Privacy Policy

Introduction

0rpk is committed to protecting the privacy and personal information of every individual who interacts with our online betting platform. We recognise that our Members — primarily residents of Indonesia accessing our Platform from Jakarta, Surabaya, Medan, Bandung, Bali, and beyond — entrust us with sensitive personal and financial information. That trust is something we take seriously, and this Policy reflects our commitment to handling that data responsibly and transparently.

This Policy applies to all personal data collected through the 0rpk website at 0rpk.cam, our mobile web interface, any communications you initiate with our customer support team, and any other interaction you have with the 0rpk brand in a digital context. It does not cover the data practices of any third-party websites, payment providers, or game studios that may be linked to or integrated with our Platform — those entities operate under their own independent privacy frameworks.

We encourage you to read this Policy carefully and in full. If you have questions about any provision, please contact us at support@0rpk.cam before using the Platform.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly. Examples include full name, national identity number, email address, mobile number, IP address, and bank account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, the Data Controller is 0rpk.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller, under a written agreement and subject to the Data Controller's instructions.
• "Member" / "User" — any individual who has registered an account on the 0rpk Platform, or who visits the Platform without registering.
• "Platform" — the 0rpk website, mobile interface, and all associated digital products operated at 0rpk.cam.
• "Cookie" — a small data file placed on a Member's device by the Platform for the purposes described in Article 10.
• "KYC" — Know Your Customer; the identity and age verification process mandatory for all Members.

Data We Collect

0rpk collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

We collect only the data that is necessary for the stated purposes. We do not collect Special Categories of Personal Data (such as biometric, health, religious, or political data) unless required by applicable law for compliance purposes.

How We Collect Data

0rpk collects Personal Data through the following channels and mechanisms:

• Direct Submission: Data you actively provide during account registration, KYC document upload, payment method setup, profile management, or customer support contact.
• Automated Technologies: Data collected automatically as you interact with the Platform, including via cookies, web beacons, log files, and analytics tools embedded in the Platform interface. See Article 10 for full details.
• Payment Providers: Confirmation data received from Indonesian banking institutions (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) following deposit or withdrawal transactions.
• Identity Verification Partners: Confirmation or rejection signals from third-party KYC service providers used to verify document authenticity and age.
• Fraud Prevention Services: Risk signals and behavioural flags from anti-fraud and anti-money-laundering screening tools integrated into our Platform.
• Public Sources: In limited circumstances, we may cross-reference publicly available information (such as public exclusion registers) to fulfil our compliance obligations.

Purposes of Processing

We process your Personal Data for the following specific purposes:

• Account Administration: Creating, maintaining, and managing your Member account, including authentication and profile management.
• Identity & Age Verification: Confirming that you are at least 21 years of age and are who you claim to be, in accordance with our KYC obligations.
• Payment Processing: Facilitating deposits and withdrawals through your chosen Indonesian bank or e-wallet, and maintaining accurate transaction records.
• Service Delivery: Enabling your access to our sports betting markets, live casino, togel (Indonesia's traditional numbers lottery), slot games, and other Platform products.
• Bonus & Promotion Management: Administering promotional offers, verifying eligibility, and calculating wagering compliance.
• Customer Support: Responding to queries, complaints, and technical support requests submitted through our support channels.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraud, money laundering, multi-accounting, bot activity, and other prohibited conduct.
• Responsible Gaming: Monitoring gameplay patterns to identify Members who may be experiencing gambling-related harm and facilitating self-exclusion or limit-setting requests. See our Responsible Gaming page.
• Legal & Regulatory Compliance: Meeting obligations under applicable anti-money-laundering (AML) rules, counter-terrorism financing (CTF) regulations, and any other applicable international compliance frameworks.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and product development.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates to Members who have opted in to receive such communications. You may withdraw consent at any time.

