ri889 Privacy Policy

1 Introduction

ri889 ("we", "us", "our") operates the online casino and sportsbook platform accessible at ri889.app. As the data controller for personal information collected through this platform, ri889 takes its obligations under applicable data protection law seriously. This Privacy Policy sets out, in clear and accessible language, the full scope of our data practices — from the moment you first visit ri889.app through the entire lifecycle of your membership.

This Policy applies to all data collected via the ri889 website, mobile browser interface, live chat systems, email correspondence, and any other channel through which you interact with ri889 as a prospective or registered Member. It does not govern the data practices of third-party game studios or payment processors, each of which operates under its own privacy framework — though we have taken reasonable steps to ensure our partners maintain standards consistent with our own.

If you have any questions about this Policy or about how ri889 handles your personal data, please contact our Data Protection team using the details provided in Section 16 of this Policy.

2 Definitions

• "Personal Data" — any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, by reference to identifiers such as a name, identification number, location data, or online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, ri889 is the data controller.
• "Data Processor" — a third party that processes personal data on behalf of ri889, strictly in accordance with ri889's written instructions.
• "Member" — any individual who has registered a verified account on the ri889 platform.
• "KYC Data" — identity and address verification documents submitted by a Member as part of the Know Your Customer verification process, including national identity cards (KTP), passports, driver's licenses, and supporting address documentation.
• "Cookies" — small text files placed on your device by our web server to facilitate session management, preference storage, analytics, and fraud prevention.
• "Sensitive Data" — a subset of personal data warranting heightened protection, including information about a person's health, financial circumstances, or identity document details.

3 Data We Collect

ri889 collects personal data in the categories described in the table below. We collect only the minimum data necessary for each stated purpose and do not collect data speculatively or without a defined operational need.

ri889 does not collect biometric data, precise geolocation data, or social media profile data as part of standard account operations.

4 How We Collect Data

ri889 collects personal data through the following channels:

• Direct Registration: Information you provide when creating your ri889 account, including your name, date of birth, email address, and city of residence.
• KYC Submission: Identity and address documents you upload in response to a verification request from our compliance team.
• Deposits & Withdrawals: Payment details captured when you initiate a deposit or withdrawal via local bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Platform Interaction: Gaming activity, session data, and clickstream data generated automatically as you navigate and play on ri889.app.
• Support Channels: Information you provide voluntarily when contacting us via live chat or email, including any attachments or screenshots shared in the course of resolving a support request.
• Cookies & Tracking Technologies: Technical data collected automatically via cookies, web beacons, and server logs each time you visit ri889.app — see Section 8 for full details.
• Third-Party Verification Providers: Identity verification data returned to ri889 by licensed KYC service providers following document and database checks conducted on our behalf.

5 Lawful Basis for Processing

ri889 processes your personal data only where a valid lawful basis exists. The primary bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Member agreement — including account creation, deposit and withdrawal processing, game delivery, and support provision.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, age verification obligations, record-keeping requirements, and law enforcement requests.
• Legitimate Interests: Processing necessary for ri889's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud detection, platform security, responsible gaming monitoring, and service improvement analytics. We conduct a balancing assessment before relying on this basis.
• Consent: Processing of your personal data for direct marketing communications (promotional offers, seasonal bonuses) where you have given explicit opt-in consent. You may withdraw this consent at any time by contacting support or updating your account preferences.

Where ri889 relies on consent as its lawful basis, withdrawal of consent will not affect the lawfulness of any processing conducted prior to the withdrawal, nor will it affect processing conducted on a different lawful basis.

