rc88 Privacy Policy

rc88 ("rc88", "we", "us", "our") is the data controller responsible for the personal data of members and visitors who interact with the rc88 platform accessible at rc88.bio. As data controller, rc88 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted in accordance with applicable data protection laws and this Privacy Policy.

This Privacy Policy is intended to provide you with clear and transparent information about how rc88 handles your personal data. We are committed to treating your data with the same integrity and care that we bring to all aspects of the rc88 member experience.

If you have questions about this Privacy Policy or wish to exercise any of your data rights described herein, please contact our Data Protection team at [email protected].

rc88 collects the following categories of personal data in connection with your membership and use of our services:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification purposes)
• National identification number (MyKad number for Malaysian residents, or passport number for foreign nationals)
• Gender (where provided during registration)
• Copies of identity documents submitted for KYC verification

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (for KYC and fraud prevention purposes)

2.3 Account & Transactional Data

• Username and encrypted password credentials
• Account registration date and time
• Deposit and withdrawal history, including amounts, dates, and payment method identifiers
• Betting and gaming history, including games played, stakes, outcomes, and session durations
• Bonus claims, wagering progress, and promotional participation records
• Communication records between you and rc88 customer support

2.4 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and features accessed within the rc88 platform
• Referral source and campaign identifiers (where applicable)

2.5 Payment Data

rc88 does not store full payment card numbers or complete e-wallet account credentials. Payment processing is handled by licensed third-party payment processors. rc88 retains only tokenised payment identifiers and transaction reference numbers sufficient to process withdrawals to the same method used for deposit.

rc88 collects personal data through the following means:

• Direct provision: Data you provide when registering an rc88 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the rc88 platform, including through cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance databases; payment confirmation data from payment processors.
• Responsible gaming declarations: Self-exclusion records and responsible gaming tool settings that you configure from your account dashboard.

The table below sets out the primary purposes for which rc88 processes personal data and the corresponding lawful basis for each purpose:

rc88 does not sell, rent, or trade member personal data to third parties for commercial purposes. Personal data is shared with third parties only in the following circumstances, and only to the minimum extent necessary:

• Payment processors: Licensed payment service providers (including e-wallet operators such as Touch 'n Go and Boost, and banking partners operating FPX and DuitNow) receive the data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Specialist third-party KYC platforms receive identity documents for verification against government databases. These providers are bound by confidentiality agreements and applicable data protection standards.
• AML and fraud screening services: Compliance databases may receive anonymised or pseudonymised transaction data for screening against sanctions lists and fraud indicators as required by rc88's licensing obligations.
• Game studios: Where you access games provided by third-party studios, your player identifier and session data are shared with the relevant studio for game delivery and outcome generation. Game studios do not receive your full identity data.
• Legal and regulatory authorities: rc88 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, court order, or licensing requirement.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of rc88's business, member data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

rc88's primary server infrastructure is located in jurisdictions with robust data protection frameworks. Where personal data is transferred outside of Malaysia to countries that may not have equivalent data protection laws, rc88 ensures that appropriate safeguards are in place, including:

• Contractual clauses binding the recipient to data protection standards equivalent to those applicable in Malaysia
• Adequacy assessments confirming that the destination country provides an adequate level of data protection
• Processor agreements containing data protection obligations and audit rights

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting rc88 at [email protected].

rc88 retains personal data only for as long as necessary for the purposes for which it was collected, subject to any legal retention obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your membership and for a minimum of 5 years following account closure, in accordance with AML and gaming regulatory retention requirements.
• Transaction and betting records: Retained for a minimum of 5 years from the date of the relevant transaction or event.
• KYC documents: Retained for the duration required by rc88's licensing obligations, typically 5–7 years following account closure.
• Customer support communications: Retained for 3 years from the date of the relevant interaction.
• Technical and usage logs: Retained for up to 12 months for security and analytics purposes, subject to applicable legal requirements.
• Marketing consent records: Retained until you withdraw consent, plus an additional 12 months as an audit record.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents restoration or re-identification.