Legal Basis for Processing

Each instance of Personal Data Proce ssing relies on one or more of the following legal bases:

• Contractual Necessity: Processing your Identity Data, Contact Data, Financial Data, and Behavioural Data is necessary for the performance of the contract between you and 0rpk (our Terms & Conditions).
• Legal Obligation: Processing for KYC verification, AML screening, and regulatory reporting is required to comply with applicable laws and international licensing obligations.
• Legitimate Interest: We process Technical Data and Behavioural Data to detect fraud, improve security, optimise Platform performance, and conduct internal analytics — activities that serve the legitimate interests of 0rpk and our Members.
• Consent: Where we send marketing communications or use certain non-essential cookies, we rely on your freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Where processing is based on Legitimate Interest, we have conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms.

Data Sharing & Disclosure

0rpk does not sell your Personal Data to third parties for marketing purposes. However, we may share your data with the following categories of recipients under strict conditions:

• Payment Service Providers: Your Financial Data is shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process deposits and withdrawals. These providers act as Data Processors under our instruction.
• KYC Verification Partners: Your Identity Data and KYC Document Data are shared with third-party identity verification services to confirm document authenticity and age. These partners operate under strict confidentiality agreements.
• Game Providers: Limited Technical Data and session identifiers are shared with licensed game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Spribe) to deliver live casino, slot, and crash game content. These studios are independent Data Controllers and process data under their own privacy policies.
• Fraud Prevention Services: Anonymised behavioural signals may be shared with anti-fraud technology providers to maintain Platform security. No directly identifying data is shared without your explicit consent or legal obligation.
• Legal Authorities: We may disclose Personal Data to law enforcement, regulatory bodies, or courts when required by valid legal process, court order, or to protect the rights, property, or safety of 0rpk, our Members, or the public.
• Professional Advisers: We may share data with lawyers, auditors, and consultants who provide professional services to 0rpk, under strict confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, restructuring, or sale of assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

Data Retention

0rpk retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Retention periods vary by data category:

• Active Account Data: Identity, Contact, and Financial Data are retained for the duration of your active membership and for a minimum of 7 years following account closure to satisfy AML and financial record-keeping obligations.
• Transaction Records: All deposit, withdrawal, and betting records are retained for 7 years from the date of transaction, in line with standard financial compliance requirements.
• KYC Documents: Copies of identity documents and verification images are retained for 7 years following the last KYC verification event.
• Technical & Behavioural Data: Log files, session data, and behavioural analytics are typically retained for 2 years, except where longer retention is required for fraud investigation or legal proceedings.
• Marketing Consent Records: Records of consent (or withdrawal of consent) for marketing communications are retained indefinitely to demonstrate compliance.
• Support Communications: Customer support chat transcripts and email correspondence are retained for 3 years to resolve disputes and improve service quality.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

Data Security

0rpk employs industry-standard technical and organisational measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security). Sensitive data at rest, including KYC documents and Financial Data, is encrypted using AES-256 encryption.
• Access Controls: Personal Data is accessible only to authorised 0rpk personnel and third-party processors who require access to perform their functions. Access is governed by role-based permissions and logged for audit purposes.
• Regular Security Audits: Our Platform undergoes periodic security assessments, vulnerability scans, and penetration testing conducted by independent cybersecurity specialists.
• Secure Development Practices: Our engineering team follows secure coding guidelines and maintains a rigorous code review process to prevent injection attacks, XSS vulnerabilities, and other common threats.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within the timeframes required by applicable law.
• Employee Training: All 0rpk personnel with access to Personal Data receive regular training on data protection principles, security best practices, and their obligations under this Policy.

While we implement robust security measures, no system can guarantee absolute security. Members are responsible for maintaining the confidentiality of their own login credentials and must notify us immediately at support@0rpk.cam if they suspect unauthorised access to their account.

Cookies & Tracking Technologies

0rpk uses cookies and similar tracking technologies to enhance Platform functionality, analyse usage patterns, and deliver a personalised experience. A cookie is a small text file stored on your device when you visit the Platform.

