RP99 Privacy Policy – Personal Data Protection for Malaysian Members

Welcome to RP99's Privacy Policy. This document explains in detail how the RP99 betting platform, accessible at rp99.im, collects, uses, stores, discloses, and protects your personal information as our member.

RP99 is an online betting platform serving Malaysian players, covering Sports Betting (Malaysia Super League, EPL, badminton, e-sports), Live Casino, slots, and lottery. In operating these services, we need to collect certain information about you to ensure a safe, fair, and seamless gaming experience.

This Privacy Policy has been drawn up in accordance with and in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia. By registering for or using any RP99 service, you agree to the terms of data collection and use as set out in this document.

RP99 collects your personal information through various means — directly when you register or use the platform, and automatically through technologies such as cookies. The following are the categories of information we collect:

RP99 only collects information that is strictly necessary to deliver our services. We do not request irrelevant or excessive information.

RP99 uses your personal information only for legitimate and necessary purposes. We do not use your data for any purpose not stated in this policy without obtaining your additional consent. Our data usage purposes are:

• Service provision: Processing registrations, managing accounts, handling deposits via Touch 'n Go, GrabPay, DuitNow, Maybank2u, CIMB Clicks, Boost and ShopeePay, and processing withdrawals.
• Verification & security: Verifying identity during registration and the KYC process, detecting and preventing fraudulent activity or money laundering.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance to members.
• Platform improvements: Analysing usage patterns to improve the interface, performance, and features of the RP99 platform.
• Promotional communications: Sending information about RP99 promotions, bonuses, and special offers – subject to your communication preferences.
• Legal compliance: Fulfilling reporting obligations to Malaysian authorities as required by law.
• Responsible gaming: Monitoring betting patterns to identify members who may need responsible gambling assistance.

RP99 does not sell, rent, or trade your personal information to third parties for marketing purposes. Your information is only shared in the following limited circumstances:

• Payment service providers: Required information is shared with e-wallet providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) and banks (Maybank2u, CIMB Clicks) solely to process your transactions.
• Technology service providers: Companies that assist us in operating the platform, server hosting, and security systems — all bound by strict confidentiality agreements.
• Legal authorities: When required by Malaysian law, a court order, or an official investigation related to fraud or money laundering.
• Game service provider: Minimum required data is shared with slots and Live Casino game providers to enable gameplay – this excludes full financial information.

RP99 continually invests in security infrastructure to ensure your personal data remains protected at all times. Key security measures we employ include:

• 256-bit SSL/TLS Encryption for all communications between your device and RP99's servers.
• Static data encryption (data-at-rest) for all sensitive data, including financial information and identity verification documents.
• Role-based access control — only RP99 staff who require access to specific data in order to perform their duties are permitted to do so.
• Two-factor authentication (2FA) for all internal access to RP99's data systems.
• 24/7 Monitoring to detect unusual activity or attempted data breaches.
• Regular security audits conducted by an independent cybersecurity team.
• Data protection training for all RP99 staff who handle members' personal data.

While we take reasonable measures to protect your data, no security system is entirely foolproof. In the event of a data breach affecting your information, RP99 will notify you within the timeframe required by Malaysian law and take immediate action to mitigate any harm.

RP99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous data on how you use the platform to help us identify technical issues and improve performance.
• Functional Cookies: Storing your preferences such as language, odds display format, and favourite sports to deliver a more personalised experience.
• Analytical Cookies: Helps us understand aggregate usage patterns to plan improvements to the RP99 platform.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the RP99 platform. For more information on managing cookies, refer to your web browser's documentation.

RP99 retains your personal data for as long as your account is active and for the period required after account closure in accordance with our legal and operational requirements:

• Active account data: Retained for the duration of your membership at RP99.
• Financial transaction data: Retained for a minimum of 7 years as required under Malaysian law governing financial records and anti-money laundering.
• Identity verification (KYC) data: Retained for 5 years after account closure.
• Support communication logs: Retained for 2 years for service reference purposes.
• Cookie and analytics data: Retained for a maximum of 24 months from the date of collection.

RP99's primary servers are based in the Asia region. In certain circumstances, your data may be processed by service providers outside Malaysia — however, all such data transfers are protected by data transfer agreements that ensure a level of protection equivalent to Malaysia's PDPA.

As an RP99 member and data subject under Malaysia's PDPA, you have important rights regarding your personal data. RP99 respects and facilitates the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances — subject to our legal retention obligations.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Data Portability Right: You may request that we transfer your personal data to you in a machine-readable format.
• Right to Restrict Processing: Under certain circumstances, you may request that we restrict how we process your data.

To exercise any of the above rights, please contact us at support@rp99.im with the subject line "Privacy Rights Request". We will respond to your request within 30 working days.

The RP99 platform is strictly for individuals aged 18 and above. We do not intentionally collect, store, or process any personal information from individuals under the age of 18.

Should RP99 discover that personal data belonging to a child or minor has been collected without our knowledge, we will take immediate steps to delete that data and terminate the account in question.

The RP99 platform may contain links to third-party websites or services, such as payment providers or game providers. This Privacy Policy applies solely to the RP99 platform itself.

When you click a link that takes you outside the RP99 platform, you should review the privacy policy of that website or service separately. RP99 is not responsible for the privacy practices or content of third-party websites.

For example, when you use Touch 'n Go eWallet, GrabPay, DuitNow, or Maybank2u to make a deposit, that transaction is also subject to the respective provider's privacy policy in addition to this RP99 Privacy Policy.

RP99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. The "Last Updated" date at the top of this page indicates when the policy was last reviewed.

For significant changes to how we process your data, RP99 will notify you via:

• A prominent notice on the RP99 platform's main page for at least 14 days before the changes take effect.
• Email to your registered email address (for highly material changes).

Continued use of the RP99 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how RP99 handles your personal data, please contact us through the following channels:

• Privacy Email: support@rp99.im (subject: Privacy Enquiry)
• Live Chat: Available on the RP99 platform, 24 hours a day
• Support Language: Bahasa Melayu & English
• Response Time: Within 30 working days for privacy-related enquiries

For enquiries regarding platform rules and terms of use, please refer to the Terms & Conditions us. For responsible gambling support, please visit the Responsible Gaming.