Privacy Policy

rr89 takes the privacy and security of every member's personal data seriously. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and protect it, and what rights you hold over your own data.

Last Updated: January 15, 2026
256-Bit SSL Encryption

Every data packet transmitted between your browser and rr89's servers is protected by military-grade 256-bit SSL encryption, ensuring complete confidentiality in transit.

No Third-Party Marketing

rr89 never sells, rents, or shares your personal information with third-party advertisers or marketing companies. Your data exists only to serve your account and keep you safe.

Strict Access Controls

Access to member data within rr89 is restricted to authorized personnel only, on a strict need-to-know basis, with all internal access logged and audited regularly.

Secure Data Storage

All member data is stored on encrypted servers hosted within secure data centers with physical access controls, redundant backups, and continuous intrusion monitoring.

Data Minimization

We collect only the data genuinely needed to operate your account, comply with our regulatory obligations, and deliver the services you have requested. Nothing more.

Your Rights, Respected

You have the right to access, correct, or request deletion of your personal data at any time. rr89 responds to data access requests within 30 days of receipt.

Summary: rr89 collects personal information from you solely to operate your account, verify your identity, process payments, and comply with applicable international gaming regulations. We do not sell your data. We do not share it for marketing purposes. We protect it using industry-leading security technology. By registering an account on rr89, you agree to the data practices described in this Privacy Policy.

1. Introduction

This Privacy Policy ("Policy") describes how rr89 ("we", "our", "us", or the "Platform") — the online betting and gaming service accessible at https://rr89.cam — collects, uses, stores, and discloses personal information about individuals ("you", "your", "User", or "Member") who register for or use our services.

rr89 is committed to handling personal data responsibly and in accordance with internationally recognized privacy principles, including purpose limitation, data minimization, storage limitation, integrity, confidentiality, and accountability. We operate primarily in the Indonesia market and recognize the particular sensitivity Indonesian users place on the security and discretion of their financial and personal information.

Please read this Policy carefully. If you do not agree with its terms, you should not use rr89's services. For questions or concerns, contact our Data Protection team at [email protected].

2. Definitions

  • "Personal Data" means any information that relates to an identified or identifiable natural person.
  • "Processing" means any operation performed on personal data — including collection, storage, use, disclosure, and deletion.
  • "Data Controller" refers to rr89, which determines the purposes and means of processing your personal data.
  • "Data Processor" refers to any third party that processes personal data on rr89's behalf (e.g., payment service providers, cloud hosting partners).
  • "KYC" (Know Your Customer) means the identity verification process required by international gaming regulations.
  • "Cookies" means small text files placed on your device by a website to remember preferences and collect usage data.
  • "Services" refers to all products, features, and functions available on the rr89 platform, including sports betting, live casino, slots, and togel (Indonesia's traditional numbers lottery) markets.

3. Personal Data We Collect

rr89 collects the following categories of personal data. We apply the principle of data minimization — we only collect information that is genuinely necessary for the purpose stated.

Category Data Points Purpose
Identity Data Full legal name, date of birth, nationality, government-issued ID number (KTP) Account registration, KYC verification, age verification
Contact Data Email address, mobile phone number, residential address Account communication, security notifications, KYC verification
Financial Data Bank account details (BCA, BRI, BNI, Mandiri), e-wallet identifiers (OVO, DANA, GoPay), payment card details (last 4 digits only for Visa/Mastercard) Deposit and withdrawal processing, fraud prevention
Transaction Data Deposit amounts, withdrawal amounts, bet history, win/loss records, bonus usage Account management, regulatory compliance, responsible gaming monitoring
Technical Data IP address, device type, browser type and version, operating system, screen resolution, session duration Fraud detection, platform optimization, security monitoring
Usage Data Pages viewed, features used, game titles played, time spent on platform Improving user experience, personalization, responsible gaming analysis
Communications Data Customer support chat logs, email correspondence, WhatsApp conversations (where applicable) Dispute resolution, service quality assurance, training
KYC Verification Data Photographs of KTP (front and back), selfie with KTP, proof of address documents Mandatory identity verification per international gaming license requirements

4. How We Collect Personal Data

4.1 Directly From You

The primary source of your personal data is you. We collect information directly when you:

  • Complete the account registration form on rr89.
  • Submit documents for KYC identity verification.
  • Make deposits or withdrawal requests through any supported payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, Visa, Mastercard).
  • Contact our customer support team via live chat, email, or WhatsApp.
  • Respond to surveys, promotional offers, or provide feedback through the platform.
  • Update your account preferences, notification settings, or responsible gaming tool configurations.