6 How We Use Your Data

ri889 uses your personal data strictly for the purposes for which it was collected. Specifically, we use your data to:

• Create, verify, and manage your ri889 Member account throughout its lifecycle.
• Process deposits and withdrawals via Indonesian Rupiah (IDR) payment methods and maintain accurate financial records.
• Deliver live casino games, sports betting markets, slots, and all other gaming services available on the platform.
• Apply and manage promotional bonuses, including welcome bonuses, reload offers, and seasonal promotions tied to events such as Idul Fitri and Indonesian Independence Day.
• Conduct KYC identity verification and AML transaction monitoring in accordance with our compliance obligations.
• Monitor gaming activity for signs of problem gambling and proactively offer responsible gaming tools where appropriate — see our Responsible Gaming page for details.
• Detect, investigate, and prevent fraudulent activity, account abuse, collusion, and money laundering.
• Respond to your support enquiries, complaints, and formal disputes through live chat and email.
• Send transactional communications essential to your account, including deposit confirmations, withdrawal status updates, and security alerts. These communications are not marketing and cannot be opted out of while your account is active.
• Send promotional communications — including offers, bonuses, and seasonal promotions relevant to Indonesian players — where you have provided consent to receive such communications.
• Analyze aggregated, anonymized platform usage data to improve the ri889 product, identify technical issues, and optimize the user experience.
• Comply with applicable law, regulatory requirements, and lawful requests from competent authorities.

ri889 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where explicitly required by our AML compliance obligations and subject to appropriate safeguards.

7 Data Sharing & Disclosure

ri889 does not sell, rent, or trade your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: Bank transfer and e-wallet providers (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the financial data necessary to execute your deposit and withdrawal instructions. These providers operate under their own privacy policies and are bound by applicable Indonesian financial services regulations.
• KYC Verification Providers: Licensed identity and document verification services that process your KYC documents on ri889's behalf, under strict data processing agreements that prohibit secondary use of your data.
• Game Studio Partners: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe receive a session token and technical identifiers necessary to authenticate your access to their games. They do not receive your full identity profile.
• Fraud Prevention & Security Services: Third-party services used to detect bot activity, account takeover attempts, and financial fraud, operating under confidentiality obligations to ri889.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or lawful regulatory direction, ri889 will disclose personal data to competent authorities. Where legally permitted, ri889 will notify the affected Member of such a disclosure.
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations and engage with personal data only to the extent strictly necessary to provide their services to ri889.

8 Cookies & Tracking

ri889.app uses cookies and similar tracking technologies to ensure the platform functions correctly, to protect account security, and to understand how Members use the site. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to operate — including session authentication, CSRF protection, and load-balancing cookies. These cannot be disabled without disrupting core platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred display options, and session timeout choices to improve your experience across visits.
• Analytics Cookies: Collect anonymized data about how pages are accessed and which features are used, enabling ri889 to identify technical problems and improve the platform. This data is processed in aggregate and cannot be used to identify individual users.
• Security & Fraud Prevention Cookies: Assist ri889 in identifying unusual login patterns, detecting bot activity, and flagging account access from new or unexpected devices and IP addresses.

ri889 does not use advertising or behavioral tracking cookies, and we do not embed third-party advertising tags or retargeting pixels on ri889.app. You may control cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from logging into your account or using core platform features.

9 Data Retention

ri889 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your membership and for a period of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory direction.
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, consistent with standard financial services record-keeping requirements.
• Support Communications: Retained for two (2) years from the date of the final communication in each support thread, to facilitate dispute resolution and quality assurance.
• Technical & Log Data: Retained for ninety (90) days in active systems, after which it is archived for a further twelve (12) months before permanent deletion.
• Marketing Preference Records: Opt-in and opt-out records are retained indefinitely to demonstrate compliance with consent obligations, even after the underlying promotional data has been deleted.

When personal data is no longer required, ri889 deletes it securely or anonymizes it irreversibly so that it can no longer be associated with any individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

10 Security Measures

ri889 employs a layered set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and ri889's servers is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive data, including KYC documents and financial records, is encrypted in storage using AES-256 encryption.
• Access Controls: Personal data is accessible only to ri889 staff who have a verified business need. Access is governed by role-based permissions and reviewed on a regular cycle.
• Multi-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication for all personnel.
• Intrusion Detection & Monitoring: ri889's infrastructure is monitored around the clock for anomalous activity. Automated alerts are triggered for suspicious login attempts, unusual data access patterns, and potential exfiltration activity.
• Vendor Security Assessments: Third-party data processors are assessed against ri889's security standards before engagement and are contractually obligated to maintain equivalent safeguards.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to Members' rights and freedoms, ri889 will notify affected Members promptly and take all reasonable steps to contain and remediate the incident.

