Contents
Your Privacy Matters: This Privacy Policy applies to all personal data processed by rip1 in connection with the rip1.cam platform and its associated services. By registering an Account, you acknowledge that you have read and understood this policy. For questions, contact us at [email protected].
1. Introduction
rip1 ("we", "us", "our") operates the online gaming platform accessible at rip1.cam, providing sports betting, casino games, live dealer tables, togel (Indonesia's traditional numbers lottery), and related services to registered members. As a platform that serves players across Indonesia — from Jakarta and Surabaya to Bali, Medan, and Makassar — we process a range of personal data in order to deliver our services safely, legally, and effectively.
This Privacy Policy sets out the types of personal data rip1 collects, the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights available to you as a data subject. This policy applies to all rip1 members, prospective members, and visitors to the rip1.cam domain.
By accessing the rip1 platform or registering an Account, you confirm that you have read this Privacy Policy in full and consent to the processing of your personal data as described herein. If you do not agree to any part of this policy, you should not access or continue to use rip1.
2. Data Controller
For the purposes of this Privacy Policy, rip1 acts as the data controller in respect of all personal data collected through the rip1.cam platform. As data controller, rip1 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.
All data-related inquiries, access requests, and complaints should be directed to our designated data protection contact via email at [email protected]. We will acknowledge all written data requests within five (5) business days.
3. Data We Collect
rip1 collects personal data across several categories, depending on how you interact with the platform. The table below summarizes the categories of data we collect and provides representative examples:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number (KTP), passport number | Yes (KYC) |
| Contact Data | Email address, Indonesian mobile phone number, residential address | Yes |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Yes |
| Technical Data | IP address, device type, browser type, operating system, session cookies, login timestamps | Automatic |
| Behavioral Data | Game history, betting patterns, deposit and withdrawal frequency, bonus usage | Automatic |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When initiated |
| Verification Data | Photographs of identity documents, selfies for biometric liveness checks (where required by KYC) | KYC threshold |
4. How We Collect Data
rip1 collects personal data through the following means:
- Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
- Automated technologies: Technical and behavioral data collected automatically when you visit rip1.cam, including via cookies, web beacons, server logs, and analytics tools. See Section 9 (Cookies & Tracking) for further detail.
- Third-party verification providers: Identity and address verification data received from our KYC partners when you submit documents for account verification.
- Payment processors: Transaction confirmation data received from Indonesian bank transfer gateways and e-wallet providers including OVO, DANA, GoPay, ShopeePay, and LinkAja.
- Fraud prevention services: Risk signals and device fingerprint data received from third-party anti-fraud and security partners to help protect your Account and the platform's integrity.
5. Purpose & Legal Basis for Processing
rip1 processes personal data only where a lawful basis exists. The primary purposes for which we process your data, and the corresponding legal basis for each, are set out below:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Processing deposits and withdrawals in IDR | Performance of contract |
| Age and identity verification (KYC) | Legal obligation; legitimate interest |
| Anti-money laundering and fraud prevention | Legal obligation; legitimate interest |
| Responsible gaming monitoring and intervention | Legiti mate interest; legal obligation |
| Customer support and dispute resolution | Performance of contract; legitimate interest |
| Platform security and abuse prevention | Legitimate interest |
| Personalized promotions and bonus offers | Consent (where required); legitimate interest |
| Platform analytics and product improvement | Legitimate interest |
| Compliance with regulatory reporting obligations | Legal obligation |
Consent Withdrawal: Where rip1 relies on your consent as the legal basis for processing — for example, for promotional communications — you may withdraw that consent at any time by contacting our support team or updating your Account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
6. Data Sharing
rip1 does not sell your personal data to third parties for commercial marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
6.1 Service Providers
We engage carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These include: payment gateway operators (facilitating transfers via BCA, BRI, BNI, Mandiri, and connected e-wallet networks); KYC and identity verification platforms; game content studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Pocket Games Soft; cloud hosting providers; and customer support platform vendors.
6.2 Regulatory and Law Enforcement Authorities
rip1 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, a valid legal order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons.
6.3 Business Transfers
In the event that rip1 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the relevant successor entity. We will notify affected users via email and via an in-platform notice prior to any such transfer taking effect, and the successor entity will be required to honor this Privacy Policy.
6.4 With Your Explicit Consent
We may share your data with additional third parties where you have given us explicit, informed consent to do so. You may withdraw such consent at any time by contacting [email protected].
7. International Data Transfers
Some of rip1's service providers — including game studios, cloud infrastructure vendors, and KYC verification platforms — may be located outside Indonesia. Where personal data is transferred internationally, rip1 ensures that appropriate safeguards are in place, including contractual data protection clauses or equivalent mechanisms, to maintain a level of protection consistent with the principles set out in this Privacy Policy.
By registering an Account with rip1, you acknowledge and agree that your personal data may be transferred to and processed in countries outside Indonesia where rip1's operational partners are based. We take reasonable steps to ensure that all international recipients of your data are bound by obligations of confidentiality and data security no less stringent than those applied by rip1 itself.
8. Data Retention
rip1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of Account plus 5 years after closure |
| Financial transaction records | 7 years from the date of the transaction |
| KYC verification documents | 5 years from Account closure or last active session |
| Support communications | 3 years from the date of the last communication |
| Behavioral and analytics data | 24 months from collection, then aggregated/anonymized |
| Cookie and technical data | Per individual cookie lifetime (see Section 9) |
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized so that it can no longer be associated with any individual. Where deletion is technically impractical within a system (for example, in encrypted backup archives), the data is isolated from active processing until the next scheduled deletion cycle.
