Privacy Policy — raja10

raja10 operates the online betting and casino platform accessible at https://raja10.app (the "Platform"). For the purposes of this Privacy Policy, raja10 and its licensed operating entity act as the data controller — meaning we determine the purposes and means of processing your personal data.

raja10 is designed specifically for English-preference players in Indonesia, providing sports betting, live casino games, slot titles from world-class studios including Pragmatic Play, Evolution Gaming, and NetEnt, togel (Indonesia's traditional numbers lottery) markets, online poker, and esports wagering. Our operations are conducted under an international gaming licence.

This Privacy Policy applies to all visitors, registered players, and former members of the raja10 Platform. It governs all personal data we collect through the website, via customer support interactions, and through any automated technical systems integral to the Platform's operation.

raja10 collects several categories of personal data, depending on how you interact with the Platform. These categories are set out below:

We do not intentionally collect sensitive personal data (such as race, religion, health information, or political opinions). If you voluntarily disclose such information in a support interaction, we will handle it with heightened care and delete it once the interaction is resolved.

raja10 collects personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your account profile.
• Automatically: When you visit the Platform, our servers automatically record Technical Data and Usage Data via server logs, session tracking, and first-party analytics tools.
• From third-party payment processors: When you initiate a deposit or withdrawal through a local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment provider may share transaction confirmation data with us to reconcile your account balance.
• From identity verification partners: In some cases, raja10 engages a licensed KYC/AML service provider to cross-reference the identity documents you submit against public records or watchlist databases. This is performed solely for regulatory compliance and fraud prevention.
• From game studio providers: Game providers such as Pragmatic Play, Evolution Gaming, and NetEnt may share game session outcome data with raja10 for settlement and dispute resolution purposes.

raja10 uses your personal data for the following purposes. Each purpose is linked to a specific legal basis, which is described in clause 5.

• Account creation and management: To establish and maintain your registered Account, verify your identity and age (21+ requirement), and enable you to access all Platform features.
• Transaction processing: To process deposits and withdrawals in IDR via local Indonesian banks and e-wallets, reconcile your Account Balance, and maintain an accurate financial ledger.
• Regulatory compliance and KYC: To fulfil our Know Your Customer, Anti-Money Laundering (AML), and counter-fraud obligations under our international gaming licence and applicable financial regulations.
• Customer support: To respond to your enquiries, resolve disputes, process responsible gaming requests (such as deposit limit changes or self-exclusion), and maintain a record of support interactions.
• Platform security and fraud prevention: To detect, investigate, and prevent unauthorised access, multi-accounting, bonus abuse, match-fixing, and other forms of prohibited conduct as defined in our Terms & Conditions.
• Personalisation and platform improvement: To analyse usage patterns, tailor game recommendations, optimise the user interface for Indonesian players, and improve the overall Platform experience.
• Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and platform updates — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time from your Account settings or by contacting support.
• Legal proceedings: To establish, exercise, or defend legal claims in connection with any dispute involving your Account or use of the Platform.

raja10 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to deliver the services you have registered to receive — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with KYC, AML, and responsible gaming obligations imposed by our international licensing authority.
• Legitimate interests: Processing conducted in raja10's legitimate interests — such as fraud prevention, platform security, product analytics, and legal claims — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential analytics cookies, which requires your explicit opt-in and may be withdrawn at any time without affecting the lawfulness of prior processing.

raja10 does not sell your personal data. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to binding contractual obligations:

• Payment processors and banking partners: Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the minimum data required to process your specific transaction.
• KYC and AML service providers: Licensed identity-verification and watchlist-screening providers who process your ID documents and personal data solely on raja10's instructions for regulatory compliance purposes.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session data necessary for game operation, RNG certification, and dispute resolution.
• IT infrastructure and hosting providers: Cloud hosting and content delivery network providers that store and transmit Platform data on our behalf, subject to strict data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or request from a competent regulatory or law enforcement authority, raja10 may disclose your data. We will notify you of such disclosures where legally permitted to do so.
• Professional advisors: Lawyers, auditors, and insurers who require access to data in the course of providing their professional services to raja10, bound by duties of confidentiality.

Given that raja10 holds an international gaming licence and engages global technology providers, your personal data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, raja10 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the relevant data protection authority, incorporated into our agreements with processors located in jurisdictions that do not provide an equivalent level of data protection to Indonesia.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by the licensing authority overseeing raja10's operations.
• Binding corporate rules where data is shared within a group of companies operating under a common governance framework.

