Privacy Policy

rk888 ("we", "us", "our") operates the online betting and casino platform accessible at https://rk888.lat (the "Platform"). We are committed to protecting the privacy and security of the personal data belonging to all individuals who interact with rk888, including registered members, visitors, and prospective users.

This Privacy Policy sets out, in clear and plain language, the types of personal data rk888 collects, the purposes for which that data is processed, the legal basis for each processing activity, the circumstances under which data may be shared with third parties, the security measures we apply to safeguard your information, and the rights you hold in relation to your personal data.

This Policy applies to all services offered on the rk888 Platform, including the sportsbook, live casino, slot games, Baccarat rooms, and Bandar Q tables, as well as all customer support interactions, account management activities, and payment processing operations carried out in connection with your rk888 account.

This Privacy Policy should be read alongside the rk888 Terms & Conditions, which govern the overall contractual relationship between you and rk888.

The following definitions apply throughout this Privacy Policy:

rk888 collects only the data that is necessary to provide you with a secure, compliant, and high-quality platform experience. The categories of Personal Data we may collect are outlined below.

rk888 collects Personal Data through several channels, all of which are described transparently below:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotion, you directly provide Personal Data to rk888.
• Automated collection: When you access and browse the rk888 Platform, our servers and analytics tools automatically collect Technical Data about your device, browser, and session activity. This includes data collected via cookies and similar tracking technologies (see Section 8).
• Third-party sources: rk888 may receive Personal Data about you from identity verification service providers, payment processors, fraud detection agencies, and publicly available sources where such collection is necessary to fulfill our legal obligations or to protect the integrity of the Platform.
• Inferred data: rk888 may derive insights about your preferences and betting behavior from patterns in your Gaming & Betting Data. These inferences are used solely to personalize your platform experience and to flag potential responsible gaming concerns — they are never shared externally for commercial profiling purposes.

rk888 uses your Personal Data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or notifying you of the new purpose in accordance with Section 13.

rk888 processes your Personal Data only where a valid legal basis exists for each processing activity. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to enter into and perform the contract between you and rk888, including account registration, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC and anti-money-laundering obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing necessary for rk888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided those interests are not overridden by your rights and interests.
• Consent: Where we send you optional promotional communications or use non-essential cookies, we do so only on the basis of your freely given, informed, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

rk888 does not sell, rent, or commercially trade your Personal Data to any third party. We may share your data only in the specific circumstances set out below, and solely to the extent necessary for the stated purpose:

• Payment processors and banking partners: To facilitate IDR deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers including OVO, DANA, GoPay, ShopeePay, and LinkAja, we share the minimum Financial Data and Identity Data necessary to complete each transaction.
• KYC and identity verification providers: To meet our age and identity verification obligations, we share Identity Data with licensed third-party KYC service providers. These providers are bound by strict confidentiality agreements and may not use your data for any purpose other than verification.
• Fraud prevention and AML agencies: We may share transactional and identity data with fraud screening services and financial intelligence units where we have a legitimate interest or legal obligation to do so in connection with suspected fraud or money laundering activity.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers may have access to Technical Data in the course of providing contracted services to rk888. All such providers operate under data processing agreements that restrict their use of your data to the specific services they deliver.
• Legal and regulatory authorities: rk888 will disclose Personal Data to law enforcement agencies, regulators, or courts when required to do so by a lawful order, court order, or binding regulatory direction. We will notify you of such disclosures where we are legally permitted to do so.

rk888 uses cookies and similar technologies to operate the Platform, maintain your session, remember your preferences, and understand how our services are used. The categories of cookies we use are:

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair core platform functionality including login, deposit, and withdrawal processes. rk888 does not use cookies for third-party advertising networks or behavioral retargeting campaigns on external websites.

rk888 applies a multi-layered information security framework to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and rk888 is protected by 256-bit TLS/SSL encryption. rk888 enforces HTTPS across all Platform endpoints with no unencrypted fallback.
• Encryption at rest: Sensitive Personal Data fields — including identity document numbers, bank account details, and KYC records — are encrypted at rest using industry-standard symmetric encryption.
• Access controls: Access to Personal Data is restricted to rk888 personnel on a strict need-to-know basis. All internal access is logged, audited, and subject to role-based access control policies.
• Two-factor authentication: rk888 supports and strongly recommends two-factor authentication (2FA) for all member accounts to prevent unauthorized access in the event of credential compromise.
• Penetration testing and vulnerability management: The rk888 Platform undergoes regular third-party security assessments, including penetration tests and vulnerability scans, to identify and remediate security weaknesses before they can be exploited.
• Incident response: rk888 maintains a documented data breach response procedure. In the event of a breach that poses a material risk to your rights and freedoms, we will notify affected Members promptly via the email address on their account.

While rk888 takes all reasonable technical and organizational precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying rk888 immediately if you suspect unauthorized access to your account.

rk888 retains your Personal Data only for as long as necessary to fulfill the purposes described in this Policy or to comply with applicable legal, regulatory, or contractual obligations. The retention periods we apply are:

Upon expiry of the applicable retention period, rk888 will securely delete or permanently anonymize your Personal Data using industry-standard data destruction procedures. Where complete deletion is not immediately possible due to technical constraints (for example, data held in backup archives), rk888 will isolate that data from active processing until deletion can be completed.

As an rk888 member, you hold the following rights in relation to your Personal Data. You may exercise any of these rights at any time by contacting our support team via live chat or email:

• Right of access: You have the right to request a copy of the Personal Data rk888 holds about you, together with information about how it is processed. We will respond to access requests within 30 days.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-level data, many fields can be updated directly within your rk888 account dashboard.
• Right to erasure ("right to be forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing and no overriding legitimate interest applies. Note that we may be required to retain certain data for legal or regulatory compliance purposes even after an erasure request.
• Right to restriction of processing: You may ask rk888 to restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is pending.
• Right to data portability: Where processing is based on your consent or contractual necessity, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to the use of your Personal Data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The rk888 Platform is strictly intended for adults aged 21 and over. rk888 does not knowingly collect Personal Data from individuals under the age of 21. If we discover or are notified that an individual under the age of 21 has provided Personal Data and registered an account on rk888, we will:

• Immediately suspend the account pending investigation.
• Delete all Personal Data associated with the underage account as promptly as technically possible.
• Void any wagers placed and return any net deposited funds to the payment source where feasible, less any applicable processing fees charged by third-party payment providers.
• Report the incident internally and, where required by law, notify the relevant authorities.

If you are a parent or guardian and believe that a person under the age of 21 in your care has accessed rk888 or provided Personal Data to us, please contact our support team immediately via live chat so that we can take swift action.

rk888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or the services we offer. When material changes are made, we will notify Members by posting a prominent notice on the rk888 Platform and, where practicable, by sending an email notification to the address registered on the affected account at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the rk888 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with the updated Policy, you must stop using the Platform and contact our support team to request account closure.

We encourage you to review this Privacy Policy periodically so that you remain informed about how rk888 is protecting your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way rk888 handles your Personal Data, please contact us through the following channels:

rk888 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority or seek independent dispute resolution through applicable legal channels.