9. Cookies & Tracking Technologies
rip1 uses cookies and similar tracking technologies to operate the platform, recognize returning members, maintain session state, prevent fraud, and analyze usage patterns. The following categories of cookies are used on rip1.cam:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain login sessions, enable core platform functionality, prevent cross-site request forgery | Session |
| Functional | Remember language preferences, game settings, notification preferences | Up to 12 months |
| Analytics | Measure page performance, user journeys, and feature engagement to improve the platform | Up to 24 months |
| Security & Fraud | Device fingerprinting and risk scoring to detect account takeover attempts and automated bots | Up to 12 months |
Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform. You may disable functional and analytics cookies through your browser settings; however, doing so may impair certain features of the rip1 platform. rip1 does not use third-party advertising or retargeting cookies.
10. Your Data Rights
As a data subject, you have the following rights in relation to the personal data rip1 holds about you. To exercise any of these rights, submit a written request to [email protected]. We will respond within thirty (30) calendar days. We may require you to verify your identity before processing a rights request.
Right of Access
Request a copy of the personal data rip1 holds about you and information on how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your Account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that rip1 limits how your personal data is used while a query or objection is being resolved.
Right to Portability
Request your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Object
Object to processing of your personal data based on legitimate interests, including profiling for marketing purposes.
Please Note: Certain rights are subject to limitations. For example, rip1 is legally required to retain financial transaction records for a minimum of seven years; we cannot erase this data on request during the mandatory retention period. We will always explain clearly if a limitation applies to your specific request.
11. Data Security
rip1 employs a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security program includes, but is not limited to:
- TLS/SSL encryption: All data transmitted between your device and rip1.cam is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
- Encryption at rest: Sensitive personal data — including identity documents and financial details — is encrypted in storage using AES-256 encryption.
- Access controls: Access to personal data within rip1's systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced for all administrative personnel.
- Penetration testing: rip1 engages independent security firms to conduct regular penetration tests and vulnerability assessments of the platform.
- Incident response: rip1 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights or interests, we will notify affected users without undue delay.
- Secure payment processing: Financial transactions are processed through certified payment gateways. rip1 does not store full bank account numbers or card details on its own servers.
While rip1 takes all reasonable precautions to safeguard your personal data, no internet transmission or electronic storage system is entirely secure. You are encouraged to maintain strong, unique passwords for your Account and to enable any additional authentication options made available by rip1.
12. Minors
rip1 does not knowingly collect personal data from individuals under the age of 21. Our platform is strictly intended for adults aged 21 and over. If rip1 becomes aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account.
If you are a parent or guardian and believe that a minor in your care has registered an Account on rip1.cam or provided us with their personal data, please contact us immediately at [email protected] and we will act promptly to investigate and resolve the matter. For further guidance on protecting younger members of your household from online gaming, please visit our Responsible Gaming page.
13. Third-Party Links
The rip1 platform may contain references to third-party content providers — such as game studios or sports data feeds — whose own privacy practices are governed by their respective privacy policies. rip1 is not responsible for the data practices of any third-party operator, and we encourage you to review the privacy policies of any external service you access in connection with the rip1 platform.
14. Policy Changes
rip1 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where changes are material — for example, where we introduce a new purpose for processing personal data or a new category of data sharing — we will provide advance notice of at least fourteen (14) calendar days via email to your registered address and via a prominent in-platform notification.
The "Last Updated" date at the top of this page reflects the date on which the most recent revision was published. We encourage you to review this policy periodically. Your continued use of the rip1 platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not accept the revised policy, you should cease using the platform and may request Account closure in accordance with the Terms & Conditions.
15. Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how rip1 has handled your personal data, please contact our data protection team:
Email: [email protected]
We aim to respond to all privacy-related inquiries within five (5) business days and to fully resolve data rights requests within thirty (30) calendar days of receipt. Our support team includes Indonesian-speaking agents available during peak hours (18:00–23:00 WIB) to assist you in your preferred language.
If you are not satisfied with our response to a complaint or rights request, you may escalate the matter to the relevant data protection authority in your jurisdiction. We will cooperate fully with any such authority in the investigation of a complaint.
Our Privacy Commitments
256-Bit Encryption
Every piece of sensitive data you share with rip1 — from your KTP number to your BCA bank details — is protected with AES-256 encryption both in transit and at rest. Your information is secured to the same standard used by international financial institutions.
No Data Sales — Ever
rip1 has never sold, and will never sell, your personal data to third-party advertisers or data brokers. Your information is used solely to operate and improve our services and to fulfil our legal obligations — nothing else.
Full Data Control
You retain meaningful control over your personal data at all times. Access, correct, export, or request deletion of your information by contacting our support team. We respond to all verified data rights requests within thirty (30) calendar days.
Regular Security Audits
Our platform undergoes independent security penetration testing and vulnerability assessments on a regular schedule. We maintain a documented incident response plan so that, in the unlikely event of a breach, affected users are notified promptly and clearly.
Transparent Retention
We keep your data only for as long as we need it. Our published retention schedule is clear and time-bound — financial records are held for seven years as required by law, while analytics data is anonymized after twenty-four months.
Indonesian-Speaking Support
Our data protection team includes Indonesian-speaking agents available during peak WIB evening hours. Whether you need help understanding your rights, submitting an access request, or raising a privacy concern, we are here to assist you in your preferred language.
Questions About Your Data?
Review our full Terms & Conditions for the complete legal framework governing your rip1 Account, or visit our FAQ for quick plain-language answers.