Rp66 Privacy Policy — Our Commitment to Protecting Your Personal Data

1 Introduction & Scope of This Privacy Policy

Rp66 is an online casino platform committed to protecting the privacy and security of all users' personal information in Malaysia. We understand that your trust is our most valuable asset, and safeguarding your personal data is a responsibility we take seriously.

This Privacy Policy ("Policy") explains in detail:

• The types of personal information we collect from you
• Purpose and legal basis for the use of that information
• Parties that may receive your information under certain circumstances
• Technical and organisational security measures we implement
• Your personal data rights and how to exercise them

This Policy is drafted in accordance with applicable data protection laws and industry best practices. rp66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated to you via a notice on the platform or by email.

2 Personal Information We Collect

Rp66 collects various types of information from you depending on how you interact with our platform. This collection is necessary to provide services that are safe, fair, and compliant with legal requirements.

We may also collect information when you contact our customer support team, participate in promotions or competitions, or provide feedback about the platform. All information is collected directly from you or generated automatically while you use our services.

3 How We Use Your Personal Information

Rp66 uses collected personal information for lawful and transparent purposes. We do not use your data for any purpose other than those stated in this Privacy Policy without first obtaining your consent.

Your information is used for the following purposes:

• Account management: Registering, verifying, and maintaining your player account, including processing deposit and withdrawal requests.
• KYC and legal compliance: Fulfilling legal obligations related to identity verification, anti-money laundering (AML), and reporting requirements set by relevant authorities.
• Platform security: Detecting and preventing fraud, unauthorised access, account misuse, and activities that violate our Terms and Conditions.
• Personalise experience: Personalising game recommendations, bonus offers, and platform content based on your preferences and playing habits.
• Service communications: Sending important notices related to your account, security updates, transaction confirmations, and other relevant service information.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support where needed.
• Platform improvement: Analysing aggregated usage data to improve the performance, usability, and service quality of rp66.

All data processing is carried out on a valid legal basis — whether it is necessary for the performance of a contract with you, to comply with a legal obligation, or based on the legitimate interests of rp66 that do not override your rights and interests.

4 Information Sharing & Disclosure

Rp66 does not share your personal information with third parties except in the limited circumstances outlined below. All data sharing is governed by strict confidentiality agreements and specific use purposes.

• Third-party service providers: We share necessary information with payment providers, gaming software providers, and technical service providers who help us operate the platform. All such parties are bound by confidentiality obligations and may only use your data for the specified purposes.
• Authorities and law enforcement: rp66 will disclose information to authorities when required by law, court order, or to fulfil compliance obligations including AML and KYC requirements.
• Security protection: Information may be shared with relevant parties when we believe such disclosure is necessary to prevent security threats, protect the rights and property of rp66, or ensure the safety of other users.
• Business restructuring: If rp66 is involved in any merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to appropriate privacy protections.

5 Security & Data Protection

Rp66 continuously invests in the latest security technologies and procedures to ensure your personal data is always protected from unauthorized access, use, alteration, or disclosure. Your information security is not merely a legal obligation — it is our promise to every player.

Key security measures we implement include:

• 256-bit SSL encryption: All data transmitted between your device and rp66 servers is encrypted using bank-grade TLS/SSL protocols. This ensures your information cannot be intercepted in transit.
• Secure data storage: Sensitive information such as passwords is stored in hashed form using modern cryptographic algorithms. We never store passwords in plain text.
• Two-factor authentication (2FA): rp66 offers and encourages the use of 2FA on all accounts for a significant additional layer of protection.
• 24/7 security monitoring: Our automated monitoring system detects suspicious activity in real time and takes preventive action immediately.
• Regular security audits: The rp66 platform undergoes regular penetration testing and security audits by independent security experts.
• Internal access controls: Access to users' personal data within rp66 is restricted on a need-to-know basis following the principle of least privilege — only staff who genuinely require access to perform their duties are permitted.

While we take all reasonable steps to protect your data, no security system is completely impenetrable. In the event of a data security breach that affects you, we will notify you in a timely manner as required by law.

6 Cookies, Tracking Technologies & Your Choices

Rp66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following categories of cookies:

• Essential cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as they are essential for site operation.
• Performance cookies: Collecting information on how you use our platform, such as most frequently visited pages and time spent. This data is used to improve platform performance and usability.
• Functional cookies: Allowing the platform to remember your preferences such as language, location, and display settings to deliver a more personalised experience.
• Analytics cookies: Helping us understand overall platform usage patterns through aggregated and anonymised data for continuous improvement.

You can manage or disable cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and your experience on the rp66 platform. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

7 Your Personal Data Rights

As an rp66 user, you have certain rights regarding your personal data that we are committed to respecting and facilitating. Below is a summary of your key rights:

8 Data Retention Period

Rp66 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary depending on the type of data and legal requirements:

• Active account data: Retained for the duration your account is active on rp66 and for the required period after account closure for audit purposes.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date in accordance with Malaysia's financial and AML legal requirements.
• KYC records and identity verification: Retained for a minimum of 5 years after account closure, or longer if required by the relevant authorities.
• Customer support communication logs: Retained for 2 years from the date of last interaction for reference and service improvement purposes.
• Technical log data: Retained for 12 months for security and technical troubleshooting purposes.

Once the retention period expires or upon your request for data deletion (subject to legal obligations), your data will be securely deleted or anonymised in a manner that can no longer be linked to you as an individual.

9 Children's Policy

The rp66 platform is not designed for, nor directed at, individuals under the age of 18. We do not knowingly collect or process personal data from minors.

If we find that we have inadvertently collected personal data from a minor without appropriate age verification, we will immediately take the following steps:

• Deleting all associated personal data from our records
• Closing the account in question
• Forfeiting any remaining balance in the account

If you are a parent or guardian and believe that your underage child has accessed or registered on the rp66 platform, please contact us immediately at [email protected] so we can take the appropriate action.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we encourage you to get in touch. Our Data Protection team is ready to assist you.

You can reach us through the following channels:

• Data Protection Email: [email protected]
• General support: [email protected]
• Live chat: Available 24/7 on the rp66 platform

We are committed to responding to all privacy-related enquiries within 14 business days. For more complex personal rights exercise requests, we will notify you if additional time is needed and explain the reasons.

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.