r6666 Privacy Policy

This Privacy Policy applies to all personal data processed by r6666 (referred to herein as "r6666", "we", "us", or "the Company") in connection with the operation of the online betting and gaming platform accessible at https://r6666.asia (the "Platform"). It governs data collected from all users who visit, browse, register, deposit, wager, or otherwise interact with the Platform, whether via desktop browser, mobile browser, or any associated progressive web application.

This Policy applies to all members regardless of geographic location, including players based in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and elsewhere across Indonesia. By registering an account or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy forms an integral part of r6666's Terms & Conditions and should be read alongside that document. Capitalized terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

r6666 collects personal data across three broad categories depending on how you interact with the Platform:

2.1 Account & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you are 21 years of age or older).
• Email address and mobile phone number used during registration.
• Registered home address or city of residence.
• Encrypted account password (passwords are hashed and never stored in recoverable plain text).
• KYC documents: national identity card (KTP), passport, or driving license, as submitted during the verification process.
• Selfie or liveness-check image submitted during enhanced KYC, where required.

2.2 Financial & Transaction Data

• Bank account details (account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) used for IDR deposits and withdrawals.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) linked to your account for transaction processing.
• Transaction history: deposit amounts, withdrawal amounts, timestamps, and payment channel used.
• Betting and gaming history: wager amounts, game titles, bet types (including mix parlay accumulator bets and voor bola handicap markets), outcomes, and session durations.
• Bonus and promotional credit history, including wagering-requirement progress and expiry status.

2.3 Technical & Usage Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, browser type and version.
• Pages visited, features used, and time spent on each section of the Platform.
• Session logs, login timestamps, and failed login attempts.
• Cookie identifiers and session tokens (see Section 9 for full cookie details).
• Support interaction records, including Live Chat transcripts and email correspondence with the r6666 support team.

r6666 collects personal data through the following mechanisms:

• Direct submission: Information you provide voluntarily when registering an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technical collection: Data collected automatically as you browse and use the Platform, including through cookies, server logs, and analytics tools. See Section 9 for details.
• Payment processors: Transaction confirmation data received from Indonesian bank transfer systems and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• KYC verification partners: Identity verification data returned by third-party KYC service providers that r6666 uses to validate identity documents and confirm your date of birth.
• Fraud and risk screening: Aggregate risk-signal data received from anti-fraud and anti-money-laundering screening tools used to protect the Platform's integrity.

r6666 processes your personal data for the following defined purposes only:

r6666 does not use your personal data for purposes beyond those listed above. Where a new purpose arises that is materially different from the original collection purpose, we will notify you and, where required by applicable law, seek your consent before proceeding.

r6666 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to provide the services you have registered for — including account management, payment processing, bet settlement, and customer support. Without this processing, r6666 cannot fulfill its contractual obligations to you as a Member.
• Legal obligation: Processing necessary to comply with applicable laws and international standards, including KYC identity verification, anti-money-laundering (AML) record-keeping, and cooperation with law enforcement and regulatory authorities.
• Legitimate interests: Processing carried out for r6666's legitimate business interests, including fraud prevention, platform security, product analytics, and responsible gaming monitoring — where such interests are not overridden by your privacy rights.
• Consent: Where r6666 sends you personalized promotional communications or deploys non-essential cookies, we rely on your prior consent. You may withdraw consent at any time by contacting support or adjusting your communication preferences in your account settings.

r6666 does not sell, rent, or share your personal data with third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to execute deposit and withdrawal instructions.
• KYC and identity verification providers: Third-party services contracted by r6666 to validate identity documents and perform age verification. These providers are contractually bound to use your data solely for the verification purpose and to maintain equivalent data security standards.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session data necessary to deliver and certify their game titles. These providers do not receive your personally identifiable account information.
• Fraud and AML screening providers: Specialist services used to screen transactions and account activity for indicators of money laundering, fraud, or other financial crime. Data shared is limited to what is necessary for the screening function.
• Regulatory and law enforcement authorities: Where r6666 is required by law, court order, or binding regulatory directive to disclose personal data, we will comply. Where legally permitted to do so, we will notify you of any such disclosure.
• Corporate successors: In the event of a merger, acquisition, or sale of all or part of r6666's business, personal data held by r6666 may be transferred to the successor entity as part of that transaction. You will be notified of any material change to the data controller resulting from such a transaction.

r6666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and international compliance standards. The following retention schedules apply:

When personal data is no longer required, r6666 securely deletes or anonymizes it in accordance with our internal data disposal procedures. Anonymized data from which you cannot be identified may be retained indefinitely for aggregate platform analytics.

r6666 implements a comprehensive, multi-layered approach to data security. Our technical and organizational safeguards include:

