Privacy Policy

1 Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "rvp7", "we", "us", "our" — refers to the operator of the Platform at https://rvp7.cam and its affiliated data-processing entities.
• "Platform" — the rvp7 website, mobile-optimised interface, and any application through which rvp7 services are accessed.
• "Player", "you", "your" — any individual who accesses the Platform, creates an Account, or interacts with rvp7 in any capacity.
• "Personal Data" — any information that identifies or could reasonably identify a natural person, either alone or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" — the entity that determines the purposes and means of Processing. rvp7 is the Controller of all Personal Data processed under this Policy.
• "Processor" — a third party that processes Personal Data on rvp7's behalf, subject to a written data-processing agreement.
• "KYC" — Know Your Customer; the identity and age-verification process required for account withdrawals and regulatory compliance.
• "Cookies" — small text files placed on your device by the Platform for the purposes of session management, analytics, and personalisation.

2 Scope & Application

This Privacy Policy applies to all Personal Data collected by rvp7 in connection with the operation of the Platform, including data collected during account registration, KYC verification, deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications.

This Policy applies to all Players who access the Platform, with particular relevance to players resident in Indonesia — including but not limited to those located in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Makassar, Yogyakarta, and Palembang. By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your Personal Data as described herein.

3 Personal Data We Collect

rvp7 collects the following categories of Personal Data, depending on how you interact with the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless expressly required for responsible gaming assessments and with your explicit consent.

4 How We Collect Personal Data

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you at the time of account registration, during the KYC verification process, when making deposits or withdrawals, or when communicating with our support team. You are under no obligation to provide this data, but failure to do so may prevent you from using certain features of the Platform.

4.2 Automatically via the Platform

When you access and use the Platform, we automatically collect Technical Data via server logs, Cookies, and similar tracking technologies. This includes your IP address, session data, and device information. See Clause 9 for full details of our Cookie practices.

4.3 From Third Parties

We may receive Personal Data about you from the following third-party sources:

• Identity verification and KYC service providers who cross-reference your submitted documents against official databases.
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, etc.) who confirm transaction details.
• Fraud detection and anti-money-laundering (AML) screening services that flag risk indicators associated with your Account.
• Analytics providers who aggregate anonymised usage data to help us improve Platform performance.

5 Purposes of Processing

rvp7 processes your Personal Data for the following specific, documented purposes:

• Account Management: To create, maintain, and administer your Account, including authentication and security monitoring.
• Transaction Processing: To process deposits and withdrawals via Indonesian bank transfers and e-wallets, and to maintain accurate financial records.
• Identity Verification: To confirm your identity, age (21+), and residential status in connection with our KYC obligations.
• Legal Compliance: To comply with applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and data protection laws.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeover, collusion, and bonus abuse on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services .
• Responsible Gaming: To monitor gameplay patterns, identify potential problem gambling behaviour, and administer responsible gaming tools including deposit limits, session timers, and self-exclusion.
• Platform Improvement: To analyse aggregated usage data, conduct A/B testing, and enhance the performance, security, and user experience of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications and subject to your right to withdraw consent at any time.

6 Legal Basis for Processing

rvp7 relies on the following legal bases to process your Personal Data, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between rvp7 and you — including account management, transaction processing, and customer support — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal Obligation: Processing carried out to comply with applicable legal requirements — including KYC, AML screening, and record-keeping obligations — is based on rvp7's legal obligations under applicable international gaming and financial regulations.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics is carried out on the basis of rvp7's legitimate interests in maintaining a safe, fair, and commercially viable platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and the placement of non-essential cookies is carried out solely on the basis of your freely given, specific, and informed consent, which you may withdraw at any time without penalty.

7 Third-Party Disclosure

7.1 Service Providers

rvp7 shares Personal Data with carefully selected third-party service providers who act as Processors on our behalf. These providers are contractually prohibited from using your data for any purpose other than the specific service they provide to rvp7. Categories of Processor include:

• Identity verification and KYC providers.
• Payment gateway and banking partners (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja).
• Cloud infrastructure and data hosting providers operating under strict data security agreements.
• Customer support software platforms used to manage live chat and email correspondence.
• Fraud detection and AML screening providers.
• Game content studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft) who may process anonymised session data for game integrity purposes.

7.2 Legal Disclosures

rvp7 may disclose your Personal Data to governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to comply with the legal obligation, and will notify you of such disclosure to the extent permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rvp7's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the acquiring entity will be required to honour the terms of this Privacy Policy.

8 International Data Transfers

As an internationally operated platform serving players primarily based in Indonesia, rvp7 may transfer your Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, rvp7 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy, including:

• Standard Contractual Clauses (SCCs) approved by internationally recognised data protection authorities.
• Binding Corporate Rules (BCRs) where applicable within rvp7's corporate group.
• Transfer only to jurisdictions that maintain adequate data protection standards as assessed by rvp7's legal and compliance team.

