Privacy Policy — ro66 Platform

1. Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

• "ro66", "We", "Us", or "Our" — the ro66 online betting platform, its operators, and affiliated entities responsible for processing personal data.
• "User", "You", or "Your" — any individual who registers an account, visits the ro66 website, or otherwise interacts with the ro66 platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, email address, mobile number, date of birth, residential address, and payment account details.
• "Sensitive Data" — a subset of personal data that warrants heightened protection, including identity document copies, financial records, and any health-related information voluntarily disclosed for responsible gaming purposes.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" — ro66, which determines the purposes and means of processing your personal data.
• "Third Party" — any individual or entity outside of ro66 that receives or otherwise has access to personal data, including payment processors, game providers, and compliance service partners.
• "KYC" — Know Your Customer identity verification process required to confirm User age, identity, and residential address.

2. Scope & Applicability

This Privacy Policy applies to all personal data collected by ro66 through the following channels:

• The ro66 website (ro66.cam) and all associated subdomains;
• The ro66 mobile application (where applicable);
• Any communication between You and ro66 via email, live chat, WhatsApp, or other supported channels;
• The account registration, KYC verification, and deposit/withdrawal processes;
• Promotional activities, surveys, and voluntary feedback submissions.

This Policy applies to all Users, including visitors who have not registered an account but whose browsing data may be collected via cookies and analytics tools. By using the ro66 platform in any capacity, you acknowledge and accept the data practices described in this Policy.

3. Data We Collect

ro66 collects personal data in several categories depending on Your interaction with the platform. The following table summarises the categories of data collected and specific examples within each category:

3.1 Data We Do Not Collect

ro66 does not collect full payment card numbers, CVV codes, or any biometric data beyond identity document photographs submitted for KYC. We do not request sensitive data such as religious affiliation, political views, or medical history except where voluntarily disclosed in the context of a responsible gaming consultation.

4. How Data Is Collected

ro66 collects personal data through the following mechanisms:

4.1 Direct Collection

• Account Registration: You provide name, date of birth, email, mobile number, and residential address when creating Your ro66 account.
• KYC Verification: You upload identity documents (KTP, passport, driver's license) and a selfie for age and identity verification.
• Deposits & Withdrawals: Payment method details (bank account or e-wallet) are collected to process financial transactions.
• Support Interactions: Information you share via live chat, email, or WhatsApp when contacting the ro66 support team.
• Promotions & Surveys: Optional information you provide when participating in ro66 promotions, loyalty programs, or satisfaction surveys.

4.2 Automatic Collection

• Cookies & Tracking Technologies: ro66 uses first-party cookies and session tracking to maintain login state, remember preferences, and analyze platform usage patterns.
• Server Logs: Our servers automatically record IP addresses, browser user agents, referral URLs, and page request timestamps for security and operational monitoring.
• Device Fingerprinting: For fraud detection and multi-account prevention, ro66 may collect device identifiers, screen resolution, installed fonts, and other non-personally-identifying technical attributes.

4.3 Third-Party Sources

In limited circumstances, ro66 may receive data about You from trusted third-party sources, including payment processors confirming transaction status, and fraud prevention services providing risk scoring signals. We do not purchase personal data from data brokers.

5. Purpose of Data Processing

ro66 processes your personal data only for clearly defined and legitimate purposes. The following table maps each data category to its processing purpose:

6. Legal Basis for Processing

ro66 processes personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfill the contract between You and ro66 — including account management, payment processing, and customer support.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and fraud reporting duties.
• Legitimate Interests: Processing carried out for ro66's legitimate business interests where these are not overridden by Your privacy rights — including fraud prevention, platform security, and service analytics.
• Consent: Processing based on Your freely given, specific, and informed consent — including marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting prior processing.

7. Data Sharing & Third Parties

ro66 does not sell or rent your personal data. We share data only where strictly necessary and with appropriate safeguards in place. The categories of third parties who may receive your data are described below:

7.1 Payment Processors

To process deposits and withdrawals, ro66 shares relevant financial and identity data with payment service providers including local Indonesian bank transfer facilitators and e-wallet operators such as OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers are contractually bound to process data solely for payment purposes.

7.2 Game Providers

Licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) receive a minimal dataset — typically an anonymized or pseudonymized player token — necessary to serve game content and record wager outcomes. Full identity data is not shared with game providers.