We use the following types of cookies:

• Essential Cookies: These cookies are necessary for the Platform to function. They enable core features such as secure login, session management, and payment processing. Essential cookies cannot be disabled without severely limiting Platform functionality.
• Performance Cookies: These cookies collect anonymised information about how visitors use the Platform, including pages visited, session duration, and error messages encountered. This data helps us improve Platform performance and user experience.
• Functional Cookies: These cookies remember your preferences (such as language selection, preferred payment method, or bet slip settings) to provide a more personalised experience on return visits.
• Targeting Cookies: With your consent, these cookies may be used to deliver promotional content relevant to your interests, based on your interaction with the Platform. These cookies may also be set by third-party advertising partners.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may impair certain Platform features. To opt out of Performance and Targeting cookies, adjust your preferences in the cookie consent banner displayed on your first visit to the Platform.

For more information about cookies and how to manage them, visit www.allaboutcookies.org (external reference for informational purposes only).

Third-Party Services

The 0rpk Platform integrates with or links to third-party services that operate under their own independent privacy policies. We are not responsible for the data practices of these external entities. Third-party services include:

• Payment Providers: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja each maintain their own privacy policies governing the collection and processing of financial data.
• Game Studios: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft (PG Soft), and Spribe operate independently and may collect Technical Data during gameplay sessions. Refer to each studio's privacy policy for details.
• Social Media Platforms: If you interact with 0rpk content shared on social media (e.g., Facebook, Twitter, Instagram, Telegram), those platforms may collect data about that interaction under their own policies.

Before submitting Personal Data to any third-party service accessed through our Platform, we encourage you to review that service's privacy policy.

Your Rights

As a data subject whose Personal Data is processed by 0rpk, you hold the following rights:

• Right of Access: You may request confirmation of whether we hold Personal Data about you, and obtain a copy of that data in a structured, commonly used format.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. You can update most Contact Data and Financial Data directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data, subject to our legal retention obligations. Where we are required by law to retain data (e.g., transaction records for AML compliance), erasure may not be possible.
• Right to Restriction of Processing: You may request that we limit the processing of your Personal Data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on Legitimate Interest.
• Right to Data Portability: Where processing is based on Consent or Contractual Necessity and is carried out by automated means, you may request a machine-readable copy of your Personal Data for transfer to another service provider.
• Right to Object: You may object to processing based on Legitimate Interest. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on Consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: If you believe we have mishandled your Personal Data, you have the right to lodge a complaint with a competent data protection authority.

To exercise any of these rights, please contact us at support@0rpk.cam with the subject line "Data Subject Request". We will respond within 30 calendar days of receiving a valid request.

Minors

The 0rpk Platform is intended exclusively for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

If we become aware that a Member is under 21 years of age, we will immediately suspend the account, void any outstanding bets, and initiate the account closure process in accordance with our Terms & Conditions. Any funds deposited by a minor will be returned to the source account where possible, and all associated Personal Data will be deleted.

If you are a parent or guardian and believe that your child has provided Personal Data to 0rpk, please contact us immediately at support@0rpk.cam so that we can take appropriate action.

International Data Transfers

0rpk operates as an internationally licensed online gaming platform. While our primary Member base resides in Indonesia, certain categories of Personal Data may be transferred to, processed in, or stored on servers located in jurisdictions outside Indonesia for the purposes described in this Policy.

Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities;
• Adequacy decisions recognising that the destination jurisdiction provides an adequate level of data protection;
• Binding Corporate Rules or Codes of Conduct that govern intra-group data transfers; or
• Your explicit consent to the transfer, where legally permissible.

By using the 0rpk Platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described above.

Policy Amendments

0rpk reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Where amendments are material and affect how we process your Personal Data, we will provide reasonable advance notice via the Platform interface, email notification, or both. Where required by applicable law, we will obtain your renewed consent before applying the updated Policy to data collected prior to the amendment.

Your continued use of the Platform following the effective date of an amendment constitutes your acceptance of the revised Policy. We recommend that you review this page periodically to stay informed of any changes.

Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your data subject rights, please contact the 0rpk Data Protection Team:

For general customer support, account assistance, or responsible gaming resources, please refer to our FAQ or Responsible Gaming pages.