Privacy Policy

1. Introduction

This Privacy Policy (hereinafter "Policy") is issued by rp777 (hereinafter "rp777", "We", "Us", or "Our"), the operator of the online gaming and sports betting platform accessible at rp777.casa (the "Platform"). This Policy applies to all individuals who access or use the Platform, including registered players, prospective players, and general visitors (collectively referred to as "Users", "You", or "Your").

rp777 takes the privacy and security of your personal data seriously. We are committed to handling your information transparently, using it only for the purposes set out in this Policy, and protecting it with appropriate technical and organisational security measures. This Policy is intended to comply with applicable international data protection standards and to give you clear, honest information about how your data is handled.

By registering an account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should cease using the Platform and contact our support team to close your account.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, payment details, and IP address.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, and deletion.
• "Data Controller" means rp777, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of rp777 under contractual instruction.
• "KYC" means Know Your Customer — the identity and document verification process applicable to all registered players prior to withdrawal processing.
• "Cookies" means small text files stored on your device by the Platform to recognise you on return visits and support the functionality of the website.
• "Platform" means the rp777 website at rp777.casa, any associated mobile interface, and all services made available through these channels.

3. Personal Data We Collect

rp777 collects only the Personal Data that is necessary to provide the Services, comply with applicable legal obligations, and protect the security and integrity of the Platform. The categories of Personal Data we collect include:

3.1 Identity & Contact Data

• Full legal name
• Date of birth
• Email address
• Phone number (mobile)
• Residential address (including city and postcode)
• Malaysian Identity Card number (MyKad) or passport number, provided during KYC verification

3.2 Financial & Transaction Data

• Bank account details (account number, bank name) — e.g., Maybank, CIMB, Public Bank, Hong Leong
• E-wallet identifiers (registered phone number or account ID) — e.g., Touch 'n Go eWallet, Boost, GrabPay
• DuitNow and FPX transfer references
• Deposit and withdrawal transaction history
• Account balance records

3.3 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Login timestamps and session duration
• Pages visited, games played, and betting history
• Referral source (how you arrived at the Platform)

3.4 Communications Data

• Records of your communications with our customer support team, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records

3.5 Verification Documents

• Copies of identity documents submitted for KYC (e.g., MyKad front and back, passport photo page)
• Proof of address documents (utility bills, bank statements)
• Proof of payment method documentation

4. How We Collect Personal Data

rp777 collects Personal Data through the following channels:

• Account Registration: Information you provide when creating your rp777 account, including your name, email, phone number, date of birth, and residential address.
• KYC Verification: Identity and address documents you upload in response to verification requests before withdrawal processing.
• Deposits & Withdrawals: Payment details entered or confirmed when you conduct financial transactions on the Platform.
• Platform Usage: Automatically collected technical data including IP address, device identifiers, browsing behaviour, and game activity via server logs and cookies.
• Customer Support: Information you provide when contacting our support team via live chat, email, or any other communication channel.
• Promotions & Surveys: Information you voluntarily submit when participating in promotions, competitions, or feedback surveys.
• Third-Party Sources: In limited circumstances, we may receive supplementary data from identity verification service providers, fraud prevention agencies, or payment processors, strictly for KYC and security purposes.

5. Purposes of Processing

rp777 processes your Personal Data for the following specific, documented purposes:

6. Legal Basis for Processing

rp777 processes your Personal Data on the following legal bases:

• Contract Performance: Processing is necessary to fulfil our obligations to you under our Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws, including KYC and AML regulatory requirements, age verification obligations, and data retention mandates.
• Legitimate Interests: Processing is necessary for rp777's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent for specific processing activities (for example, sending promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

rp777 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection obligations:

• Payment Service Providers: Financial institutions and payment processors (including those supporting Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX) to facilitate deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to verify your identity and document authenticity.
• Fraud Prevention & Security Partners: Agencies and technology providers that assist rp777 in detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Technology Infrastructure Providers: Hosting, cloud computing, and platform infrastructure partners who process data on rp777's behalf under strict data processing agreements.
• Customer Support Platforms: Third-party tools used to power our live chat and ticketing system, limited to communications data necessary to resolve your query.
• Legal & Regulatory Authorities: Where rp777 is required by law, court order, or regulatory authority to disclose your Personal Data. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, asset sale, or business restructuring, your Personal Data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

All third-party recipients are contractually required to process your Personal Data only for the specified purpose and in accordance with applicable data protection standards. rp777 does not authorise any third party to use your Personal Data for their own independent marketing or commercial purposes.

