Privacy Policy rk77 —
Our Commitment to Protecting Your Data

01 Information We Collect

Rk77 collects your personal information when you register an account, use the platform, or contact our support team. This data collection is necessary to ensure you receive the best, safest, and fairest gaming experience.

Information provided directly by you:

• Full name as shown on your official identification document.
• Date of birth for verification of the minimum age requirement of 18 years.
• Active email address and Malaysian mobile number.
• Bank account number or digital wallet details for transaction processing.
• KYC documents including a copy of your MyKad or passport when required for identity verification.
• Proof of current residential address such as a recent utility bill or bank statement.

Information collected automatically:

• Device IP address and estimated geographic location based on that IP.
• Device type, operating system, and web browser version used.
• Activity logs within the platform, including games played, session duration, and betting records.
• Cookie and tracking technology data that helps us understand usage behaviour.
• Referral information — how you arrived at the rk77 website (organic search, referral links, etc.).

02 How We Use Your Data

Every piece of data we collect is used solely for legitimate, reasonable purposes directly related to the services you use. rk77 does not use your data for any purpose outside the scope stated in this policy.

• Account management — Processes registration, verifies identity, and manages your member account on an ongoing basis.
• Transaction processing — Verifies deposits, processes withdrawals, and maintains accurate financial records.
• Platform security — Detects and prevents fraud, duplicate account usage, money laundering, and other illicit activities.
• Legal compliance — Fulfils our obligations under PDPA 2010, AML/CFT regulations, and other applicable regulatory requirements.
• Customer Support — Addresses inquiries, resolves disputes, and provides technical assistance more quickly and effectively.
• Platform improvements — Analyzes usage patterns to improve the interface, performance, and overall user experience.
• Service Communications — Sends important notifications regarding your account, transactions, promotions you have subscribed to, and policy updates.
• Responsible gaming — Monitors wagering patterns to identify members who may need support through the responsible gaming program.

03 Sharing Information with Third Parties

Rk77 upholds the principle that your personal data is confidential. We do not sell, rent, or disclose your personal information to any external party for commercial purposes. However, in certain situations, limited data sharing is necessary to keep the platform running safely and smoothly.

Situations where data may be shared:

• Payment service providers — Required transaction information is shared with licensed payment processors such as FPX, DuitNow, and digital wallet providers to enable deposits and withdrawals to be processed securely.
• Game software providers — Game session data required for gameplay is shared with third-party game providers integrated with the rk77 platform to ensure game integrity.
• Legal authorities — rk77 will disclose required information to the relevant authorities when mandated by law, court order, or a legitimate criminal investigation.
• Fraud prevention agency — Certain data may be shared with recognized fraud prevention databases to protect the platform and members from fraudulent activity.
• Technical service providers — Companies that assist us in operating the platform (hosting, CDN, technical support) may have limited access to data within the scope of their responsibilities only, and are bound by strict confidentiality agreements.

All third parties that receive your data are required to meet or exceed the data protection standards we apply, and are prohibited from using that data for any purpose other than what has been specified.

04 Cookies & Tracking Technologies

Rk77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored in your web browser that help us recognise you on future visits.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login session management and security. These cookies cannot be disabled as the platform cannot function without them.
• Performance Cookies — Collects data on how you use the platform (pages visited, time spent) to help us identify and improve areas that need enhancement.
• Functional Cookies — Saves your preferences such as language, display settings, and game selections so you do not need to reconfigure them each time you use the platform.
• Security Cookies — Helps us detect suspicious activity, unauthorized login attempts, and potential fraud by monitoring unusual usage patterns.

05 Data Security

The security of your personal data is rk77's highest priority. We continuously invest in the latest security technologies and practices to ensure your information remains protected from unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS Encryption protects all communications between your device and our servers.
• Encrypted database ensures sensitive data is stored in a format that cannot be read without the correct encryption key.
• Multi-layer firewall and an intrusion detection system (IDS) monitors network traffic in real time.
• Regular security audits by independent third parties to identify and address potential system vulnerabilities.
• Two-factor authentication (2FA) available to all members to add an extra layer of security to your account.
• Role-based access control ensures only authorized personnel can access personal data, and only to the extent required for their responsibilities.
• Full audit log records all access to member data for accountability purposes and investigation in the event of a security incident.

06 Data Retention & Deletion

Rk77 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations in Malaysia.

• Active account data retained for the duration your account remains active and in use on the rk77 platform.
• Financial transaction records retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements in Malaysia.
• KYC Documents retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later.
• Activity & security logs retained for 2 years for security investigation and dispute resolution purposes.
• Marketing data retained until you withdraw consent or request deletion, whichever comes first.

When the retention period expires and there is no legal requirement to retain the data, rk77 will securely delete or encrypt your data in accordance with established data deletion procedures. Deleted data cannot be recovered unless required by a court order or legal directive.

07 Your Rights as an rk77 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by rk77. We are committed to respecting and facilitating the exercise of these rights.

• Right of Access — You have the right to request a copy of the personal data we hold about you. This request will be processed within 21 working days.
• Right to Rectification — If your data is inaccurate, outdated, or incomplete, you have the right to request that we correct it without undue delay.
• Right to Withdraw Consent — For data processed based on your consent (such as marketing communications), you may withdraw that consent at any time.
• Right to Object — You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Erasure — In certain situations permitted by law, you may request the deletion of your personal data. Such requests will be assessed in accordance with applicable legal obligations.

08 International Data Transfers

In the context of rk77's global platform operations, your personal data may be transferred, stored, or processed outside Malaysia — particularly in relation to cloud server infrastructure and international technology service providers we work with.

Every cross-border data transfer is carried out with adequate safeguards, including:

• Contractually binding data processing agreements (DPA) with all cloud service providers.
• Use of internationally recognised standard contractual clauses to protect data during transfers.
• Regular security assessments of recipient countries to ensure equivalent data protection standards.
• Data encryption in transit and at rest for all cross-border transfers.

Rk77 does not transfer data to countries that do not provide an adequate level of data protection unless appropriate additional safeguards have first been put in place.

09 Children's Privacy

The rk77 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we discover that personal data of a child has been collected without the knowledge and consent of a parent or legal guardian, we will take immediate action to delete that data and close the associated account.

10 Changes to the Privacy Policy

Rk77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform services offered.

When significant changes are made to this policy, we will notify you via:

• A clear notice on the rk77 platform home page before any changes take effect.
• An email to the address registered in your account for changes that materially affect your privacy rights.
• An in-account notice upon your next login.

The "Updated" date at the top of this document will always reflect the date the latest version of the Privacy Policy takes effect. Your continued use of the rk77 platform after that date constitutes your acceptance of the changes made.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the rk77 data protection team is ready to assist you.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Privacy Email: [email protected] — please include "Privacy Inquiry" in the subject line of your email.
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.

For formal complaints related to data protection that cannot be resolved by our team, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for overseeing PDPA compliance in Malaysia.