Privacy Policy rk66 — Our Commitment to Protecting Your Data

Rk66 takes our responsibility to protect the privacy of every user who entrusts their personal information to us seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in user data management.

When you register an account, use any feature on the platform, or simply browse the rk66.pw website, you may share certain information with us. This policy explains in detail what information we collect, why we need it, how it is used, and what rights you have regarding that data.

Rk66 is the data controller for personal information collected through this platform. We are fully accountable for how that data is managed and are committed to ensuring its security and confidentiality at all times.

Rk66 collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

Some data is collected automatically when you use the platform — such as your IP address and device information — while other data such as your name and phone number is provided directly by you during registration or the KYC process.

The data we collect is used solely for legitimate purposes directly related to the provision of rk66 services. The following are the primary purposes of data use:

• Account Management: Creating, verifying, and maintaining your account on the rk66 platform.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• KYC Identity Verification: Meeting legal requirements related to identity verification and anti-money laundering.
• Platform Security: Detecting and preventing fraud, unauthorized access, and platform abuse.
• Customer Support: Providing effective assistance when you contact our support team.
• Service Improvement: Analyzing usage patterns to improve the overall user experience.
• Service Communications: Sending important notifications related to your account, promotions you have subscribed to, and policy updates.
• Legal Compliance: Fulfilling reporting and compliance obligations as required by applicable law.

Rk66 does not sell, rent, or transfer your personal data to third parties for marketing purposes. However, there are limited situations in which we may need to share certain information:

• Payment Providers: Information required to process transactions via FPX, DuitNow, e-wallets, and other payment methods is shared with the relevant payment providers only to the extent necessary.
• Technical Service Providers: Companies that assist us in operating the platform, such as cloud computing services and CDN providers, may have access to certain data within the framework of strict confidentiality agreements.
• Legal Requirements: rk66 will disclose user data to the relevant authorities when required by court order, law enforcement directive, or legitimate regulatory reporting obligations.
• Game Providers: Minimum information required to enable game functionality may be shared with third-party game providers, but only within very limited scope and in accordance with data protection agreements.

In all cases of data sharing, rk66 ensures that the receiving parties are bound by appropriate confidentiality agreements and comply with data protection standards no less stringent than our own policy.

Rk66 invests seriously in security infrastructure to protect users' personal data from unauthorised access, loss, alteration, or unauthorised disclosure. Among the key security measures we practise:

• End-to-End Encryption: All data transferred between the rk66 platform and your device is encrypted using TLS 1.3 protocol with 256-bit SSL encryption — the same standard used by leading banking institutions.
• Data-at-Rest Encryption: Sensitive data stored in the rk66 database is encrypted at rest using industry-standard encryption algorithms to prevent unauthorised access even in the event of a data breach.
• Internal Access Controls: Only rk66 staff who require data access to carry out their job duties are granted permission, and such access is recorded and audited on a regular basis.
• Continuous Security Monitoring: Automated monitoring systems run around the clock to detect and respond to any security threats in real time.
• Regular Data Backups: Data is automatically backed up at regular intervals to ensure rapid recovery in the event of any disruption.

Like most digital platforms, rk66 uses cookies and similar tracking technologies to enhance the user experience and understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform's core functions, such as maintaining your login session. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with the platform to help us identify and resolve technical issues and improve performance.
• Preference Cookies: Storing your preferences such as language and display settings so your experience is more comfortable every time you use the platform.

You can manage your cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect specific features of the rk66 platform.

In accordance with Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by rk66:

To exercise any of these rights, please contact the rk66 customer support team. We will endeavour to process your request within 30 calendar days. For complex cases, we may require additional time and will notify you within that period.

Rk66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by law. General data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account remains active on the rk66 platform.
• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's accounting and tax legal requirements.
• KYC Data: Retained for 5 years after account closure, or longer if required under anti-money laundering legislation.
• Support Communication Records: Retained for 3 years for reference purposes and service improvement.
• Technical Log Data: Typically deleted after 90 days unless required for ongoing security investigations.

When the retention period expires or when data is no longer needed, rk66 will securely delete or destroy that data using methods that ensure it cannot be recovered.

Rk66 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we discover that we have inadvertently collected data from an individual under the age of 18, we will take immediate steps to delete that information and close the account in question. Parents or guardians who become aware that their minor child has registered on rk66 are urged to contact our support team immediately.

Rk66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in legislation, industry practices, or the way we operate our services. Any significant changes will be communicated to users via:

• In-platform notification when you log in after changes have been made.
• Email notification to your registered email address for significant changes.
• Update the "Last updated" date at the top of this policy.

Continued use of the rk66 platform after notification of changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request data deletion.

For any enquiries, concerns, or requests relating to your personal data, please contact our Data Protection Officer through the customer support channels available on the rk66 platform. We are committed to responding to every enquiry within a reasonable timeframe and resolving each issue transparently and responsibly.