Rp77 Privacy Policy – Personal Data Protection for Malaysia Users

Rp77 collects various types of personal information when you register, use the platform, or interact with our services. This collection is done directly from you or automatically through platform technology.

Information you provide directly:

• Full name as shown on official identification documents.
• Date of birth for age verification purposes.
• Email address and phone number for account communications.
• Payment information including account holder name and bank account number.
• Identity document (MyKad, passport) for the KYC process.
• Current residential address for verification purposes.

Information collected automatically:

• IP address and device information used to access the platform.
• Log data including access times, pages visited, and in-platform actions.
• General geolocation information based on IP address.
• Game usage data including betting history and transactions.
• Technical information such as web browser type, operating system, and screen resolution.

All information collected by rp77 is used only for legitimate and transparent purposes. We do not use your data for purposes unrelated to platform operations or the services you use.

The primary purposes for which your personal data is used are as follows:

• Account Management – Registers, verifies, and manages your user account.
• Transaction Processing – Processes deposits, withdrawals, and all financial transactions on the platform.
• Identity Verification (KYC) – Verifies your identity to meet legal compliance requirements.
• Platform Security – Detects and prevents fraud, money laundering, and any suspicious activity.
• Customer Support – Assists you when technical issues or account-related inquiries arise.
• Service Improvement – Analyzes usage patterns to improve the overall user experience.
• Platform Communications – Sends important notifications related to your account, promotions, and platform updates.

Rp77 will not use your data for any purpose not stated here without first obtaining your additional consent.

Rp77 does not sell or transfer users' personal data to third parties for marketing purposes. However, in the course of platform operations, we may share certain information with selected and trusted service partners.

All third-party partners are required to comply with strict data protection standards and may only use shared information for the specified purposes.

Rp77 uses cookies and similar tracking technologies to enhance the user experience, analyze platform traffic, and ensure security functions operate correctly.

Types of cookies we use:

• Essential Cookies – Required for the platform to function properly, including login session verification and account security. These cookies cannot be disabled.
• Functional Cookies – Saves user preferences such as language and display settings for ease of reuse.
• Analytics Cookies – Helps us understand how users interact with the platform so we can make targeted improvements.
• Security Cookies – Detects suspicious activity and protects your account from unauthorized access.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

Rp77 continually invests in the latest cybersecurity infrastructure to protect the personal data of all users. We employ a layered approach combining technology, procedures, and staff training to keep your data secure at all times.

Security measures we implement:

• 256-bit SSL data encryption for all communications between users and servers.
• Password storage using irreversible hashing methods.
• Two-factor authentication (2FA) for user account and internal system access.
• Real-time security threat monitoring 24 hours a day, 7 days a week.
• Isolation of sensitive data in a secure, isolated server environment.
• Regular security audits conducted by independent and qualified third parties.
• Mandatory cybersecurity training for all staff who handle user data.

As an rp77 user, you have certain rights regarding your personal data guaranteed under Malaysia's Personal Data Protection Act 2010 (PDPA). rp77 respects and facilitates the exercise of these rights.

To exercise any of the above rights, contact our privacy team via email at [email protected]. We will process your request within 14 business days.

Rp77 only retains personal data for as long as necessary to fulfil the original purpose of collection or to comply with relevant legal obligations. The following table provides a general overview of our data retention periods:

• Active Account Data – Retained for the duration your account is active and up to 7 years after account closure for financial compliance purposes.
• Transaction Records – Retained for 7 years in accordance with Malaysia's financial legislation and tax reporting requirements.
• Security Log – Retained for 12 months for the purpose of investigating security threats.
• Communication Records – Retained for 2 years for customer support reference and dispute resolution.
• Anonymous Analytics Data – May be stored indefinitely as it contains no personally identifiable information.

Once the designated retention period has ended, data will be securely deleted using methods that ensure it cannot be recovered.

Rp77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data management practices, new legal requirements, or platform service improvements. Each amendment will include a clear effective date.

For significant amendments, we will notify active users via in-platform notifications or their registered email at least 14 days before the changes take effect. It remains the user's responsibility to review this page periodically.

If you have any questions, concerns, or complaints regarding how rp77 manages your personal data, we encourage you to contact us directly. Our privacy team is ready to assist you.

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Response Time: Within 3–5 business days for general enquiries; 14 business days for formal data rights requests.

You may also visit the FAQ us for answers to frequently asked questions about privacy and data security.

Last Updated: 1 January 2026  |  Version: 2.4