Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy and any related data protection documentation published by ratu89:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, IP address, device identifier, and financial account information.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means ratu89, the entity that determines the purposes and means of Processing Personal Data collected through the platform.
• "Data Processor" means any third-party entity that Processes Personal Data on behalf of ratu89 in accordance with ratu89's documented instructions.
• "Platform" refers to the online gaming website accessible at https://ratu89.cam and all associated services, features, and content.
• "User" / "Player" / "You" means any individual who accesses, registers, or uses the ratu89 platform.
• "KYC" means Know Your Customer — the mandatory identity verification procedure conducted to confirm a Player's identity, age, and address.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.

2. Data Controller

ratu89 acts as the Data Controller for all Personal Data collected through the platform. As Data Controller, ratu89 is responsible for determining why and how your Personal Data is Processed, and for ensuring that Processing is carried out in compliance with applicable data protection principles.

For all data-related inquiries, requests, and complaints, Players may contact ratu89's data protection point of contact at: [email protected] (plain text — not a clickable link) with the subject line "Privacy Request — [Your Account ID]".

3. Personal Data We Collect

ratu89 collects Personal Data through three primary channels: information you provide directly, information generated automatically through your use of the platform, and information received from authorized third-party service providers.

3.1 Information You Provide Directly

When you register an account, complete KYC verification, make a transaction, or contact our support team, you may provide the following categories of Personal Data:

• Identity Data: Full legal name, date of birth, gender, and nationality as they appear on your government-issued identification (KTP, SIM, or passport)
• Contact Data: Email address, Indonesian mobile phone number, and residential address
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, and deposit/withdrawal records
• Verification Documents: Scanned or photographed copies of government-issued ID, proof of address documents, and payment method verification materials submitted during KYC
• Support Communications: Records of live chat conversations, emails, and any other correspondence you initiate with our support team

3.2 Information Collected Automatically

When you access and use the ratu89 platform, certain technical and behavioral data is collected automatically through our systems and third-party analytics providers:

• Technical Data: IP address, browser type and version, operating system, device type and identifiers, screen resolution, and time zone setting
• Usage Data: Pages visited, features accessed, game sessions initiated, bet amounts, session duration, clickstream data, and search queries within the platform
• Location Data: Approximate geographic location inferred from your IP address (city and country level only — we do not use GPS or precise location tracking)
• Cookie and Tracking Data: Session identifiers, authentication tokens, and preference settings stored via cookies and similar technologies (see Section 7)

3.3 Information From Third Parties

ratu89 may receive Personal Data about you from the following authorized third-party sources:

• Identity Verification Providers: Third-party KYC service providers may supply verification outcomes, risk scores, and document authenticity assessments
• Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.) may share transaction confirmation data and account holder names for deposit and withdrawal matching purposes
• Fraud Prevention Partners: Anti-fraud and AML screening providers may flag accounts associated with known fraudulent patterns or sanctioned individuals
• Game Providers: Licensed game studios (Pragmatic Play, Evolution Gaming, Microgaming, Spribe, Pocket Games Soft, and others) may share session logs and game result data for dispute resolution and RTP auditing purposes

4. How We Use Your Data

ratu89 uses your Personal Data only for defined, legitimate purposes directly related to operating our platform and serving you as a Player. We do not use your data for purposes that are incompatible with those stated at the time of collection.

1. Account Creation and Management: To register your account, verify your identity, maintain your profile, and manage your preferences and settings on the ratu89 platform.
2. Payment Processing: To facilitate deposits and withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to match incoming and outgoing transactions to your account.
3. Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years, confirm your identity, and comply with our anti-money laundering and fraud prevention obligations.
4. Service Delivery: To provide access to sports betting markets (including BRI Liga 1, EPL, Champions League, and other competitions), live casino tables, slot games, and togel (Indonesia's traditional numbers lottery) offerings available on the platform.
5. Customer Support: To respond to your queries, resolve disputes, and process complaints in a timely and efficient manner.
6. Fraud and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, and other prohibited activities that may harm you or other Players.
7. Legal Compliance: To fulfill our obligations under applicable anti-money laundering regulations, international gaming standards, and any lawful requests from competent authorities.
8. Platform Improvement: To analyze usage patterns, identify technical issues, and improve the functionality, content, and user experience of the ratu89 platform.
9. Responsible Gaming: To monitor gaming behavior for signs of problem gambling, enforce self-exclusion requests, apply deposit and loss limits, and send responsible gaming reminders where appropriate.
10. Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and news about new games and features. You may withdraw this consent at any time through your account settings or by contacting support.

5. Legal Basis for Processing

ratu89 processes your Personal Data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and ratu89 — including account registration, payment processing, game provision, and customer support.
• Legal Obligation: Processing is required to comply with applicable anti-money laundering laws, age verification requirements, and regulatory obligations that apply to online gaming operators.
• Legitimate Interests: Processing is necessary for ratu89's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights.
• Consent: For specific processing activities such as direct marketing communications and non-essential cookies, we rely on your freely given and revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

ratu89 does not sell, rent, or otherwise commercially transfer your Personal Data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for each stated purpose:

• Payment Service Providers: Your financial data is shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Your identity documents and personal details may be shared with our licensed KYC verification partners to confirm your identity and age.
• Game Software Providers: Certain session and game data may be shared with our licensed game providers (including Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Pocket Games Soft) for game operation, RTP auditing, and dispute resolution purposes.
• Fraud Prevention and AML Screening Services: Relevant account and transaction data may be shared with anti-fraud and AML compliance tools to detect and prevent financial crime.
• IT Infrastructure and Cloud Service Providers: Our hosting and data storage providers may process your data as Data Processors on our behalf, subject to strict contractual data protection obligations.
• Legal and Regulatory Authorities: We may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required by law or in response to a valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ratu89's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom ratu89 shares Personal Data are required to implement appropriate technical and organizational security measures and to process your data only in accordance with ratu89's documented instructions and applicable data protection laws.

