Privacy Policy

1. Introduction and Scope

At rsn8, we are deeply committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains in detail how we collect, use, store, share, and protect the personal data you provide when registering an Account, using our gaming Services, or interacting with our Website at https://rsn8.cam.

This Privacy Policy applies to all Users of rsn8 Services, including residents of Indonesia who access our online casino games, sports betting markets, live dealer tables, and togel (lottery) draws. By creating an Account or using any rsn8 Services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

rsn8 operates under international data protection standards aligned with General Data Protection Regulation (GDPR) principles, ensuring your personal information is handled with the highest level of security and transparency. We process personal data lawfully, fairly, and transparently, and only collect information necessary to provide and improve our Services.

2. Data Controller

rsn8 acts as the Data Controller for all personal information collected through our Website and Services. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.

For questions, concerns, or requests related to your personal data, please contact our Data Protection Officer at the contact details provided in Section 14 of this Privacy Policy.

3. Information We Collect

rsn8 collects several categories of personal information to operate our gaming platform, comply with legal obligations, prevent fraud, and enhance your User experience. The types of data we collect include:

3.1 Information You Provide Directly

• Account Registration Data: When you create an rsn8 Account, you provide personal details including your full legal name (as it appears on your Indonesian National ID / KTP), date of birth, email address, mobile phone number, residential address within Indonesia, preferred username, and password.
• Identity Verification Documents: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, we collect copies of government-issued identification documents such as your KTP (Indonesian National ID), Indonesian Passport, or Indonesian Driver's License. We also collect proof of address documents (utility bills, bank statements) and selfie photographs for identity verification purposes.
• Payment Information: When making deposits or withdrawals, we collect payment details including bank account information (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay account details), and transaction histories. Credit card information, if used, is processed by third-party PCI-DSS compliant payment processors—we do not store full credit card numbers on our servers.
• Communication Data: Records of your communications with our customer support team via live chat, email, WhatsApp, or phone, including support tickets, complaints, feedback, and any attachments you send.
• Marketing Preferences: Your consent choices regarding promotional emails, SMS notifications, and marketing communications.

3.2 Information Collected Automatically

• Gaming Activity Data: Comprehensive records of your gameplay including games played, bet amounts, win/loss records, bonus participation, wagering progress, game round IDs, timestamps, and session durations. This data is essential for dispute resolution, game integrity, and responsible gaming monitoring.
• Transaction History: Complete logs of all financial transactions including deposits, withdrawals, bonus credits, adjustments, fees, timestamps, amounts, payment methods, and transaction statuses.
• Device and Technical Information: Data about the devices and browsers you use to access rsn8, including IP address, device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version (Chrome, Safari, Firefox), screen resolution, language settings, and unique device identifiers.
• Geolocation Data: We use geolocation technology to verify that you are physically located within Indonesia when accessing our Services, as required by our operating license. This includes IP address geolocation and, with your permission, GPS coordinates from mobile devices.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to recognize your device, remember your preferences, analyze Website traffic, personalize content, detect fraud, and improve platform performance. See Section 11 for detailed information about our cookie practices.
• Website Usage Data: Analytics data showing how you interact with our Website, including pages visited, links clicked, time spent on pages, navigation paths, search queries, referring websites, and exit pages.

3.3 Information from Third Parties

• Payment Processors: We receive transaction confirmation data from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay) when you make deposits or withdrawals.
• Identity Verification Services: We may use third-party identity verification services to authenticate your documents and detect fraudulent registrations.
• Game Providers: Game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) may share gameplay data, game round results, and technical logs necessary for dispute resolution.
• Fraud Prevention Services: We use third-party fraud detection and prevention tools that may provide risk scores, device fingerprints, and behavioral analysis to protect both rsn8 and legitimate Users from fraudulent activity.

