Privacy Policy — rusa89

1.1  rusa89 operates an international online betting platform accessible at https://rusa89.cam, serving players primarily based in Indonesia. This Policy applies to all personal data processed in connection with the creation and operation of a rusa89 player account, including data collected via the website, mobile browser interface, customer support interactions, and any promotional communications you opt into.

1.2  This Policy does not apply to third-party websites, services, or platforms that may be linked from or interact with rusa89. We strongly encourage you to review the privacy policies of any third-party service you use, including your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja), as their data practices are governed independently.

1.3  rusa89 is committed to processing personal data in a manner that is transparent, lawful, fair, and consistent with internationally recognized data protection principles, including those reflected in the EU General Data Protection Regulation (GDPR) as a benchmark standard. Indonesian players are entitled to all rights described in Section 12 of this Policy.

1.4  If you have any questions about this Policy or how your data is handled, please refer to Section 15 (Contact & DPO) for the appropriate contact channels.

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, national ID number, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, consultation, use, transmission, restriction, erasure, or destruction.
• "Data Controller" means rusa89, which determines the purposes and means of processing Personal Data collected from players.
• "Data Processor" means any third party that processes Personal Data on behalf of rusa89 under a binding data processing agreement.
• "KYC" means Know Your Customer — the mandatory identity and age verification process conducted by rusa89 before allowing withdrawals or flagged account actions.
• "Cookies" means small text files placed on your device by the rusa89 website to enable session management, security functions, and performance analytics.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government-issued ID numbers (KTP / SIM / Passport), biometric data, and financial account numbers.
• "Retention Period" means the defined duration for which rusa89 stores specific categories of Personal Data before securely deleting them.

3.1  rusa89 collects personal data across the following categories. Data marked Required must be provided for the platform to function. Data marked Optional is collected only where you choose to provide it.

3.2  rusa89 does not collect or store full payment card numbers (PAN), CVV codes, or full bank account credentials. Payment transactions are facilitated through encrypted integrations with your chosen local bank or e-wallet provider; rusa89 receives only a transaction reference and confirmation status.

3.3  During the KYC process, you may be asked to submit photographic copies of your KTP, SIM, or Passport, along with a selfie image. These documents constitute Sensitive Data and are handled under the heightened security measures described in Section 11.

rusa89 collects personal data through the following channels:

• Direct Submission: Data you enter during account registration, the KYC process, deposit or withdrawal requests, contact forms, and live chat sessions.
• Automated Technical Collection: Server logs, session cookies, and platform analytics tools automatically record Technical Data (IP address, device type, browser, session activity) each time you visit or interact with the rusa89 platform.
• Payment Infrastructure: When you initiate a deposit or withdrawal via a local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction confirmation data is passed to rusa89 by the payment provider to update your account balance.
• Third-Party Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft transmit game session results, bet amounts, and RNG outcomes to rusa89 for account crediting and dispute resolution purposes. These providers do not receive your identity or financial data beyond what is technically necessary to render the game.
• Customer Support Interactions: When you contact rusa89 via live chat or email, the content of those communications is recorded and associated with your account for quality assurance, dispute resolution, and compliance purposes.

5.1  rusa89 processes personal data for the following clearly defined purposes. We do not process data for any purpose that is incompatible with the purpose for which it was originally collected.

• Account Management: Creating, maintaining, and administering your rusa89 player account, including authentication, balance management, and betting history records.
• Identity Verification (KYC): Confirming that you are at least 21 years of age, a resident of Indonesia, and the legitimate owner of the payment methods associated with your account, in compliance with our anti-money laundering (AML) obligations.
• Payment Processing: Facilitating deposits and withdrawals in IDR via local Indonesian banks and e-wallets, reconciling transactions, and investigating disputed transactions.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent account activity, bonus abuse, unauthorized access, and other forms of Prohibited Conduct as defined in our Terms & Conditions.
• Legal & Regulatory Compliance: Meeting our obligations under applicable AML regulations, financial compliance standards, and any lawful requests from regulatory or law enforcement authorities.
• Customer Support: Responding to your inquiries, resolving complaints, and providing technical assistance through live chat and email support channels.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the functionality, performance, and user experience of the rusa89 platform.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling behavior and, where appropriate, proactively contacting players to offer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing Communications (opt-in only): Sending promotional emails, bonus notifications, and seasonal offers (such as Idul Fitri or Ramadhan specials) to players who have explicitly opted in to receive marketing communications. You may withdraw this consent at any time.

