ratu43 Privacy Policy

1. Introduction

ratu43 ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our online gaming platform at https://ratu43.cam (the "Platform"). This Policy applies to all users accessing our services from Indonesia and other jurisdictions where we operate.

By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Policy, you must immediately cease using the Platform.

This Privacy Policy should be read in conjunction with our Terms and Conditions. Terms defined in our Terms and Conditions have the same meaning when used in this Privacy Policy.

2. Data Controller

For the purposes of applicable data protection laws, ratu43 is the data controller responsible for your personal information. Our registered business address and contact details are provided in Section 14 of this Policy.

As data controller, we determine the purposes and means of processing your personal data. We are responsible for ensuring your data is processed lawfully, fairly, transparently, and in accordance with this Privacy Policy.

3. Information We Collect

We collect several categories of personal information to provide, maintain, and improve our services. The types of information we collect include:

3.1 Information You Provide Directly

When you register for an account or use our Platform, you directly provide us with the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP number)
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay account numbers), payment card information (processed through secure third-party payment processors—we do not store full card numbers), transaction history, deposit and withdrawal records
• Verification Documents: Copies of your Indonesian KTP (identity card), selfie photographs for identity verification, proof of address documents (utility bills, bank statements), and source of funds documentation for enhanced due diligence
• Communications: Content of messages sent through our customer support channels (Live Chat, WhatsApp, email), feedback and survey responses, and complaint records

3.2 Information We Collect Automatically

When you access and use the Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, device identifiers (IMEI, advertising ID), screen resolution, and installed fonts
• Usage Data: Pages visited, features used, games played, betting history (wagers placed, odds accepted, outcomes, timestamps), session duration, click-through patterns, navigation paths, and feature interaction metrics
• Technical Data: IP address, geolocation data (city, region, coordinates), internet service provider, connection type, referring/exit pages, date and time of access, and error logs
• Behavioral Data: Deposit and withdrawal patterns, gameplay statistics, wagering amounts and frequency, bonus usage, login times and frequency, and platform preferences

3.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification data, payment success/failure status, and fraud risk assessments from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers
• Identity Verification Services: KYC verification results, document authenticity checks, biometric matching scores, and watchlist screening results
• Fraud Prevention Services: Device fingerprinting data, fraud risk scores, behavioral anomaly detection alerts, and IP reputation data
• Marketing Partners: Referral source information (if you accessed ratu43 through an affiliate link), campaign identifiers, and attribution data

4. How We Use Your Information

ratu43 uses your personal information for the following purposes:

4.1 Service Provision and Account Management

• Creating and maintaining your user account
• Authenticating your identity when you log in
• Processing deposits, withdrawals, and other financial transactions
• Providing access to gaming products (sports betting, casino games, slots, togel, sabung ayam)
• Calculating and crediting winnings, bonuses, and promotions
• Maintaining accurate transaction and betting records
• Providing customer support and responding to inquiries

4.2 Compliance and Security

• Verifying your age (21+ requirement) and identity (KYC compliance)
• Complying with anti-money laundering (AML) regulations and reporting suspicious transactions
• Detecting, preventing, and investigating fraud, collusion, multi-accounting, bonus abuse, and other prohibited activities
• Enforcing our Terms and Conditions and resolving disputes
• Cooperating with law enforcement and regulatory authorities when legally required
• Maintaining audit trails and records for regulatory purposes

4.3 Service Improvement and Analytics

• Analyzing user behavior to improve Platform functionality, game selection, and user experience
• Testing new features and conducting A/B testing
• Generating aggregated, anonymized statistics about Platform usage
• Troubleshooting technical issues and optimizing performance
• Conducting market research and understanding Indonesian player preferences

4.4 Marketing and Communications

• Sending promotional offers, bonus notifications, and personalized recommendations (with your consent)
• Communicating important account updates, policy changes, and security alerts
• Conducting customer satisfaction surveys
• Notifying you about new games, features, or platform improvements

You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails or adjusting your account preferences. Transactional and security-related communications cannot be opted out of as they are essential to our service.

