At yyrr, your privacy is not a compliance checkbox — it is a foundational commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information.
Your Privacy Matters: This Privacy Policy applies to all services provided by yyrr at https://yyrr.best and governs how we handle the personal data of all registered Members and platform visitors. By using the yyrr platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us to close your account.
yyrr ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who interacts with our online gaming platform. This Privacy Policy sets out in clear terms the categories of personal data we process, the purposes for which we process it, the parties with whom we may share it, the safeguards we apply to protect it, and the rights available to you as a data subject.
yyrr operates as an international online gaming platform primarily serving players in Indonesia. Our platform offers casino games, live dealer experiences, sports betting (including markets on BRI Liga 1, the EPL, and international fixtures), and traditional lottery services including togel (Indonesia's traditional numbers lottery). The personal data we collect is directly connected to the delivery and security of these services.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together form the complete framework governing your relationship with yyrr.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial data, device identifiers, and behavioral data generated by platform activity. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, and analysis, whether by automated or manual means. |
| "Data Subject" | The identified or identifiable natural person whose Personal Data is being processed — in the context of yyrr, this means any registered Member or platform visitor. |
| "Controller" | The entity that determines the purposes and means of processing Personal Data — that is, yyrr and its operating entity. |
| "Processor" | A third party that processes Personal Data on behalf of yyrr and under yyrr's documented instructions, such as a payment gateway or cloud hosting provider. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their Personal Data for one or more stated purposes. |
| "KYC" | Know Your Customer — the identity verification process required before certain account features (including withdrawals) are activated, involving the submission and review of government-issued identity documents. |
yyrr collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect include:
Minimization Principle: yyrr does not collect personal data beyond what is strictly necessary for the purposes described in this Policy. We do not collect sensitive categories of data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where explicitly required by applicable law or regulatory obligation and with your express consent.
yyrr collects personal data through the following channels and mechanisms:
The majority of the personal data yyrr holds is provided directly by you at the point of account registration, during the KYC verification process, when you make deposits or request withdrawals, when you contact our support team, or when you voluntarily participate in promotions or surveys.
When you access and use the yyrr platform, certain technical and behavioral data is collected automatically through server logs, cookies, web beacons, and similar tracking technologies. This includes your IP address, device information, session activity, and browsing behavior within the platform. See Clause 10 for full details on our use of cookies and tracking technologies.
When you transact through local Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or digital wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), our payment processing partners may share transaction confirmation data with yyrr to reconcile deposits and process withdrawal requests.
Where yyrr uses third-party identity verification services to assist with KYC document authentication, those providers may return verification results and document authenticity signals to yyrr. yyrr selects only reputable, security-certified verification partners and governs their access through formal data processing agreements.
In limited circumstances — primarily for fraud prevention, anti-money-laundering screening, and sanctions compliance — yyrr may cross-reference Member data against publicly available databases, watchlists, or commercially licensed risk-screening datasets.
yyrr processes your personal data for the following specific, documented purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your yyrr account; authenticating your identity at login; managing password resets and account recovery. |
| Service Delivery | Processing bets, settling gaming results, crediting winnings, and delivering all casino, sportsbook, and togel services you access through the platform. |
| Payment Processing | Facilitating IDR deposits and withdrawals through your chosen Indonesian bank or e-wallet; reconciling transactions; investigating payment disputes. |
| Identity Verification (KYC) | Verifying your identity and age (21+) to comply with platform integrity standards and to prevent fraud and underage gambling. |
| Fraud & Security | Detecting and preventing fraud, bonus abuse, money laundering, account takeover, and other prohibited conduct described in the Terms & Conditions. |
| Responsible Gaming | Monitoring gaming behavior to identify at-risk patterns; implementing Member-requested deposit limits, session reminders, and self-exclusion measures. |
| Customer Support | Responding to Member inquiries, resolving complaints, and maintaining a record of support interactions for quality and audit purposes. |
| Marketing & Promotions | Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to marketing communications — including seasonal promotions for Idul Fitri, Ramadhan, and major sporting events. |
| Platform Improvement | Analyzing aggregated behavioral data to improve platform performance, optimize user experience, and develop new features and product offerings. |
| Legal Compliance | Meeting obligations imposed by applicable law, regulatory requirements, court orders, and lawful government requests. |
yyrr processes your personal data on the following legal bases, depending on the specific purpose of each processing activity:
Processing that is necessary to perform our contractual obligations to you as a yyrr Member — including account management, service delivery, payment processing, and KYC verification — is carried out on the basis of contractual necessity. Without this processing, yyrr cannot deliver the services you have requested.
