roko69 Privacy Policy

The following terms are used throughout this Privacy Policy and carry the meanings set out below.

roko69 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The table below summarises what we collect and why.

roko69 collects Personal Data through the following channels and methods:

• Direct Registration: When you create a roko69 account, you provide Identity Data, Contact Data, and account credentials directly through the registration form.
• KYC Submission: When you submit identity verification documents — such as a KTP, passport, or proof of address — this data is collected and stored as part of your compliance record.
• Financial Transactions: When you make a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the transaction details and associated account identifiers are recorded.
• Platform Interaction: As you navigate the Platform, Technical Data and Usage Data are automatically collected via server logs, cookies, and similar tracking technologies. This happens whether or not you are logged in.
• Support Channels: When you contact our team via live chat, email ([email protected]), or WhatsApp (+62 811 9876 5432), the content of those communications is recorded and stored.
• Third-Party Sources: We may receive data about you from fraud-prevention partners, identity verification bureaux, and payment processors to supplement the information you have provided directly — for example, to cross-check name and account details against bank records during withdrawal processing.

roko69 processes your Personal Data only for the specific purposes set out below. We do not use your data for purposes incompatible with those listed here without first obtaining your consent or establishing a new lawful basis.

• Account Management: To create, maintain, and secure your roko69 account, including processing password resets, two-factor authentication, and session management.
• Identity & Age Verification: To confirm that you are a real individual aged 21 or older, as required by our platform policies and international responsible gaming standards.
• Transaction Processing: To facilitate deposits and withdrawals in Indonesian Rupiah (IDR) and to maintain accurate financial records for each transaction.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and international KYC standards, including maintaining records for the periods mandated by those obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and other conduct that threatens the integrity of the Platform.
• Responsible Gaming: To monitor betting patterns, session durations, and deposit behaviour in order to identify signs of problem gambling and to apply any self-imposed limits or exclusions you have activated on your account.
• Customer Support: To respond to your enquiries, resolve complaints, and improve our service quality through analysis of support interactions.
• Marketing Communications: To send you promotional offers, bonuses, and event notifications — including seasonal promotions tied to Idul Fitri, Ramadhan, Imlek, Indonesian Independence Day (17 August), and major sporting events such as BRI Liga 1 and the Piala AFF — where you have opted in to receive marketing. You may withdraw this consent at any time by contacting support.
• Platform Analytics & Improvement: To analyse Platform usage in aggregate form, identify technical issues, test new features, and improve the overall member experience.
• Legal Proceedings: To establish, exercise, or defend legal claims, and to respond to lawful requests from competent authorities.

Where internationally recognised data protection principles apply, roko69 relies on the following lawful bases for processing your Personal Data:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, transaction processing, and customer support — is carried out on the basis that it is necessary to fulfil our contractual obligations to you as a member.
• Legal Obligation: Processing necessary to comply with applicable AML, KYC, CTF, and data retention laws is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform analytics is carried out on the basis of our legitimate interest in operating a safe, fair, and sustainable platform — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit consent at the point of opt-in. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

roko69 does not sell your Personal Data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

• Payment Processors: Your Financial Data is shared with our partner payment processors — including the banks and e-wallet platforms you use — solely to facilitate the deposit or withdrawal you have requested. Each processor is contractually bound to use your data only for transaction fulfilment.
• Identity Verification Partners: Your Identity Data may be passed to third-party KYC and fraud-screening providers to validate your identity documentation and screen against applicable watchlists. These providers act as data processors under our instruction.
• Game Studio Providers: When you access a game hosted by a third-party studio — such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Pocket Games Soft — a session token and anonymised player identifier may be passed to that studio's game server. No directly identifiable Personal Data (such as your full name or bank account details) is shared with game studios.
• Analytics & Technology Providers: Aggregated and pseudonymised Technical Data and Usage Data may be shared with analytics and platform monitoring services to assist with performance optimisation and security. These providers are contractually prohibited from using this data for their own commercial purposes.
• Legal Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by law, court order, or in response to a lawful request. We will notify you of such a disclosure where we are legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of roko69's business, your Personal Data may be transferred to the successor entity. We will notify you in advance of any such transfer and your continued use of the Platform following the transfer will constitute acceptance of the successor entity's privacy terms.

roko69 operates internationally and may store or process your Personal Data in countries outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that applicable in your home country, roko69 ensures that appropriate safeguards are in place, including:

• Contractual clauses between roko69 and the receiving party that require the recipient to protect the data to a standard equivalent to our own Privacy Policy;
• Restricting transfers to jurisdictions that have been assessed as providing an adequate level of protection by recognised international standards bodies; and
• Applying technical and organisational security measures — including end-to-end encryption and access controls — that apply irrespective of where the data is physically stored.

