1. Home
  2. Privacy Policy
rp66 Official Documents · Malaysia PDPA

Privacy Policy rp66 – Protection of Members' Personal Data in Malaysia

Your privacy is our absolute priority at rp66. This policy clearly explains how we collect, use, store, and protect your personal information – in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 January 2026 | Bahasa Melayu (ms-MY) | PDPA 2010 Compliant
Data Protection Commitment

Rp66's 6 Key Privacy Commitments to You

Rp66 never takes lightly the trust you place in us. Below are the six core commitments that underpin how we handle your personal data every day.

256-bit SSL Encryption

All data transmitted between your browser and rp66's servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's major banks such as Maybank and CIMB. Your data remains completely unreadable to third parties during transmission.

No Sale of Data to Third Parties

Rp66 never sells, rents, or shares your personal data with any third party for marketing purposes without your explicit consent. Your information belongs to you – it is not a business commodity for us.

Compliant with Malaysia's PDPA 2010

Rp66's Privacy Policy is fully aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the full right to access, correct, and request the deletion of your personal data held in our records.

Secure Data Storage

Rp66 members' personal data is stored on servers protected by multi-layered firewalls, biometric access controls, and 24/7 security monitoring. Access to member data is strictly limited to authorised personnel only.

Financial Information Confidentiality

Your payment details – whether Touch 'n Go eWallet, GrabPay, DuitNow, or FPX – are processed through a PCI DSS-certified payment gateway. rp66 does not directly store your card numbers or e-wallet credentials in our systems.

Marketing Communications Control

You have full control over marketing communications from rp66. Unsubscribe from any promotional emails or SMS notifications at any time via the unsubscribe link provided or through your account settings.

Section 1

Introduction & Scope of This Policy

This Privacy Policy is published by rp66 ("we", "Platform", "rp66") and applies to all individuals who access or use the rp66.wine website, the rp66 mobile app, and all related services provided by the platform ("Services").

Rp66 is committed to protecting the privacy and security of all members' personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy clearly outlines the types of data we collect, the purposes for collection, how it is stored, and your rights regarding that data.

By registering or using the rp66 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to request deletion of your account and personal data.

Section 2

Types of Personal Data We Collect

Rp66 only collects data that is strictly necessary to provide a secure, seamless service that meets legal requirements. The following are the categories of data we collect:

Data Category Example Information Required?
Identity Data Full name, MyKad number, date of birth Mandatory
Contact Data Malaysian phone number, email address Mandatory
Financial Data Payment method, deposit/withdrawal records (RM) Mandatory
Technical Data IP address, browser type, operating system, device Automatic
Gaming Data Betting records, slots activity, casino history Automatic
Communication Data Surveys, complaints, live chat support logs Optional
rp66 Data Minimisation Principle

Rp66 follows a "data minimisation" principle — we only collect what is necessary, and nothing beyond that. You will never be asked to provide information that is irrelevant to the services you use.

Section 3

How We Collect Your Data

Your personal data is collected by rp66 through three main channels:

1
Directly From You
When you complete the rp66 account registration form, make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), submit identity verification (KYC) documents, contact customer support via live chat, or fill in a feedback form.
2
Automatically Upon Platform Use
When you use the rp66 platform, our systems automatically record your IP address, browser type and version, operating system, pages visited, session time and duration, clicks and in-platform actions, and platform technical performance for improvement purposes.
3
From Authorised Third-Party Sources
In certain circumstances, rp66 may receive data from licensed third-party identity verification providers for KYC purposes, fraud detection service providers, and AML (Anti-Money Laundering) compliance agencies where required by law.
Section 4

How Your Personal Data Is Used

Rp66 uses your personal data only for legitimate, clearly stated purposes. We do not use your data in ways you would not expect or have not consented to:

✓
Account Setup & Management
Registering and verifying your account, processing deposits and withdrawals in RM via Malaysian payment methods, providing access to slots, Live Casino, e-sports, and jackpot games on rp66, and managing your account profile and settings.
✓
Security & Fraud Prevention
Detecting and preventing fraud, money laundering, account misuse, and other unlawful activities. Verifying your identity through KYC processes where required, monitoring suspicious transactions, and safeguarding the integrity of the rp66 platform.
✓
Customer Support
Responding to your enquiries, complaints, and support requests via live chat, email, or other support channels. Maintaining communication records to enable faster and more consistent issue resolution.
✓
Service Communication & Marketing
Sending account-related notifications such as deposit confirmations, withdrawals, and password changes (mandatory). Sending information about bonuses, Hari Raya promotions, and special rp66 offers (unsubscribable at any time via account settings).
✓
Responsible Gaming
Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support. Enforcing deposit and game limits you have set yourself. Maintaining records of requested self-exclusions.
Section 5

Disclosure of Data to Third Parties

Rp66 does not sell your personal data to any party. However, under the following limited circumstances, rp66 may share necessary data with carefully selected third parties:

Payment Service Providers
Malaysian e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and the FPX gateway only receive data necessary to process your financial transactions. All these providers comply with PCI DSS and PDPA standards.
Game Providers
Slots and casino providers such as Pragmatic Play, Evolution Gaming, and Microgaming receive only anonymous player IDs for the sole purpose of delivering gameplay. No full names or other personal information are shared with game providers.
Legal Authorities
rp66 will disclose your personal data to the relevant authorities such as the Royal Malaysia Police, Bank Negara Malaysia, or the Companies Commission of Malaysia when required by court order or applicable law.
AML/KYC Compliance Agencies
To fulfil legal obligations related to Anti-Money Laundering (AML) and identity verification (KYC), rp66 may engage approved third-party services to verify the authenticity of a player's identity.
Our Commitment

Rp66 will not share your personal data with any third-party marketing companies, insurance firms, or any entity not named in this policy without your prior written consent.

