rp66 Privacy Commitment Summary
rp66 only collects data that is strictly necessary to provide you with our services. We do not sell, rent, or trade your personal data to third parties for marketing purposes. All data is protected with 256-bit SSL encryption and stored on strictly controlled secure servers. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).
01
Introduction & Scope of This Privacy Policy
Welcome to the rp66 Privacy Policy page. This document explains in detail and with full transparency how rp66 ("we", "platform", "rp66") collects, uses, processes, stores, and protects your personal data as a member or visitor of our platform at rp66.ws.
Rp66 operates as an online entertainment and betting platform in Malaysia, offering live casino games, slots, roulette, poker, Sports Betting covering leagues such as the Malaysia Super League and EPL, as well as esports including Mobile Legends and DOTA 2. In running these operations, we need to process certain personal data from our members for legitimate and limited purposes.
This Privacy Policy applies to all individuals who use the rp66 platform — whether you are a registered member, a free demo user, or simply browsing our website. By using rp66, you agree to the data collection and usage practices described in this document.
- This policy is governed by and complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
- Any material changes to this policy will be communicated to members via email or an in-platform notification on rp66 at least 14 days before taking effect.
- rp66 acts as the Data Controller for all personal data collected through this platform.
02
Types of Personal Data Collected
Rp66 only collects data necessary to provide the services you request and to fulfil our legal compliance obligations. The following are the categories of data we may collect:
👤
Identity Data
- Full name
- MyKad number
- Date of birth
- Gender
- Profile picture (optional)
📞
Contact Data
- Email address
- Malaysian phone number
- Residential address
- City & postcode
- State in Malaysia
💳
Financial Data
- Malaysian bank name
- Bank account number
- E-wallet account holder name
- Deposit & withdrawal history
- Transaction records (MYR)
🖥️
Technical Data
- IP address
- Browser type & version
- Device operating system
- Cookie data
- Access logs & session activity
🎮
Gaming Data
- Betting & gaming history
- Total wins & losses
- Favourite games
- Play time & frequency
- VIP activity & rewards
💬
Communication Data
- Live chat support records
- Content of emails sent to rp66
- Feedback & complaints
- Notification preferences
- Survey responses (if applicable)
Data We Do Not Collect
rp66 never stores your full credit or debit card number, CVV/CVC, or online banking password. All financial transactions are processed through secure payment gateways (DuitNow, Touch 'n Go eWallet, GrabPay, ShopeePay, Boost, FPX) that maintain their own security standards.
03
How rp66 Collects Your Data
Your personal data is collected through several transparent and lawful means. rp66 does not collect your data covertly or without your knowledge.
- Account registration form: When you register an rp66 account, you provide your identity and contact data directly to us.
- KYC (Know Your Customer) Process: Identity documents you upload during the KYC process to meet legal requirements.
- Financial transactions: Transaction data related to deposits via DuitNow, TnG eWallet, GrabPay, and withdrawals to your Malaysian bank account.
- Platform usage: Technical data is collected automatically when you use rp66 — including navigation logs, gaming activity, and cookie data.
- Support communications: When you contact the rp66 support team via live chat, email, or WhatsApp.
- Authorised third parties: In limited cases, we may receive data from approved payment service providers or identity verification agencies strictly for KYC purposes.
04
How Your Personal Data is Used
Rp66 processes your personal data only for legitimate and appropriate purposes. The table below outlines the primary purposes of data processing and the applicable legal basis:
| Processing Purpose |
Legal Basis |
Data Used |
| Account management & registration |
Contract |
Identity, contact |
| Processing deposits & withdrawals |
Contract |
Financial, identity |
| Identity verification (KYC) |
Legal |
Identity, financial |
| Fraud prevention & security |
Legal |
Technical, identity, financial |
| 24/7 customer support |
Contract |
Identity, communication |
| Responsible gambling monitoring |
Legal |
Gaming, financial |
| Product & platform improvements |
Legitimate interests |
Technical, gaming |
| Promotions & personal offers |
Consent |
Contact, gaming |
| Legal compliance & audits |
Legal |
All categories |
Marketing & Promotional Communications
rp66 will only send you marketing communications (promotional emails, VIP offer notifications, messages about Malaysia Super League Sports Betting) if you have given your explicit consent during registration or through the preference settings in your account. You may opt out of marketing communications at any time by clicking "unsubscribe" in any email or through your rp66 account notification settings.
05
Sharing Data with Third Parties
Rp66 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in operating the platform, we may share data with the following parties for limited, legitimate purposes:
- Payment service providers: DuitNow, Touch 'n Go eWallet, GrabPay, ShopeePay, Boost, FPX (Maybank2u, CIMB Clicks) — only data necessary to process transactions in MYR.
- Game software provider: Casino and game platform providers used by rp66 — limited to the minimum data required to enable gameplay.
- Identity verification provider: Approved third-party KYC agencies engaged to verify the identity of new members as required under Malaysian law.
- Technology infrastructure: Server hosting providers, cybersecurity firms, and cloud service providers that process data on behalf of rp66 under strict data processing agreements.
- Malaysian authorities: When required by Malaysian law, court order, or a request from a lawful enforcement authority such as PDRM, MACC, or BNM.
