response plan. In the event of a personal data breach that poses a risk to your rights, we will notify affected members and relevant authorities within the timeframes required by applicable law.

10.1 What Are Cookies. Cookies are small text files placed on your device by the rsvip2 website when you visit. They allow the platform to recognise your browser, maintain your session state, remember your preferences, and collect analytics data about how the site is used. rsvip2 uses cookies exclusively for functional and operational purposes — not for cross-site advertising tracking.

10.2 Types of Cookies We Use.

• Strictly necessary cookies: Essential for core platform functionality — login session management, security tokens, CSRF protection, and load-balancing. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming display preferences. These improve your experience but are not required for the platform to operate.
• Analytics cookies: Collect anonymised, aggregated data about page views, navigation paths, and feature engagement to help rsvip2 improve platform design and performance. No personally identifiable information is included in analytics data.
• Security cookies: Used for fraud detection and bot prevention purposes, including identifying unusual login patterns or suspicious session behaviour.

10.3 Managing Cookies. You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge).

10.4 No Third-Party Advertising Cookies. rsvip2 does not deploy third-party advertising or retargeting cookies (such as Google Ads remarketing tags, Facebook Pixel, or similar advertising SDKs) on the rsvip2 platform. We do not share your browsing behaviour on rsvip2 with external advertising networks.

As a member of the rsvip2 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the rsvip2 support team via live chat or at [email protected]. rsvip2 will respond to all verified data rights requests within 30 days.

• Right of access: You have the right to request a copy of all personal data rsvip2 holds about you, together with information about how it is processed and shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your rsvip2 account. Some data (such as your registered full name) can only be corrected via the KYC verification process to prevent fraud.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. Note that certain data must be retained for the statutory periods set out in Section 8 regardless of an erasure request.
• Right to restrict processing: You may request that rsvip2 restrict processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. You also have an unconditional right to object to the use of your data for direct marketing at any time.
• Right to withdraw consent: Where rsvip2 processes your data on the basis of consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The rsvip2 platform is strictly for adults aged 21 and over. rsvip2 does not knowingly collect, store, or process personal data of any person under the age of 21. Our registration process requires date-of-birth entry and is supported by KYC age verification to enforce this restriction.

If rsvip2 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the data, and forfeit any associated balances in accordance with our Terms & Conditions. If you believe a minor has registered an account on the rsvip2 platform, please notify us immediately via live chat or at [email protected].

rsvip2 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes to this Privacy Policy will be communicated to registered Members via email notification to the registered address on file and/or via a prominent notice on the rsvip2 platform, with a minimum of 7 days' notice before the updated policy takes effect.

The "Last Updated" date displayed at the top of this page indicates when the current version was published. Your continued use of the rsvip2 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you must cease using the platform and close your account prior to the effective date.

The current version of this Privacy Policy is always accessible at rsvip2.net/privacy-policy. We encourage you to review it periodically to stay informed about how we protect your data.

For any questions, concerns, or requests relating to this Privacy Policy or rsvip2's handling of your personal data, please reach out through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the rsvip2 platform. Native Indonesian-speaking agents are available at all times to assist with data rights requests and privacy queries.
• Email: [email protected] — displayed for reference only; this is not a clickable link.
• Response commitment: All privacy and data-related enquiries are acknowledged within 24 hours (WIB, Western Indonesia Time) and resolved within 30 calendar days. Urgent requests such as suspected data breaches or account security concerns are escalated immediately.