Last updated: January 1, 2026
Official Privacy Document

Privacy Policy rm77 — Our Real Commitment to Protecting Your Data

Your privacy is our responsibility. At rm77, every piece of data you entrust to us is managed to the highest security standards and used only for purposes that are strictly necessary.


The Six Data Protection Pillars We Stand By

The rm77 Privacy Policy is more than a formality. Behind every clause is a concrete commitment you can experience directly.

End-to-End Encryption

All data transmitted between your device and rm77's servers is protected by 256-bit SSL encryption. No party can read your data in transit — including your own internet service provider.

Not Sold to Third Parties

Rm77 has never and will never sell, rent, or exchange users' personal data to third parties for commercial purposes. Your data is not a product we trade.

Purposeful Data Usage

Every piece of data we collect has a clear, specific purpose. We only request data that is genuinely necessary — no excessive data collection without strong justification.

User Rights Respected

You have the right to access, correct, or request deletion of your personal data at any time. rm77 handles these requests seriously and within a reasonable timeframe, without unnecessary procedures.

Notification Controls Are in Your Hands

You can manage your communication preferences at any time from your rm77 account settings. If you do not want to receive certain promotions or notifications, simply turn them off — no questions asked, no lengthy process.

Regular Security Audits

Rm77's data storage and management systems undergo regular security audits by both internal teams and independent external parties. Audit findings are acted on immediately to ensure security standards are consistently maintained.


Before You Read On

This Privacy Policy document explains how rm77 collects, uses, stores, and protects your personal information as a platform user. This policy applies to all rm77 services — including the official website and mobile app.

By registering or using rm77's services, you confirm that you have read and agreed to this Privacy Policy. If you disagree with any part of it, you have the right not to use rm77's services. For further questions, our support team is ready to help.


🔒
Your Data Is Safe with rm77

256-bit SSL encryption is active across all transactions and communications.

Not sold to third parties
Regular security audits
Right to data erasure

1. Personal Data We Collect

Rm77 collects the information necessary to operate the platform's services optimally and securely. Data collection is carried out through three main methods: information you provide directly, data generated from your use of the service, and technical information from the device you use.

A. Data You Provide Directly

  • Identity information: full name, date of birth, and national ID number (KTP) during the KYC verification process.
  • Contact information: active email address and phone number used during registration.
  • Payment information: account name, bank account number, or e-wallet details (DANA, OVO, GoPay, etc.) for deposit and withdrawal purposes.
  • Verification documents: photo or scan of your national ID for KYC purposes, stored with high-level encryption.

B. Automatically Generated Data

  • Game history: games played, session duration, and betting results.
  • Transaction history: a record of all deposits and withdrawals, including the payment methods used.
  • Account activity log: login times, settings change activity, and bonus claim history.

C. Device Technical Data

  • IP address and general geolocation information (country/city) for account security.
  • Device type, operating system, and browser used.
  • Session data and platform display preferences.
rm77 applies the principle of data minimization — we only collect data that is strictly necessary to deliver our services. We never request irrelevant information such as health data, religious beliefs, or political affiliations.

2. How We Use Your Data

Data collected by rm77 is used exclusively for the following purposes. No data is used beyond this list without prior notice and your consent:

Purpose of Use Types of Data Used Legal Basis
Account creation and management Email, name, date of birth Contract performance
Identity verification (KYC) National ID, photo, identity data Legal obligation & security
Deposit & withdrawal processing Bank account / e-wallet data Contract performance
Customer support services Email, account history, transactions Legitimate interest
Fraud detection & security IP address, activity logs, transaction patterns Legitimate interest & obligation
Experience personalization Preferences, game history User consent
Promotional communications Email, phone number User consent

3. Data Sharing and Disclosure

Rm77 does not sell, rent, or trade users' personal data to any third party for commercial purposes. Full stop. This is not merely a written promise — it is an operational policy strictly enforced across all rm77 teams and partners.

User data may only be shared under the following limited circumstances:

  • Payment service providers: required transaction information is securely transmitted to payment partners (banks, DANA, OVO, GoPay, etc.) solely to process your transaction.
  • Technical infrastructure providers: data is stored on servers managed by trusted infrastructure partners, under legally binding data confidentiality agreements.
  • Legal obligation: rm77 is required to disclose data if ordered by a competent authority through valid legal procedures. Such disclosure is limited to the minimum required.
  • rm77 rights protection: data may be used as evidence in legal proceedings if necessary to protect rm77's rights against fraudulent activity or violations of the terms of service.
All third-party partners who receive rm77 user data are bound by a Data Processing Agreement that enforces security and confidentiality obligations no less strict than rm77's own internal standards.

