Privacy Policy

1. Introduction

ratu30 ("we", "us", "our") is committed to protecting the privacy and security of every player who uses our Platform at https://ratu30.cam. This Privacy Policy describes the personal data we collect about you when you visit, register on, or use the ratu30 Platform; how that data is used and protected; under what circumstances it may be shared; and what rights you have with respect to your own information.

This Privacy Policy applies to all users of the ratu30 Platform, including visitors who have not registered an account and registered players who engage in sports betting, casino games, togel (Indonesia's traditional numbers lottery), or any other product offered on the Platform.

By accessing or using the ratu30 Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. This document should be read together with our Terms & Conditions, which govern your use of the Platform more broadly.

2. Data Controller

For the purposes of applicable data protection law, ratu30 is the data controller responsible for the personal data collected through the Platform. As data controller, ratu30 determines the purposes for which, and the means by which, personal data is processed.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to our support team using the contact details set out in Section 14 of this Policy. We are committed to responding to all legitimate privacy requests within 30 calendar days.

3. Data We Collect

ratu30 collects only the personal data that is necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of data we collect are described below.

3.1 Identity & Account Data

• Full legal name
• Date of birth (to verify that you are 21 years of age or older)
• Username and password (stored in encrypted form)
• Email address
• Country and city of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Medan)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (Indonesian National Identity Card / KTP, passport, or SIM driver's license)
• Supporting documents confirming your name and payment method ownership

3.3 Financial & Transaction Data

• Bank account details (account name, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI — and account number used for deposits and withdrawals)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja account names/numbers)
• Deposit amounts, withdrawal requests, and transaction history in IDR

3.4 Gaming Activity Data

• Wager history, bet selections, stake amounts, and winnings across all products (sports betting, casino, slots, togel)
• Game session durations and frequency of play
• Bonus claims, wagering progress, and promotional participation history

3.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser type and version
• Session timestamps and page interaction logs
• Cookies and similar tracking technologies (see Section 9)

3.6 Communications Data

• Records of your correspondence with our customer support team, including live chat transcripts, emails, and support ticket history
• Feedback and survey responses you voluntarily submit

4. How We Collect Data

ratu30 collects personal data through the following channels:

4.1 Directly From You

The majority of the data we hold about you is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotional activities on the Platform.

4.2 Automatically Through Platform Use

When you access and use the ratu30 Platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser information, and session activity logs. This data is collected primarily for security monitoring, fraud prevention, and Platform performance optimization.

4.3 From Third-Party Service Providers

ratu30 may receive limited data about you from trusted third-party partners involved in operating the Platform, including:

• Payment processors and banking partners (e.g., banks such as BCA, BRI, BNI, Mandiri, and e-wallet providers such as OVO, DANA, GoPay) who confirm transaction status and account ownership
• Identity verification service providers who assist with KYC document authentication
• Fraud detection and risk management services that flag anomalous account behavior

In all cases, we only receive the minimum data necessary for the specific operational purpose, and our third-party partners are contractually bound to handle your data in a manner consistent with this Privacy Policy.

5. Purpose & Legal Basis for Processing

The table below sets out the purposes for which ratu30 processes your personal data, together with the legal basis that justifies each type of processing activity.

6. Data Sharing

ratu30 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

6.1 Technology and Infrastructure Partners

Cloud hosting providers, data center operators, and Platform infrastructure partners who process data on our behalf under contractual data processing agreements that mandate equivalent privacy protections.

6.2 Payment Service Providers

Banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive only the financial data necessary to process your requested transaction. ratu30 does not share your gaming history or KYC documents with payment providers.

6.3 Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — may receive anonymized session identifiers necessary for game functionality. These providers do not receive your full identity or financial data.

6.4 Identity Verification Services

Specialist KYC and anti-money laundering (AML) compliance partners who assist ratu30 in verifying your identity and assessing fraud risk. These partners are bound by strict confidentiality obligations.

6.5 Legal and Regulatory Authorities

ratu30 may disclose your personal data to law enforcement agencies, regulatory bodies, or judicial authorities where we are legally required to do so or where disclosure is necessary to protect our legal rights, prevent fraud, or comply with a valid court order or regulatory directive.

