RPT88 Privacy Policy

This Privacy Policy ("Policy") describes how RPT88 ("we", "us", "the Company", or "rpt88") collects, uses, stores, shares, and protects the personal data of individuals ("you", "User", or "Player") who access or use the rpt88 online casino and sports betting platform atrpt88.cam, including its mobile-optimised web interface and any associated services.

RPT88 operates as an online gaming platform serving players primarily in Malaysia, offering live casino games, sports betting, slots, lottery, and arcade titles, all accessible via MYR-denominated accounts and local Malaysian payment methods. In the course of providing these services, we necessarily collect and process certain personal information about our users.

We are committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection principles. This Policy is designed to give you a clear understanding of our data practices so that you can make informed decisions about your use of the rpt88 platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" means RPT88, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of RPT88, pursuant to a contractual arrangement and subject to RPT88's instructions.
• "Cookies" means small text files stored on a User's device by a web browser at the request of a website, used to retain session information and improve user experience.
• "KYC" means Know Your Customer — the identity and age verification process required under applicable regulations and rpt88's internal compliance policies.
• "Platform" means the rpt88 website at rpt88.cam, its mobile web version, and all associated services and features.

RPT88 collects Personal Data in several categories, depending on your interaction with the Platform:

We do not intentionally collect or process special categories of sensitive personal data (such as health data, biometric data, or racial and ethnic origin data) unless explicitly required for regulatory compliance purposes and with your informed consent.

RPT88 collects Personal Data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile, you directly provide us with Personal Data.
• Automated collection: When you access or use the Platform, our servers and analytics tools automatically collect Technical Data such as your IP address, device identifiers, browser type, and session behaviour via server logs, cookies, and similar technologies.
• Payment processors: When you complete a transaction using DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect, our payment processing partners may transmit transaction confirmation data to rpt88 for the purpose of crediting or processing your account.
• Third-party verification services: In connection with KYC and anti-money laundering compliance, rpt88 may use third-party identity verification providers who supply verification outcomes and risk assessments.
• Referal programme: If you are referred to rpt88 by an existing player, we may receive your contact information as part of the referral process. You will be notified of this when you register.

RPT88 processes your Personal Data for the following purposes:

• Account creation and management: To register your account, verify your identity and age (minimum 21 years for all rpt88 services), and maintain your account in active, secure order;
• Service delivery: To provide you with access to live casino games, sports betting markets, slots, and all other Platform features, and to process your bets and gaming transactions;
• Financial transactions: To process MYR deposits and withdrawals via your chosen Authorised Payment Method, maintain accurate financial records, and administer bonuses and promotions;
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) regulations, responsible gambling requirements, and any applicable data protection laws, including retaining records as required;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity account compromise, bonus abuse, and other security threats to the Platform and its users;
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email;
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, design, and features of the rpt88 Platform;
• Marketing communications: Where you have provided consent or we have a legitimate interest, to send you promotional offers, bonus notifications, and platform updates. You may opt out at any time by contacting our support team.

RPT88 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you accepted at registration — including account operation, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML reporting obligations, and record-keeping requirements imposed by regulatory authorities;
• Legitimate interests: Processing carried out in pursuit of RPT88's legitimate business interests, such as fraud detection, platform security, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms;
• Consent: Where we rely on your consent as the legal basis for processing — for example, for optional marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

RPT88 does not sell, rent, or trade your Personal Data to third parties for their own commercial or marketing purposes. We may share your data only in the following limited circumstances:

• Authorised Payment Processors: Transaction data is shared with your selected Malaysian payment service provider (e.g. Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-participating banks including Maybank, CIMB, Public Bank, and Hong Leong Connect) solely for the purpose of processing your deposit or withdrawal;
• Identity Verification Providers: During KYC procedures, we may share identity information with approved third-party verification services for the purpose of confirming your age and identity;
• Game and Content Providers: Certain game titles on the rpt88 Platform are supplied by third-party game studios. Where required for technical purposes, session data may be shared with the relevant provider on a pseudonymised basis;
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, rpt88 may disclose Personal Data to competent authorities. We will notify you of such disclosure to the extent permitted by law;
• Corporate Transactions: In the event of a merger, acquisition, reorganisation, or sale of assets involving RPT88, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments;
• Professional Advisors: rpt88 may share Personal Data with its legal, accounting, or audit advisors on a confidential basis where necessary for the conduct of those professional services.