• Transport security: All data in transit between your device and r6666 servers is protected by 256-bit SSL/TLS encryption. This is verified by the padlock indicator in your browser's address bar when accessing https://r6666.asia.
• Data at rest encryption: Sensitive personal data — including KYC documents and financial records — is stored in encrypted form on r6666's secure server infrastructure.
• Password hashing: All member passwords are processed through industry-standard one-way cryptographic hashing. r6666 cannot retrieve your plain-text password; if forgotten, a password reset process is required.
• Access controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All internal access to member data is logged and audited.
• Two-factor authentication (2FA): r6666 supports optional 2FA on member accounts and requires mandatory 2FA for all internal staff accounts with access to member data.
• Intrusion detection and DDoS protection: r6666's infrastructure is protected by real-time intrusion detection systems and distributed denial-of-service mitigation to ensure platform availability and data integrity.
• Regular security audits: r6666 conducts periodic security reviews, vulnerability assessments, and penetration tests on its platform to identify and remediate potential weaknesses proactively.

r6666 uses cookies and similar technologies to operate the Platform effectively, maintain your session, and understand how members use the site at an aggregate level. Cookies are small text files stored on your device by your browser. The following categories of cookies are in use on r6666:

r6666 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. You will not be tracked across other websites as a result of using r6666.

You can manage cookie preferences through your browser settings. Instructions for disabling cookies vary by browser; refer to your browser's help documentation. Note that disabling strictly necessary cookies will prevent you from logging into your r6666 account.

As a member of the r6666 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered account email and the specific right you wish to exercise.

• Right to Access: You may request a copy of all personal data r6666 holds about you. We will provide this in a structured, readable format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor account details (such as email address or phone number) can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data. This right is subject to our legal obligations to retain certain records for AML compliance and dispute resolution purposes. Where deletion is not possible in full, we will explain the specific legal basis for retaining each data category.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider.
• Right to Restrict Processing: You may request that r6666 pause processing of your personal data in certain circumstances — for example, while the accuracy of the data is contested or while a complaint is under review.
• Right to Object: You may object to processing based on r6666's legitimate interests, including direct marketing communications. We will honor objections to direct marketing immediately upon receipt.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional emails, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

All data rights requests will be acknowledged within 5 business days and resolved within 30 days of receipt, or within a longer period where the complexity of the request necessitates it (with notification provided to you in that case). r6666 does not charge a fee for reasonable data rights requests.

r6666 is strictly an adults-only platform. You must be at least 21 years of age to register an account, make deposits, or place wagers on the Platform. This age requirement applies to all members regardless of their location within Indonesia or elsewhere.

r6666 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process. Any account found to belong to a person under 21 years of age will be immediately suspended, all funds held in the account will be returned to the verified owner of the payment method used, and all associated personal data will be deleted from our systems.

If you are a parent or guardian and believe that a minor in your care has registered an account on r6666 without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including account closure and data deletion, within 48 hours of a verified report.

r6666 operates as an international online gaming platform. As a result, your personal data may be stored on and processed by servers located outside Indonesia. Specifically, r6666 may transfer personal data to countries where our hosting infrastructure, KYC providers, payment technology partners, or game content suppliers are based.

Wherever your data is transferred internationally, r6666 takes steps to ensure that an equivalent level of protection is applied to it. These safeguards include:

• Binding data processing agreements with all third-party recipients, requiring them to protect your data to a standard equivalent to this Privacy Policy.
• End-to-end encryption applied to data in transit and at rest, regardless of geographic location.
• Transfer only to jurisdictions with appropriate data protection infrastructure, or with supplementary contractual protections in place where the destination jurisdiction's legal framework is assessed as inadequate.
• Regular review of all international transfer arrangements to ensure continued compliance with evolving data protection standards.

By using the r6666 Platform, you acknowledge and agree that your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia, subject to the safeguards described in this Section.

r6666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, applicable legal requirements, or best-practice guidance from data protection authorities.

When we make material changes to this Policy, we will notify registered members by email to the address on file with your account and by displaying a prominent notice on the r6666 Platform homepage for a period of not less than 14 days prior to the changes taking effect. Non-material amendments (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be made without prior notification, with the updated date reflected at the top of this page.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may request account closure and data deletion as described in Section 10.

For all privacy-related inquiries, data rights requests, concerns about how your personal data is being processed, or to report a suspected data breach or underage account, please contact the r6666 Data Protection team through the following channels:

• Email: [email protected] — use subject line "Privacy Request" or "Data Rights Request" for fastest routing. Response within 1–24 hours for general queries; formal data rights requests acknowledged within 5 business days.
• Live Chat: Available 24/7 directly within the r6666 Platform. Suitable for general privacy questions and to initiate a formal data rights request with a support agent.
• WhatsApp Support: Available daily from 08:00 to 24:00 WIB (Western Indonesia Time, UTC+7) for privacy-related questions and account data queries.

To protect your privacy and ensure that data rights requests are fulfilled to the correct individual, r6666 will require identity verification before processing any access, rectification, portability, or erasure request. This verification step is a security measure for your protection and does not constitute a barrier to exercising your rights.

r6666 aims to resolve all formal privacy complaints within 10 business days. Where a complaint requires extended investigation, a status update will be provided at regular intervals until the matter is resolved. If you remain dissatisfied with our response, you may escalate the matter to the relevant international data protection authority or arbitration body as applicable to your jurisdiction.