6.6 Business Transfers

In the event that ratu30 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer and given the opportunity to exercise your rights under Section 10.

7. Data Retention

ratu30 retains personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account relationship with ratu30, plus a minimum of 5 years following account closure, to satisfy anti-money laundering and record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable regulatory standards.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for 2 years for responsible gaming monitoring and dispute resolution purposes.
• Customer support records: Retained for 2 years from the date of the last interaction.
• Technical and device logs: Retained for up to 12 months and then anonymized or deleted.

When retention periods expire, data is securely deleted or anonymized in accordance with our internal data management procedures. Anonymized aggregated data may be retained indefinitely for statistical and analytical purposes and cannot be used to identify you.

8. Data Security

ratu30 employs a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data stored in our databases, including passwords (stored only as salted cryptographic hashes), KYC documents, and financial records.
• Multi-factor authentication for all internal staff systems that have access to player data.
• Role-based access controls ensuring that staff can only access the data necessary for their specific job function.
• Regular security audits and penetration testing by independent third-party specialists.
• Real-time intrusion detection systems that monitor for anomalous access patterns and unauthorized data requests.
• Incident response procedures that ensure prompt containment and notification in the event of a data breach.

While ratu30 takes every reasonable precaution to safeguard your data, no online system can guarantee absolute security. You play an important role in keeping your account secure: always use a strong, unique password and never share your login credentials with anyone.

9. Cookies & Tracking Technologies

ratu30 uses cookies and similar technologies to ensure the Platform operates correctly, to keep your session secure, and to understand how players interact with our services. We do not use advertising networks or behavioral profiling cookies.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in and security cookies that help detect fraud. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to measure how players navigate the Platform — which pages are visited most frequently, where errors occur, and how performance can be improved. Data collected is aggregated and does not identify individual users.
• Functional Cookies: Remember your preferences, such as your preferred language, display settings, and last-visited game categories, to deliver a more personalized experience on return visits.

9.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using key Platform features. Deleting cookies may also reset your saved preferences.

ratu30 does not use Flash cookies, pixel tracking tags from advertising networks, or any cross-site tracking technologies that follow your activity beyond the ratu30 Platform.

10. Your Privacy Rights

As a ratu30 player, you hold the following rights with respect to the personal data we hold about you. You may exercise any of these rights at any time by contacting our support team. We will acknowledge your request promptly and respond fully within 30 calendar days.

Please note that some rights are subject to legal limitations — for example, we cannot erase transaction records that we are legally required to retain for AML compliance purposes. Where we are unable to fulfill a request in full, we will explain the reason clearly.

11. Minors

The ratu30 Platform is strictly for adults aged 21 and over. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process, and we actively monitor for underage access attempts.

If ratu30 becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, we will immediately close the associated account, delete the data in question, and take appropriate action in accordance with our responsible gaming obligations.

If you believe that a minor may have registered or accessed an account on the Platform, please contact our support team at once so that we can investigate and act swiftly.

12. International Data Transfers

ratu30 operates as an internationally oriented platform and may process or store your personal data on servers located outside of Indonesia. Where such international transfers take place, ratu30 ensures that adequate safeguards are in place to protect your data to a standard at least equivalent to that described in this Privacy Policy.

Such safeguards may include contractual data processing agreements with our service providers incorporating standard data protection clauses, or reliance on the recipient country's recognized adequacy status under applicable data protection frameworks.

By using the ratu30 Platform and submitting your personal data to us, you acknowledge that your data may be transferred to and processed in countries outside Indonesia for the operational purposes described in this Policy.

13. Changes to This Privacy Policy

ratu30 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. All material changes will be communicated to registered players via a prominent notice on the Platform or by email to the address associated with your account prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Continued use of the Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ratu30 handles your personal data, please contact our dedicated privacy support team. We are available 24 hours a day, 7 days a week, with Indonesian-speaking agents available throughout peak hours (WIB, UTC+7).

• Email: [email protected]
• Subject Line (recommended): "Privacy Request — [Your Username]"
• Response Time: Acknowledgment within 24 hours; full response within 30 calendar days
• Support Languages: English and Indonesian
• Hours: 24/7, all time zones — primary operating hours WIB (UTC+7)