RK77 Privacy Policy – Personal Data Protection Commitment for Malaysian Players

This Privacy Policy is published by RK77 and applies to all users who access or use our platform at the website rk77-bangla.com. This document transparently explains how RK77 collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

Rk77 is committed to the privacy of every member. We believe that players who entrust us with their personal information deserve to know exactly how that data is handled. That is why this document is written in plain, accessible language — not complex legal jargon.

This Privacy Policy covers:

• The types of personal data we collect when you register for and use the rk77 platform.
• The purpose and legal basis for each category of data processing.
• The parties that may receive your data and under what circumstances.
• Data retention periods and secure deletion procedures.
• Your rights as a data subject and how to exercise them.

RK77 collects personal data through three main channels: information you provide directly, data automatically generated during your use of the platform, and in limited cases, information from legitimate third-party sources.

Data you provide directly:

• During registration: Full name, Malaysian mobile number, email address, date of birth, and account password.
• During KYC verification: A copy of your MyKad, passport, or other official identification document, along with a selfie for facial verification when required.
• During financial transactions: Details of the payment method you use — whether Touch 'n Go eWallet, GrabPay, DuitNow, FPX via Maybank2u or CIMB Clicks, Boost, or ShopeePay — along with the associated account numbers in Malaysian Ringgit (MYR).
• When contacting support: Information you share during conversations with the RK77 customer support team.

Automatically generated data:

• IP address and approximate geographic location derived from IP.
• Device information: device type, operating system, browser version.
• Cookie data and session tokens to maintain login status and platform preferences.
• Activity logs: pages visited, session duration, and in-platform actions.
• Complete game history: all bets, winnings, and results across baccarat, blackjack, poker, jackpot slots, live casino, and sports betting.

Every piece of data we collect serves a specific, legitimate purpose. Below is a detailed explanation of how RK77 uses your data:

• Account management: Creating and maintaining your account, processing logins, managing account settings, and handling requests for personal information changes.
• Transaction processing: Processing deposits and withdrawals in MYR via your chosen local Malaysian payment method. This includes identity verification to prevent financial fraud.
• Provision of gaming services: Enables you to play baccarat, blackjack, poker, slots, live casino, and place Sports Betting wagers on the rk77 platform with a seamless, personalised experience.
• Security and fraud prevention: Detecting and preventing suspicious activity, duplicate accounts, collusion, bot usage, and any form of platform abuse.
• Legal compliance: Meeting anti-money laundering (AML) requirements, customer identification (KYC), and reporting obligations as required by the relevant authorities.
• Customer support: Responding to enquiries, resolving technical issues, and handling complaints effectively.
• Responsible gaming: Monitoring gameplay patterns to proactively identify signs of problem gambling and activate relevant protection tools.
• Platform improvements: Analysing how users interact with the platform to improve the interface, performance, and overall experience.
• Service communications: Sending important notifications regarding your account, policy changes, suspicious activity, or system updates.

RK77 does not sell your personal data to any third party. Data sharing only occurs in limited situations such as those outlined below, each of which has a valid legal basis:

• Payment service providers: Required transaction data is shared with providers such as Touch 'n Go, GrabPay, DuitNow, Boost, and ShopeePay solely for the purpose of processing your deposits and withdrawals in MYR. These providers are bound by strict data protection agreements.
• Game software providers: Certain game data is shared with third-party casino software providers that supply games to RK77. This sharing is limited strictly to data required for game functionality and fairness auditing.
• Certification and audit bodies: Required data is shared with independent certification bodies that audit RK77's RNG systems and game fairness. This information is used solely for audit purposes and is not retained by those bodies.
• Legal authorities: rk77 will disclose required data to the relevant authorities when mandated by a court order, legal warrant, or legitimate anti-money laundering compliance obligations. We will notify you of any such disclosure unless prohibited by law.

All third parties that receive data from RK77 are contractually bound to protect it to a standard no less stringent than this Privacy Policy. We conduct regular audits of all vendors to ensure ongoing compliance.