We Do Not Share Data With
rp66 does not share your personal data with third-party marketing companies, data brokers, external advertisers, or any social media platforms without your explicit consent. Any cross-border data transfers are limited to the minimum technical requirements necessary and are subject to valid data protection agreements.
06
Data Retention & Security Measures
Rp66 employs comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
| Data Category |
Retention Period |
Purpose |
| Active account data |
For the duration of the active account |
Ongoing service delivery |
| Financial transaction records |
7 years after transaction |
Malaysian legal requirements (LHDN, BNM) |
| KYC Documents |
5 years after account closure |
AMLA 2001 Compliance |
| Support communication logs |
3 years |
Dispute resolution |
| Technical data & system logs |
90 days |
Security & fraud detection |
| Marketing data (with consent) |
Until consent is withdrawn |
Promotional communications |
🔒
256-bit SSL encryption
All data transmitted between your browser and rp66's servers is protected with the same high-level SSL encryption used by Malaysia's leading financial institutions.
🛡️
Strict Access Controls
Access to your personal data is restricted to rp66 staff whose roles require it. All access is logged and audited on a regular basis.
🔍
Regular Security Audits
rp66 conducts regular security audits and penetration testing to identify and address potential system vulnerabilities.
📱
Two-Factor Authentication
rp66 supports two-factor authentication (2FA) to protect your account from unauthorised access, even if your password has been compromised.
07
Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by rp66:
👁️
Access Rights
You have the right to request a copy of all personal data held by rp66 about you. Requests will be processed within 21 business days.
✏️
Right to Rectification
If your data is inaccurate or incomplete, you have the right to request that rp66 correct or update that information.
🗑️
Right to Erasure
You may request deletion of your data under certain circumstances — subject to any legal retention requirements still in force.
🚫
Right to Object
You have the right to object to the processing of your data for direct marketing purposes or in certain cases relating to rp66's legitimate interests.
⏸️
Right to Restriction
Under certain circumstances, you may request that rp66 restrict the processing of your data while an accuracy issue or breach is being resolved.
📤
Right to Portability
You have the right to receive your data in a machine-readable format for the purpose of transferring it to another platform, where applicable.
How to Submit a Data Rights Request
To submit any request regarding your data rights, please contact the rp66 Privacy Officer by email: privacy@rp66.ws or via the platform's live chat. Please include your full name, rp66 account number, and the type of request being made. We will process your request within 21 business days.
Rp66 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:
Essential Cookies
Required for core rp66 platform functionality — login, sessions, and security
Required
Performance Cookies (Analytics)
Helps us understand how you use the platform so we can continue improving it
Active
Functional Cookies
Remembering your preferences such as language and display settings
Active
Marketing Cookies
To display relevant promotions based on your interests
Inactive
| Cookie Name |
Type |
Purpose |
Duration |
| Rp66_session |
Important |
Maintaining your login session |
Session |
| Rp66_csrf |
Important |
CSRF security protection |
Session |
| Rp66_pref |
Performance |
Remembering language preferences & settings |
1 year |
| Rp66_analytics |
Performance |
Platform usage analytics (no PII) |
90 days |
| Rp66_mkt |
Marketing |
Tracking promotional effectiveness (consent required) |
30 days |
You can manage your cookie preferences at any time through your internet browser settings. However, disabling essential cookies may affect the functionality of the rp66 platform.
Rp66 takes the security of your financial data very seriously. All deposit and withdrawal transactions are processed through approved, secure payment gateways in Malaysia.
- rp66 does not store your credit card number, debit card number, CVV/CVC, or online banking passwords in our systems at any time.
- All transactions via DuitNow, Touch 'n Go eWallet, GrabPay, ShopeePay, Boost, and FPX (Maybank2u, CIMB Clicks) are processed by their respective payment service providers, each maintaining their own PCI-DSS security standards.
- rp66 uses a real-time fraud detection system that monitors all financial transactions for suspicious activity. Any flagged transaction is automatically suspended pending verification.
- Never share your rp66 account login credentials or banking details with anyone, including rp66 support staff. rp66 support will never ask for your password.
Strict Prohibition for Individuals Under 18
The rp66 platform is intended solely for adults aged 18 and above. rp66 does not knowingly collect or process the personal data of children (individuals under the age of 18). Should we discover that a child's data has been collected inadvertently, we will promptly delete that data and close the account in question. Parents or guardians who believe their child may have registered on rp66 are urged to contact us at privacy@rp66.ws immediately.
11
Amendments to This Privacy Policy
- rp66 reserves the right to amend this Privacy Policy at any time to reflect changes in Malaysian law, industry practices, or our services.
- For material changes to how we process your data, we will provide at least 14 days' notice before the changes take effect, via your registered email or an in-platform notification.
- Your continued use of the rp66 platform after any changes take effect will be considered acceptance of the amended Privacy Policy.
- The latest version of this Privacy Policy is always accessible at /privacy-policy rp66.ws along with the date of update.
12
Contact the rp66 Privacy Officer
If you have any questions, concerns, or complaints regarding how rp66 handles your personal data, or to submit a request relating to your data rights, please contact rp66's Data Protection Officer (DPO) through the following channels:
Privacy Officer Email
privacy@rp66.ws
Response within 3 business days
Live Chat Support
Available 24/7
Response within 2 minutes
You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe rp66 has not processed your data in accordance with the PDPA 2010. Further information about the JPDP is available through the official channels of the Malaysian Ministry of Communications.