Data Protection

rajapg Privacy Policy

At rajapg, your privacy is treated as a core obligation, not an afterthought. This Privacy Policy explains exactly what personal data we collect, how we use it, who we share it with, and what rights you hold over your information as a user of our platform.

Last Updated: January 2026  ·  Effective From: January 2026

256-Bit SSL Encryption

All data transmitted between your browser and rajapg servers is encrypted using industry-standard 256-bit SSL technology. Your personal and financial information is never transmitted in plain text.

No Third-Party Ad Selling

rajapg does not sell, rent, or trade your personal data to advertising networks or data brokers. Your information is used solely to operate, secure, and improve your platform experience.

Full User Rights

You have the right to access, correct, and request deletion of your personal data at any time. Submit a data request to our support team and we will respond within 30 days.

KYC Data Security

Identity documents submitted for KYC verification (including KTP copies) are stored using AES-256 encryption. Access is restricted to authorized compliance staff only.

Payment Data Isolation

Financial transaction data processed through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment partners is handled under their respective security frameworks and is never stored on rajapg servers in unencrypted form.

Data Retention Limits

We retain your personal data only for as long as your account is active and as required by applicable regulations. Upon account closure, data is purged or anonymized according to the schedule set out in this policy.

1 Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

  • "Platform" — the rajapg website at https://rajapg.cam and all associated subdomains, mobile interfaces, and services.
  • "Personal Data" — any information that identifies or can reasonably identify a natural person, directly or indirectly. This includes name, email address, phone number, IP address, device identifiers, and government-issued ID numbers.
  • "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
  • "Data Controller" — rajapg, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
  • "Data Processor" — any third party that processes Personal Data on behalf of rajapg under a data processing agreement.
  • "User" / "You" / "Your" — any individual who accesses the Platform or creates a rajapg account.
  • "KYC" — Know Your Customer; the identity and age verification process required before withdrawal functionality is activated.
  • "Cookies" — small data files stored on your device by your browser when you visit the Platform.

2 Data Controller Information

rajapg operates as the Data Controller for all Personal Data collected through the Platform. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable international data protection standards.

For all privacy-related inquiries, data access requests, or complaints, you may contact our Data Protection team at the address provided in Section 14 of this Policy. We aim to acknowledge all privacy requests within 5 business days (WIB) and resolve them within 30 days.

Scope: This Privacy Policy applies to all users of the rajapg Platform regardless of geographic location. It specifically addresses the context of Indonesian users whose data is processed in connection with the Platform's services.

3 Information We Collect

3.1 Information You Provide Directly

When you register an account or interact with the Platform, you provide us with the following categories of Personal Data:

Category Examples When Collected
Identity Data Full legal name, date of birth, nationality, KTP number Registration & KYC verification
Contact Data Email address, phone number, residential address Registration
Financial Data Bank account details (BCA, BRI, BNI, Mandiri), e-wallet IDs (OVO, DANA, GoPay) Deposit & withdrawal setup
KYC Documents KTP scan, proof of address, selfie with ID Pre-withdrawal verification
Support Communications Chat logs, email correspondence, support ticket contents When you contact support

3.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical data:

  • Device & Access Data: IP address, device type, operating system, browser type and version, screen resolution.
  • Usage Data: Pages visited, time on page, click paths, game sessions, bet history, deposit and withdrawal activity.
  • Geolocation Data: Approximate location derived from your IP address (not precise GPS location).
  • Cookie & Tracking Data: Session identifiers, preference cookies, and analytics data as described in Section 10.

3.3 Information From Third Parties

We may receive supplementary identity verification data from our KYC service providers when you submit verification documents. Payment transaction status information is received from our payment processing partners including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.

4 How We Use Your Information

rajapg uses your Personal Data for the following purposes:

  • Account creation and management: Registering your account, verifying your identity, and maintaining your account records.
  • Service delivery: Processing your bets, deposits, and withdrawals; providing access to games and sportsbook markets.
  • KYC compliance: Verifying that you meet the 21+ age requirement and fulfilling anti-money-laundering obligations.
  • Customer support: Responding to your inquiries, resolving disputes, and processing complaints.
  • Security & fraud prevention: Detecting and preventing unauthorized access, fraudulent activity, multi-accounting, and money laundering.
  • Platform improvement: Analyzing usage patterns to improve site performance, user experience, and product offerings.
  • Promotional communications: Sending bonus offers, promotions, and account notifications (only if you have opted in or where permitted by applicable law).
  • Regulatory compliance: Meeting our obligations under the terms of our international gaming license and applicable financial regulations.
  • Responsible gaming: Monitoring for signs of problem gambling and enforcing self-exclusion requests, deposit limits, and session time-out controls.

6 Data Sharing & Disclosure

rajapg does not sell your Personal Data. We share data only in the following circumstances and only to the extent necessary:

6.1 Service Providers (Data Processors)

We engage third-party service providers who process data on our behalf under binding data processing agreements. These include:

  • Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja — for transaction processing only.
  • KYC verification providers: For automated and manual identity document verification.
  • Cloud hosting providers: For secure server infrastructure.
  • Analytics providers: For aggregated, anonymized usage analytics (no personally identifiable data is shared with analytics providers).
  • Customer support platforms: For live chat and ticket management.

6.2 Legal Disclosure

We may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts when required by law, legal process, or in good faith to protect the rights, property, or safety of rajapg, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to the successor entity. We will notify you of any such transfer and ensure the successor adheres to this Privacy Policy or provides equivalent protections.

No data selling guarantee: rajapg will never sell, rent, or license your Personal Data to advertising agencies, data brokers, or third-party marketing companies — now or in the future.