You also play a role in securing your account. Never share your ri889 password with anyone, use a strong and unique password, and contact our support team immediately if you suspect your account has been accessed without your authorization.

11 Your Rights

As a Member of ri889, you have the following rights in respect of your personal data. To exercise any of these rights, contact our Data Protection team using the details in Section 16. We will respond to all valid requests within thirty (30) days of receipt.

• Right of Access: You may request a copy of all personal data ri889 holds about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold. For basic contact data, you may update this directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations (such as AML record-keeping requirements, which may prevent immediate erasure of certain financial records).
• Right to Restriction: You may request that ri889 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a structured, machine-readable export of the personal data you have provided to ri889.
• Right to Object: You may object to processing based on legitimate interests. ri889 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — primarily promotional communications — you may withdraw that consent at any time with immediate effect, without affecting any processing conducted prior to withdrawal.

12 Minors & Age Verification

The ri889 platform is strictly restricted to individuals who are 21 years of age or older. ri889 does not knowingly collect personal data from anyone under the age of 21. Age verification is conducted as a mandatory step during the account registration process and may be supplemented by document-based KYC verification.

If ri889 becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation during registration or any other means — we will immediately suspend the relevant account, delete all personal data associated with that account to the extent permitted by law, and refund any net deposits in accordance with our Terms & Conditions.

Parents and guardians who believe a minor may have accessed or registered on the ri889 platform are encouraged to contact our support team immediately at the email address provided in Section 16.

13 International Data Transfers

ri889 operates an international platform and some of our data processors — including game studio partners, KYC verification providers, and infrastructure service providers — may be located outside Indonesia. Where personal data is transferred to processors in other jurisdictions, ri889 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections afforded under this Policy.

Safeguards for international transfers may include contractual clauses in our data processing agreements that impose equivalent data protection obligations on recipient processors, as well as technical measures such as encryption of data in transit and at rest. ri889 does not transfer personal data to jurisdictions that we assess as presenting an unacceptable risk of unauthorized access or misuse.

14 Third-Party Services

The ri889 platform integrates services provided by third-party game studios and payment processors. While ri889 selects its partners carefully and requires them to maintain high data security standards, each third-party provider operates under its own privacy policy and data practices. ri889 is not responsible for the data practices of third-party providers beyond the scope of their contractual obligations to ri889.

ri889.app does not contain links to external websites. However, if you navigate away from ri889.app to a third-party website by any means, we encourage you to review that site's privacy policy before providing any personal information.

15 Policy Amendments

ri889 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Members by email to the address on record and by publishing a prominent notice on ri889.app, at least seven (7) days before the revised Policy takes effect.

The effective date at the top of this Policy will be updated with each revision. Your continued use of the ri889 platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the amended Policy, you must cease using the platform and contact our support team to close your account.

We maintain an archive of prior versions of this Policy; if you require a copy of a previous version, please contact our Data Protection team.

16 Contact & Complaints

For any questions, concerns, or rights requests relating to this Privacy Policy or to ri889's handling of your personal data, please contact our Data Protection team through the following channels:

• Email: support@ri889.app — please use the subject line "Privacy Request" or "Data Rights Request" so your message is routed to the appropriate team. We aim to acknowledge all privacy-related enquiries within 24 hours during standard WIB (UTC+7) business hours.
• Live Chat: Available 24/7 on ri889.app — our Indonesian-speaking agents can raise a privacy request on your behalf and escalate it to the Data Protection team directly.

When submitting a rights request or privacy complaint, please include your Member ID, the email address registered to your account, and a clear description of your request or concern. Providing complete information at the outset will help us respond more quickly and accurately.

If you are not satisfied with ri889's response to a privacy complaint, you have the right to escalate the matter to a relevant data protection authority or to seek redress through applicable legal channels. ri889 cooperates fully with legitimate regulatory inquiries.