Privacy Policy — r6789

r6789 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the r6789 platform at r6789.cam (the "Platform"). This Privacy Policy describes our practices concerning the collection, storage, use, disclosure, and protection of personal data in connection with the Platform and all services offered thereon.

This Privacy Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team. By accessing the Platform or submitting personal data to us, you confirm that you have read and understood this Privacy Policy and you consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of a conflict between this Policy and any other document, this Privacy Policy governs with respect to the handling of personal data.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person — including name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
"Processing"	Any operation performed on Personal Data, whether automated or manual, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
"Data Subject"	The natural person to whom Personal Data relates — in the context of this Policy, typically a registered player or Platform visitor.
"Data Controller"	r6789, which determines the purposes and means of processing Personal Data collected through the Platform.
"Third Party"	Any natural or legal person, public authority, agency, or body other than r6789 and the Data Subject.
"KYC"	Know Your Customer — the identity and address verification process applied to all registered accounts, including document collection, facial verification, and payment method confirmation.
"Cookie"	A small text file placed on a user's device by the Platform server for session management, security, or analytical purposes.
"Platform"	The r6789 website at r6789.cam and all related sub-domains, mobile interfaces, and associated services.

r6789 collects Personal Data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party identity and payment verification services. The categories of Personal Data we collect are as follows:

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification
• Date of birth
• Indonesian residential address
• Valid email address
• Indonesian mobile phone number
• Username and hashed account password
• Preferred currency (Indonesian Rupiah / IDR)

3.2 Identity Verification (KYC) Data

• Scans or photographs of government-issued identity documents (KTP, passport, or SIM)
• Proof-of-address documents (utility bills, bank statements) issued within the last three months
• Selfie photographs taken while holding the identity document
• Bank account details, ATM card photographs, or e-wallet account screenshots used to verify payment method ownership

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Bank account numbers and names associated with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, or Bank Danamon transfers
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Bonus and promotional credit histories
• Bet placement records, game session logs, and wagering history

3.4 Technical & Device Data

• IP address and geolocation data derived from IP
• Device type, operating system, and browser type and version
• Session timestamps, page-view logs, and click-path data
• Cookie identifiers and session tokens

3.5 Communications Data

• Records of live-chat conversations with our support team
• Email correspondence submitted to [email protected]
• Responsible gaming self-assessment responses and tool activation logs

r6789 processes your Personal Data only for specific, explicit, and legitimate purposes. We do not process Personal Data in any manner incompatible with the purposes for which it was collected. Our primary processing purposes are as follows:

• Account Management: To register, maintain, and administer your account, verify your identity during KYC, and provide access to the Platform's features.
• Transaction Processing: To facilitate deposits and withdrawals through local bank transfer and e-wallet channels, and to maintain accurate financial records of all account activity in Indonesian Rupiah (IDR).
• Regulatory Compliance: To meet our obligations under applicable anti-money-laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) requirements, including record-keeping and reporting duties.
• Responsible Gaming: To monitor account activity for indicators of problem gambling behaviour and to implement self-exclusion, deposit limits, cool-off periods, and other responsible gaming measures requested by the player or triggered by our automated monitoring systems.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, multi-accounting, and other prohibited activities defined in our Terms & Conditions.
• Customer Support: To respond to enquiries, resolve disputes, and maintain records of communications sufficient to provide continuity of support.
• Platform Improvement: To analyse aggregate usage patterns, diagnose technical issues, and improve the performance, reliability, and user experience of the Platform. This analysis is conducted on anonymised or pseudonymised data wherever practicable.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with the Platform or our services.

r6789 does not use Personal Data for automated profiling that produces legal effects concerning you, and we do not use your data to serve third-party advertisements or retargeting campaigns.

Each category of Personal Data processing carried out by r6789 rests on one or more of the following legal bases:

1. Performance of a Contract: Processing that is necessary to provide the services you have requested — including account registration, KYC verification, deposit and withdrawal processing, and bet settlement — is carried out because it is required to fulfil the contractual relationship established when you accept our Terms & Conditions.
2. Legal Obligation: Certain processing activities — including identity verification, transaction record-keeping, and reporting to relevant authorities — are required by applicable law and cannot be avoided or waived by either party.
3. Legitimate Interests: Processing for fraud prevention, security monitoring, platform performance analysis, and support record-keeping is carried out on the basis of r6789's legitimate interest in operating a secure, compliant, and commercially viable platform. We conduct a balancing test before relying on this basis and will not process your data where your rights override our interests.
4. Consent: Where r6789 relies on your consent for a specific processing activity — for example, sending you promotional communications about new bonuses or platform features — you have the right to withdraw that consent at any time by contacting our support team or adjusting your account notification preferences.

r6789 does not sell, rent, or trade your Personal Data to any third party. We may, however, share your Personal Data with the following categories of recipients where necessary and proportionate:

• KYC and Identity Verification Providers: Third-party identity verification services that assist us in confirming the authenticity of documents and performing facial biometric checks as part of the KYC process. These providers process data exclusively on our instruction and under contractual data-protection obligations.
• Payment Processing Partners: Banks and e-wallet providers — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja — receive the minimum account and transaction data necessary to execute your requested deposit or withdrawal. These institutions operate under their own regulatory frameworks and privacy policies.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe receive session and bet data required to deliver and settle game outcomes. No unnecessary personal identifiers are passed beyond what the game delivery infrastructure technically requires.
• Regulatory and Law Enforcement Authorities: r6789 may disclose Personal Data to competent authorities in response to a valid legal order, court subpoena, or regulatory demand. We will, to the extent legally permissible, notify you of such a disclosure.
• Professional Advisers: Lawyers, accountants, and auditors acting as service providers may access Personal Data on a strictly need-to-know basis under confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or a material part of r6789's assets, Personal Data held by r6789 may be transferred to the successor entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

The Platform uses cookies and similar tracking technologies to enable core functionality, maintain session security, and gather anonymised performance analytics. We do not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts.

