Last Updated: January 1, 2026  |  Effective Date: January 1, 2026  |  Version: 3.0

Table of Contents

1. Definitions

Throughout this Privacy Policy the following terms carry the meanings set out below:

2. Data We Collect

rans66 collects only the personal data that is necessary to provide a secure, functional, and legally compliant gaming service. We do not collect data beyond what is described below, and we never sell your personal data to third parties for marketing purposes.

2.1 Identity & Contact Information

2.2 Financial & Payment Data

2.3 Technical & Device Data

2.4 Communication Records

Sensitive Data

rans66 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health records (beyond responsible gaming self-assessments you voluntarily submit), biometric data, or sexual orientation. If any such data is incidentally included in documents you submit, it will not be processed for any purpose other than identity verification.

3. How We Collect Data

We collect Personal Data through multiple channels to ensure comprehensive service delivery while maintaining the integrity of our platform:

3.1 Directly From You

When you register an account on rans66, complete KYC verification, make deposits or withdrawal requests, contact customer support, or activate responsible gaming tools, you provide data directly to us. All forms on our Platform collect only the fields necessary for the stated purpose.

3.2 Automatically Through Technology

As you navigate the rans66 Platform, our systems automatically collect technical data including your IP address, device fingerprint, browser characteristics, session duration, and in-page behavior. This data is collected via server logs, cookies, and JavaScript-based analytics tools. Such collection is essential for fraud prevention, platform stability, and personalized user experience.

3.3 From Third-Party Sources

We may receive supplementary information about you from trusted third-party sources including identity verification agencies, fraud intelligence networks, and payment processors. This data supplements the information you provide directly and is used exclusively for KYC compliance, fraud prevention, and regulatory reporting obligations.

4. Purposes of Processing

rans66 processes your Personal Data only for specific, legitimate purposes. The table below maps each data category to the purpose for which it is processed:

Data Category Primary Purpose Secondary Purpose
Identity & contact Account creation, KYC verification, 21+ age check Security alerts, service notifications
Financial & payment Deposit and withdrawal processing via BCA, BRI, BNI, OVO, etc. Anti-money laundering (AML) compliance, fraud detection
Technical & device Fraud prevention, session management, platform stability Aggregate analytics, platform improvements
Communication records Customer support resolution Quality assurance, dispute evidence
Betting & game history Responsible gaming monitoring, bonus management Regulatory reporting, audit trails
Cookies & tracking Session continuity, personalisation Aggregate website performance analytics

6. Data Sharing & Disclosure

rans66 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We share data only in the circumstances described below, and only to the extent necessary for each purpose:

6.1 Service Providers

We engage carefully vetted third-party service providers who process data on our behalf under binding data-processing agreements. These include payment gateway operators handling BCA, BRI, Mandiri, and e-wallet transactions; identity verification agencies processing KTP and passport documents; cloud infrastructure providers hosting Platform data; and customer support software vendors. All providers are contractually required to maintain confidentiality and implement appropriate technical security measures.

6.2 Regulatory & Legal Disclosure

We may disclose Personal Data to licensing authorities, law enforcement agencies, courts, or other governmental bodies when required to do so by law, court order, or regulatory directive. Such disclosures are made only to the extent mandated and will be handled with the utmost confidentiality otherwise permitted.

6.3 Fraud Prevention Networks

To protect the Platform and all players from fraudulent activity, we may share limited data (account status, flagged identifiers) with industry fraud prevention and shared exclusion registries. Sharing is restricted to identifiers necessary to verify player status and does not include full financial records.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rans66's assets, Personal Data may be transferred to the successor entity. You will be notified of any such transfer, and the successor will be bound by the terms of this Privacy Policy or a materially equivalent successor policy.

Cross-Border Data Transfers

Some of our service providers operate outside Indonesia. Where Personal Data is transferred internationally, we require recipients to maintain data protection s tandards equivalent to those described in this policy, through contractual safeguards or binding corporate rules.

7. Data Retention

rans66 retains Personal Data only for as long as necessary to fulfill the purposes described in this policy or to comply with applicable legal and regulatory obligations. The following retention periods apply:

Data Category Retention Period Reason
Account registration data Duration of account + 5 years after closure Legal and regulatory compliance
KYC documents 5 years after account closure or last transaction AML regulatory obligation
Financial transaction records 7 years from transaction date Financial reporting and audit requirements
Betting and game history 5 years from each session date Dispute resolution and responsible gaming audits
Customer support records 3 years from interaction date Quality assurance and dispute evidence
Technical/device logs 12 months from collection date Fraud detection and platform security
Cookie and analytics data 13 months from placement Session continuity and aggregate analytics

When Personal Data is no longer required and no legal obligation mandates continued retention, we securely delete or anonymize it so that it can no longer be linked to any identifiable individual. Anonymized aggregate data (such as statistical reporting on platform usage) may be retained indefinitely, as it no longer constitutes Personal Data.

