Rp888 Privacy Policy – Your Personal Data Protection

1Introduction

Welcome to the rp888 Privacy Policy. This document is our written commitment to you — our trusted member — on how we handle your personal information with full responsibility and transparency.

Rp888 operates as an online entertainment platform serving members across Malaysia. We understand that your trust is our most valuable asset, and that trust can only be built through clear, consistent, and accountable privacy practices. This policy details what data we collect, why we need it, how we use it, and the rights you hold over that data.

By registering and using the rp888 platform, you agree to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please contact our support team before continuing to use the platform.

2Personal Data We Collect

Rp888 only collects data that is genuinely necessary to provide you with a safe, fair, and high-quality service. We do not collect data excessively or for purposes unrelated to the operation of our platform.

We may also receive data about you from legitimate third-party sources, such as identity verification service providers used for our KYC process, or publicly available data for legal compliance purposes.

3How We Use Your Data

Every piece of data we collect has a clear and accountable purpose. rp888 does not use your data for purposes not stated in this Privacy Policy without obtaining your consent first.

• Account Management: Creating, verifying and maintaining your rp888 account securely, including processing registrations, identity verification and password resets.
• Transaction Processing: Processing all deposits and withdrawals accurately and securely, ensuring your funds reach the correct destination within the promised timeframe.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and other illegal activities that could compromise your safety or that of other members.
• Regulatory Compliance: Fulfilling legal obligations under the Personal Data Protection Act 2010, anti-money laundering regulations and other applicable regulatory requirements.
• Service Communications: Sending important notifications related to your account, changes to terms, security updates and transaction information.
• Service Improvement: Analysing aggregated usage data to understand user behaviour, identify technical issues and improve the overall platform experience.
• Responsible Gaming: Monitoring gameplay patterns to detect early signs of problem gambling and providing assistance to members who need it.
• Marketing (with consent): Sending promotional information, exclusive offers and the latest rp888 news only to members who have given consent to receive marketing communications.

4Legal Basis for Data Processing

Rp888 processes your personal data based on one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 and internationally recognised data protection principles.

• Contract Performance: Data processing is required to fulfil the contract between you and rp888 — namely, to provide the entertainment platform services you registered for.
• Legal Compliance: Some data processing is mandatory to ensure rp888 complies with the legal obligations imposed on us as a platform operator.
• Legitimate Interest: We process certain data based on our legitimate interests in operating a safe and responsible business, provided these interests do not override your privacy rights.
• Consent: For data processing not covered by the bases above — particularly marketing communications — we will obtain your explicit consent in advance, and you have the right to withdraw that consent at any time.

5Data Sharing with Third Parties

Rp888 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary for the operation of our platform.

• Payment Service Providers: Minimum required transaction data is shared with registered and trusted payment processors such as FPX, Touch 'n Go, GrabPay, and Boost for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: For identity verification purposes, required data is shared with authorised and regulated third-party identity verification partners.
• Game Providers: Required game session data is shared with third-party game software providers (such as slot, sports, and other game providers) integrated with the rp888 platform.
• Legal Requirement: rp888 may disclose data to government authorities, regulatory bodies, or law enforcement agencies when required by law or a valid court order.
• Business Transfer: In the event of a merger, acquisition, or sale of business assets, member data may be transferred as part of those assets, subject to notice to members and equivalent privacy protections.

All third parties with whom we share data are required to comply with security and privacy standards equivalent to those of rp888, through legally binding data processing agreements.

6Cookies and Tracking Technologies

Rp888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help our platform function better and more securely.

• Essential Cookies: These cookies are required for core platform functions such as login authentication, session management and security features. The platform cannot operate properly without them.
• Performance Cookies: These cookies collect information about how you use the platform — pages visited, errors encountered — to help us improve platform performance and stability.
• Functional Cookies: These cookies allow the platform to remember your preferences such as language, currency and display settings to provide a more personalised experience.
• Analytics Cookies: We use third-party analytics tools to understand aggregated and anonymised usage patterns for the purpose of continuous platform improvement.

7Data Retention and Deletion

Rp888 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Your personal data is retained for as long as your account is active. Following account closure, core data is retained for an extended period for legal compliance purposes.
• Financial Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• KYC Data: Identity verification documents are retained for the period required by applicable KYC/AML regulations, typically 5 to 7 years after account closure.
• Security Logs: Access logs, security logs and system logs are retained for 12 months for threat detection and incident investigation purposes.
• Communication Data: Customer support correspondence records are retained for 2 years for quality control and dispute resolution purposes.

Once the retention period expires, your data will be securely deleted or anonymised using industry-approved methods so that it cannot be recovered or identified.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data that rp888 is committed to respecting and facilitating.

To submit any privacy rights request, please contact the rp888 customer support team via in-app Live Chat or our official email. Your identity will be verified before any request is processed.

9Data Security Measures

Rp888 continuously invests in the latest security infrastructure to ensure your personal and financial data is protected at all times. We employ a combination of technical, organisational, and physical measures to prevent unauthorised access, loss, destruction, or disclosure of data.

• Data Encryption in Transit: All communications between your device and rp888 servers are protected by TLS 1.3 with 256-bit SSL certificates, ensuring data cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive data stored in our databases is encrypted using industry-grade AES-256 encryption.
• Layered Access Control: Access to rp888's internal systems and data is governed by multi-factor authentication, role-based access control (RBAC), and the principle of least privilege.
• 24/7 Monitoring: Our cybersecurity team monitors the platform continuously around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular Security Testing: rp888 conducts regular penetration testing and vulnerability assessments by accredited independent cybersecurity firms.
• Staff Training: All rp888 staff with access to member data undergo comprehensive and regular data security awareness training.

10Changes to Privacy Policy

Rp888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The latest version of this Privacy Policy is always available on this page with an accurate "Updated" date.

• Notice of Material Changes: For significant changes affecting how we use or share your personal data, we will provide at least 14 days' notice before the changes take effect, via in-platform notification or email.
• Minor Changes: Editorial amendments or minor changes that do not materially affect your privacy rights may be updated without specific notice.
• Your Responsibilities: We encourage you to review this page regularly. Continued use of the rp888 platform after changes take effect will be considered acceptance of those changes.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rp888 handles your personal data, we encourage you to contact us directly. Our team is ready to assist you.

• Live Chat: The fastest way to get help — available 24/7 through the rp888 app.
• Official Email: [email protected] — for written enquiries requiring documentation or a structured response.
• Response Time: We aim to respond to all privacy enquiries within 3 working days and to complete complex investigations within 21 working days.