Processing for fraud prevention, platform security, anti-money-laundering screening, responsible gaming monitoring, and platform analytics is carried out on the basis of yyrr's legitimate interests. In each case, yyrr has assessed that its legitimate interests are not overridden by your privacy rights, given the nature and proportionality of the processing involved.
Processing for marketing communications and optional personalization features is carried out on the basis of your explicit consent. You may withdraw consent for marketing communications at any time by contacting yyrr at [email protected] or by using the unsubscribe mechanism included in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Where yyrr is required to process personal data in order to comply with a legal obligation — such as responding to a lawful regulatory inquiry, fulfilling anti-money-laundering record-keeping requirements, or complying with a court order — that processing is carried out on the basis of legal obligation.
yyrr does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose involved:
To facilitate deposits and withdrawals, yyrr shares necessary transaction data with our partner payment processors and the relevant Indonesian banking institutions or e-wallet providers (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja). These entities receive only the data required to process the specific transaction and are governed by their own privacy frameworks.
KYC document images and verification requests are shared with our contracted identity verification service providers. These providers act as data processors under yyrr's instructions and are prohibited from using your data for any purpose other than the specific verification task assigned.
Certain game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive session-level technical data to facilitate game delivery and resolve technical disputes. These providers do not receive full Member identity data.
yyrr may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or in connection with the prevention or investigation of fraud, money laundering, or other criminal activity. yyrr will, where legally permissible, notify affected Members of such disclosure.
In the event of a merger, acquisition, restructuring, or sale of all or part of yyrr's business, personal data held by yyrr may be transferred to the acquiring or successor entity. Any such transfer will be subject to confidentiality obligations, and affected Members will be notified in advance where reasonably practicable.
No Third-Party Marketing Sharing: yyrr does not share your personal data with any unaffiliated third party for the purpose of that third party's own marketing or advertising activities. If you receive unsolicited marketing communications purportedly from yyrr partners, please report them to us at [email protected] immediately.
yyrr retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any applicable legal retention obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years after closure, to meet audit and anti-money-laundering obligations. |
| KYC Documents | 5 years from the date of submission or from account closure, whichever is later. |
| Transaction Records | 5 years from the date of each transaction, in line with standard financial record-keeping requirements. |
| Gaming & Bet History | 3 years from the date of each gaming session or bet, or the duration of the account if shorter. |
| Support Correspondence | 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes. |
| Marketing Preferences | Until you withdraw consent or close your account, whichever occurs first. |
| Technical & Log Data | Up to 12 months from collection, unless retained longer for ongoing security investigations. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with yyrr's data destruction procedures. Anonymized, aggregated data that can no longer identify any individual may be retained indefinitely for analytical purposes.
yyrr implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
Your Role in Security: While yyrr employs robust technical safeguards, account security also depends on your actions. Keep your password strong and unique, enable two-factor authentication, do not share your login credentials with any third party, and contact [email protected] immediately if you suspect unauthorized access to your account.
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognize your device across visits, remember your preferences, and collect usage data. yyrr uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) on its platform.
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for platform operation — session authentication, security tokens, load balancing. Cannot be disabled without breaking platform functionality. |
| Performance | Collect anonymous usage data to help us understand how Members navigate the platform, identify technical issues, and improve platform speed and reliability. |
| Functional | Remember your preferences such as preferred language, last visited game category, and responsible gaming settings. |
| Analytics | Aggregated behavioral data used to measure platform performance, identify popular game categories, and optimize promotional content. Data is anonymized before analysis. |
You may control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or selectively accept cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Disabling performance or analytics cookies will not affect your ability to play games or transact on the platform.
