Privacy Policy

This Privacy Policy ("Policy") sets out how RKO66 ("we", "us", "our", "Platform") collects, processes, stores, and protects the personal data of individuals ("Member", "User", "you") who access or use the RKO66 website at rko66.cam and all associated services offered thereon.

RKO66 is committed to handling your personal data responsibly and in compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 of Malaysia (PDPA 2010). By registering an account, making a deposit, or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to arrange account closure.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a living individual, including but not limited to name, identification number, contact details, IP address, payment information, and account activity.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" means RKO66, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of RKO66 under a written agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they agree to the processing of their Personal Data.
• "KYC Data" means identity verification documentation collected in fulfilment of Know Your Customer obligations, including government-issued identification and proof of address.
• "Cookies" means small text files stored on your device by the Platform for the purposes described in Section 10 of this Policy.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia.

RKO66 collects the following categories of Personal Data:

Registration & Identity Data

• Full legal name
• Date of birth
• Residential address (including city, state, postcode)
• Email address
• Mobile phone number
• Username and encrypted password

KYC & Verification Data

• Government-issued photo identification (MyKad or passport)
• Proof of residential address documentation
• Proof of ownership of payment method (where required)
• Source of funds documentation (where requested)

Financial & Transaction Data

• Deposit and withdrawal history
• Payment method details (e-wallet identifiers, bank account references — not full card numbers)
• Transaction timestamps and amounts in MYR
• Bonus and promotional credit history

Behavioural & Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, games played, and session durations
• Betting patterns and wagering history
• Login timestamps and access logs

Communication Data

• Support chat transcripts and email correspondence
• Feedback and survey responses
• Promotional preference settings

We collect Personal Data through the following means:

• Directly from you — when you complete the registration form, submit KYC documentation, make a deposit or withdrawal, contact our support team, or participate in promotions.
• Automatically — through cookies, web beacons, and server logs as you navigate and interact with the Platform. This includes IP address, device identifiers, and behavioural data.
• From third-party service providers — including identity verification agencies, payment processors (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank), and fraud detection services, as necessary to process your transactions and verify your identity.
• From publicly available sources — where required for compliance purposes, including sanctions screening and anti-money laundering checks.

RKO66 processes your Personal Data for the following purposes:

RKO66 will not process your Personal Data for any purpose other than those stated above without first obtaining your explicit consent or establishing an appropriate alternative legal basis.

RKO66 processes Personal Data on one or more of the following legal bases:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered Member, including account management, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable Malaysian law, including PDPA 2010, anti-money laundering legislation, and responsible gambling regulations.
• Legitimate Interests: Processing is necessary for the legitimate interests of RKO66, including fraud prevention, platform security, business analytics, and improvement of our services, provided that such interests are not overridden by your rights and interests.
• Consent: Where required, we will obtain your explicit consent before processing Personal Data — in particular for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

RKO66 does not sell, rent, or trade your Personal Data to third parties. We may share your data with the following categories of recipients only where necessary and on a strictly need-to-know basis:

• Payment Processors: Including providers of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank) to process your financial transactions securely.
• Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and comply with our legal obligations.
• Fraud Prevention and AML Services: Specialist providers engaged to detect suspicious activity, prevent money laundering, and protect the integrity of the Platform.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data as Data Processors under binding data processing agreements with RKO66.
• Customer Support Platforms: Third-party live chat and support ticketing providers, engaged under strict confidentiality obligations.
• Regulatory and Law Enforcement Authorities: Where RKO66 is legally required to disclose Personal Data in response to a valid legal request, court order, or regulatory obligation.

All third parties with whom Personal Data is shared are contractually required to implement appropriate security measures and to use your data only for the specific, limited purposes for which it was shared.

RKO66 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following indicative retention periods apply:

• Active account data: Retained for the duration of your account membership plus a minimum of seven (7) years following account closure, to satisfy statutory record-keeping and anti-money laundering obligations.
• KYC and identity documentation: Retained for a minimum of seven (7) years from the date of verification or account closure, whichever is later, in accordance with financial crime prevention regulations.
• Transaction records: Retained for a minimum of seven (7) years for accounting, auditing, and regulatory compliance purposes.
• Support correspondence: Retained for three (3) years from the date of the interaction, or longer if the correspondence relates to an unresolved dispute or legal proceeding.
• Marketing preferences: Retained until you withdraw consent or request erasure of your marketing profile.
• Technical and log data: Generally retained for twelve (12) months unless longer retention is required for security incident investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents identification of individuals.