4.2 Automatically From Your Device

When you access rr89 through a web browser or mobile application, we automatically collect certain technical data about your device and session, including your IP address, browser type, operating system, and pages visited. This data is collected via server logs, cookies, and similar tracking technologies (see Section 10 for full cookie details).

4.3 From Third Parties

In some circumstances, rr89 receives personal data from third parties for legitimate operational reasons, including:

  • Payment processors: Transaction confirmation data from banks and e-wallet providers.
  • Identity verification services: Results from automated KYC and document authentication tools.
  • Fraud prevention providers: Risk signals and device fingerprint data from fraud-detection partners.
  • Game providers: Game round records from software providers like Pragmatic Play, Evolution Gaming, and NetEnt for dispute resolution and regulatory reporting purposes.

5. Purpose of Processing

rr89 processes your personal data for the following clearly defined purposes:

  1. Account Registration and Management: To create, maintain, and administer your rr89 account.
  2. Identity Verification (KYC): To comply with international gaming license requirements that mandate verification of every member's identity and age (21+ years).
  3. Payment Processing: To process deposits and withdrawals via your registered Indonesian bank account (BCA, BRI, BNI, Mandiri) or e-wallet (OVO, DANA, GoPay).
  4. Service Delivery: To provide access to sports betting, live casino, slot games, and togel markets.
  5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized account access.
  6. Responsible Gaming Compliance: To monitor gaming activity and apply responsible gaming tools (deposit limits, session limits, self-exclusion) as requested or required.
  7. Customer Support: To respond to queries, resolve disputes, and process complaints.
  8. Legal and Regulatory Compliance: To meet our obligations under international gaming licenses, anti-money laundering (AML) regulations, and applicable data protection laws.
  9. Platform Improvement: To analyze usage patterns and improve the functionality, reliability, and user experience of the rr89 platform.
  10. Marketing Communications (Opt-In Only): To send promotional offers, bonus notifications, and news about new features — only to members who have explicitly opted in to marketing communications. You may unsubscribe at any time.

rr89 processes your personal data on one or more of the following legal bases:

  • Contract Performance: Processing is necessary to perform the contract between you and rr89 — specifically, to operate your account and deliver the betting and gaming services you have signed up for.
  • Legal Obligation: Processing is necessary to comply with our international gaming license conditions, anti-money laundering obligations, and identity verification requirements.
  • Legitimate Interests: Processing is necessary for our legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and service quality improvement — where those interests are not overridden by your rights and interests.
  • Consent: For marketing communications and certain cookie categories, we rely on your freely given, specific, and informed consent. You m ay withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Disclosure

rr89 does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances, and only to the extent strictly necessary:

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process data on our behalf under strict contractual data processing agreements. These include:

  • Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) receive the minimum financial data required to execute your transaction.
  • KYC and identity verification providers: Receive identity documents to perform automated verification checks.
  • Cloud infrastructure providers: Host our platform servers and encrypted databases in secure, access-controlled data centers.
  • Fraud detection and AML screening services: Receive technical and transactional signals to identify suspicious activity.
  • Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and similar studios receive only the session and game-round data required to deliver game content and settle results.

7.2 Regulatory and Legal Authorities

We may disclose your personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law, a valid court order, or our international gaming license conditions. We will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of rr89's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on the platform before your data is transferred and becomes subject to a different privacy policy.

7.4 With Your Explicit Consent

We may share your data with third parties not listed above if you have given us your explicit, informed consent to do so. You may withdraw that consent at any time by contacting support.

8. Data Retention

rr89 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required or permitted by law.

Data Category Retention Period Reason
Account & Identity Data Duration of account + 5 years after closure Gaming license obligations, AML compliance
KYC Documents Duration of account + 5 years after closure Regulatory requirement under international gaming license
Transaction & Betting Records Duration of account + 5 years after closure Financial record-keeping, dispute resolution, AML
Customer Support Logs 3 years from last interaction Dispute resolution, quality assurance
Technical / Log Data 12 months from collection Security monitoring, fraud detection
Marketing Preferences Until opt-out, then 1 year for suppression records Consent management compliance

Once the applicable retention period expires, your data is either securely deleted or anonymized so that it can no longer be linked back to you as an individual.