Section 6

Rp66 Data Security Measures

Rp66 continually invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

Data Encryption During Transfer
TLS 1.3 and 256-bit SSL protocols ensure all data travels through fully secured channels.
Encryption of Data at Rest
Sensitive data such as passwords and financial information is stored in encrypted form using AES-256 encryption.
Firewall & Intrusion Detection
A multi-layered firewall system with real-time intrusion monitoring (IDS/IPS) protects rp66's server infrastructure against cyber attacks.
Internal Access Controls
Access to member data by rp66 staff is governed by a "least privilege" principle — only employees who genuinely require it for a specific task are granted access.
Independent Security Audit
rp66 undergoes regular independent security audits and penetration testing by third-party cybersecurity firms to identify and address vulnerabilities.
Two-Factor Authentication (2FA)
rp66 offers optional 2FA for all member accounts to add an extra layer of protection against unauthorised access to your account.
Section 7

Use of Cookies on rp66

Rp66 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how our platform is used. The following are the types of cookies we use:

Cookie Type Purpose Duration Type
Session Cookies Maintaining your login state during active sessions on rp66 Expires upon logout Mandatory
Security Cookies Detecting suspicious login attempts & protecting against CSRF 24 hours Mandatory
Preference Cookies Storing your language settings and display preferences 1 year Functional
Analytics Cookies Understanding platform usage patterns for continuous improvement 90 days Analytics

You can manage cookies through your browser settings. Please note that disabling mandatory cookies may affect the login functionality and account security of rp66. Analytical and functional cookies can be disabled without affecting basic platform use.

Section 8

Your Rights Under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by rp66:

Right of Data Access
You have the right to request and receive a copy of all personal data we hold about you. rp66 will process such requests within 14 business days.
Right to Data Rectification
If any of your personal data is inaccurate or has changed, you have the right to request a correction through your account settings or by contacting rp66 support.
Right to Data Deletion
You may request the deletion of your account and personal data, subject to any legal record-keeping obligations we are required to comply with (e.g., financial records for 7 years).
Right to Object to Marketing
You may object to the processing of your data for direct marketing purposes at any time via the unsubscribe link in any email or through your rp66 account notification settings.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format (JSON or CSV) for transfer to another service, where technically feasible.
Right to Restrict Processing
Under certain circumstances, you may request that rp66 temporarily suspend the processing of your data pending the outcome of a complaint or dispute you have raised.
How to Exercise Your Rights

To exercise any of the rights above, contact rp66's Data Protection Officer by email at privacy@rp66.wine or via rp66 support live chat. We will respond within 14 business days of receiving your request.

Section 9

Cross-Border Data Transfers

As part of rp66's global platform operations, your personal data may need to be transferred or processed outside Malaysia for certain technical or operational purposes – for example, when cloud service providers or international game providers operate infrastructure based overseas.

In all such cases, rp66 ensures that protections equivalent to Malaysia's PDPA are applied to any data transfer through legally binding data processing agreements with all third-party partners involved. rp66 will not transfer your data to countries that lack adequate data protection without appropriate additional safeguards in place.

Section 10

Data Retention Period

Rp66 retains your personal data only for as long as necessary for the stated purposes or as required by law:

Data Type Retention Period Basis
Active account data For the duration of active account Service requirements
Financial & transaction records (RM) 7 years after transaction Malaysia Income Tax Act
KYC Documents 5 years after account closure Anti-Money Laundering Act
Support communication logs 2 years Service improvement
Anonymised analytics data Unlimited (anonymised) Research & Development
Section 11

Child Protection

The rp66 platform is strictly limited to individuals aged 18 and above. rp66 does not knowingly collect any personal data from anyone under the age of 18.

Action Against Underage Accounts

Should rp66 discover that personal data has been collected from an individual under 18 years of age, we will take immediate action to delete that data and close the account in question. If you are aware that a minor has registered an rp66 account, please contact us immediately at privacy@rp66.wine.

Section 12

Amendments to This Privacy Policy

Rp66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or platform improvements. The "Last updated" date at the top of this policy will always reflect the latest version in effect.

For material amendments (significant changes to how we use your data), rp66 will notify you via email or an in-platform notification at least 7 days before the changes take effect. Continued use of the rp66 platform after the effective date will be considered acceptance of the updated policy.

Section 13

Contact rp66's Privacy Officer

For any enquiries, concerns, or requests regarding your personal data at rp66, please contact our Data Protection Officer (DPO):

Privacy Email
privacy@rp66.wine
Response within 14 business days
Live Chat
24/7 Support
Response within 2 minutes
Customer Support
support@rp66.wine
365 days a year
Your Privacy Is Safe with rp66

Play With Peace of Mind – Your Data Is Always in Safe Hands

Rp66 protects your personal data with the latest security technology and is fully compliant with Malaysia's PDPA. Register an account today and enjoy over 1,000 slots, Live Casino, e-sports & jackpot games with complete peace of mind.

Register a Secure Account Log In

*All data is protected by 256-bit SSL. rp66 complies with Malaysia's PDPA 2010. For players aged 18 and above.

Bahasa Melayu