Privacy Policy RK77 — Data Protection & Malaysian Member Privacy

RK77 is an online sports betting and casino platform operating in Malaysia, offering services that include football betting (Malaysia Super League, EPL, and international leagues), badminton, cricket, e-sports, live dealer blackjack, slots, jackpots, and a wide range of other casino games to registered members.

This Privacy Policy applies to all rk77 platform users, including those browsing the website without a registered account, individuals who register a member account, and active users conducting financial transactions on the platform. It covers all interactions between you and rk77 via the website, mobile app, live chat, email and any other official rk77 communication channels.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable privacy laws. In the event of any conflict between this Privacy Policy and local legal requirements, the legal requirements shall prevail.

Rk77 only collects data that is strictly necessary to provide our services. Below are the categories of data we collect and the purposes they serve:

We do not collect sensitive data such as your health information, sexual orientation, religious beliefs, or political views. Credit card details are not stored on rk77 servers — all card transactions are processed directly by certified payment providers.

RK77 uses your personal data solely for the following purposes, in keeping with the data minimisation principles that underpin our Privacy Policy:

• Account Management: Register and verify your account, process secure logins, update profile information and maintain the security of your rk77 account.
• Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u and CIMB Clicks, and processing your withdrawal of winnings within 5 minutes.
• Service Provision: Grants you access to all games and betting markets on the rk77 platform, including live dealer blackjack, slots, football betting, badminton, cricket and e-sports.
• Security & Fraud Prevention: Detect and prevent unauthorised access, money laundering, identity fraud and any suspicious activity on the rk77 platform.
• Legal Compliance: Compliant with legal obligations under Malaysia's PDPA, as well as applicable KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Service Communications: Sending important account notifications, security updates, transaction confirmations, and customer support responses.
• Platform Improvements: Analyse aggregated, anonymised usage patterns to improve the rk77 platform experience, introduce new features and resolve technical issues.
• Promotions (with consent): Sending you information about rk77 bonuses, promotions and special offers if you have consented to receive marketing communications. You may unsubscribe at any time.

RK77 does not sell, rent or transfer your personal data to third parties for marketing purposes. Your personal data may only be shared in the following limited circumstances:

• Payment Providers: Required transaction information is shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX processing banks solely to facilitate deposits and withdrawals. These providers maintain their own privacy policies and are bound by confidentiality agreements with rk77.
• Game Provider: Minimum technical data may be shared with selected casino providers such as Evolution Gaming, Pragmatic Play Live, and Playtech to enable live dealer games to function. These providers do not have access to your personal financial information.
• Technical Service Providers: Selected server infrastructure and cybersecurity providers may have limited access to technical data for rk77 platform operations and maintenance purposes. All such providers are bound by strict data protection agreements.
• Legal Authority: RK77 will disclose personal data when required by Malaysian law, a valid court order, or a legitimate request from a law enforcement agency — and only to the extent necessary.
• RK77 Rights Protection: Data may be disclosed to protect rk77's legal rights, prevent fraud or safeguard the safety of other users in emergency situations.

In all of the above cases, rk77 ensures your data is disclosed only to the extent strictly necessary, and all receiving parties are bound by confidentiality obligations equivalent to rk77's own standards.

Protecting your personal data is an absolute priority for rk77. We implement industry-standard technical and organisational security measures to keep your data safe at all times:

• 256-bit SSL Encryption: All communications between your device and rk77 servers are encrypted using AES 256-bit encryption — the same standard used by Malaysia's major banking institutions, including Maybank and CIMB.
• Secure Data Storage: Personal data is stored on servers protected by layered access controls, advanced firewalls, and intrusion detection systems operating 24 hours a day.
• Internal Access Controls: Only rk77 staff with a legitimate operational need are permitted to access user personal data. All access is logged, monitored and audited on a regular basis.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for all rk77 member accounts. We strongly recommend enabling this feature for an added layer of security that protects your account even if your password is compromised.
• Continuous Security Monitoring: rk77's automated monitoring system detects suspicious activity, unusual login attempts and irregular transactions 24 hours a day — it will temporarily freeze the account and notify you if any suspicious activity is detected.
• Regular Security Testing: Penetration testing and security audits are conducted periodically by independent third parties to identify and address any vulnerabilities before they can be exploited.