4. How We Use Your Information

rsn8 processes your personal data for the following legitimate purposes:

4.1 Service Delivery and Account Management

• Create, maintain, and authenticate your User Account
• Process deposits, withdrawals, and other financial transactions
• Enable gameplay across casino games, sports betting, and lottery draws
• Track bonus eligibility, wagering requirements, and promotional participation
• Provide customer support and respond to inquiries or complaints
• Send transactional communications (account confirmations, withdrawal notifications, security alerts)

4.2 Legal Compliance and Security

• Verify your identity, age (21+ requirement), and residency status to comply with Indonesian and international gaming regulations
• Conduct KYC (Know Your Customer) and AML (Anti-Money Laundering) checks as required by law
• Detect, prevent, and investigate fraud, money laundering, bonus abuse, account takeovers, and other illegal activities
• Enforce our Terms and Conditions and resolve disputes or rule violations
• Comply with court orders, legal processes, government requests, and regulatory audits
• Maintain audit trails and transaction records as required by gaming authorities

4.3 Platform Improvement and Analytics

• Analyze Website usage patterns to improve navigation, performance, and User experience
• Conduct A/B testing to optimize features and interfaces
• Generate anonymized statistical reports on platform performance and User behavior trends
• Develop new features, games, and Services based on User preferences
• Monitor system performance, uptime, and technical errors

4.4 Marketing and Communications (With Your Consent)

• Send promotional emails about bonuses, tournaments, new games, and special offers
• Deliver SMS notifications about time-sensitive promotions or account activity
• Personalize marketing content based on your gaming preferences and history
• Invite you to participate in surveys, feedback requests, or loyalty programs

Note: You can opt out of marketing communications at any time by clicking "unsubscribe" in emails, adjusting your Account preferences, or contacting support. Opting out does not affect transactional communications necessary for Service delivery.

4.5 Responsible Gaming and Player Protection

• Monitor gameplay patterns to identify potential problem gambling behaviors
• Enforce deposit limits, loss limits, and session time restrictions you set
• Process self-exclusion requests and prevent excluded Users from re-registering
• Provide reality check reminders and responsible gaming tool access
• Share information with responsible gaming organizations when you request support

5. Legal Basis for Processing (GDPR Alignment)

Under GDPR-aligned principles, rsn8 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and rsn8 (i.e., providing gaming Services, processing payments, managing your Account)
• Legal Obligation: Processing is required to comply with Indonesian and international laws, including KYC/AML regulations, age verification, tax reporting, and gaming license requirements
• Legitimate Interests: Processing is necessary for rsn8's legitimate business interests, including fraud prevention, security, platform improvement, and analytics, provided these interests do not override your fundamental rights and freedoms
• Consent: For marketing communications, cookies (non-essential), and optional data sharing, we process data based on your explicit consent, which you may withdraw at any time

6. Data Sharing and Disclosure

rsn8 does not sell your personal information to third parties. However, we may share your data with trusted partners and service providers in the following circumstances:

6.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency payment gateways process your financial transactions securely
• Game Providers: Licensed game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe) receive minimal data necessary to enable gameplay and provide game services
• Identity Verification Services: Third-party KYC/AML providers authenticate your documents and screen for sanctions lists or politically exposed persons (PEP)
• Cloud Hosting Providers: Secure cloud infrastructure providers host our databases and servers with encryption and access controls
• Customer Support Tools: Live chat platforms, ticketing systems, and communication tools process support interactions
• Marketing Platforms: Email service providers and SMS gateways deliver promotional communications (only with your consent)
• Analytics Services: Web analytics tools (Google Analytics or similar) help us understand Website usage through anonymized or pseudonymized data

All service providers are bound by strict data protection agreements and are prohibited from using your data for their own purposes.

6.2 Legal and Regulatory Disclosures

rsn8 may disclose your personal information to government authorities, regulatory bodies, law enforcement agencies, or courts when:

• Required by law, court order, subpoena, or other legal process
• Necessary to comply with gaming license obligations or regulatory audits
• Requested by tax authorities for reporting purposes
• Needed to investigate or prevent illegal activities, fraud, or security threats
• Required to protect rsn8's legal rights, property, or safety, or that of our Users

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor. We will notify you via email or prominent Website notice before your data is transferred and becomes subject to a different privacy policy.

7. International Data Transfers

rsn8 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When transferring data internationally, we ensure adequate protections are in place through:

• Standard Contractual Clauses (SCCs) approved by data protection authorities
• Binding Corporate Rules for intra-group transfers
• Ensuring recipients are located in countries deemed to have adequate data protection standards
• Obtaining your explicit consent where required by law

All international transfers comply with Indonesian data protection regulations and international standards such as GDPR.

8. Data Retention

rsn8 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

After the applicable retention period expires, we securely delete or anonymize your personal data. Anonymized data (data that cannot identify you) may be retained indefinitely for statistical analysis and research purposes.