4.5 Responsible Gaming

• Monitoring gambling behavior for signs of problem gambling
• Implementing and enforcing deposit limits, session limits, and self-exclusion requests
• Providing resources and referrals for gambling addiction support
• Preventing underage gambling through age verification

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services as outlined in our Terms and Conditions). This includes account creation, transaction processing, game provision, and customer support.
• Legal Obligation: Processing is required to comply with legal obligations including KYC/AML regulations, age verification requirements, tax reporting, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, service improvement, internal analytics, and marketing to existing customers. We balance these interests against your privacy rights.
• Consent: For marketing communications beyond transactional messages, cookies and tracking technologies (where legally required), and sharing data with third parties for purposes not covered by the above grounds. You may withdraw consent at any time.

6. Data Sharing and Disclosure

ratu43 does not sell your personal information to third parties. We share your data only in the following limited circumstances:

6.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating the Platform:

• Payment Processors: Indonesian banks and e-wallet providers process deposits and withdrawals on our behalf. We share your financial information and transaction details necessary to complete payments.
• Game Providers: Casino game and slot suppliers (studios providing live dealer games, slot games, etc.) receive limited information about your gaming activity to provide their services.
• Identity Verification Services: Third-party KYC providers receive your identity documents and personal information to verify your age and identity.
• Cloud Service Providers: We use secure cloud infrastructure to store data. These providers have access to encrypted data but cannot read its contents.
• Customer Support Tools: Live chat and ticketing systems process your communications with our support team.
• Analytics and Monitoring: Analytics platforms receive anonymized or pseudonymized usage data to help us understand user behavior.

All service providers are bound by strict confidentiality agreements and are only permitted to process your data for specified purposes on our behalf. We conduct due diligence to ensure partners maintain adequate security measures.

6.2 Legal and Regulatory Requirements

We may disclose your information when legally required or advisable:

• In response to lawful requests from courts, law enforcement, or government agencies
• To comply with anti-money laundering reporting obligations
• To enforce our Terms and Conditions or investigate violations
• To protect the rights, property, or safety of ratu43, our users, or the public
• In connection with legal proceedings, dispute resolution, or investigations

6.3 Business Transfers

If ratu43 undergoes a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you of any such change in ownership and provide you with choices regarding your information.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot be used to identify you with business partners, researchers, or the public. For example, we might publish statistics about Indonesian player preferences for sports betting markets or game categories.

7. Data Security Measures

ratu43 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial information, identity documents) is encrypted using AES-256 encryption.
• Secure Infrastructure: Our servers are hosted in secure, access-controlled data centers with redundant power, cooling, and network connectivity. Physical access is restricted and monitored.
• Firewall and Intrusion Detection: Multi-layered firewalls and intrusion detection systems monitor and block suspicious network activity.
• Regular Security Audits: We conduct quarterly penetration testing and vulnerability assessments performed by independent security firms.
• Password Protection: User passwords are hashed using bcrypt with salt. We never store passwords in plain text. We enforce strong password requirements (minimum 8 characters, mix of uppercase, lowercase, numbers, symbols).

7.2 Organizational Safeguards

• Access Controls: Employee access to personal data is restricted on a need-to-know basis. Access rights are reviewed quarterly.
• Staff Training: All employees receive data protection and security awareness training during onboarding and annually thereafter.
• Confidentiality Agreements: All staff and contractors sign strict confidentiality agreements prohibiting unauthorized disclosure of user data.
• Incident Response: We maintain a documented incident response plan for data breaches. In the event of a breach affecting your data, we will notify you within 72 hours as required by best practices.