The rk77 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the rk77 website.

We use the following types of cookies:

• Essential Cookies (Required): Required for core rk77 platform functions such as login, session management and security. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collect anonymous information about how you use the rk77 platform — pages visited, time spent and any errors encountered. This information helps us improve the platform over time.
• Functional Cookies: Saves your preferences such as language, table settings, and display options so you don't have to reconfigure them each time you log in to your rk77 account.
• Analytics Cookies: Helps us understand aggregate platform usage patterns for product improvement. This analytics data contains no personally identifiable information.

You can manage and disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some rk77 platform features. For detailed cookie settings, visit the Cookie Settings section within your rk77 account after logging in.

RK77 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy and to comply with applicable legal obligations. Retention periods vary by data type:

• Active Account Data: Retained for the duration your rk77 account remains active and for up to 5 years after account closure for legal compliance and the resolution of any disputes that may arise.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction, in accordance with Malaysian accounting and financial compliance requirements.
• Usage Data & Analytics: Anonymised usage data is retained for up to 3 years for trend analysis and platform improvement purposes.
• Support Communication Records: Live chat records and support emails are retained for 2 years from the date of the last communication.
• KYC Data (Identity Verification): Retained for 5 years after account closure in line with Malaysia's KYC/AML compliance requirements.

Once the retention period expires, your personal data will be securely deleted or converted into an anonymised format that cannot identify you personally. If you request early deletion, rk77 will honour that request to the extent permitted by law — certain legal retention obligations may prevent the immediate deletion of all data.

As an rk77 member and data subject under Malaysia's PDPA, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Access requests can be submitted by email to support@rk77-jit.com and we will respond within 14 business days.
• Right to Correction: If the personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Basic details such as phone number or email address can be updated directly through your rk77 account profile settings.
• Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data — also known as the "right to be forgotten". However, this right is subject to statutory retention obligations that may prevent the immediate deletion of certain data.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as when the accuracy of the data is in dispute or while an objection request is pending review.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time via the unsubscribe link included in every marketing email we send.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format, and to request that we transfer it to another data controller where technically feasible.

To exercise any of the rights above, please contact the rk77 privacy team by email at support@rk77-jit.com, stating the specific right you wish to exercise along with sufficient information to verify your identity. We will process your request within 14 business days.

The rk77 platform is exclusively for users aged 18 and above. We do not knowingly collect, process or store any personal data from individuals under the age of 18.

Should we discover that personal data has been collected from individuals under the age of 18, we will take immediate steps to:

• Immediately close the account in question.
• Permanently delete all personal data associated with that account.
• Cancelling all related transactions and winnings.
• Reporting the incident to the relevant authorities where required.

If you become aware that a minor under the age of 18 has registered an account on rk77, please contact us immediately at support@rk77-jit.com so that prompt action can be taken.

RK77 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. When significant amendments are made, we will:

• Updating the "Updated" date at the top of this page.
• Send you a notification via email or in-platform notice at least 7 days before the changes take effect.
• Displays a summary of key changes made, so you can easily understand what has been updated.

Continued use of the rk77 platform after an amended Privacy Policy comes into effect constitutes your acceptance of those changes. If you do not agree with the changes, you have the right to close your rk77 account and request deletion of your personal data in accordance with the rights set out in Section 8 above.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rk77 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@rk77-jit.com — include "Privacy Inquiry" in your email subject line for faster processing.
• Live Chat: Available on the rk77 platform 24 hours a day, 7 days a week, in both Malay and English.
• Response Time: Privacy-related inquiries will be responded to within 14 business days of receipt.

If you are dissatisfied with how rk77 has handled your personal data after contacting us, you have the right to refer your complaint to the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital, in accordance with the Personal Data Protection Act 2010.