8. International Data Transfers

rp777 operates internationally, and your Personal Data may be transferred to and processed in countries outside of Malaysia and outside of your country of residence. Where such transfers occur, rp777 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required under applicable data protection law. These safeguards may include contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection.

9. Data Retention

rp777 retains your Personal Data only for as long as is necessary to fulfil the purposes outlined in this Policy and to comply with applicable legal, regulatory, and contractual obligations. The following indicative retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with rp777 and for a period of at least five (5) years following account closure, in compliance with AML and financial record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the interaction, unless the matter relates to an unresolved dispute or legal proceeding.
• Technical & Usage Data: Retained in aggregated or anonymised form for up to two (2) years for analytical purposes.

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Cookies & Tracking Technologies

rp777 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and support our security and analytics functions. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential to the operation of the Platform, including session management, login authentication, and security functions. These cannot be disabled.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings and previously viewed pages, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, time on site, and navigation paths — to help us improve performance and content.
• Security Cookies: Used to detect and prevent fraud, unusual account behaviour, and unauthorised access attempts.

You may adjust your cookie preferences through your browser settings. Please note that disabling certain cookies may impact the functionality of the Platform. rp777 does not use cookies to serve third-party advertising or to sell your browsing data to external parties.

11. Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your Personal Data held by rp777:

To exercise any of these rights, please contact rp777's Data Protection team using the contact details in Section 16. We will respond to all verified requests within a reasonable timeframe. We may need to verify your identity before processing your request to prevent unauthorised disclosure.

12. Minors & Age Policy

rp777 operates an age-restricted platform. The Services are strictly available to individuals aged 21 years and above. We do not knowingly collect, process, or store Personal Data from persons under the age of 21.

Age verification is a mandatory component of our KYC process. Where rp777 discovers that an account has been registered by a person under 21 years of age, all Personal Data associated with that account will be securely deleted as soon as practicable, all funds will be handled in accordance with applicable regulatory guidance, and the account will be permanently closed.

If you are a parent or guardian and have reason to believe that a minor has registered an account or provided Personal Data on the Platform, please contact our support team at [email protected] immediately.

13. Data Security

rp777 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard 256-bit SSL/TLS encryption protocols.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication required for administrative system access.
• Pseudonymisation: Where operationally feasible, Personal Data is pseudonymised to reduce the risk of identification in the event of a data security incident.
• Regular Security Assessments: rp777 conducts periodic reviews of its data security practices, including vulnerability assessments and penetration testing of platform infrastructure.
• Incident Response: rp777 maintains a documented data breach response procedure. In the event of a security incident affecting your Personal Data, we will notify you and any relevant regulatory authorities as required by applicable law.

While rp777 takes reasonable and appropriate steps to protect your data, no system or transmission over the internet can be guaranteed as entirely secure. You are responsible for maintaining the confidentiality of your account login credentials and for notifying rp777 immediately if you suspect unauthorised account access.

14. Third-Party Links & Services

The Platform may contain references to third-party payment services and may integrate with third-party technology providers to deliver certain features. rp777 is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policy of any third-party service you use in connection with your rp777 account, including your payment provider's privacy documentation.

15. Policy Amendments

rp777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The date of the most recent revision is indicated at the top of this document. Where amendments are material, rp777 will notify registered players via email or an in-platform notification where practicable.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the updated Policy, you must cease using the Platform and contact our support team to close your account.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the rp777 Data Protection team using the details below. Our support team is available 24 hours a day, 7 days a week.

We aim to acknowledge all data subject requests within five (5) business days and to resolve them within thirty (30) days from receipt, subject to the complexity of the request and identity verification requirements.

For matters relating to responsible gambling, self-exclusion, or deposit limit requests, please visit our dedicated Responsible Gambling page. For general account queries and our full terms of service, please see our Terms & Conditions.