5.2  rusa89 will never use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where you have been notified and provided an opportunity to contest the decision.

6.1  rusa89 processes personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract between you and rusa89 (i.e., to operate your betting account, process deposits and withdrawals, and deliver the services you have signed up for).
• Legal Obligation: Processing is necessary for rusa89 to comply with applicable legal requirements, including AML regulations, financial record-keeping obligations, and lawful orders from competent authorities.
• Legitimate Interests: Processing serves rusa89's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and optional data collection categories, processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time by contacting our support team or using the unsubscribe link in any marketing email.

7.1  rusa89 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below and only to the minimum extent necessary for each purpose.

• Payment Service Providers: We share transaction-relevant data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to facilitate deposits and withdrawals on your instruction.
• Identity Verification Partners: KYC document processing may involve a vetted third-party identity verification service. Such partners are contractually prohibited from using your documents for any purpose other than verifying your identity for rusa89.
• Game Content Providers: Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) receive a session token and bet parameters to render games. They do not receive your full name, ID number, or payment details.
• IT Infrastructure & Security Providers: Hosting, CDN, DDoS protection, and database services are provided by vetted infrastructure partners under strict data processing agreements that prohibit independent use of player data.
• Legal & Regulatory Authorities: Where required by law, court order, or lawful regulatory request, rusa89 will disclose personal data to competent authorities. We will notify you of any such disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of rusa89's assets, player data may be transferred to the acquiring entity. You will be notified in advance, and the acquiring entity will be required to honor this Privacy Policy.

7.2  All third-party Data Processors engaged by rusa89 are bound by written data processing agreements that require them to: (a) process data only on rusa89's documented instructions; (b) implement appropriate technical and organizational security measures; and (c) assist rusa89 in meeting its data subject rights obligations.

8.1  rusa89's primary data processing infrastructure is hosted in secure data centers with strong data protection frameworks. In some instances, personal data may be transferred to or accessed from locations outside Indonesia — for example, where a game studio's API infrastructure or a cloud security service operates from a different jurisdiction.

8.2  Where such international transfers occur, rusa89 ensures that appropriate safeguards are in place, including:

• Contractual clauses that require the recipient to protect personal data to a standard equivalent to those described in this Policy
• Use of service providers operating in jurisdictions recognized as providing an adequate level of data protection
• Technical controls ensuring that data is encrypted in transit and at rest regardless of geographic location

8.3  You may request details of the specific safeguards applicable to any international transfer of your personal data by contacting our Data Protection contact as described in Section 15.

9.1  rusa89 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal, regulatory, and operational requirements. The following retention periods apply:

9.2  Upon expiry of the applicable retention period, personal data is permanently deleted or irreversibly anonymized using industry-standard secure deletion methods. Anonymized data (from which no individual can be identified) may be retained indefinitely for statistical analysis and platform improvement purposes.

10.1  rusa89 uses cookies and similar technologies to ensure the platform functions correctly, to maintain your login session securely, and to analyze platform performance. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for the platform to operate. These enable session authentication, security token validation, and load balancing. They cannot be disabled without rendering the platform non-functional.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate the platform — such as which pages are visited most frequently and where errors occur. This data is used exclusively to improve platform performance and user experience.
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalized experience on return visits.

10.2  rusa89 does not use advertising cookies, behavioral tracking cookies, or third-party retargeting pixels. We do not allow third-party advertising networks to place cookies on the rusa89 domain.

