Privacy Policy — rgm365

1. Overview & Controller Identity

rgm365 operates the online gaming platform accessible at https://rgm365.cam and acts as the data controller in respect of all personal data collected from Players who register and use the Platform. As data controller, rgm365 determines the purposes for which personal data is processed and the manner in which that processing takes place.

This Policy is designed to give you clear, transparent information about our data practices in a format that is straightforward to navigate. We take data protection seriously — not merely as a compliance obligation, but as a foundational element of the trust that Indonesian players place in the rgm365 platform. Every personal data decision we make is assessed against the twin standards of necessity and proportionality: we collect only what we genuinely need, and we use it only for the purposes described in this Policy.

This Policy should be read alongside our Terms & Conditions, which govern the overall contract between you and rgm365, and our Responsible Gaming page, which describes how we use certain data to protect player welfare.

2. Definitions

The following terms are used throughout this Policy and carry the meanings assigned below:

3. Personal Data We Collect

rgm365 collects the following categories of personal data from Players and prospective Players:

3.1 Identity and Contact Data

• Full legal name (as it appears on your Indonesian KTP or passport)
• Date of birth (to verify the 21+ age requirement)
• Residential address in Indonesia (city, province, postal code)
• Email address and Indonesian mobile phone number
• Indonesian National Identity Card (KTP) number and document image
• Passport or driver's license (SIM), when submitted as supplementary KYC documents

3.2 Financial and Transactional Data

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and Bank Permata transfers
• Digital wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal amounts and timestamps (denominated in IDR)
• Transaction reference numbers and payment statuses
• Bet history, game history, and account balance records

3.3 Behavioral and Usage Data

• Login timestamps, session durations, and frequency of play
• Game preferences, bet types, and market selections
• Responsible gaming tool activations (deposit limits, self-exclusion periods)
• Pages visited within the Platform and navigation patterns
• Customer support interactions, complaint records, and live chat transcripts

3.4 Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system version, and browser type
• Device identifiers and mobile advertising IDs
• Cookie data and session tokens
• Referral source (how you arrived at the Platform)

4. How Personal Data Is Collected

4.1 Directly from You

The majorit y of personal data we hold is provided directly by you during account registration, KYC verification, deposit and withdrawal requests, and when you contact customer support. You actively choose to provide this data by completing registration forms, uploading identity documents, and initiating financial transactions.

4.2 Automatically Through Platform Use

When you access the Platform, certain technical data is collected automatically through cookies, server logs, and device APIs. This includes your IP address, device identifiers, and navigation patterns. Automatic collection enables core Platform functionality such as maintaining your logged-in session and detecting fraudulent activity.

4.3 From Third-Party Service Providers

rgm365 receives personal data from payment processors (confirmation of deposit sources, verification of bank account ownership), from KYC verification providers (validation of identity documents against government databases), and from fraud-prevention services (scoring of transaction risk, detection of duplicate accounts). We receive only the data outputs necessary to complete verification and risk assessment — third parties do not have access to your full rgm365 account data.

5. Purposes for Which We Process Personal Data

rgm365 processes your personal data for the following purposes:

5.1 Account Management and Service Delivery

• Creating and maintaining your Player Account
• Authenticating your identity when you log in
• Processing deposits, withdrawals, and bet settlements in IDR
• Delivering customer support via live chat, email, and WhatsApp
• Enforcing account limits, bonus terms, and Platform rules

5.2 Legal and Regulatory Compliance

• Verifying you are at least 21 years of age
• Conducting Know Your Customer (KYC) checks as required by international anti-money-laundering frameworks
• Monitoring transactions for suspicious activity and reporting to relevant authorities where legally required
• Responding to lawful requests from regulators, law enforcement, and courts
• Maintaining records for the statutory retention period following account closure

5.3 Fraud Prevention and Platform Security

• Detecting and blocking multiple accounts created by the same individual
• Identifying collusion, bonus abuse, and arbitrage strategies
• Protecting against unauthorized access to Player Accounts
• Investigating disputes, chargebacks, and payment reversals

5.4 Responsible Gaming and Player Protection

• Applying deposit limits, loss limits, and session time restrictions you have set
• Enforcing self-exclusion periods and cooling-off requests
• Analyzing play patterns to identify signs of problem gambling behavior
• Communicating responsible gaming tools and support resources

5.5 Marketing and Product Improvement (Where Consented)

• Sending promotional emails about bonus offers, new games, and platform features (you may opt out at any time)
• Analyzing usage patterns to improve user experience and platform performance
• Personalizing game recommendations based on your preferences

6. Legal Basis for Processing

rgm365 relies on the following legal grounds for processing your personal data:

7. Who We Share Personal Data With

rgm365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only with the following categories of recipients, and only to the extent necessary:

7.1 Payment Service Providers

Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and digital wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data required to process your deposits and withdrawals: your account holder name, account number, transaction amount, and reference ID.

7.2 KYC and Identity Verification Providers

Third-party identity verification services receive copies of your KTP, passport, or other submitted documents to validate their authenticity against government databases and detect fraudulent documents. These providers operate under strict data protection contracts and do not retain your documents beyond the verification process.

7.3 Fraud Prevention and Security Services

Anti-fraud platforms receive transaction data, device fingerprints, and IP addresses to generate risk scores and flag suspicious patterns. These systems help us protect both your account and the broader Player community from unauthorized access and financial crime.