As a data subject, you hold the following rights with respect to the personal data yyrr holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". yyrr will respond within 30 days of receipt of a valid request.
Request a copy of the personal data yyrr holds about you and information about how it is processed.
Request correction of any inaccurate or incomplete personal data held in your yyrr account.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that yyrr restrict processing of your data while a dispute over accuracy or legitimacy of processing is being resolved.
Request a structured, machine-readable copy of personal data you have provided to yyrr, for transfer to another service provider.
Object to processing based on legitimate interests, including profiling for marketing purposes. You may also withdraw marketing consent at any time.
Please note that certain rights are subject to limitations — for example, yyrr cannot erase data that it is legally required to retain for anti-money-laundering or audit purposes. In such cases, yyrr will explain the specific limitation that applies to your request.
yyrr's platform is strictly for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step in the yyrr registration and KYC process, and all accounts are subject to age validation.
If yyrr discovers or is notified that an account has been registered by a person under the age of 21, that account will be immediately suspended, all associated personal data will be reviewed and deleted in accordance with our data minimization obligations, and any transactions will be voided and reversed where technically possible.
If you are a parent or guardian and believe your child has registered on the yyrr platform, please contact us immediately at [email protected] so that we can take prompt remedial action.
yyrr operates as an international platform and may store or process Member data on servers located outside of Indonesia. In such cases, yyrr ensures that appropriate safeguards are in place to protect the security and integrity of transferred data, including contractual data protection clauses with all offshore processors and the use of certified data centers with recognized security standards.
Where personal data is transferred to jurisdictions that do not provide an equivalent level of data protection to Indonesia's applicable standards, yyrr implements additional safeguards — including standard contractual clauses and binding corporate rules — to ensure that your data receives an adequate level of protection regardless of where it is processed.
yyrr reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, yyrr will notify registered Members via email to their registered address and will post a prominent notice on the platform not less than 14 days before the updated Policy takes effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how yyrr protects your personal data. Your continued use of the platform after a Policy update takes effect constitutes acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way yyrr processes your personal data, please contact our Data Privacy team using the details below:
Privacy Inquiries: [email protected]
Subject Line: Use "Privacy Policy Inquiry" or "Data Rights Request" for faster routing
Response Time: yyrr targets an initial response within 48 hours for privacy-related inquiries
Support Hours: 24 hours a day, 7 days a week — Indonesian-speaking agents available at all times (WIB, WITA, and WIT time zones)
For responsible gaming-related data requests — such as self-exclusion history or deposit limit records — please mark your email subject line as "Responsible Gaming Data Request" and visit our Responsible Gaming page for additional guidance and support resources.
Privacy protection at yyrr goes beyond policy text. These are the concrete commitments and technical measures that safeguard your personal data every day.
Every byte of data exchanged between your device and yyrr's servers travels through an SSL-encrypted channel. Your login credentials, financial details, and personal information are never transmitted in plain text.
Your personal data is accessible only to yyrr personnel with a documented operational need. Role-based access controls, audit logging, and two-factor authentication protect all internal systems handling Member data.
yyrr does not sell, rent, or trade your personal data to any third party for commercial purposes. Your information is used solely to deliver and improve the services you have chosen to access on the platform.
yyrr does not hold your data indefinitely. Every category of personal data has a documented retention period, after which it is securely deleted or anonymized. We keep only what we need, for only as long as we need it.
You can request access to, correction of, or deletion of your personal data at any time. You can also withdraw marketing consent, request data portability, or object to specific processing activities — all by contacting our support team.
yyrr's platform runs on security-certified infrastructure with regular penetration testing, vulnerability assessments, and a documented incident response plan — so that if something unexpected occurs, we are prepared to respond swiftly and transparently.
Our support team is available 24/7 to answer any questions about your personal data or this Privacy Policy. You can also review our full Terms & Conditions or visit our FAQ page for answers to common platform questions.