You may request details of the specific safeguards applied to any cross-border transfer of your personal data by contacting our Data Protection contact at the details provided in clause 15.

raja10 uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, and to understand how players navigate the site. The following cookie categories are used:

You can manage your cookie preferences at any time from within your Account settings. Note that disabling analytics or functional cookies may affect the quality of your experience on the Platform but will not prevent you from accessing core betting and gaming features.

raja10 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following retention schedule:

• Active account data: Retained for the full duration of your membership on the Platform.
• Post-closure retention: Following account closure (including self-exclusion), Identity Data, Financial Data, and Transaction Data are retained for a minimum of 5 years to comply with AML record-keeping requirements under our international licence. This period may be extended if a legal claim or regulatory investigation is pending.
• KYC documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable law.
• Customer support communications: Retained for 3 years from the date of the last interaction, or longer if the interaction relates to an active dispute or legal matter.
• Marketing preferences: Records of opt-ins and opt-outs are retained indefinitely to evidence your consent history and to ensure we honour your choices in future communications.
• Technical and usage logs: Retained for 12 months on a rolling basis for security monitoring purposes, then deleted or anonymised.

Once the applicable retention period has elapsed and no legal hold is in place, data is securely deleted or permanently anonymised so that it can no longer be associated with you.

raja10 implements a layered security architecture designed to protect your personal data against accidental loss, unauthorised access, alteration, and disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the raja10 servers.
• AES-256 encryption at rest for all sensitive personal and financial data stored on our servers.
• Role-based access control (RBAC) ensuring that internal staff can only access the data necessary for their specific job function.
• Multi-factor authentication (MFA) for all internal administrative access to systems holding player data.
• Regular independent penetration testing and vulnerability assessments conducted by third-party security specialists.
• Continuous intrusion detection and monitoring of network traffic and system access logs, with automated alerts for anomalous activity.
• Segregated player funds — account balances are held in accounts separated from raja10's operational funds, protecting your IDR balance even in the event of financial difficulty.

You may exercise any of the data rights described in the "Your Data Rights" section above by submitting a request through one of the following channels:

• Live Chat: Available 24/7 from within your Account dashboard. This is the fastest channel for routine requests such as marketing opt-outs or preference updates.
• Email: support@raja10.app — for formal data access, erasure, or portability requests, please email with the subject line "Data Rights Request" and include your registered Account username and the specific right you wish to exercise.

raja10 aims to respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day window.

We will not charge a fee for responding to data rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case we reserve the right to charge a reasonable administrative fee or to refuse the request, with written reasons provided.

Where we are unable to fulfil a request — for example, because doing so would conflict with our legal retention obligations — we will explain the specific reason in writing and inform you of any available avenues for escalation or complaint.

The raja10 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. Our registration process is designed to verify age at the point of sign-up, and our KYC process provides an additional layer of age verification prior to any withdrawal.

If we become aware that personal data has been collected from an individual under 21, we will immediately suspend the relevant Account, void any associated transactions, and permanently delete the data held. If you believe that a minor has registered on the Platform, please contact our support team immediately at support@raja10.app.

Parents and guardians who are concerned about a minor's access to online gambling platforms are encouraged to make use of parental control software. Our Responsible Gaming page contains further guidance on protecting young people from gambling-related harm.

The raja10 Platform does not contain links to external third-party websites. All navigational links on the Platform direct you to pages within the raja10 domain (raja10.app). In the event that game studio interfaces (such as those provided by Pragmatic Play, Evolution Gaming, or other integrated providers) open within an embedded frame on our Platform, those interfaces are subject to the respective studio's own privacy practices as they relate to game session data.

raja10 is not responsible for the privacy practices of any third-party technology partner whose product is embedded within our Platform. However, we contractually require all such partners to process player data only for the purposes of game delivery and not to use session data for independent marketing or profiling purposes.

raja10 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes — such as introducing a new category of data collection or a new sharing arrangement with a third party — we will notify registered players via email and display a prominent notice on the Platform for a minimum of 14 days prior to the change taking effect.

Minor updates — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — may be made without advance notice, although the "Last Reviewed" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the raja10 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should cease using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or complaints regarding how raja10 handles your personal data, or if you wish to exercise any of your data rights, please contact us using the details below:

• Email: support@raja10.app
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Response time: Within 30 calendar days of receipt
• Support hours: 24/7 WIB (Western Indonesia Time, UTC+7), including during Idul Fitri, Ramadhan, and all Indonesian public holidays

We take all privacy complaints seriously. If you are not satisfied with our response to your complaint, you may escalate the matter to the data protection supervisory authority in your jurisdiction or to the licensing authority overseeing raja10's international gaming licence.