7.4 Cloud Hosting and IT Infrastructure Providers

rgm365 uses secure cloud infrastructure to store Player data. Our hosting providers have physical and technical access to servers but are contractually prohibited from accessing personal data except for the limited purpose of maintaining server uptime and security.

7.5 Legal and Regulatory Authorities

Where required by law, court order, or regulatory directive, rgm365 will disclose personal data to law enforcement agencies, financial intelligence units, licensing authorities, and other government bodies. We may also disclose data to protect the legal rights of rgm365, to enforce the Terms & Conditions, or to prevent imminent harm to persons or property.

8. How Long We Retain Personal Data

rgm365 retains personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with legal, regulatory, and contractual obligations:

• Active accounts: Personal data is retained throughout the period your Player Account remains active.
• Closed accounts: Following voluntary account closure or termination by rgm365, we retain identity data, transaction records, and KYC documents for a minimum of 5 years to meet anti-money-laundering record-keeping requirements and to defend potential legal claims.
• Marketing data: If you opt out of marketing communications, we retain your email address on a suppression list indefinitely to ensure we do not inadvertently contact you again.
• Responsible gaming data: Self-exclusion records are retained permanently to honor your exclusion across any future account re-registration attempts.
• Technical logs: Server logs, IP addresses, and device identifiers are typically retained for 90 days, except where longer retention is required for fraud investigation or legal proceedings.

At the conclusion of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer identify you.

9. How We Protect Your Personal Data

rgm365 implements comprehensive technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or damage:

9.1 Technical Controls

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard 256-bit SSL certificates.
• Database Encryption: Personal data at rest is stored in encrypted databases with access limited to authorized personnel only.
• Firewall Protection: Multi-layered firewalls and intrusion detection systems monitor network traffic for malicious activity.
• Secure Authentication: Player Accounts are protected by strong password requirements and optional two-factor authentication (2FA).

9.2 Organizational Controls

• Access Restrictions: rgm365 staff access personal data on a need-to-know basis only, with role-based permissions enforced through identity and access management systems.
• Regular Audits: Security configurations, access logs, and data processing activities are audited quarterly by internal compliance teams and annually by external security assessors.
• Staff Training: All employees with access to personal data undergo mandatory data protection and cybersecurity training upon hiring and annually thereafter.
• Incident Response Plan: A documented data breach response protocol ensures rapid detection, containment, and notification in the event of a security incident.

10. Cookies and Tracking Technologies

The rgm365 platform uses cookies and similar tracking technologies to enhance user experience, maintain session state, and analyze platform performance.

10.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit the Platform. They allow the Platform to recognize your device on subsequent visits and remember your preferences.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for core functionality such as maintaining your logged-in session, processing transactions, and enforcing security policies. These cannot be disabled without breaking the Platform.
• Performance Cookies: Collect anonymous aggregate data on how Players navigate the Platform, which pages are visited most frequently, and where errors occur. This data helps us optimize performance.
• Functional Cookies: Remember your language preference, display settings, and game filters to provide a personalized experience across sessions.
• Advertising Cookies: Track your interactions with promotional content to measure campaign effectiveness. These are used sparingly and only where you have consented.

10.3 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block all cookies, accept only first-party cookies, or delete cookies after each session. Note that disabling strictly necessary cookies will prevent you from using core Platform features such as account login and betting.

11. Your Data Protection Rights

As a Player, you hold the following rights in relation to your personal data:

How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of verifying your identity. Identity verification is required to prevent unauthorized disclosure of personal data to third parties.

12. Protection of Minors

The rgm365 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21, and registration by minors is expressly prohibited under our Terms & Conditions.

If we become aware that a Player Account has been registered by a person under 21 years of age, we will immediately suspend the account, void all bets and bonuses, return deposited funds to the source payment method where possible, and delete the associated personal data. Parents and guardians who believe their child has registered an account on rgm365 should contact us immediately at [email protected] so we can take corrective action.

13. International Data Transfers

rgm365 primarily operates within the Indonesia region, but certain service providers we rely on (cloud hosting, KYC verification, fraud detection) may be located in jurisdictions outside Indonesia. Where personal data is transferred internationally, we ensure that:

• The recipient jurisdiction provides an adequate level of data protection as recognized by international frameworks, OR
• We have implemented appropriate safeguards such as Standard Contractual Clauses, binding corporate rules, or other legally recognized transfer mechanisms, AND
• Data is encrypted in transit and subject to the same security standards described in Section 9 of this Policy.

You have the right to request details of the safeguards we use for international transfers by contacting our Data Protection Officer.

14. Third-Party Websites and Services

The rgm365 platform may contain links to third-party websites, payment processors, or social media platforms for convenience (such as links to bank login portals during deposit flows). This Privacy Policy applies only to personal data collected by rgm365 through the Platform at https://rgm365.cam.

We are not responsible for the privacy practices of third-party websites or services, even where you access them through a link on our Platform. We encourage you to review the privacy policies of any third-party site you visit. Providing personal data to a third party through their own website or application is governed by that third party's privacy policy, not this one.

15. Amendments to This Privacy Policy

rgm365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to Players via email to the registered address and by prominent notice on the Platform homepage.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, please contact us to request account closure before the changes take effect.

We encourage all Players to review this Privacy Policy periodically to stay informed about how we protect your personal data.

16. Contact Information & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer using the details below:

We are committed to resolving privacy concerns promptly and transparently. If you believe rgm365 has not adequately addressed your concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.