rc88 uses cookies and similar tracking technologies on the rc88 platform. A cookie is a small text file placed on your device when you visit a website. rc88 uses the following categories of cookies:

• Strictly necessary cookies: Required for the basic operation of the rc88 platform, including maintaining your login session, storing your game preferences, and ensuring platform security. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences and personalise your experience, such as language settings and display preferences.
• Analytics cookies: Used to collect anonymous data about how members use the rc88 platform, including pages visited, session duration, and navigation patterns. This data is used to improve platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and login anomaly monitoring.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the rc88 platform. rc88 does not use third-party advertising or cross-site tracking cookies.

rc88 will send you promotional and marketing communications only where you have provided your explicit consent to receive them during registration or subsequently through your account communication preferences.

Marketing communications from rc88 may include: promotional offers and bonus notifications; new game announcements; sportsbook event alerts; and VIP programme updates.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your rc88 account dashboard under Account Settings
• Clicking the "unsubscribe" link included in every marketing email from rc88
• Contacting rc88 customer support via live chat or email at [email protected]

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to the withdrawal. rc88 will continue to send you transactional and service communications (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing communication preferences, as these are necessary for the delivery of the rc88 service.

rc88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the rc88 platform is encrypted using TLS 1.3 / 256-bit SSL. Personal data stored in rc88 databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to member personal data is restricted to authorised rc88 personnel on a strict need-to-know basis. All access is logged and subject to regular audit.
• Password security: Member passwords are stored using bcrypt hashing with salting. rc88 does not store passwords in plain text or reversibly encrypted form.
• Two-Factor Authentication: Available to all rc88 members as an additional account security layer. rc88 staff accessing member data systems are required to use 2FA.
• Security monitoring: rc88 employs continuous security monitoring, intrusion detection systems, and regular penetration testing to identify and remediate potential vulnerabilities.
• Incident response: rc88 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rc88 will notify affected members within 72 hours of becoming aware of the breach, in accordance with applicable regulatory requirements.

While rc88 takes every reasonable precaution to protect your personal data, no system is completely immune from security risks. You are encouraged to use a strong, unique password for your rc88 account and to enable Two-Factor Authentication.

Subject to applicable law and rc88's legal retention and regulatory compliance obligations, you have the following rights in relation to your personal data held by rc88:

• Right of access: You may request a copy of the personal data rc88 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For certain data fields, you can update your information directly from your account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rc88's legal and regulatory retention obligations.
• Right to restriction: You may request that rc88 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing of your personal data based on rc88's legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please submit a request to [email protected] with the subject line "Data Rights Request". rc88 will respond within 30 calendar days. We may need to verify your identity before processing a data rights request to prevent unauthorised access to your information.

The rc88 platform is strictly for adults aged 21 years and above. rc88 does not knowingly collect or process personal data of individuals under the age of 21. If rc88 discovers that personal data has been submitted by or on behalf of a person under 21, all such data will be deleted and the associated account closed immediately.

If you believe that a minor has registered an rc88 account or submitted personal data to rc88, please notify us immediately at [email protected] and we will take immediate action to investigate and remediate.

rc88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, rc88 will notify members via email to the registered account address or via an in-platform notice displayed upon next login.

The date of the most recent revision is indicated in the "Last Updated" notice at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how rc88 protects your personal data. Your continued use of the rc88 platform following notification of changes constitutes your acceptance of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or rc88's data practices, please contact our Data Protection team:

Email: [email protected]
Subject line: Privacy Policy Inquiry / Data Rights Request
Response time: Within 30 calendar days for data rights requests; within 5 business days for general privacy inquiries

If you are not satisfied with rc88's response to a privacy concern, you have the right to lodge a complaint with the applicable data protection authority in your jurisdiction. rc88 commits to cooperating fully with any investigation conducted by a competent supervisory authority.

rc88 takes all privacy concerns seriously and is committed to resolving any issues promptly and transparently. We would always encourage you to contact us directly in the first instance, as most concerns can be resolved quickly through direct communication.