10.3  Most browsers allow you to manage cookie preferences through their settings. Blocking Strictly Necessary Cookies may impair your ability to log in or use the platform. Blocking Performance or Functional Cookies will not prevent you from using the core betting features of rusa89.

11.1  rusa89 implements a comprehensive, layered approach to data security. The following technical and organizational measures are in place to protect your personal data against unauthorized access, loss, destruction, or disclosure:

• Encryption in Transit: All data exchanged between your browser and the rusa89 platform is encrypted using 256-bit TLS (Transport Layer Security). Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Personal data and KYC documents stored in our databases and file systems are encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required for their specific role. All access events are logged and subject to regular review.
• Multi-Factor Authentication (MFA): Administrative access to rusa89 backend systems requires multi-factor authentication. Players are strongly encouraged to enable MFA on their accounts where available.
• Penetration Testing: rusa89 engages independent security researchers to conduct regular penetration testing of the platform. Identified vulnerabilities are remediated promptly according to a risk-tiered patch management process.
• Intrusion Detection: Real-time intrusion detection and anomaly monitoring systems are active across all rusa89 infrastructure, with automated alerting and incident response procedures.
• Staff Training: All rusa89 personnel who handle personal data receive regular data protection and information security training.

11.2  In the event of a personal data breach that poses a risk to your rights and freedoms, rusa89 will notify affected players without undue delay and, where required, report the breach to the relevant supervisory authority within the prescribed timeframe.

12.1  As a player of rusa89, you are entitled to exercise the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or email as described in Section 15. We will respond within 30 calendar days of receiving a verifiable request.

• Right of Access: You may request a copy of all personal data rusa89 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For account data such as your registered name and date of birth, corrections may require re-submission of KYC documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. This right is subject to our legal retention obligations — for example, transaction records required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to Restriction of Processing: You may request that rusa89 limit the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to rusa89, to facilitate transfer to another service provider where technically feasible.
• Right to Object: You may object to processing of your personal data based on rusa89's legitimate interests, and you have the absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

12.2  rusa89 will not charge a fee for exercising any of these rights in the normal course. However, where requests are manifestly unfounded or excessive, rusa89 reserves the right to charge a reasonable administrative fee or decline the request, with written explanation.

13.1  The rusa89 platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from any individual under the age of 21. Our registration process requires users to declare their date of birth, and our KYC process verifies age through government-issued identification.

13.2  If rusa89 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration or any other means — we will immediately suspend the relevant account, delete all associated personal data to the extent legally permissible, and forfeit any funds held in that account in accordance with our Terms & Conditions.

13.3  Parents and guardians who believe that a minor may have registered on rusa89 are urged to contact us immediately at [email protected]. We take all such reports seriously and will investigate promptly.

14.1  rusa89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Material changes — meaning changes that significantly affect how your personal data is used or your rights in relation to it — will be communicated to registered players via email notification and a prominent notice on the rusa89 platform at least 14 days before the change takes effect.

14.2  Non-material changes (such as typographical corrections, clarifications of existing practices, or updated contact details) may take effect immediately upon publication without prior notice.

14.3  The "Effective Date" displayed at the top of this Policy and in the hero section above indicates when the current version came into force. Previous versions of this Policy are available upon request by contacting our support team.

14.4  Your continued use of the rusa89 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you must cease using the platform and may request account closure as described in our Terms & Conditions.

15.1  If you have any questions, concerns, or complaints about this Privacy Policy or the way rusa89 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the rusa89 platform. Average response time: under 60 seconds.
• Email: [email protected] — please use the subject line "Privacy Inquiry" for data-related requests. Responses within 4 hours.
• Languages: Our support team can assist you in both English and Bahasa Indonesia. All formal data rights requests will be handled in English.
• Operating Hours: 24/7, including all Indonesian public holidays. Our team operates across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones to serve players across the entire Indonesian archipelago.

15.2  For formal data subject rights requests (access, erasure, portability, etc.), please include your registered username, the specific right you are invoking, and a brief description of your request. We will acknowledge receipt within 2 business days and complete the request within 30 calendar days.