9. Security Measures

rr89 implements a comprehensive, layered security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our key security measures include:

  • 256-bit SSL/TLS Encryption: All data in transit between your browser or app and our servers is encrypted using TLS 1.2 or higher.
  • Encrypted Data Storage: Sensitive data at rest — including identity documents and financial records — is stored using AES-256 encryption on access-controlled servers.
  • Access Controls: Internal access to personal data is granted only to authorized rr89 employees and contractors on a strict need-to-know basis. All access is logged, monitored, and audited.
  • Two-Factor Authentication (2FA): rr89 systems and internal admin tools require multi-factor authentication for all staff access.
  • Penetration Testing: Our platform undergoes regular independent penetration tests and vulnerability assessments to identify and remediate security weaknesses.
  • Incident Response Plan: rr89 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you within 72 hours of becoming aware of the incident, where technically feasible.

Your Responsibility: While rr89 takes all reasonable technical and organizational measures to protect your data, no internet transmission is 100% secure. You are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your credentials. Never share your password with anyone, including rr89 support agents — our staff will never ask for your password.

10. Cookies & Tracking Technologies

rr89 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyze how members use our services. Cookies are small text files stored on your device when you visit rr89.

10.1 Types of Cookies We Use

Cookie Type Purpose Duration
Strictly Necessary Required for core platform functions — login sessions, security tokens, language preferences Session / up to 24 hours
Functional Remember your preferences — display settings, preferred payment method, responsible gaming tool configurations Up to 12 months
Analytics Measure platform usage — pages visited, session duration, feature engagement (used to improve rr89) Up to 24 months
Security / Fraud Detection Device fingerprinting and behavioral signals used to detect bots, account takeovers, and suspicious activity Up to 12 months

10.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core rr89 features. Analytics and functional cookies may be disabled without affecting core platform functionality.

11. Your Data Rights

As an rr89 member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request – [Your Username]". We respond to all valid requests within 30 calendar days.

  • Right of Access: You may request a copy of all personal data we hold about you, along with information about how we use it and who we share it with.
  • Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
  • Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that regulatory retention obligations (Section 8) may prevent immediate full deletion.
  • Right to Restriction of Processing: You may request that we temporarily halt processing of your data — for example, while you contest its accuracy or while a complaint is under review.
  • Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
  • Right to Object: You may object to processing based on our legitimate interests at any time. You may also object to receiving direct marketing communications, with immediate effect.
  • Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal date.

12. Minors & Age Restriction

rr89 operates a strict 21+ age policy. Our services are intended exclusively for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21. If we discover that an account has been registered by a person under the age of 21, we will immediately suspend and close that account, void all bets, forfeit all balances, and delete the associated personal data (subject to any mandatory regulatory retention requirements).

If you believe a person under 21 has registered an account on rr89, please notify us immediately at [email protected]. We take all such reports seriously and investigate them promptly. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.

13. International Data Transfers

rr89 operates as an internationally licensed gaming platform. As a result, your personal data may be processed in countries other than Indonesia — specifically in jurisdictions where our servers, game providers, or third-party processors are located.

Whenever we transfer personal data outside Indonesia, we take all reasonable steps to ensure that your data receives an equivalent level of protection as it would within Indonesia. These steps include:

  • Executing data processing agreements with all third-party recipients that impose binding data protection obligations.
  • Transferring data only to jurisdictions or recipients that maintain adequate security standards consistent with internationally recognized privacy frameworks.
  • Applying technical safeguards — including end-to-end encryption — to all cross-border data transmissions.

14. Changes to This Privacy Policy

rr89 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify you by:

  • Sending a notification to your registered email address at least 7 days before the changes take effect.
  • Displaying a prominent notice on the rr89 platform for at least 14 days.
  • Updating the "Last Updated" date at the top of this page.

Your continued use of rr89 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the platform and may request account closure and data deletion as described in Section 11.

15. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way rr89 handles your personal data, please contact our Data Protection team:

  • Email: [email protected] (plain text — not a clickable link)
  • Subject Line: "Privacy Policy Inquiry – [Your Username]"
  • Response Time: We aim to acknowledge all privacy-related inquiries within 48 hours (WIB business hours) and resolve them within 30 calendar days.
  • Live Chat: Available 24/7 on the rr89 platform for general queries. For formal data rights requests, email is the required channel.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or the dispute resolution body specified under rr89's international gaming license.

Acknowledgment: By registering and using rr89, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. You must be at least 21 years of age to use rr89. If you do not agree with this Policy, please discontinue use of the platform immediately.

Still Have Questions?

Our support team is available around the clock to address any concerns about your data, your account privacy, or how rr89 handles your information. You can also review our Terms & Conditions or visit our FAQ for quick answers.

Visit Our FAQ Read Terms & Conditions