If you wish to obtain details of the specific safeguards applied to any international transfer of your Personal Data, please contact our Data Protection Officer (DPO) using the details in Clause 16.

9 Cookies & Tracking Technologies

9.1 What Cookies We Use

The rvp7 Platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. They enable core features such as session authentication, account security, and shopping cart functionality. These cookies cannot be disabled without impairing the Platform's operation.
• Functional Cookies: Remember your preferences — such as preferred language, display settings, and last-visited game categories — to personalise your experience on return visits.
• Analytical Cookies: Collect anonymised information about how visitors use the Platform (e.g., pages visited, time spent, error messages encountered) to help us improve performance and usability.
• Marketing Cookies: Used, where you have consented, to display relevant promotional content and track the effectiveness of our marketing campaigns. These are placed only on an opt-in basis.

9.2 Managing Cookie Preferences

You may manage your cookie preferences at any time via your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the Platform. Non-essential cookies (functional, analytical, and marketing) are placed only with your consent, which you may withdraw at any time by adjusting your browser settings or contacting our support team.

10 Data Security

rvp7 implements a comprehensive, layered approach to data security designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: All data at rest is encrypted using AES-256. All data in transit between your device and our servers is encrypted using TLS 1.3.
• Access Controls: Personal Data is accessible only to authorised rvp7 personnel and third-party Processors on a documented need-to-know basis, enforced via role-based access controls (RBAC) and multi-factor authentication (MFA).
• Network Security: rvp7's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and regular penetration testing conducted by independent security specialists.
• Incident Response: rvp7 maintains a documented data breach response plan. In the event of a breach affecting your Personal Data, we will notify affected players without undue delay and no later than 72 hours after becoming aware of the breach.
• Provably Fair Certification: Game outcome integrity is independently verified by third-party auditors. This protects both game fairness and the associated transaction data.

While rvp7 takes all reasonable steps to protect your Personal Data, no system of transmission or storage is completely secure. You are responsible for maintaining the security of your Account credentials and should notify rvp7 immediately if you suspect any unauthorised access to your Account.

11 Data Retention

rvp7 retains Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

12 Your Rights Over Your Personal Data

Subject to applicable law and certain limited exceptions, you have the following rights in relation to the Personal Data rvp7 holds about you:

• Right of Access: You may request a copy of all Personal Data rvp7 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. For basic profile information, you can make corrections directly via your Account Settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no overriding legal basis exists for continued processing. Note that this right is subject to rvp7's legal data retention obligations.
• Right to Restriction: You may request that rvp7 restrict the processing of your Personal Data in certain circumstances — for example, while a correction request is being assessed.
• Right to Data Portability: You may request that Personal Data you have provided to rvp7 on the basis of consent or contractual necessity be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data on the basis of legitimate interests, or to direct marketing at any time. You may unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting our support team.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. All requests will be acknowledged within 5 business days and fulfilled within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notice provided to you.

13 Children's Privacy

The rvp7 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from any person under the age of 21. If rvp7 becomes aware that Personal Data has been collected from a person under this age threshold, we will delete that data immediately and close the associated Account without notice.

If you are a parent or guardian and believe that a minor has created an rvp7 Account or provided Personal Data to the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

14 Third-Party Links

The rvp7 Platform may contain references to third-party game studios, payment processors, or partner services. Where such references include links to external websites, rvp7 does not control those websites and is not responsible for their privacy practices. We recommend that you review the privacy policy of any third-party site before providing Personal Data to that site.

This Privacy Policy applies solely to the rvp7 Platform at https://rvp7.cam and does not extend to any third-party website, application, or service accessed via a link from the Platform.

15 Amendments to This Policy

rvp7 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that affect your rights or the way we use your Personal Data — will be communicated to you by email at least 7 days before taking effect. Non-material changes (such as typographical corrections, updated contact details, or clarifications that do not alter data practices) may be published without advance notice and will take effect immediately upon publication.

The date at the top of this Policy indicates when it was last reviewed and updated. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with any amendment, you must cease using the Platform and request Account closure in accordance with the rvp7 Terms & Conditions.

16 Contact & Data Protection Officer

rvp7 has appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Policy and all applicable data protection obligations. If you have any questions, concerns, or requests relating to this Policy or the processing of your Personal Data, please contact the DPO using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Protection" in your subject line for prioritised handling.
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week (WIB — Western Indonesia Time, UTC+7).

All privacy-related communications must be submitted in English or Indonesian. Please include your registered Account username and the nature of your request in all correspondence to ensure efficient handling by our Data Protection team.