Where you are based in Indonesia, please note that roko69's primary data processing infrastructure is located outside Indonesia. By registering a roko69 account, you acknowledge and consent to this international transfer of your Personal Data under the safeguards described above.

roko69 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following standard retention periods apply:

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised so that it can no longer be linked to your identity. Where deletion is not immediately practicable — for example, where data is held in backup archives — roko69 will isolate the data from active processing until deletion can be completed.

roko69 uses cookies and similar tracking technologies (including pixel tags and local storage) on the Platform to deliver a functional, secure, and personalised experience. The categories of cookies we use are described below.

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies, CSRF protection tokens, and load-balancing cookies. No consent is required for these cookies because they are technically required to deliver the service you have requested.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, last-visited game category, and responsible gaming settings — to provide a more personalised experience. Disabling these cookies may reduce the quality of your experience.
• Analytical Cookies: These cookies collect pseudonymised data about how members use the Platform — including pages visited, game sessions started, and click paths — to help us improve the Platform's design and performance. The data collected is aggregated and does not identify you individually.
• Security Cookies: roko69 uses device fingerprinting and session integrity cookies to detect and prevent fraudulent logins, multi-accounting, and other security threats. These are classified as strictly necessary for platform integrity.

roko69 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the roko69 Platform is protected by industry-standard 256-bit SSL/TLS encryption. The padlock icon in your browser address bar confirms this connection is active.
• Encrypted Data Storage: Sensitive Personal Data — including KYC documents, financial account details, and password hashes — is stored in encrypted form at rest. roko69 does not store plaintext passwords under any circumstances.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. roko69 staff are granted access only to the data categories required for their specific role. All access is logged and subject to regular audit.
• Two-Factor Authentication: roko69 supports two-factor authentication (2FA) for member accounts and mandates 2FA for all internal administrative access to systems containing Personal Data.
• Intrusion Detection: roko69 maintains continuous network and application monitoring to detect and respond to potential security incidents in real time.
• Data Breach Response: In the event of a confirmed Personal Data breach that poses a risk to your rights and freedoms, roko69 will notify affected members without undue delay and will take all reasonable remedial steps to contain the breach and prevent recurrence.

While roko69 takes every reasonable precaution to protect your data, no online system can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for using a secure, private device when accessing the Platform. If you suspect that your account has been compromised, contact support at [email protected] immediately.

Subject to applicable law and certain exceptions (including where retaining data is required by AML or KYC obligations), you hold the following rights in relation to your Personal Data held by roko69:

• Right of Access: You may request a copy of the Personal Data roko69 holds about you. We will respond to verified access requests within 30 days of receipt.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update basic account information directly from your account dashboard; for KYC-related corrections, please contact support.
• Right to Erasure: You may request that your Personal Data be deleted. Note that this right is subject to our legal obligation to retain certain data (particularly financial transaction records and KYC documentation) for the periods specified in Section 8 above. Where erasure is legally required to be deferred, we will inform you of the reason and the earliest date on which deletion can be carried out.
• Right to Restriction: You may request that roko69 restrict the processing of your Personal Data — for example, while a rectification request is being resolved — without requiring full deletion.
• Right to Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that roko69 provide your data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. roko69 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent, contact [email protected] or update your communication preferences in your account settings.

To exercise any of the above rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

The roko69 Platform is strictly intended for adults aged 21 and above. roko69 does not knowingly collect Personal Data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or use the Platform in any way.

roko69 applies age verification controls at the point of registration and during KYC checks. Where we discover — or are notified — that Personal Data has been collected from a person under the age of 21, we will take immediate steps to suspend the associated account and delete all related Personal Data without delay.

The roko69 Platform may contain references to third-party services, including game studios and payment providers, whose own privacy policies apply to data they collect independently. roko69 is not responsible for the privacy practices, content, or security of any third-party service. We encourage you to review the privacy policy of any third party whose services you access in connection with your use of the Platform.

Game content embedded from providers such as Evolution Gaming, Pragmatic Play, NetEnt, and Spribe is delivered via each provider's own game server infrastructure. While roko69 limits the data shared with these providers to what is technically necessary to run a game session, their own data practices are governed by their respective privacy policies. roko69 contractually requires all game studio partners to maintain appropriate data protection standards.

roko69 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Where changes are material — such as a new category of data being collected, a new purpose of processing, or a new class of third-party recipient — roko69 will provide members with at least 14 days' advance notice via email before the revised Policy takes effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree with a revised Policy, you must cease using the Platform and contact support to arrange account closure.

The current version of this Privacy Policy is always accessible at roko69.bet/privacy-policy. We recommend that you review this page periodically to stay informed of how your data is being managed.

If you have any questions, concerns, or requests relating to this Privacy Policy or to roko69's handling of your Personal Data, please contact our Privacy & Support team through any of the following channels. All enquiries will be treated confidentially.

roko69 aims to acknowledge all privacy-related requests within 5 business days and to resolve them fully within 30 days. For urgent matters — such as suspected account compromise or data breach concerns — please use the live chat channel for the fastest response.