The security of your data is a core technical priority at rk77 — one we never compromise on. The following measures are in place:

• Data encryption in transit: All communications between your browser and RK77 servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates — the same standard used by Malaysia's leading banking institutions.
• Data encryption at rest: Sensitive data such as financial information and identification documents are stored in encrypted form on our servers. Your password is stored as a hash that cannot be decrypted.
• Internal access controls: Only rk77 staff with a legitimate business need are permitted to access user data. All access is logged and regularly audited.
• 24/7 security monitoring: Our threat detection system operates around the clock to identify and respond to any unauthorised access attempts.
• Regular penetration testing: We conduct regular external security assessments to identify and remediate vulnerabilities before they can be exploited.

Data retention period:

• Active account data is retained for as long as the account remains active and for 7 years following account closure, in accordance with Malaysian financial regulatory requirements.
• Financial transaction records are retained for a minimum of 7 years in accordance with applicable AML compliance requirements.
• Customer support chat logs are retained for 3 years for quality assurance and dispute resolution purposes.
• Technical and security log data is retained for 1 year and then securely deleted.

The RK77 platform uses cookies and similar tracking technologies to provide you with a better experience. The following are the types of cookies we use:

• Required session cookies: These cookies are required for core platform functions such as maintaining your login status, remembering your language preferences, and temporarily saving your betting cart contents. Disabling them will affect platform functionality.
• Performance cookies: Collects information about how you use the platform — such as the most frequently visited pages and any error messages you may encounter — to help us improve performance. This data is collected in aggregate and in anonymous form.
• Functional cookies: Remembering your preferences such as preferred betting limits, favourite game variants, and display settings to deliver a more personalised experience.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying simultaneous logins from different locations and flagging suspicious usage patterns.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the RK77 platform. We recommend accepting necessary and performance cookies for the best gaming experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you have the following rights regarding your personal data at rk77:

• Right of Access: You may request a copy of all personal data we hold about you. Requests will be processed within 30 business days.
• Right to Rectification: If any data we hold is inaccurate or out of date, you have the right to request a correction. Simple updates such as a phone number or address can be made directly in your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Please note that such requests may not be fully fulfilled if the data is required for legal compliance or the resolution of an outstanding dispute.
• Right to Restrict Processing: You may request that we restrict the use of your data in certain situations, such as when you are disputing the accuracy of data we hold.
• Right to Data Portability: You may request your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data for specific purposes, including direct marketing.

To exercise any of the above rights, please submit a written request to the RK77 privacy team at support@rk77-bangla.com with the subject line "Privacy Rights Request". Please include your account number and a clear description of your request. We will verify your identity before processing any request to protect the security of your account.

The RK77 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have inadvertently collected data from an underage individual, we will:

• Terminating the account in question immediately.
• Delete all data associated with that account within a reasonable timeframe.
• Returning any valid deposits to their original source in accordance with the applicable verification procedures.
• Reporting incidents to the relevant authorities where required by law.

The rk77 platform may contain links to third-party websites or services in certain contexts, such as live Sports Betting or casino game providers. This Privacy Policy applies solely to the rk77 platform and does not cover the privacy practices of those third-party websites or services.

RK77 is not responsible for the privacy policies, content, or practices of third-party service providers. We recommend reading the privacy policy of any third-party platform before sharing your personal data with them.

All major service providers integrated with the rk77 platform — including payment providers such as Touch 'n Go, GrabPay, and DuitNow — are independent entities with their own privacy policies and legal compliance obligations, separate from rk77.

RK77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform service improvements. Any material amendments will be communicated to you via:

• An in-platform notification the first time you log in after an amendment is published.
• An email notification to your registered email address for material amendments.
• Updates to this page will display the latest revision date at the top.

Continued use of the RK77 platform after an updated policy is published will be considered your acceptance of the revised policy. We recommend reviewing this page periodically — at least once every three months — to stay informed of how we handle your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how RK77 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@rk77-bangla.com (please include the subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the rk77 platform
• Target response time: 24 hours for initial enquiries; 14 working days for resolution of formal data rights requests

Our privacy team will verify your identity before processing any request relating to personal data. This is a required security measure to ensure your data is never disclosed to unauthorised parties.

We welcome feedback from users on privacy matters. If you believe RK77 is not handling your data in accordance with this Privacy Policy or applicable laws, you may also refer your complaint to the Department of Personal Data Protection Malaysia for further action.