RKO66 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage of sensitive Personal Data at rest using industry-standard encryption protocols
• Role-based access controls limiting internal access to Personal Data strictly to personnel with a legitimate operational need
• Two-factor authentication (2FA) available for all member accounts as an additional layer of protection
• Continuous intrusion detection and monitoring to identify and respond to suspicious activity in real time
• Regular security audits and penetration testing conducted by independent cybersecurity professionals
• Staff training on data protection obligations and information security practices

In the event of a data security incident that poses a risk to your rights and interests, RKO66 will notify affected Members promptly and in accordance with applicable legal notification requirements.

RKO66 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session state, and gather analytics data to improve our services. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously entered information to provide a more personalised experience during your session.
• Analytics Cookies: Collect anonymised or aggregated data about how Members use the Platform, including pages visited, time spent, and navigation paths. This data is used to improve Platform performance and user experience.
• Security Cookies: Used to detect fraudulent activity, enforce rate limits, and protect the Platform and its members from malicious behaviour.

Non-essential cookies (functional and analytics) are only set with your consent. You may manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

RKO66 does not use cookies for third-party advertising or behavioural targeting. No cookie data is shared with external advertising networks.

Under applicable Malaysian data protection law, you hold the following rights with respect to your Personal Data processed by RKO66. To exercise any of these rights, please contact our Data Protection team via the channels set out in Section 15.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to Correction: You have the right to request correction of any inaccurate, incomplete, or outdated Personal Data held in your account. You may update most information directly through your account settings.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications or non-essential cookies), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Restrict Processing: In certain circumstances, you may request that we limit the processing of your Personal Data while a dispute or objection is being assessed.
• Right to Erasure: You may request deletion of your Personal Data. Note that this right is subject to our legal obligations to retain certain data for statutory periods (see Section 8). Where erasure is not possible due to legal obligations, we will restrict processing of the retained data to the minimum required.
• Right to Lodge a Complaint: If you are dissatisfied with our handling of your Personal Data, you have the right to lodge a complaint with the relevant data protection authority in Malaysia or your jurisdiction of residence.

RKO66 will respond to all valid rights requests within thirty (30) days of receipt. In complex cases, this may be extended by a further thirty (30) days, with notification provided to you. We may require you to verify your identity before processing a rights request to protect against unauthorised disclosure.

The RKO66 Platform is strictly for individuals aged 21 years and above. RKO66 does not knowingly collect, process, or retain Personal Data from any person under the age of 21. Age verification is performed as part of the KYC process for all new Members.

If RKO66 becomes aware that Personal Data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be permanently closed, and any funds held in the account will be handled in accordance with our Terms & Conditions.

If you believe a person under the age of 21 may have registered an account on the Platform, please notify our support team immediately at [email protected].

The RKO66 Platform may contain references to or integrations with third-party services, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, and banking services provided by Maybank, CIMB, Public Bank, and Hong Leong Bank. When you interact with these third-party services, you are subject to their own privacy policies and terms of service.

RKO66 is not responsible for the privacy practices, content, or security of any third-party service. We encourage you to review the privacy policies of all third-party services you interact with in connection with your use of the Platform.

RKO66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. All changes will be published on this page with an updated "Last Updated" date at the top.

Where changes are material — meaning they significantly affect how we use your Personal Data or your rights in relation to it — we will notify you by email to the address registered on your account, or by a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree to the amended Policy, please discontinue use of the Platform and request account closure via our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the RKO66 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the RKO66 Platform — average response time 3–5 minutes
• Email: [email protected] — please include "Privacy Request" in the subject line
• Languages: Support is available in English, Bahasa Melayu, and Mandarin

We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them fully within thirty (30) days. For complex or sensitive requests, additional time may be required, and we will keep you informed of progress throughout.