9. Data Security

rsn8 implements industry-leading technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

9.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (stored in databases) is encrypted using AES-256 encryption
• Firewalls and Intrusion Detection: Multi-layer firewall systems and real-time intrusion detection/prevention systems (IDS/IPS) monitor and block unauthorized access attempts
• Secure Authentication: Passwords are hashed using bcrypt or Argon2 algorithms. Two-Factor Authentication (2FA) is available for enhanced Account security
• DDoS Protection: Distributed Denial of Service (DDoS) mitigation systems protect against cyberattacks
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments annually
• Patch Management: Software systems are regularly updated with the latest security patches

9.2 Organizational Security Measures

• Access Controls: Personal data access is restricted on a need-to-know basis using role-based access controls (RBAC). Employee access is logged and audited
• Employee Training: All staff undergo regular data protection and security awareness training
• Confidentiality Agreements: Employees and contractors sign strict confidentiality and data protection agreements
• Incident Response Plan: We maintain a comprehensive data breach response plan to minimize impact and notify affected Users within 72 hours if required by law
• Physical Security: Data centers employ 24/7 surveillance, biometric access controls, and environmental protections

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You acknowledge and accept the inherent security risks of online transactions. Please notify us immediately at [email protected] if you suspect any unauthorized access to your Account.

10. Your Privacy Rights

Under data protection laws, you have the following rights regarding your personal information:

10.1 Right to Access

You have the right to request a copy of the personal data rsn8 holds about you. We will provide this information in a structured, commonly used, machine-readable format (e.g., CSV, PDF) within 30 days of your request.

10.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update most information directly through your Account settings. For other corrections, contact our support team.

10.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances, such as when: the data is no longer necessary for the purposes it was collected; you withdraw consent (where consent was the legal basis); you object to processing and there are no overriding legitimate grounds; the data was unlawfully processed. Note that we may retain certain data where legally required (e.g., transaction records for tax compliance, self-exclusion records for player protection).

10.4 Right to Restriction of Processing

You can request that we limit how we use your data in specific situations, such as when you contest the accuracy of data or object to processing. During the restriction period, we will store the data but not actively process it except with your consent or for legal claims.

10.5 Right to Data Portability

You have the right to receive your personal data in a portable format and request its transfer to another service provider where technically feasible.

10.6 Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. Once you object to marketing, we will immediately cease such communications (except transactional messages necessary for Service delivery).

10.7 Right to Withdraw Consent

Where we process data based on consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

10.8 Right to Lodge a Complaint

If you believe rsn8 has violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction or with our licensing authority.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will verify your identity and respond within 30 days. There is no fee for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive.

11. Cookies and Tracking Technologies

rsn8 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your User experience, analyze Website performance, personalize content, and detect fraud.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for Website functionality, including session management, authentication, security, and load balancing. These cannot be disabled without severely impairing Service usability
• Performance and Analytics Cookies: Collect anonymized data about how visitors use our Website (page views, bounce rates, error messages) to improve performance and User experience
• Functional Cookies: Remember your preferences (language, currency, game filters) and settings to provide a personalized experience
• Marketing and Advertising Cookies: Track your browsing behavior to deliver relevant advertisements and measure campaign effectiveness (only with your consent)

11.2 Managing Cookies

You can control cookie preferences through: your browser settings (most browsers allow you to block or delete cookies); our cookie consent banner displayed on first visit; your Account privacy settings. Note that disabling essential cookies may prevent you from using certain features of rsn8 Services.

12. Children's Privacy

rsn8 Services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. If we discover that a minor has provided personal data, we will immediately delete the information, close the Account, void all transactions, and forfeit any deposits as required by law. Parents or guardians who believe a minor has accessed rsn8 should contact us immediately at [email protected].

13. Changes to This Privacy Policy

rsn8 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or Service offerings. Material changes will be communicated via email to your registered address and through a prominent notice on our Website at least 30 days before taking effect. Your continued use of rsn8 Services after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this page regularly to stay informed about how we protect your privacy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how rsn8 handles your personal information, please contact us:

• Data Protection Officer Email: [email protected]
• Subject Line for Privacy Inquiries: "Privacy Policy Question" or "Data Rights Request"
• Expected Response Time: Within 48 hours for initial acknowledgment; full response within 30 days

For urgent security concerns or suspected data breaches affecting your Account, contact us immediately via live chat or email with the subject line "URGENT: Security Issue."