Privacy Policy

1. Information We Collect

rvtoto collects several categories of personal information to provide gaming services, process transactions, comply with legal obligations, and improve your user experience. The types of data we collect include:

1.1 Registration and Account Information

When you create an account with rvtoto, we collect the following mandatory information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years old)
• Residential address (street address, city, province, postal code)
• Email address (for account communications and security notifications)
• Phone number (for account verification and customer support)
• Preferred currency (Indonesian Rupiah - IDR)
• Username and password (chosen by you during registration)

1.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) regulations and our international gaming license requirements, we collect copies of government-issued identification documents including:

• Indonesian National Identity Card (KTP / Kartu Tanda Penduduk)
• Indonesian Passport
• Indonesian Driver's License (SIM / Surat Izin Mengemudi)
• Proof of address documents (utility bills, bank statements, or government correspondence dated within the last 3 months)
• Selfie photographs holding your identification document

1.3 Financial and Transaction Information

To process deposits and withdrawals, we collect payment-related data including:

• Bank account details (bank name, account holder name, account number) for Indonesian banks including BCA, BRI, BNI, and Mandiri
• E-wallet account information (account holder name, registered phone number) for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history (deposit amounts, withdrawal amounts, timestamps, payment method used)
• Payment card details (if applicable - note: card numbers are processed through PCI-DSS compliant third-party gateways and are not stored on rvtoto servers)

1.4 Gaming Activity Data

We automatically collect information about your gaming activity to maintain game integrity, detect fraud, and improve services:

• Bet history (game type, stake amount, outcome, timestamp)
• Game preferences (favorite games, most-played categories)
• Bonus claims and wagering progress
• Session duration and frequency
• Win/loss records

1.5 Technical and Usage Data

When you access rvtoto, our systems automatically collect technical information including:

• IP address (to determine approximate location and detect suspicious access patterns)
• Device type, model, and operating system (desktop, mobile, tablet; Windows, iOS, Android)
• Browser type and version (Chrome, Firefox, Safari, Edge)
• Screen resolution and device language settings
• Referral source (how you found rvtoto - search engine, direct visit, etc.)
• Pages visited, time spent on site, click patterns
• Cookies and similar tracking technologies (see Section 9 below)

1.6 Communications Data

We store records of your interactions with rvtoto including:

• Live chat transcripts with customer support
• Email correspondence
• WhatsApp message history (if you contact us via WhatsApp)
• Support tickets and complaint submissions
• Survey responses and feedback forms

2. How We Use Your Information

rvtoto uses your personal data for the following specific purposes:

2.1 Account Management and Service Provision

• Creating and maintaining your user account
• Authenticating your identity when you log in
• Processing gaming transactions (placing bets, calculating payouts)
• Providing customer support and responding to your inquiries
• Sending account-related notifications (password resets, security alerts, policy updates)

2.2 Financial Transactions

• Processing deposits from your Indonesian bank account or e-wallet
• Executing withdrawal requests to your verified payment method
• Crediting bonuses, cashback, and promotional funds to your account
• Maintaining accurate financial records for accounting and audit purposes

2.3 Legal Compliance and Fraud Prevention

• Verifying your age (21+ requirement) and identity through KYC procedures
• Complying with anti-money laundering (AML) regulations
• Detecting and preventing fraudulent activity, collusion, and bonus abuse
• Identifying duplicate or linked accounts
• Responding to legal requests from law enforcement or regulatory authorities
• Maintaining transaction records as required by our international gaming license

2.4 Responsible Gaming

• Monitoring gaming behavior to identify potential problem gambling patterns
• Enforcing deposit limits, loss limits, and self-exclusion requests
• Providing access to responsible gaming tools and resources

2.5 Marketing and Promotions (With Your Consent)

• Sending promotional emails about new games, bonuses, and special offers
• Delivering personalized recommendations based on your game preferences
• Notifying you of VIP program benefits and exclusive tournaments

Note: You can opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email or by adjusting your communication preferences in your account settings.

2.6 Platform Improvement and Analytics

• Analyzing user behavior to optimize website performance and user experience
• Testing new features and game offerings
• Troubleshooting technical issues and software bugs
• Conducting internal research and statistical analysis

3. Legal Basis for Processing Your Data

Under international data protection frameworks, rvtoto processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is essential to fulfill our agreement with you (providing gaming services, processing transactions)
• Legal Obligation: Processing is required to comply with laws, regulations, and licensing requirements (KYC verification, AML compliance, age verification)
• Legitimate Interests: Processing serves rvtoto's legitimate business interests while respecting your rights (fraud prevention, platform security, service improvement)
• Consent: You have explicitly agreed to processing for specific purposes (marketing communications, optional data collection)

4. How We Protect Your Information

rvtoto employs industry-leading security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

4.1 Encryption

• Data in Transit: All data transmitted between your device and rvtoto's servers is encrypted using 256-bit SSL/TLS (Secure Sockets Layer / Transport Layer Security) encryption, the same standard used by banks and financial institutions.
• Data at Rest: All personal data stored on our servers is encrypted using AES-256 (Advanced Encryption Standard) encryption algorithms.