7 International Data Transfers

As an internationally operated platform serving Indonesian users, some of your Personal Data may be stored or processed on servers located outside Indonesia. When we transfer data internationally, we apply appropriate safeguards including:

  • Standard contractual clauses or equivalent data transfer mechanisms between rajapg and receiving entities.
  • Contractual requirements obligating receiving parties to provide the same level of data protection as described in this Policy.
  • Encryption of data in transit and at rest, regardless of where it is stored.

By using the Platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Indonesia. We take all reasonable steps to ensure such transfers are conducted securely and lawfully.

8 Data Retention

We retain your Personal Data for as long as your account remains active and for a defined period thereafter, as required by our regulatory and legal obligations. The following general retention schedule applies:

Data Category Retention Period Reason
Account & Identity Data Duration of account + 5 years AML/KYC regulatory requirement
Transaction Records Duration of account + 5 years Financial audit and compliance
KYC Documents Duration of account + 5 years Regulatory verification obligations
Support Communications 3 years from last interaction Dispute resolution and service quality
Usage & Analytics Data 24 months (anonymized after 12 months) Platform improvement and security
Marketing Consent Records Duration of consent + 3 years Proof of lawful marketing

When the applicable retention period expires, Personal Data is either securely deleted or irreversibly anonymized so that it can no longer be linked to you as an individual.

9 Security Measures

rajapg employs a layered security architecture to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction. Our key security measures include:

  • Transport Layer Security (TLS/SSL): All communications between your browser and our servers are encrypted using TLS 1.2 or higher. Our SSL certificate is verified and maintained continuously.
  • Data encryption at rest: Sensitive data stored on our servers — including KYC documents and financial records — is encrypted using AES-256.
  • Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with data access undergo background screening and are bound by confidentiality obligations.
  • Two-factor authentication: Staff administrative accounts use mandatory two-factor authentication. We encourage all users to enable 2FA on their own accounts as well.
  • Penetration testing: Our platform undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities proactively.
  • Incident response: We maintain a formal data breach response plan. In the event of a breach affecting your Personal Data, we will notify you promptly and take all necessary remedial steps.

Your role in security: While we implement robust technical safeguards, you also have a responsibility to keep your account credentials confidential. Never share your password. If you believe your account has been compromised, contact rajapg support immediately.

10 Cookies & Tracking Technologies

rajapg uses cookies and similar technologies to deliver a functional, personalized, and secure user experience. The following categories of cookies are used on the Platform:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They manage your login session, maintain your account state, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing the Platform's core functionality.

10.2 Functional Cookies

Functional cookies remember your preferences — such as language settings, preferred payment method, and display options — so that you do not need to re-enter them on each visit.

10.3 Analytics Cookies

We use anonymized analytics data to understand how users navigate the Platform, which features are most popular, and where usability improvements are needed. This data is aggregated and cannot be used to identify you as an individual.

10.4 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies may prevent you from logging into your account or using core Platform features.

11 Your Data Rights

As a user of rajapg, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our Data Protection team using the details in Section 14.

Right of Access

You may request a copy of all Personal Data we hold about you. We will provide this within 30 days of a verified request.

Right to Rectification

If any data we hold is inaccurate or incomplete, you may request that we correct it. Minor corrections can be made directly through your account settings.

Right to Erasure

You may request deletion of your Personal Data where we no longer have a lawful basis to retain it. Note that regulatory retention obligations may prevent full erasure in some cases.

Right to Restriction

You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is under review.

Right to Data Portability

Where processing is based on your consent or a contract, you may request your data in a structured, machine-readable format (CSV or JSON).

Right to Object

You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease processing unless we can demonstrate compelling legitimate grounds.

We will respond to all verified data rights requests within 30 calendar days. In complex cases we may extend this by a further 30 days, with prior notification to you. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.

12 Minors & Age Restriction

rajapg strictly prohibits the use of its Platform by any person under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years of age. If we become aware that a user is under 21, we will immediately suspend their account, void all bets, return any deposited funds after deducting bonuses, and delete all associated Personal Data.

If you believe that a minor has registered an account on rajapg, please contact us immediately at the address provided in Section 14. We take underage gambling prevention extremely seriously and will act on all credible reports without delay.

21+ Only. By registering on rajapg, you confirm that you are at least 21 years of age. Age is verified during the KYC process and at any other point we reasonably deem necessary.

13 Changes to This Policy

rajapg reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will:

  • Update the "Last Updated" date at the top of this Policy.
  • Notify registered users via email to the address on file.
  • Display a prominent notice on the Platform for a period of no less than 14 days following the update.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you disagree with any changes, you may close your account by contacting customer support prior to the effective date.

14 Contact & Data Requests

For any privacy-related questions, data access requests, data deletion requests, or complaints, please contact our Data Protection team through the following channels:

  • Email: [email protected] (plain text — not a clickable link)
  • Live Chat: Available 24/7 on the rajapg Platform homepage
  • Response Time Target: Acknowledgement within 5 business days (WIB); full resolution within 30 days
  • Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri, Nyepi, and Indonesian Independence Day (17 August)

When submitting a data request, please include your registered account email address and a description of your request. We may ask you to verify your identity before processing any access, rectification, or erasure request.

For information about our full terms of service, visit the Terms & Conditions page. For information about our responsible gaming tools and self-exclusion options, visit the Responsible Gaming page.

Explore More About rajapg

Our Privacy Policy works hand-in-hand with our Terms & Conditions and Responsible Gaming Policy. Together, these documents define how rajapg operates as a transparent, user-first betting platform built for Indonesian players.