Privacy Policy

This Privacy Policy ("Policy") is published by RP77 ("RP77", "we", "us", or "our") and applies to all personal data collected from individuals ("User", "you", or "your") who access or use the RP77 website at https://rp77.buzz and all associated services, including online casino games, sports betting, live dealer games, and any other products available through the Platform.

RP77 takes its data protection obligations seriously. This Policy has been drafted to give you a clear and comprehensive understanding of our data processing practices. It covers the categories of personal data we collect, the lawful bases on which we process that data, how long we retain it, who we share it with, and how you can exercise your rights as a data subject.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the RP77 Platform and are incorporated herein by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, whether directly (e.g., full name, email address) or indirectly (e.g., device identifiers, IP address combined with other data).
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether automated or manual.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in the context of this Policy, RP77.
• "Data Processor" means a third party that processes Personal Data on behalf of RP77 under a contractual obligation and pursuant to documented instructions.
• "Sensitive Personal Data" means a special category of Personal Data that warrants heightened protection, including financial account details, government identification documents, and KYC verification records.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and analytical data.
• "Platform" means the RP77 website at https://rp77.buzz and all associated digital services.

RP77 collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises the main categories of data we collect and their purpose:

RP77 collects Personal Data through the following channels:

4.1 Directly From You

The majority of Personal Data we hold about you is information you provide directly when you: register an account on the Platform; complete our KYC verification process by submitting identity documents; make a deposit or withdrawal using payment methods such as Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, or Public Bank; contact our customer support team via live chat or email; subscribe to marketing communications; or respond to surveys, promotions, or competitions.

4.2 Automatically Through Platform Use

When you access and use the RP77 Platform, certain Technical Data and Usage Data is collected automatically through cookies, server logs, and tracking technologies. This includes your IP address, browser configuration, device identifiers, session timestamps, pages accessed, games played, and interactions with Platform features. This data is collected to ensure platform security, detect fraud, and improve the overall user experience.

4.3 From Third Parties

In certain circumstances, RP77 may receive Personal Data about you from third parties. This includes: identity and address verification data from KYC service providers; fraud and risk scores from payment processors; information from sports data feed providers necessary to settle live bets; and, where applicable, data from responsible gambling self-exclusion registers.

RP77 processes your Personal Data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your account, process your deposits and withdrawals, and deliver the gaming and betting services you have registered to use.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC/AML requirements, age verification mandates, and data retention obligations imposed by licensing authorities.
• Legitimate Interests: Processing is necessary for RP77's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, service improvement, and internal analytics — provided these interests are not overridden by your rights and interests.
• Consent: Where we send you marketing communications or deploy non-essential cookies, we do so on the basis of your freely given, informed consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

RP77 uses Personal Data collected from users in the following ways:

6.1 Account and Service Delivery

To create and manage your RP77 account; to process deposits and withdrawals through supported Malaysian payment channels; to verify your identity and eligibility in accordance with our KYC and responsible gambling obligations; to communicate account-related information including security alerts, transaction confirmations, and service updates; and to provide 24/7 customer support.

6.2 Security and Compliance

To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activity; to verify that users meet the minimum age requirement of 21 years; to monitor for signs of problem gambling and enforce responsible gambling limits; and to comply with our obligations under applicable international gaming regulations and AML frameworks.

6.3 Platform Improvement and Personalisation

To analyse usage patterns and improve the performance, design, and functionality of the Platform; to personalise the gaming experience based on your game preferences and betting history; and to develop new features and services in response to user behaviour and feedback.

6.4 Marketing Communications

Where you have provided consent or where we have a legitimate interest, to send you promotional communications including information about bonuses, seasonal promotions (such as Deepavali, Hari Raya, or Chinese New Year offers), new games, and sports betting opportunities relevant to Malaysian players. You may opt out at any time through your account settings.

RP77 does not sell, rent, or trade your Personal Data to unaffiliated third parties. We may share your data with the following categories of recipients only to the extent necessary and for the purposes described:

• Payment Service Providers: Including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency processors — to process your financial transactions securely.
• KYC and Identity Verification Providers: Third-party services engaged to verify your identity, age, and address as required by our compliance obligations.
• Fraud Prevention and Risk Management Services: Providers engaged to analyse transactions and account activity for indicators of fraud, money laundering, or suspicious behaviour.
• Game Software Providers: Third-party studios and platform providers whose games are available on RP77 may receive limited usage data required for game functionality and audit purposes.
• IT Infrastructure and Cloud Providers: Service providers responsible for hosting, data storage, and technical infrastructure, operating under strict data processing agreements.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory direction, RP77 will disclose Personal Data to competent authorities without further notice to you.