7.3 KYC & Fraud Prevention Services

ro66 works with third-party identity verification and fraud detection partners. These partners may receive copies of identity documents and behavioral signals to perform automated verification checks and risk scoring. All such partners operate under strict data processing agreements.

7.4 Legal & Regulatory Authorities

ro66 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to third parties.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving ro66, personal data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

8. International Data Transfers

ro66 is an internationally-oriented platform and some of your personal data may be processed by servers or third-party partners located outside Indonesia. Where such international transfers occur, ro66 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses that impose obligations equivalent to those in this Privacy Policy;
• Transfers only to countries or entities that provide an adequate level of data protection as assessed by ro66's compliance team;
• Encryption of data in transit and at rest, regardless of the jurisdiction in which data is processed.

By using the ro66 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Indonesia. ro66 takes all reasonable steps to ensure your data receives equivalent protection wherever it is processed.

9. Data Retention

ro66 retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual.

10. Data Security

ro66 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our security practices include:

• 256-Bit SSL/TLS Encryption: All data in transit between your browser or app and ro66 servers is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive fields including passwords (hashed), payment account numbers, and KYC document files are encrypted at rest using AES-256 encryption.
• Access Controls: Personal data access is strictly role-based. Only authorized personnel with a documented business need can access identifiable user data. All access events are logged and regularly audited.
• Intrusion Detection Systems: ro66 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Two-Factor Authentication: ro66 supports and strongly recommends enabling two-factor authentication (2FA) on your account to prevent unauthorized access.
• Regular Security Audits: ro66 conducts periodic independent security assessments and penetration tests to identify and remediate vulnerabilities.

11. Cookies & Tracking Technologies

ro66 uses cookies and similar tracking technologies to operate the platform, analyze usage patterns, and deliver a personalized experience. The following categories of cookies are used:

11.1 Strictly Necessary Cookies

These cookies are essential for the ro66 platform to function. They maintain your login session, remember your language preferences, and prevent cross-site request forgery attacks. These cookies cannot be disabled without breaking core platform functionality.

11.2 Performance & Analytics Cookies

These cookies collect anonymized data about how users interact with the ro66 platform — including pages visited, features used, and session duration. This data is used to identify usability issues and improve the overall platform experience. Analytics data is aggregated and does not identify individual users.

11.3 Functional Cookies

These cookies remember your preferences, such as display settings and notification preferences, to provide a more personalized experience when you return to the platform.

11.4 Security & Fraud Detection Cookies

ro66 uses device fingerprinting and session tokens for fraud detection and multi-account prevention purposes. These are treated as strictly necessary for platform security.

11.5 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the ro66 platform. Strictly necessary and security cookies cannot be disabled while using the platform. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

12. Your Privacy Rights

As a ro66 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data ro66 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You can update most account information directly through your ro66 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note that data subject to legal retention obligations (e.g., AML records, self-exclusion history) cannot be deleted.
• Right to Restriction of Processing: You have the right to request that we restrict processing of your personal data in certain circumstances, such as while a dispute about accuracy is resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

13. Minors & Age Policy

The ro66 platform is strictly intended for adults aged 21 years or older. ro66 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step during account registration and KYC review.

If ro66 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account and permanently delete all related personal data from our systems, with the exception of records required for legal compliance purposes (such as evidence of the underage access event itself).

If you are a parent or guardian and believe that your minor child has created a ro66 account, please contact our support team immediately at [email protected] so we can take prompt action.

14. Changes to This Privacy Policy

ro66 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your rights or how we process your data — will be communicated to you via email to your registered address and/or a prominent notice on the ro66 platform at least 7 days before the changes take effect.

Non-material changes (such as minor formatting updates, clarifications, or corrections of typographical errors) may be made without prior notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the ro66 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must cease using the platform and may request account closure.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or ro66's data processing practices, please reach out through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via your ro66 account dashboard
• Subject Line for Privacy Matters: "Privacy Policy Enquiry" or "Privacy Rights Request"

For privacy rights requests, please include your full name, registered email address, and a description of the request so that we can process it efficiently. We aim to respond to all privacy-related enquiries within 30 calendar days. Complex requests may take up to 60 days; we will notify you if an extension is required.

Our customer support team is staffed by native Indonesian-speaking agents available during peak hours (08:00–22:00 WIB) and English-speaking agents around the clock. Email responses are typically provided within 4–12 hours on business days.