4.2 Infrastructure Security

• Enterprise-grade firewalls protecting against unauthorized network access
• Intrusion Detection Systems (IDS) monitoring for suspicious activity 24/7
• Regular security audits and penetration testing by independent cybersecurity firms
• Secure data centers with physical access controls and 24/7 surveillance
• Regular software updates and security patches

4.3 Payment Security

• All payment card transactions are processed through PCI-DSS (Payment Card Industry Data Security Standard) Level 1 compliant third-party payment gateways
• rvtoto never stores full credit/debit card numbers, CVV codes, or card PINs on our servers
• Bank account and e-wallet information is stored in encrypted format with restricted access

4.4 Access Controls

• Personal data is accessible only to authorized rvtoto employees who require it to perform their duties
• All staff with data access undergo background checks and sign strict confidentiality agreements
• Two-factor authentication (2FA) required for employee access to sensitive systems
• Detailed access logs maintained for audit purposes

4.5 Data Minimization and Retention

• We collect only the data necessary to provide services and meet legal obligations
• Personal data is retained only for as long as your account is active or as required by law (typically 5-7 years for financial records)
• Upon account closure, non-essential data is securely deleted after the required retention period

5. Who We Share Your Information With

rvtoto does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we do share data with the following categories of third parties under strict contractual obligations to protect your privacy:

5.1 Payment Processors

To process deposits and withdrawals, we share necessary financial information with:

• Indonesian banks (BCA, BRI, BNI, Mandiri) to execute bank transfers
• E-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process e-wallet transactions
• Third-party payment gateway operators (all PCI-DSS compliant)

5.2 Identity Verification Services

To conduct KYC verification, we may share identification documents with third-party identity verification providers who use automated and manual checks to confirm your identity and detect fraudulent documents.

5.3 Game Providers and Software Partners

To deliver gaming content, we share limited technical data (username, bet amounts, game outcomes) with licensed software providers who power our slots, live casino, and sports betting platforms. These providers are contractually prohibited from using your data for any purpose other than delivering game services.

5.4 Customer Support Platforms

We use third-party customer support software (live chat, ticketing systems, CRM platforms) to manage player inquiries. These providers have access to your communication history and account details necessary to assist you.

5.5 Regulatory Authorities

We are legally obligated to share information with our international gaming licensing authority to demonstrate compliance with regulatory requirements. In rare cases, we may also disclose data to law enforcement agencies in response to valid legal requests (court orders, subpoenas).

5.6 Fraud Prevention Services

To protect against fraudulent activity, we share transaction patterns and device fingerprints with specialized fraud detection services that maintain databases of known fraudsters and suspicious activity patterns.

5.7 Analytics and Marketing Platforms

With your consent, we may share anonymized or pseudonymized data with analytics platforms (e.g., Google Analytics) to measure website traffic and user behavior. These platforms do not have access to your personally identifiable information.

Data Protection Agreements: All third parties who receive your personal data are bound by written agreements requiring them to maintain the same level of data protection as rvtoto and to use your data only for the specified purposes.

6. International Data Transfers

rvtoto operates internationally and may store or process your personal data in jurisdictions outside Indonesia, including the country where our international gaming license is issued and where our data centers are located. When we transfer data internationally, we ensure adequate protection through:

• Using data centers and service providers located in jurisdictions with strong data protection laws
• Implementing Standard Contractual Clauses (SCCs) approved by international data protection authorities
• Ensuring all international transfers comply with applicable data protection regulations

7. Your Rights and Choices

As a rvtoto user, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of all personal data we hold about you. To request your data, contact our Data Protection Officer at the email address provided in Section 12 below. We will respond within 30 days.

7.2 Right to Correction

If any personal information we hold is inaccurate or incomplete, you have the right to request corrections. You can update most information directly in your account settings, or contact customer support for assistance.

7.3 Right to Deletion

You may request deletion of your personal data by closing your account. However, we must retain certain data for legal compliance purposes (transaction records, KYC documents) for a period of 5-7 years as required by AML regulations and our gaming license. After this retention period, data is securely deleted.

7.4 Right to Restriction

You can request that we temporarily restrict processing of your data while we investigate a dispute or concern you've raised about how we handle your information.

7.5 Right to Object

You have the right to object to processing of your data for marketing purposes at any time by:

• Clicking "Unsubscribe" in any promotional email
• Adjusting communication preferences in your account settings
• Contacting customer support to opt out of all marketing communications

7.6 Right to Data Portability

You have the right to request your personal data in a structured, machine-readable format (e.g., CSV, JSON) for transfer to another service provider.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

8. Children's Privacy

rvtoto's services are strictly for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and permanently close the account. Parents or guardians who believe their child has provided information to rvtoto should contact us immediately at the email address in Section 12.

9. Cookies and Tracking Technologies

rvtoto uses cookies (small text files stored on your device) and similar technologies to enhance your experience and analyze site usage. Types of cookies we use:

• Essential Cookies: Required for the website to function (login sessions, security tokens). These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use the site (pages visited, time spent). Used to improve site performance.
• Functionality Cookies: Remember your preferences (language, currency, display settings) for a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising (only with your consent).

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect site functionality.

10. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and privacy, rvtoto will notify you and relevant regulatory authorities within 72 hours of becoming aware of the breach. Notification will include details of the breach, data affected, potential consequences, and remedial actions taken.

11. Changes to This Privacy Policy

rvtoto reserves the right to update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email to your registered address and prominently displayed on the website. The "Last Updated" date below reflects the most recent revision. Continued use of rvtoto after changes are posted constitutes acceptance of the updated policy.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer
Email: [email protected]
Subject Line: "Privacy Inquiry - [Your Username]"

We aim to respond to all privacy-related inquiries within 30 days.