7.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication if offered
• Log out after using shared or public devices
• Report any suspicious account activity immediately
• Keep your contact information current so we can reach you with security alerts

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Category	Retention Period	Reason
Account Information	Duration of account + 7 years	Legal/regulatory requirements, tax records
Transaction Records	7 years from transaction date	AML compliance, audit trails, dispute resolution
Identity Documents (KYC)	7 years from account closure	Regulatory compliance, fraud prevention
Betting History	7 years from bet placement	Dispute resolution, regulatory requirements
Communications (Support)	3 years from last contact	Quality assurance, dispute resolution
Marketing Consent Records	Duration of consent + 3 years	Proof of consent, compliance
Technical Logs	12 months	Security monitoring, troubleshooting

When personal data is no longer required, we securely delete or anonymize it. Anonymized data (which cannot be linked back to you) may be retained indefinitely for statistical and research purposes.

If you request account closure, we will deactivate your account immediately, but certain data will be retained for the periods specified above to meet legal obligations.

9. Your Privacy Rights

Under applicable privacy laws and ratu43 policy, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, machine-readable format (typically PDF or CSV). You may request your data by contacting our privacy team.

9.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact support for assistance.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes collected, or if you withdraw consent. Note that we may be required to retain certain information for legal or regulatory reasons (as outlined in Section 8). We will inform you if we cannot delete specific data and explain why.

9.4 Right to Restriction of Processing

You may request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of data or object to processing. During such restriction, we will store the data but not actively process it (except with your consent or for legal claims).

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider where technically feasible. This applies to data you provided to us with consent or under contract.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

9.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, contact us at [email protected] or through the contact details in Section 14. We will respond within 30 days. We may request additional information to verify your identity before fulfilling requests. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

10. Cookies and Tracking Technologies

ratu43 uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content.

10.1 What Are Cookies

Cookies are small text files stored on your device by your web browser. They contain information about your browsing activity and preferences.

10.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These enable core features like login, account access, and secure transactions. Cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use the Platform (pages visited, time spent, errors encountered) to help us improve performance. These use Google Analytics and similar tools.
• Functionality Cookies: Remember your preferences (language, display settings, username) to provide a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing to deliver relevant promotional offers. Used to measure campaign effectiveness and limit ad frequency.

10.3 Managing Cookies

Most browsers allow you to control cookies through settings. You can block or delete cookies, though this may affect Platform functionality (you may be unable to log in or access certain features). You can manage cookie preferences through your browser settings or our cookie consent tool (if available).

10.4 Other Tracking Technologies

We also use web beacons (tracking pixels), local storage, and device fingerprinting for similar purposes to cookies, particularly for fraud prevention and security.

11. International Data Transfers

ratu43 operates from international jurisdictions. Your personal information may be transferred to, stored in, and processed in countries outside Indonesia, including countries that may not have data protection laws equivalent to Indonesian regulations.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by international data protection authorities
• Ensuring recipients are certified under recognized data protection frameworks
• Conducting due diligence on the data protection practices of recipient countries and entities

By using ratu43, you consent to the international transfer of your personal information as necessary to provide our services.

12. Children's Privacy

ratu43 is strictly for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21. Our age verification processes are designed to prevent underage access.

If we discover that we have inadvertently collected information from a person under 21, we will immediately delete that information and permanently close the associated account. If you believe we have collected information from an underage individual, please contact us immediately at [email protected].

Parents and guardians should monitor their children's online activities. We recommend using parental control software to block access to gambling sites.

13. Changes to This Policy

ratu43 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Sending an email to your registered email address
• Displaying a prominent notice on the Platform
• Requiring you to review and accept the updated Policy upon next login (for significant changes)

The updated Privacy Policy will take effect 14 days after notification, or immediately if required by law. Your continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

We recommend reviewing this Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the bottom of this document indicates when the Policy was last revised.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact our Data Protection Officer:

• Email (Privacy Inquiries): [email protected]
• Email (Data Subject Requests): [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the Platform
• WhatsApp: +62 812-3456-7890

When contacting us about privacy matters, please include "Privacy Request" in the subject line and provide your registered username and email address to help us locate your account. We aim to respond to all privacy inquiries within 30 days.