The categories of cookies used on the Platform are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, store your account language preference, and protect against cross-site request forgery (CSRF). The Platform cannot operate without these cookies and they cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors use the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used exclusively to improve Platform performance. No personally identifiable information is included in analytics reports.
• Functional Cookies: These cookies remember your preferences — such as your preferred deposit method or notification settings — so you do not have to re-enter them on each visit. They do not track your activity across third-party websites.

Most browsers allow you to refuse or delete cookies through their settings menus. Please note that disabling strictly necessary cookies will prevent you from logging in to the Platform. Disabling performance or functional cookies will not prevent access but may degrade your user experience.

r6789 does not use browser fingerprinting, canvas fingerprinting, or any other privacy-invasive tracking method beyond the cookie categories described above.

r6789 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Data Category	Retention Period
Account registration data	Duration of the account plus 5 years after account closure
KYC identity documents	5 years from the date of submission or account closure, whichever is later
Financial transaction records	7 years from transaction date, in line with standard AML record-keeping requirements
Bet and game session logs	5 years from the date of the relevant session
Customer support communications	3 years from the date of the last message in a conversation thread
Responsible gaming tool activation logs	Duration of the account plus 5 years after account closure
Technical/device logs (IP, session data)	90 days from collection, unless retained as part of a fraud or security investigation
Marketing consent records	Until consent is withdrawn, plus 3 years thereafter as proof of consent history

Once the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

r6789 implements a layered security architecture designed to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include, but are not limited to:

• Encryption: All Personal Data is encrypted at rest using AES-256 and in transit using TLS 1.3. KYC documents are stored in an isolated, air-gapped vault with additional access controls separate from the main application database.
• Access Controls: Access to Personal Data is granted on a strict need-to-know basis. Employees and contractors with access to sensitive data undergo background screening and are bound by contractual confidentiality obligations. Access logs are maintained and reviewed regularly.
• Network Security: The Platform infrastructure is protected by Web Application Firewalls (WAF), intrusion detection systems, and DDoS mitigation services. All server environments are isolated within private network segments.
• Vulnerability Management: r6789 conducts regular vulnerability assessments and penetration tests of its Platform and infrastructure. Critical findings are remediated within defined SLA windows.
• Incident Response: r6789 maintains a documented data breach response plan. In the event of a breach that poses a high risk to affected individuals, we will notify impacted users and relevant authorities within the timeframes required by applicable law.
• Staff Training: All r6789 personnel with access to Personal Data undergo periodic data-protection and security awareness training.

While r6789 takes every reasonable precaution to safeguard your Personal Data, no internet-based service can guarantee absolute security. You are responsible for keeping your account password confidential and for logging out of the Platform when using shared or public devices.

As a Data Subject, you hold the following rights with respect to the Personal Data r6789 processes about you. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

r6789 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive. We reserve the right to request proof of identity before fulfilling any data rights request to prevent unauthorised disclosure of your Personal Data to a third party.

The Platform is strictly intended for adults aged 21 and above. r6789 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. All accounts are subject to mandatory age verification as part of the KYC process, and any account found to belong to an individual under the age of 21 will be immediately closed, all associated funds will be forfeited, and the Personal Data of the minor will be securely deleted as soon as the investigation is complete.

Parents and guardians who believe that a minor in their care has registered an account with r6789 or submitted Personal Data to the Platform are encouraged to contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

r6789 operates globally and may process or store Personal Data on servers located outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide a level of data protection comparable to the standards applied in Indonesia, r6789 will implement appropriate safeguards to ensure that your Personal Data remains protected to the same standard as it is within Indonesia.

Such safeguards may include contractual clauses that require the recipient to protect the Personal Data to the same standard as r6789, or reliance on the recipient's participation in a recognised international data-protection compliance framework. By using the Platform, you acknowledge that your Personal Data may be transferred to, and processed in, countries outside Indonesia for the purposes described in this Privacy Policy.

If you have questions about the safeguards applied to any specific international transfer of your Personal Data, please contact us at [email protected].

r6789 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will publish the revised Policy on this page and update the "Last Updated" date at the top of the document. Where changes are significant, we will endeavour to provide additional notice — such as a notification on the Platform or an email to your registered address — at least seven (7) days before the revised Policy takes effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the Platform and contact us to close your account and arrange the return of any Real Money Funds balance.

We encourage you to review this Privacy Policy periodically. The most current version is always available at r6789.cam/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or the way r6789 handles your Personal Data, please contact our Data Protection team using the details below. We take all privacy enquiries seriously and will respond within the timeframes set out in Section 10.

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 on the Platform, staffed by native Indonesian-speaking agents who can assist with privacy questions in both English and Bahasa Indonesia.
• Response Time: General privacy enquiries are acknowledged within 5 business days and resolved within 30 calendar days. Urgent security concerns — such as suspected unauthorised access to your account — are escalated immediately.