Privacy Policy

In this Privacy Policy, the following terms carry the meanings assigned to them below. Defined terms may appear in singular or plural form without change of meaning.

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including names, email addresses, phone numbers, IP addresses, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means rvip7, the entity that determines the purposes and means by which Personal Data is processed.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of rvip7 under a contractual data processing agreement.
• "Member" or "You" means any registered account holder on the rvip7 platform.
• "Platform" means the rvip7 website at https://rvip7.pro, including all sub-pages, game interfaces, cashier systems, and any associated mobile-optimized views.
• "Cookies" means small text files placed on your device by the Platform to enable session management, preference storage, and anonymous usage analytics.
• "KYC" means Know Your Customer — the identity and age verification process required before full Platform privileges are granted.

rvip7 is the Data Controller in respect of all Personal Data collected from Members and visitors to the Platform. As Data Controller, rvip7 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently, and that appropriate technical and organizational security measures are maintained at all times.

Where rvip7 engages third-party Data Processors — such as licensed payment service providers, identity verification specialists, and cloud infrastructure operators — those parties process Personal Data solely under rvip7's written instructions and are contractually prohibited from using Member data for their own independent purposes.

rvip7 collects Personal Data across three broad categories. The table below summarizes the data types, the context in which they are collected, and the primary purpose for which each category is processed.

rvip7 does not collect Special Categories of Personal Data (such as racial or ethnic origin, health data, religious beliefs, or political opinions) and does not request or store biometric data beyond what is contained in submitted KYC identity documents.

rvip7 collects Personal Data through the following channels and mechanisms:

• Direct Registration: When you create an rvip7 account, you voluntarily provide identity and contact data via the registration form. This is the primary source of Personal Data for the majority of Members.
• KYC Document Submission: When you submit identity documents to complete account verification, those documents and the data they contain are collected and securely stored for compliance purposes.
• Deposit and Withdrawal Transactions: When you make a deposit via a local Indonesian bank or e-wallet, or request a withdrawal, financial data is collected and logged automatically as part of the transaction record.
• Platform Interaction: Technical and usage data is collected automatically as you navigate the Platform, place bets, play games, and interact with cashier and support features. This data is captured via server logs, session tracking, and first-party analytics tools.
• Customer Support Channels: When you contact us via live chat or email at [email protected], the content of those communications is collected and stored for service delivery and quality assurance purposes.
• Cookies and Similar Technologies: Cookies, local storage, and similar client-side technologies collect technical browsing data automatically when you visit the Platform. See Clause 10 for full details of our Cookie usage.

rvip7 processes your Personal Data only where a lawful basis for doing so exists. The following legal bases apply to the categories of processing we conduct:

• Contractual Necessity: Processing your identity data, financial data, and account activity data is necessary to perform the contract between you and rvip7 — specifically, to operate your account, process deposits and withdrawals in IDR, and deliver gaming services.
• Legal Obligation: Processing KYC verification documents and financial transaction records is necessary to comply with applicable anti-money-laundering, counter-terrorism-financing, and identity verification obligations.
• Legitimate Interests: Processing technical and usage data for fraud detection, platform security, and responsible gaming monitoring is necessary for rvip7's legitimate interest in maintaining a safe and fair platform environment for all Members.
• Consent: Where rvip7 sends you promotional communications about bonuses, new games, or seasonal offers (such as Idul Fitri or Indonesian Independence Day promotions), this processing is based on your explicit opt-in consent, which you may withdraw at any time.

rvip7 uses collected Personal Data for the following specific purposes. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your consent.

• Account Management: Creating and maintaining your rvip7 Member account, processing your login credentials, managing your balance, and communicating account-related updates.
• Payment Processing: Executing deposits and withdrawals via your chosen Indonesian bank or e-wallet, reconciling transaction records, and resolving any payment disputes.
• Identity and Age Verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with our KYC obligations before granting full account privileges.
• Fraud Prevention and Platform Security: Detecting and preventing account takeovers, bonus abuse, multi-account registrations, money laundering, and other forms of fraudulent or prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling behavior, applying self-imposed limits set by Members, and proactively reaching out where our systems flag concerning activity.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining a record of our communications for quality and training purposes.
• Personalization and Service Improvement: Understanding how Members use the Platform to improve game selection, cashier flow, and overall user experience. We use aggregated, anonymized data for this purpose wherever possible.
• Marketing Communications (with consent): Sending you promotional emails or in-Platform notifications about bonuses, tournaments, new game launches, and seasonal promotions where you have opted in to receive such communications.

rvip7 does not sell, rent, or trade your Personal Data to any third party for their own independent commercial purposes. We share Personal Data only in the following limited circumstances:

• Payment Service Providers: We share necessary financial data with licensed payment processors — including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to execute your requested transactions. These providers are bound by their own regulatory obligations and our data processing agreements.
• Identity Verification Providers: During KYC, we share submitted identity documents with certified identity verification partners who process this data on our behalf and are contractually prohibited from using it for any other purpose.
• Game Studio Providers: Technical session data (such as game round IDs and timestamps) may be shared with our licensed game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — for game integrity verification and dispute resolution purposes only.
• Cloud Infrastructure and Security Providers: rvip7 uses enterprise-grade cloud hosting and cybersecurity services. These providers process certain technical data as Data Processors under strict contractual terms.
• Legal and Regulatory Disclosure: We may disclose Personal Data to law enforcement, regulatory authorities, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to protect rvip7's legal rights or prevent imminent harm.

