Privacy Policy

1. Definitions

For clarity throughout this document, the following terms carry the meanings set out below:

• "Platform" — the rgo365 website at https://rgo365.cam, including any associated mobile-optimised interfaces and related digital services.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, device identifiers, and financial transaction records.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, transmission, and deletion.
• "Controller" — rgo365, as the entity that determines the purposes and means of processing your Personal Data.
• "Third Party" — any natural or legal person other than you and rgo365, including payment processors, game providers, and analytics services.
• "Cookies" — small text files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.

2. Information We Collect

rgo365 collects personal information through several channels. The specific data we gather depends on how you interact with our platform.

2.1 Information You Provide Directly

• Registration data: full legal name, date of birth, email address, mobile phone number, and residential address (required for Indonesian players to verify age of at least 21 years).
• Identity verification (KYC) documents: government-issued identification such as your KTP (Kartu Tanda Penduduk), passport, or driving licence; proof of address (utility bills, bank statements); and, where applicable, source-of-funds documentation.
• Payment information: bank account details for BCA, BRI, BNI, Mandiri, CIMB Niaga, and other supported institutions; e-wallet account identifiers for OVO, DANA, and GoPay. We do not store full card numbers on our own servers — payments are tokenised through certified payment processors.
• Communications: messages, complaints, and feedback submitted through live chat, email ([email protected]), or any other support channel.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone.
• Usage data: pages visited, features used, game sessions played, bet amounts, session duration, and navigation paths within the Platform.
• Transaction data: deposit and withdrawal history, bonus claims, wagering records, and account balance changes.
• Cookie and tracking data: first-party cookie identifiers, session tokens, and analytics identifiers as described in Section 7 below.

2.3 Information Received from Third Parties

• Identity verification results from KYC service providers engaged to confirm the authenticity of documents you supply.
• Fraud-screening signals from payment processors and anti-money-laundering databases.
• Publicly available information, such as sanctions-list status, used to comply with international regulatory requirements.

3. How We Use Your Information

rgo365 processes your personal data only for legitimate purposes directly linked to operating our platform and fulfilling our obligations to you. The table below summarises the primary processing activities:

4. How We Share Your Information

rgo365 does not sell your personal data. We share information only in the limited circumstances described below and always under appropriate contractual safeguards.

4.1 Service Providers and Processors

We engage trusted third-party companies to assist in operating the Platform. These partners are authorised to use your data only as necessary to provide the specific service contracted, under binding data-processing agreements. Categories of processors include:

• Payment processors facilitating deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay.
• KYC and identity verification service providers.
• Cloud hosting and infrastructure partners whose servers store Platform data.
• Game software providers such as Pragmatic Play, Evolution Gaming, and Microgaming, who receive limited technical session data necessary to operate their games.
• Customer support platform providers who process support communications on our behalf.
• Fraud detection and AML screening services.

4.2 Legal and Regulatory Disclosures

We may disclose your personal data to governmental authorities, regulators, law enforcement agencies, or courts when we are legally required to do so, or when disclosure is necessary to protect rgo365's rights, enforce our Terms & Conditions, or prevent fraud or illegal activity.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of rgo365's business assets, your personal data may be transferred to the relevant third party as part of that transaction. We will provide advance notice of any such transfer and the applicable privacy terms of the acquiring entity.

4.4 Aggregated and Anonymised Data

We may share aggregated, anonymised statistical data (from which no individual can be identified) with business partners and analytics providers for research and service improvement purposes.

5. Data Retention

rgo365 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal retention requirements. Our standard retention schedule is:

• Account and KYC records: retained for the lifetime of your account plus a minimum of five (5) years after closure, as required for AML and regulatory compliance.
• Transaction records: retained for a minimum of five (5) years after the transaction date, in accordance with financial recordkeeping obligations.
• Support communications: retained for three (3) years from the date of the final communication in a thread.
• Usage and analytics data: retained in anonymised form indefinitely; identifiable usage logs are deleted after twenty-four (24) months.
• Marketing consent records: retained until you withdraw consent and for one (1) year thereafter as proof of compliance.

When the applicable retention period expires, rgo365 securely deletes or permanently anonymises your personal data so that it cannot be associated with your identity.

6. Your Privacy Rights

rgo365 respects and actively facilitates the exercise of your rights in relation to your personal data. Depending on applicable law, you may be entitled to the following rights:

6.1 Right of Access

You may request a copy of the personal data we hold about you, including information about the purposes of processing, the categories of data processed, and the recipients to whom data has been disclosed.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or supplement it. Many details can be updated directly through your account dashboard; contact support for data that requires manual amendment.

6.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis exists for processing. Note that certain data may be retained beyond your erasure request where retention is mandated by law (e.g., AML transaction records).

6.4 Right to Restrict Processing

You may request that we restrict processing of your data in specific circumstances — for example, while a correction request is being verified, or where you contest the legal basis for processing.

6.5 Right to Data Portability

Where processing is based on your consent or a contract, and carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format (e.g., CSV or JSON).

6.6 Right to Withdraw Consent

Where rgo365 relies on your consent as the legal basis for processing (such as marketing communications), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6.7 Exercising Your Rights

To exercise any of the rights described above, please contact our support team at [email protected] or via live chat. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing a rights request to prevent unauthorized disclosure or deletion of another person's data.

7. Cookies and Tracking Technologies

rgo365 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and understand how users interact with our services. The following categories of cookies are deployed:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing certain features. rgo365 does not deploy third-party advertising or behavioural targeting cookies.

8. Data Security Measures

rgo365 implements a comprehensive, layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our key security controls include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including payment credentials and KYC documents.
• Multi-factor authentication for all internal staff accounts with access to personal data systems.
• Role-based access controls ensuring that employees can access only the minimum data necessary for their specific responsibilities.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Real-time intrusion detection and monitoring systems that alert our security team to anomalous activity.
• Secure data centres with physical access controls, redundant power supplies, and disaster-recovery capabilities.

9. International Data Transfers

rgo365 operates infrastructure hosted in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Indonesia. We take the following measures to ensure such transfers are conducted lawfully and with adequate protection:

• Transfers occur only to jurisdictions that provide an adequate level of data protection as determined by internationally recognised standards.
• Where an adequacy determination does not exist, we use Standard Contractual Clauses or equivalent contractual safeguards with all receiving parties.
• All international service providers are contractually bound to process your data only in accordance with this Privacy Policy and applicable data protection law.

10. Minors and Age Restrictions

The rgo365 platform is strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and we conduct additional KYC checks to confirm eligibility. If we discover that personal data has been collected from a minor, we will immediately close the associated account and permanently delete all related personal data. Parents or guardians who believe a minor may have accessed rgo365 are encouraged to contact us immediately at [email protected].

11. Third-Party Services and Links

The rgo365 Platform integrates with third-party game providers and payment processors whose services operate under their own independent privacy policies. While we partner exclusively with reputable, vetted providers, rgo365 is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with through our platform. rgo365 does not host third-party advertising networks or permit external trackers from advertising platforms on our Platform.

12. Changes to This Privacy Policy

rgo365 reviews and, where necessary, updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify you by:

• Displaying a prominent notice on the Platform for a minimum of 30 days following the update.
• Sending an email notification to the address registered on your account.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account by contacting our support team.

13. Contact and Data Protection Inquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way rgo365 handles your personal data, please contact us using the details below. We are committed to addressing all privacy-related inquiries promptly and transparently.