7. Cookies & Tracking Technologies

ratu89 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, maintain your session, remember your preferences, and gather aggregate usage statistics. Cookies are small text files placed on your device by your browser when you visit our platform.

7.1 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings or through the cookie preference center available within the ratu89 platform. Please note that disabling certain cookies may affect the functionality of some platform features. Essential cookies cannot be disabled as they are necessary for the secure operation of your account and session.

Most modern browsers allow you to view, manage, block, and delete cookies through their built-in settings menus. Instructions for managing cookies are available in the help documentation of your specific browser. Clearing cookies will log you out of any active ratu89 session.

7.2 Do Not Track

Some browsers transmit "Do Not Track" (DNT) signals to websites. ratu89 currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how online services should respond to such signals. We will revisit this position as industry standards evolve.

8. Data Security

ratu89 implements a multi-layered approach to data security, combining technical controls, organizational procedures, and ongoing staff training to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction.

• Encryption in Transit: All data transmitted between your browser and ratu89 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all platform pages, including login, registration, KYC submission, and payment flows.
• Encryption at Rest: Sensitive Personal Data stored in our databases — including identity documents, payment details, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data is restricted to authorized ratu89 personnel on a strict need-to-know basis. All staff with data access undergo background screening and are bound by confidentiality agreements.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and continuous security monitoring to identify and respond to threats in real time.
• Penetration Testing: ratu89 conducts periodic independent penetration testing and vulnerability assessments to proactively identify and remediate security weaknesses.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, ratu89 will notify affected Players and relevant authorities within the timeframes required under applicable data protection standards.

9. Data Retention

ratu89 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, and operational obligations. The following general retention guidelines apply:

When your Personal Data is no longer required for its stated purpose and no legal obligation exists to retain it, ratu89 will securely delete or anonymize it so that it can no longer be associated with your identity. Anonymized, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and research purposes.

10. Your Rights

As a Player on the ratu89 platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request — [Your Account ID]". We will respond within 30 days of receiving a valid request.

11. Minors & Age Restriction

The ratu89 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC processes, and we employ automated and manual checks to identify and reject registrations from underage individuals.

If ratu89 discovers that Personal Data has been collected from a person under the age of 21, that account will be immediately suspended, all funds held in the account will be frozen pending investigation, and all associated Personal Data will be deleted or returned as appropriate. Parents or guardians who believe a minor may have created an account on ratu89 are encouraged to contact us immediately at [email protected].

We encourage parents and guardians to use available parental control software to prevent minors from accessing online gaming platforms. ratu89 fully supports responsible parenting efforts to protect young people from exposure to gambling content.

12. International Data Transfers

ratu89 operates internationally and may transfer your Personal Data to servers, service providers, or partner entities located outside of Indonesia. Whenever your data is transferred to a jurisdiction that may not offer the same level of data protection as your home country, ratu89 implements appropriate safeguards to ensure that your data remains protected to an equivalent standard. These safeguards include:

• Contractual clauses that require recipient parties to protect your Personal Data in accordance with applicable data protection standards
• Transfers only to countries or organizations recognized as providing adequate data protection
• Implementation of technical and organizational security measures at all receiving entities

By creating a ratu89 account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data outside of Indonesia where necessary for the provision of our services, subject to the safeguards described above.

13. Third-Party Services

The ratu89 platform integrates with third-party service providers — including game studios, payment processors, and analytics tools — whose software and services operate under their own terms and privacy policies. ratu89 is not responsible for the privacy practices or data handling of these third parties beyond the contractual obligations we impose on them as Data Processors.

ratu89 does not include links to external third-party websites on our platform. All content, tools, and features available through ratu89 are operated either directly by ratu89 or by licensed third-party providers acting under ratu89's data processing agreements. If you contact a payment provider such as BCA, BRI, BNI, Mandiri, OVO, or DANA directly, any Personal Data you share with them is governed by their respective privacy policies.

14. Policy Amendments

ratu89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered Players via email and display a prominent notice on the platform for a minimum of 7 days before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was published. We encourage you to review this Policy periodically. Your continued use of the ratu89 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure by contacting our support team. Account closure requests will be processed in accordance with our Terms & Conditions, available at ratu89.cam/terms-conditions.

15. Contact & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or ratu89's data processing activities, please contact our support team using one of the following channels:

• Email: [email protected] — subject line: "Privacy Request — [Your Account ID]"
• Live Chat: Available 24/7 directly within the ratu89 platform — connect with an Indonesian-speaking support agent at any time
• Business Hours Support: 08:00–22:00 WIB (Western Indonesia Time, UTC+7) for phone-based assistance

ratu89 aims to acknowledge all privacy-related requests within 2 business days and to provide a substantive response within 30 days. For complex requests that require additional investigation, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.

If you are dissatisfied with our response to any privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. We take all complaints seriously and will cooperate fully with any regulatory inquiry.