Rp66 takes the protection of your personal data seriously. This Privacy Policy clearly explains how we collect, store, use and safeguard your personal information while you use our platform.
Six core principles that underpin rp66's approach to protecting your personal data
All data transmitted between your device and rp66 servers is protected by banking-grade SSL 256-bit encryption, keeping your information secure at all times.
Rp66 never sells, rents or shares your personal data with third parties for marketing purposes. Your information remains under our control and is only used for the stated purposes.
You have the full right to access, correct, transfer, or request the deletion of your personal data at any time through your account settings or by contacting our support team.
The rp66 Privacy Policy fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring that your data is managed in accordance with applicable local legal requirements.
In the event of any data security incident, rp66 will notify affected users within the timeframe required by law and take immediate remedial action.
Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and 24/7 monitoring systems to prevent unauthorised access from both internal and external sources.
Rp66 collects various categories of personal data to ensure our platform can operate smoothly, securely and in compliance with applicable legal requirements. The following are the categories of information we collect:
| Data Categories | Sample Information | Requirements |
|---|---|---|
| Identity Data | Full name, identification card number, date of birth, gender | Mandatory |
| Contact Data | Email address, phone number, residential address | Mandatory |
| Financial Data | Bank account number, bank name, transaction history | Mandatory |
| Technical Data | IP address, device type, web browser, operating system | Automatic |
| Usage Data | Game history, betting patterns, game preferences | Automatic |
| KYC Data | Copy of identity card, passport, bank statement, verification selfie | Required |
Note: rp66 does not store your credit or debit card information directly. All card transactions are processed through a PCI-DSS certified third-party payment gateway.
Rp66 collects your personal data through various channels that occur when you interact with our platform:
When you register a new account at rp66, you are required to complete a registration form that collects basic information such as your name, email address, phone number, and date of birth. This information is mandatory to create a valid account.
To comply with anti-money laundering (AML) requirements and financial regulations, rp66 carries out a KYC process that requires you to upload a valid identity document and proof of address. This is a one-time process and your information is stored securely using high-standard encryption.
Every time you make a deposit or withdrawal, rp66 records the transaction details including amount, time, payment method and bank account number for financial recordkeeping and security purposes.
The rp66 system automatically collects technical data such as your IP address, device type, login sessions and game activity. This data is used to detect suspicious activity and deliver a better user experience.
When you contact the rp66 customer support team via live chat, email, or Telegram, the content of those communications is stored for reference, staff training, and service quality improvement purposes.
Rp66 uses the personal data collected for the following purposes:
rp66 does not use your personal data for third-party marketing purposes without your explicit consent. You may opt out of marketing communications at any time through your account settings.
Rp66 processes your personal data on valid legal bases under the Malaysian Personal Data Protection Act 2010 (PDPA):
Rp66 does not sell your personal data to any third party. However, there are certain situations where we need to share your data with the following parties:
Rp66 works with carefully selected third-party service providers to support our platform operations, including payment gateway providers, cloud computing services, gaming software providers and identity verification services. All such providers are bound by strict confidentiality agreements and are only permitted to process your data in accordance with rp66's instructions.
Rp66 may be required to disclose your personal data to government authorities, courts or regulatory bodies where mandated by Malaysian law or a valid court order. In all such cases, we will disclose only the minimum information necessary.
If rp66 undergoes corporate restructuring, a sale or merger, users' personal data may be transferred as part of the business assets. Users will be notified in advance and an equivalent privacy policy will continue to apply.
All data sharing with third parties is carried out under strict security controls. rp66 is not responsible for the privacy policies of third parties that are separate from our platform.
Rp66 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law:
Upon expiry of the designated retention period, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.
Rp66 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or unintended disclosure:
While we take all reasonable precautions, no security system can be guaranteed 100% foolproof. You also play an important role in keeping your account secure by not sharing your password and using a secure internet connection.
As a rp66 user residing in Malaysia, you have the following rights regarding your personal data under PDPA 2010:
You have the right to request a copy of the personal data we hold about you at any time.
You have the right to request correction of any inaccurate or incomplete personal data.
You may request the deletion of your personal data, subject to our legal obligations.
You may request that we restrict the processing of your data in certain situations as provided by law.
You have the right to receive your personal data in a structured, machine-readable format.
You may object to the processing of your data for direct marketing purposes at any time.
To exercise any of the above rights, please contact the rp66 team via email at [email protected] or via the platform's live chat. We will process your request within 30 business days.
The rp66 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.
You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the rp66 platform. Essential cookies cannot be disabled without impacting your ability to log in and use the platform.
The rp66 platform is strictly for users aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.
Should we discover that personal data of a child has been collected without our knowledge, we will promptly delete the relevant data and close the associated account. If you believe your child has provided personal data to rp66, please contact us immediately at [email protected].
Rp66 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements or platform feature enhancements. Any significant changes will be communicated to users via:
Your continued use of the rp66 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the rp66 Data Protection Officer (DPO) through the following channels:
We aim to respond to all privacy-related enquiries within 7 working days. For more complex complaints or those requiring further investigation, we will notify you of the estimated resolution timeframe.
If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) through their official channels.
Effective Date: This Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions. This version complies with Malaysia's Personal Data Protection Act 2010 (PDPA).