RR44 Privacy Policy – Member Data Protection in Indonesia

Rr44 ("We," "Platform") is committed to protecting and respecting the privacy of every individual who interacts with our services. This Privacy Policy is an integral part of Terms and Conditions rr44 and outlines our practices regarding the management of member personal data.

We understand that your trust is the most valuable asset we hold. When you register and use rr44, you entrust us with some of your personal information — and we do not take that trust lightly. Every decision involving our members' data always prioritises the security, privacy, and best interests of the rr44 community.

This policy is written in clear, plain language—not convoluted legal jargon. We believe you have the right to know exactly what happens to your information, and that is precisely what we will explain here.

Rr44 only collects data that is strictly necessary to provide safe, legitimate, and quality services. There is no excessive data collection or collection of data irrelevant to the platform's purpose.

We do not collect sensitive data such as political affiliations, religious beliefs, or health status. Biometric data collection, such as fingerprints, only occurs if you enable the biometric security feature in the rr44 mobile app, and is stored locally on your device.

The data we hold about you comes from several different sources. Transparency about these sources is an important part of rr44's privacy commitment:

• Directly from you – Information you provide when registering, completing your profile, submitting KYC verification, or contacting our support team;
• Automatic Activity – Data collected automatically when you use the platform, such as activity logs, session data, and device information;
• Cookies and similar technologies – Navigation information and preferences stored in your browser or app (see the Cookies section);
• Verified third parties – Data from payment service providers to verify transactions, or from third-party identity verification services we use for the KYC process;
• Public sources – In certain fraud prevention cases, we may review information from publicly available sources.

All data processing at rr44 is carried out on at least one of the following legal bases: performance of a contract with you, legal obligation, legitimate platform interests, or your explicit consent. Data use purposes include:

• Account management and services – Create your account, verify your identity, process transactions, and provide access to all platform features;
• Security and fraud prevention – Monitor suspicious activity, prevent unauthorized access, and comply with anti-money laundering (AML) obligations;
• Important communications – Send transaction notifications, security updates, and important information related to your account;
• Platform enhancement – Analyze usage patterns to improve features, performance, and the overall user experience;
• Personalization – Tailor game recommendations and promotional offers based on your preferences (only with your consent);
• Regulatory compliance – Meet reporting obligations to the relevant regulatory authorities.

Rr44 does not use your data for automated decision-making that significantly impacts your rights without human involvement in the process.

Rr44 does not sell, rent, or exchange your personal data to third parties for commercial purposes. However, in operating the platform, we work with trusted partners who may process some of your data on our behalf:

• Payment providers – Banks, digital wallets (DANA, OVO, GoPay), and payment gateways that process your transactions. They receive only the minimum data necessary to complete the transaction;
• Identity verification services – Third-party KYC providers that help us verify the authenticity of member identity documents;
• Cloud infrastructure provider – Hosting and data storage services operating under strict confidentiality agreements with rr44;
• Regulatory authorities and law enforcement – Where required by law, rr44 will share necessary data with the relevant authorities.

All third-party partners working with rr44 are required to sign data processing agreements ensuring they use your data only for agreed purposes and to security standards equivalent to rr44.

Rr44 applies a layered security approach to ensure your data is protected at every stage—both in transit and at rest. The security layers we implement are as follows:

Rr44 uses cookies and similar tracking technologies to enhance the functionality and user experience of our platform. Cookies are small text files stored on your device when you visit a website.

Types of cookies we use:

• Essential cookies – Required for the platform to function properly. Without these cookies, features such as login and the betting slip will not work. These cookies cannot be disabled;
• Performance cookies – Collect anonymous information about how you use the platform to help us improve site performance;
• Functional cookies – Remember your preferences such as language, time zone, and display settings;
• Analytics cookies – Help us understand platform usage patterns in an aggregated, anonymous way to make better development decisions.

Rr44 does not use third-party advertising cookies. You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect platform functionality.

As the data owner, you have a set of rights you can exercise at any time regarding your personal information at rr44:

To exercise your rights, contact the rr44 privacy team via live chat on the platform. We will respond to your request within a maximum of 30 business days, in line with applicable standards.

Rr44 retains your personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law. General guidelines for our retention periods:

• Active account data – Retained for the duration your account is active and for 5 years after account closure for compliance purposes;
• Financial transaction history – Retained for a minimum of 5 years in accordance with international AML regulatory obligations;
• Support communication logs – Retained for 2 years for service quality improvement and dispute resolution purposes;
• Anonymous analytics data – May be retained longer in a format that cannot be linked back to your identity;
• Non-essential cookie data – Deleted in accordance with the expiry settings stated in the cookie banner.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

This Privacy Policy may be updated periodically to reflect changes in our practices, regulatory updates, or new feature launches at rr44. Any material changes will be communicated through:

• Direct notifications on the rr44 platform homepage;
• A notification email to the address registered on your account;
• Push notifications via the rr44 mobile app (if notifications are enabled).

The "Effective Date" at the top of this page always reflects the latest applicable version of the policy. Minor changes that do not materially affect your rights may be made without specific notice.

Continued use of rr44 services after changes are published constitutes your acceptance of the latest version of this policy. If you do not agree with the changes, please stop using the services and contact us to close your account.