Privacy Policy — How rilek77 Collects, Uses, and Protects Your Personal Data

1. Introduction

1.1 This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by rilek77 ("rilek77", "we", "us", "our") in connection with your use of the rilek77 website at rilek77.win and all associated services (collectively, the "Platform").

1.2 rilek77 is committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection principles. This Policy is designed to help you understand what personal data we hold about you and how we use it.

1.3 By registering an account with rilek77 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and request account closure.

1.4 This Policy should be read together with rilek77's Terms and Conditions, which are incorporated by reference. Defined terms used in the Terms and Conditions have the same meaning in this Policy unless otherwise stated.

2. Personal Data We Collect

2.1 rilek77 collects personal data from you in the following categories:

Identity and Contact Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the 21+ age requirement).
• Email address and, where provided, mobile phone number.
• Residential address, including postcode and state within Malaysia or other country of residence.
• Identity document details (MyKad, passport, or equivalent) collected during KYC verification.

Financial and Payment Data

• Payment method details sufficient to process deposits and withdrawals, including Touch n Go eWallet account identifiers, Boost account details, DuitNow registered identifiers, and bank account information where used.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used.
• Source of funds documentation provided during enhanced due diligence reviews.

Usage and Behavioural Data

• Login timestamps, session duration, and device information including IP address, browser type, and operating system.
• Game activity records including games played, wager amounts, win/loss outcomes, and bonus utilisation.
• Customer support interaction records including live chat transcripts and email correspondence.
• Responsible gaming data including deposit limits set, self-exclusion requests, and session reminder configurations.

2.2 rilek77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity document verification may incidentally involve such information as part of a standard government-issued document. Such incidental data is not separately recorded or processed.

3. How We Use Your Personal Data

3.1 rilek77 uses the personal data we collect for the following purposes:

• Account administration: Creating, maintaining, and managing your rilek77 account, including processing your registration, verifying your identity under KYC requirements, and enabling rilek77 login access.
• Service delivery: Processing deposits and withdrawals, crediting bonuses, recording wagering activity, and providing access to all gaming verticals available on the rilek77 platform.
• Legal and regulatory compliance: Fulfilling obligations under rilek77's international gaming licence, including anti-money laundering (AML) and counter-terrorism financing (CTF) checks, age verification, and responsible gaming obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and prohibited conduct as defined in the Terms and Conditions.
• Customer support: Responding to your enquiries, complaints, and support requests submitted via live chat or email.
• Marketing communications: Sending promotional emails, bonus notifications, and platform updates to players who have opted into such communications. You may opt out at any time by contacting customer support or using the unsubscribe link in marketing emails.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the rilek77 platform's features, performance, game selection, and user experience.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and applying responsible gaming interventions where warranted under our licence obligations.

4. Legal Basis for Processing

4.1 rilek77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms and Conditions, including account administration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and the obligations of our international gaming licence, including KYC verification, AML/CTF screening, age verification, and regulatory reporting.
• Legitimate interests: Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Sharing of Personal Data

5.1 rilek77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

5.2 rilek77 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors: Touch n Go eWallet, Boost, DuitNow, Maybank, CIMB, Public Bank, and card scheme operators (Visa/Mastercard), as necessary to process your financial transactions.
• KYC and identity verification providers: Third-party identity verification services engaged to assist rilek77 in meeting its regulatory KYC obligations.
• Gaming platform and software providers: Game developers and platform technology providers who require limited account data to deliver gaming services on the rilek77 platform.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction under rilek77's international gaming licence.
• Anti-fraud and security services: Third-party providers engaged to assist with fraud detection, responsible gaming monitoring, and platform security.

5.3 All third parties with whom rilek77 shares personal data are contractually required to process such data only for the specified purpose and in accordance with applicable data protection standards.

6. Cookies and Tracking Technologies

6.1 rilek77 uses cookies, web beacons, pixel tags, and similar tracking technologies on the Platform to provide, maintain, and improve the Service.

6.2 The categories of cookies used by rilek77 include:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that maintain your rilek77 login state. These cannot be disabled.
• Performance cookies: Used to collect anonymised analytics data about how users interact with the rilek77 Platform, enabling us to improve user experience and identify technical issues.
• Functional cookies: Used to remember your preferences, such as language settings and preferred game categories, to provide a more personalised experience.
• Marketing cookies: Used, with your consent, to deliver relevant promotional communications and to measure the effectiveness of rilek77's marketing activities.

6.3 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the rilek77 Platform.

7. Data Retention

7.1 rilek77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. Specific retention periods applicable at rilek77 include:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, in compliance with our international gaming licence AML requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for two (2) years from the date of the support interaction.
• Marketing consent records: Retained for the duration of your account plus two (2) years from account closure, to demonstrate compliance with consent obligations.

7.2 Where personal data is no longer required for any lawful purpose, rilek77 will securely delete or anonymise it in accordance with our data deletion procedures.

8. Data Security

8.1 rilek77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and rilek77's servers.
• Encryption of sensitive data fields at rest within rilek77's database infrastructure.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate business need.
• Regular security assessments, penetration testing, and vulnerability scanning of rilek77's platform infrastructure.
• Two-factor authentication available for all rilek77 player accounts.

8.2 Despite these measures, no data transmission or storage system can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rilek77 will notify you and the relevant regulatory authority as required by applicable law.

9. Your Privacy Rights

9.1 Subject to applicable law and the obligations of rilek77's international gaming licence, you have the following rights in relation to your personal data held by rilek77:

• Right of access: You may request a copy of the personal data rilek77 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to rilek77's legal obligations to retain certain data under our gaming licence requirements.
• Right to restrict processing: You may request that rilek77 restrict the processing of your data in certain circumstances.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of data you have provided to rilek77.
• Right to object: You may object to processing of your personal data based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time.

9.2 To exercise any of the above rights, please contact rilek77's customer support team via live chat or email at [email protected]. rilek77 will respond to your request within thirty (30) days and may require identity verification before actioning your request.

10. Children and Minors

10.1 The rilek77 Platform is strictly intended for adults aged 21 years and above. rilek77 does not knowingly collect personal data from persons under the age of 21.

10.2 If rilek77 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all personal data associated with the account will be deleted in accordance with our data deletion procedures, and any deposited funds will be returned to the verified payment source after investigation.

10.3 If you believe that a minor has registered an account on the rilek77 Platform, please contact us immediately at [email protected] so that appropriate action can be taken.

11. International Data Transfers

11.1 rilek77 operates under an international gaming licence and may process personal data in jurisdictions outside of Malaysia. Where personal data is transferred internationally, rilek77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

11.2 Such safeguards may include contractual data protection clauses binding the recipient to appropriate data handling standards, or reliance on adequacy decisions by relevant authorities where applicable.

11.3 Malaysian users should be aware that data protection legislation in the jurisdiction(s) where rilek77 processes data may differ from Malaysian law. By using the rilek77 Platform, you consent to such international transfers subject to the safeguards described herein.

12. Changes to This Privacy Policy

12.1 rilek77 reserves the right to update or amend this Privacy Policy at any time. Material changes will be notified via a prominent notice on the rilek77 Platform and the "Last Updated" date at the top of this Policy will be revised accordingly.

12.2 Your continued use of the rilek77 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure.

13. Contact Us

13.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or rilek77's handling of your personal data, please contact our customer support team:

• Live chat: Available 24/7 on the rilek77 Platform.
• Email: [email protected]

13.2 rilek77 aims to resolve all data-related enquiries within thirty (30) calendar days of receipt. Where a complaint cannot be resolved through our standard process, we will advise you of any further escalation options available.