RP77 uses cookies and similar tracking technologies to provide and improve the Platform. The categories of cookies we deploy are as follows:

You can manage your browser's cookie settings at any time through your browser preferences. Please note that disabling certain non-essential cookies may affect the functionality and performance of the Platform. RP77 does not use third-party advertising cookies for the purpose of serving targeted advertisements on external websites.

RP77 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce our agreements. The following retention principles apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with international AML record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, to meet regulatory compliance obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Customer Support Communications: Retained for up to three (3) years from the date of the interaction, unless the communication relates to an ongoing dispute or compliance matter.
• Marketing Preference Data: Retained until you withdraw consent or request deletion, plus a reasonable period to demonstrate compliance with opt-out requests.
• Technical and Usage Data: Typically retained for up to twelve (12) months in identifiable form, after which it may be anonymised and retained indefinitely for aggregate analytical purposes.

Upon expiry of the relevant retention period, Personal Data is securely deleted or irreversibly anonymised. Where anonymisation is not practicable, data is destroyed in a manner that prevents recovery or reconstruction.

RP77 implements a comprehensive range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your device and the RP77 Platform is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored at rest is encrypted using industry-standard algorithms.
• Access Controls: Strict role-based access controls ensure that only authorised personnel with a legitimate operational need can access identifiable Personal Data. Access is logged and audited.
• Two-Factor Authentication: Account access is secured with two-factor authentication options to protect against unauthorised login attempts.
• Regular Security Assessments: RP77 conducts periodic security reviews, penetration testing, and vulnerability assessments to identify and remediate potential risks to our systems.
• Incident Response: RP77 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, affected users will be notified in accordance with applicable legal requirements.

RP77 is an international online gaming platform. To deliver our services to users across Malaysia and other markets, your Personal Data may be transferred to, stored, and processed in countries outside of Malaysia. These countries may not have data protection laws that are equivalent to those in your home jurisdiction.

Where such international transfers occur, RP77 ensures that appropriate safeguards are in place to protect your data. These safeguards may include: binding contractual obligations between RP77 and the receiving entity; technical measures ensuring data is encrypted and access-controlled; and, where applicable, reliance on adequacy decisions or equivalent legal frameworks.

If you would like further information about the safeguards in place for international transfers of your data, please contact our support team at the address provided in Section 16.

Subject to applicable law, you have the following rights in respect of your Personal Data held by RP77. You may exercise any of these rights at any time by contacting our support team as described in Section 16.

The RP77 Platform is strictly intended for individuals aged 21 years and above. RP77 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification checks are conducted as part of the account registration process to enforce this requirement.

If RP77 discovers or is informed that a user under the age of 21 has registered an account or submitted Personal Data to the Platform, we will immediately suspend the account, delete all associated Personal Data to the extent legally permissible, and notify the relevant regulatory authority where required.

If you are a parent or guardian and believe that your child may have registered on or submitted data to RP77 without your knowledge, please contact our support team immediately at the details provided in Section 16 so that we can investigate and take appropriate action without delay.

The RP77 Platform may contain links to third-party websites, services, or resources not operated by RP77. These links are provided for informational convenience only and do not constitute an endorsement of the linked website or its content.

RP77 has no control over and assumes no responsibility for the content, privacy practices, or security measures of any third-party website. When you leave the RP77 Platform by following a third-party link, your use of that website is governed by that website's own privacy policy. We strongly encourage you to review the privacy policy of any third-party site you visit.

RP77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational procedures. Where amendments are material — meaning they affect how we collect, use, or share your data in a meaningful way — we will notify registered users by email to the address associated with their account, or by way of a prominent notice on the Platform, no less than fourteen (14) days prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the RP77 Platform following the effective date of any amended Policy constitutes your acknowledgement of the updated terms. If you do not agree to the amended Policy, you should cease using the Platform and contact us to close your account in accordance with our Terms and Conditions.

The current version of this Privacy Policy is always available at https://rp77.buzz/privacy-policy. We recommend reviewing this page periodically to stay informed of any changes.

If you have questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 12, please contact the RP77 support team through the following channels. We will respond to all privacy-related enquiries within the timeframes set out in this Policy.

When submitting a data rights request, please include your registered account username and, where applicable, a description of the specific data or processing activity your request concerns. This will help us locate your records and process your request efficiently.