4. Data Security Measures We Apply

Data security is not solely the responsibility of the rm77 IT team — it is a commitment shared across the entire organization. The following layers of protection actively safeguard your data at all times:

256-bit SSL Encryption

All data communications are encrypted using the latest TLS protocol. No data is transferred in plain text.

Database Encryption

Sensitive data in the database (including KYC documents) is stored in encrypted format using AES-256.

Layered Access Control

Access to user data is strictly limited to staff who require it on a need-to-know basis.

24/7 Monitoring

An automated monitoring system operates around the clock to detect access anomalies or suspicious activity patterns.

While rm77 upholds very high security standards, no digital system can guarantee 100% security. We strongly recommend using a strong, unique password and enabling two-factor authentication (2FA) in your rm77 account settings.

5. Data Storage and Retention

Rm77 retains your personal data for as long as your account is active and for the period required after account closure in accordance with applicable legal obligations.

  • Active account data: retained for as long as the account remains active.
  • Financial transaction data: retained for a minimum of 5 years after the transaction for audit and financial regulatory compliance purposes.
  • KYC documents: retained in accordance with applicable anti-money laundering (AML) regulatory requirements.
  • Technical and security logs: retained for 90 days for security investigation purposes.
  • Support communication data: retained for 2 years to ensure service quality and team training.

Once the retention period expires or after you request data deletion (see Section 7), your data will be permanently deleted from rm77's systems using an irreversible deletion method.

7. Your Rights Over Personal Data

As an rm77 user, you have a number of rights over your personal data that rm77 fully respects. Here are the rights you can exercise at any time:

Access Rights

You have the right to know what data we hold about you and to request a copy at any time.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request an immediate correction through your account settings or by contacting our support team.

Right to Erasure

You may request deletion of your personal data, except for data that must be retained to meet legal compliance requirements.

Right to Restriction of Processing

You may ask rm77 to restrict how your data is processed while a dispute or correction request is being resolved.

Right to Data Portability

You have the right to receive the data you provided to rm77 in a structured, machine-readable format.

Right to Object

You may object to the processing of your data for specific purposes, including marketing communications.

To exercise any of the rights above, contact the rm77 support team via live chat in the app or by email at [email protected]. rm77 is committed to responding to every request within a maximum of 30 business days.

8. Protection of Underage Users

Rm77 is a platform exclusively for adults aged 18 and above. We actively take steps to prevent underage users from accessing rm77's services:

  • The registration process requires age confirmation and identity verification (KYC) that checks your date of birth.
  • Rm77 reserves the right to request additional age verification at any time if there is any indication of an underage user.
  • If rm77 identifies an account belonging to a user under 18 years of age, that account will be immediately deactivated and the balance returned to a verifiable parent or guardian.

If you are a parent or guardian and discover that your child is using rm77 services without permission, please contact our support team immediately for prompt assistance.

9. Cross-Border Data Transfer

In rm77's operations, user data may be processed or stored on servers located outside Indonesia. This occurs in the context of using cloud infrastructure and technical services from trusted partners.

Rm77 ensures that all cross-border data transfers are carried out with adequate protections in place, including:

  • Legally binding data protection agreements with all data recipient partners.
  • Using internationally recognized standard contractual clauses for data transfers to countries with different regulations.
  • Selecting infrastructure partners with internationally recognized data security certifications.

10. Privacy Policy Changes

This Privacy Policy may be updated at any time to reflect changes in data management practices, legal requirements, or platform feature developments. The "Last updated" date at the top of this document always reflects the most current version.

For changes that are material and significantly affect your rights, rm77 will:

  • Sending notifications via your registered email or in-app notifications.
  • Displaying a clear notice on the rm77 homepage before changes come into effect.
  • Providing sufficient notice (at least 7 days) before changes take effect, giving you time to review and make informed decisions.

11. Contact the rm77 Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, we strongly encourage you to reach out to us. The rm77 privacy team is committed to responding to every inquiry seriously and promptly.

Privacy Email
Live Chat
Available 24/7 on the rm77 app

For general inquiries, you can also visit the rm77 FAQ which contains answers to the most frequently asked questions about privacy and account security.


🔒🌊✅

Your Data Is Safe — Play with Peace of Mind at rm77

Privacy is more than words in a policy document. At rm77, data protection is part of how we operate every day. Join hundreds of thousands of Indonesian players who already trust rm77 with their gaming experience.

Read also: Terms and Conditions · Responsible Gaming · FAQ


Bahasa Indonesia