As a globally operated platform serving Indonesian Members, rvip7 may transfer Personal Data to, and process it in, countries outside of Indonesia, including the jurisdiction in which rvip7 is licensed and where its cloud infrastructure is hosted.

Where such international transfers occur, rvip7 ensures that appropriate safeguards are in place to maintain an equivalent level of data protection to that which applies within Indonesia. These safeguards include:

• Contractual clauses in data processing agreements that require recipient parties to maintain data security standards consistent with internationally recognized best practices.
• Transfer only to jurisdictions or service providers that have undergone rvip7's internal data protection assessment and have been approved by our Data Protection team.
• Encryption of Personal Data in transit and at rest, regardless of where processing occurs.

By creating an rvip7 account and submitting your Personal Data, you acknowledge and consent to the international transfer of your data in accordance with the safeguards described in this clause.

rvip7 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guideline:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized aggregated data may be retained indefinitely for statistical and analytical purposes without limitation, as it can no longer identify any individual.

rvip7 uses cookies and similar client-side technologies to provide essential Platform functionality and to improve your experience as a Member. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security tokens, and load-balancing cookies. Without these cookies, you cannot log in or navigate the Platform.
• Functional Cookies: These cookies remember your preferences — such as display language and preferred payment method — so you do not need to re-enter them on each visit.
• Analytics Cookies: rvip7 uses first-party analytics to understand aggregate usage patterns — which games are most visited, where Members encounter friction in the cashier flow, and overall Platform performance. This data is collected anonymously and never used to identify individual Members.
• Security and Fraud-Prevention Cookies: These cookies help us detect bot activity, multiple-account registrations, and other suspicious behaviors by fingerprinting device and browser characteristics. They are strictly necessary for Platform security.

rvip7 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your rvip7 account.

As a Member of rvip7, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request.

• Right of Access: You have the right to request a copy of all Personal Data we hold about you, along with information on how it is processed, the legal basis for processing, how long it is retained, and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. Most basic profile information can be updated directly within your account settings.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing is based. This right is subject to overriding legal retention obligations — for example, financial transaction records that must be kept for regulatory compliance cannot be deleted on request.
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as CSV) and to transmit it to another service provider where technically feasible.
• Right to Restrict Processing: You have the right to request that we restrict processing of your Personal Data — for example, while the accuracy of data is disputed, or while an objection to processing is under consideration.
• Right to Object: You have the right to object to processing of your Personal Data where that processing is based on legitimate interests. You also have an absolute right to opt out of direct marketing communications at any time without providing a reason.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

rvip7 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the rvip7 Platform is encrypted in transit using industry-standard TLS 1.2 or higher. Our SSL certificate is renewed regularly and monitored for validity.
• Encrypted Data Storage: Personal Data and financial records stored on rvip7 servers are encrypted at rest using AES-256 encryption. Database access is restricted to authorized personnel only through role-based access controls.
• Two-Factor Authentication (2FA): rvip7 supports and encourages the use of 2FA on all Member accounts. All internal administrative accounts are required to use 2FA without exception.
• Intrusion Detection and DDoS Protection: Our platform is protected by real-time intrusion detection systems, web application firewalls, and distributed-denial-of-service mitigation services that monitor for and respond to anomalous traffic patterns.
• Regular Security Audits: rvip7 conducts periodic third-party security penetration tests and internal vulnerability assessments. Identified vulnerabilities are remediated under a structured patch management process.
• Staff Data Protection Training: All rvip7 employees and contractors who handle Personal Data undergo mandatory data protection training at onboarding and annually thereafter.

Despite these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to Members' rights and freedoms, rvip7 will notify affected Members without undue delay and will cooperate fully with relevant authorities.

The rvip7 Platform is strictly intended for adults aged 21 years and older. rvip7 does not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and any account found to belong to a person under 21 will be immediately suspended, all Personal Data associated with the account will be deleted, and any Balance will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under the age of 21 has created an rvip7 account, please contact us immediately at [email protected]. We will investigate and take appropriate action, including permanent account closure and deletion of all associated Personal Data, within 72 hours of a verified report.

rvip7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify active Members via the email address registered to their account at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will be revised with each amendment. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated policy.

If any amendment materially reduces your privacy rights and you do not wish to accept the revised policy, you have the right to close your account by contacting our support team. Any Balance in your account at the time of closure will be returned to your registered payment method, subject to applicable KYC and withdrawal verification requirements.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please reach our Data Protection team through the following channels:

• Email: [email protected] — responses within 1 hour during 08:00–24:00 WIB for general support; data rights requests responded to within 30 calendar days.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Our Indonesian-speaking agents can assist with data inquiries in both English and Indonesian.

When submitting a data rights request, please include your registered username and the email address associated with your account so we can verify your identity efficiently and respond to your request without unnecessary delay.