RPT88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with rpt88, and for a minimum period of five (5) years following account closure, in accordance with applicable AML record-keeping requirements;
• Transaction records: Financial transaction records, including deposits and withdrawals in MYR and details of payment methods used, are retained for a minimum of five (5) years;
• KYC documentation: Identity and verification documents are retained for the duration of your account relationship and for five (5) years thereafter;
• Support communications: Customer support records are retained for three (3) years from the date of last interaction;
• Technical and usage data: Anonymised or aggregated technical data may be retained indefinitely for analytical purposes. Individually identifiable technical data is retained for up to twelve (12) months.

Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

The rpt88 Platform uses cookies and similar client-side storage technologies to provide core functionality, improve your experience, and analyse Platform performance. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform. These include session management cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without significantly impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymous data about how visitors use the Platform — including pages visited, session duration, and errors encountered. This information is used to improve Platform performance and user experience.
• Functional Cookies: Allow the Platform to remember your preferences, such as language settings and previously viewed game categories, to deliver a more personalised experience on subsequent visits.

rpt88 does not use cross-site advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to use certain Platform features, including account login.

In the course of operating the rpt88 Platform and working with third-party service providers, your Personal Data may be transferred to and processed in jurisdictions outside of Malaysia. Where such transfers occur, rpt88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Malaysia, including through the use of contractual data protection clauses with receiving parties.

rpt88 takes reasonable steps to ensure that international recipients of your Personal Data maintain adequate data protection standards. If you have questions about the specific safeguards applied to international data transfers involving your information, please contact our support team using the details in Section 15.

As a data subject, you have a number of rights in relation to your Personal Data held by rpt88. These rights are subject to applicable legal exceptions and regulatory obligations that may require us to retain or continue processing certain data. Your rights include:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will acknowledge your request within five (5) business days and endeavour to fulfil it within thirty (30) days. We may require you to verify your identity before processing a data rights request.

rpt88 enforces minimum age verification as a mandatory step during account registration and the KYC process. Any account found to be held by a person under the age of 21 will be immediately suspended, all associated balances forfeited, and the matter reported to relevant authorities where required.

If you are a parent or guardian and believe that a minor has accessed the rpt88 Platform or provided us with Personal Data without your knowledge, please contact our support team immediately. We will take appropriate action to close the account and delete any associated Personal Data.

RPT88 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, and alteration. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser and the rpt88 servers;
• Encrypted data storage for sensitive fields including financial data and identity information held at rest;
• Role-based access controls limiting internal access to Personal Data to employees and contractors with a legitimate operational need;
• Two-factor authentication (2FA) available for player accounts and mandatory for all administrative access to rpt88 systems;
• Continuous intrusion detection and monitoring of Platform infrastructure for anomalous activity patterns;
• Regular security audits and penetration testing conducted by qualified third-party security professionals;
• Data breach response procedures including notification protocols in the event of a confirmed breach affecting your Personal Data.

While rpt88 employs robust security measures, no method of electronic transmission or storage is completely infallible. You also bear responsibility for safeguarding your own account credentials and for notifying rpt88 promptly if you suspect any unauthorised access to your account.

RPT88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features. Material changes to this Policy will be communicated to registered users via the email address associated with their account and/or through a notice posted on the Platform, at least seven (7) days prior to the changes taking effect where practicable.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the rpt88 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by rpt88, please contact our Data Support team through the following channels. All communications regarding data privacy matters are treated with priority and full confidentiality.

RPT88 will acknowledge all data-related requests within five (5) business days of receipt and will endeavour to provide a substantive response within thirty (30) days. In exceptional circumstances where a request is complex or involves multiple data subjects, we may extend this period and will notify you accordingly.

If you are not satisfied with our response to a data privacy concern, you retain the right to escalate your complaint to the competent data protection authority in the applicable jurisdiction.