8. Data Security

Protecting your Personal Data against unauthorized access, accidental loss, destruction, and disclosure is a core operational priority at rans66. We implement a layered security architecture that includes both technical and organizational measures appropriate to the sensitivity of the data we hold.

8.1 Technical Measures

8.2 Organizational Measures

Security Incident Notification

In the unlikely event of a data breach that poses a material risk to your rights and freedoms, rans66 will notify affected users within 72 hours of becoming aware of the incident via the email address registered to your account. The notification will describe the nature of the breach, the categories of data affected, and the steps we are taking to mitigate potential harm.

9. Cookies & Tracking Technologies

rans66 uses cookies and similar technologies to operate the Platform effectively, personalize your experience, and gather aggregate usage insights. The following cookie categories are used on our Platform:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They manage your login session, maintain your account balance display, remember language preferences, and ensure security tokens are correctly transmitted with each authenticated request. You cannot opt out of strictly necessary cookies without ceasing to use the Platform.

9.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred game lobby layout, last-visited game category, or preferred payment method displayed at checkout — so that you do not need to re-enter settings on each visit. These cookies do not track activity across other websites.

9.3 Analytics Cookies

We use analytics cookies to understand aggregate Platform usage — which features are most popular, where users encounter navigation difficulties, and how overall engagement changes over time. Analytics data is processed in pseudonymized form; we do not build individual behavioral profiles for advertising purposes. You may opt out of analytics cookies by adjusting your account preferences or browser settings without affecting core Platform functionality.

9.4 Managing Cookies

Most browsers allow you to view, manage, and delete cookies through the browser's settings panel. Please be aware that disabling certain cookies may impair Platform functionality — for instance, disabling session cookies will prevent you from staying logged in. For detailed instructions on managing cookies in your specific browser, consult your browser's official support documentation.

10. Your Privacy Rights

As a User of rans66, you hold the following rights over your Personal Data. To exercise any right, contact us at [email protected] with your full name, registered email address, and a clear description of your request. We will respond within 30 calendar days.

11. Protection of Minors

Strict 21+ Age Policy

rans66 does not knowingly collect Personal Data from individuals under 21 years of age. Our platform is intended exclusively for adults aged 21 and above. Age verification is a mandatory step in the account registration and KYC process.

If we discover or are notified that Personal Data has been collected from an individual under 21, we will immediately suspend the associated account, void all balances generated through the account, and permanently delete all Personal Data related to that individual within 30 days, except where retention is required to report the violation to relevant regulatory authorities.

Parents or legal guardians who believe a minor has created an account on rans66 should contact our customer support immediately at [email protected]. We will investigate and resolve the matter as a priority case.

12. Changes to This Policy

rans66 may update this Privacy Policy periodically to reflect changes in our data practices, Platform features, or applicable laws. When we make material changes — meaning changes that significantly affect how we collect, use, or share your Personal Data — we will notify you via the email address registered to your account at least 14 days before the revised policy takes effect.

Minor updates (such as clarifications of existing language, grammatical corrections, or addition of examples that do not alter the substance of the policy) will be reflected in a revised "Last Updated" date at the top of this page without individual notification. We encourage you to review this Privacy Policy each time you visit the Platform to stay informed of how we are protecting your data.

Continued use of the rans66 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms.

13. Contact & Data Requests

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the rans66 Data Privacy team through the following channels:

We aim to acknowledge all privacy-related inquiries within 2 business days (WIB, UTC+7) and to provide a full substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by an additional 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

256-Bit Encryption

Every byte of data transmitted between your device and our servers is protected by bank-grade SSL/TLS encryption — the same standard used by major financial institutions worldwide.

No Data Selling

rans66 never sells, rents, or trades your personal data to third parties for marketing purposes. Your information is used solely to deliver and improve our services to you.

Full Data Control

Access, correct, export, or request deletion of your personal data at any time. Our support team processes all privacy requests within 30 days as standard.

Regulatory Compliance

Our data practices are aligned with international privacy standards, ensuring your rights are respected regardless of which Indonesian city you play from.

Minimal Data Collection

We collect only what is strictly necessary to operate our platform, verify your identity, and process payments via BCA, BRI, OVO, DANA, and other local methods.

Breach Notification

In the event of a security incident affecting your data, we commit to notifying you within 72 hours — giving you the information you need to act promptly.

Questions About Your Privacy?

Our team is available 24/7 to address any data privacy concerns or help you exercise your rights