Privacy Policy – rapid88 Malaysia

1.Overview & Data Controller

This Privacy Policy ("Policy") is issued by rapid88 ("we", "us", "the Platform"), the operator of the online gaming and sportsbook platform accessible at rapid88.club. rapid88 acts as the data controller in respect of personal data collected through the platform and is responsible for determining the purposes and means of processing that data.

By registering a rapid88 account, using any feature of the platform, or otherwise submitting personal data to us, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the rapid88 platform.

This Policy should be read together with the rapid88 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into this Policy.

2.Personal Data We Collect

rapid88 collects the following categories of personal data from players and visitors:

rapid88 does not intentionally collect sensitive personal data (such as health, biometric, or racial data) unless it is voluntarily provided by a player in the context of a responsible gaming self-exclusion request or similar welfare communication.

3.How We Collect Your Data

rapid88 collects personal data through the following channels:

• Direct submission: Information you provide during account registration, KYC document uploads, contact form submissions, live chat sessions, and support email correspondence.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and tracking pixels when you access the rapid88 website. See Section 9 for details on cookies.
• Payment processors: Transaction confirmation data received from Touch n Go eWallet, Boost, DuitNow, FPX, and Malaysian banking partners when you make deposits or withdrawals.
• Third-party game providers: Session and bet data transmitted by licensed game suppliers (Pragmatic Play, NetEnt, Microgaming, etc.) in connection with games played on the rapid88 platform.
• Fraud and AML screening tools: Data received from third-party identity verification, fraud screening, and anti-money laundering compliance services engaged by rapid88.

4.Purposes of Processing Your Personal Data

rapid88 processes your personal data for the following purposes:

• Account administration: Creating, managing, and maintaining your rapid88 player account, including login authentication and account security.
• KYC and age verification: Verifying your identity and confirming you are at least 21 years of age before processing withdrawals, as required by our licensing obligations.
• Payment processing: Processing deposits and withdrawal requests, reconciling transactions, and preventing payment fraud.
• Regulatory compliance: Meeting anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) obligations under our international gaming authority licensing terms.
• Responsible gaming: Monitoring player behaviour patterns to identify at-risk players, enforcing self-exclusion decisions, and administering deposit and loss limits.
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of support interactions.
• Platform improvement: Analysing usage patterns to improve game selection, user interface design, and platform performance.
• Marketing (where consented): Sending promotional communications about rapid88 bonuses, events, and new game releases to players who have opted in to marketing communications.
• Fraud prevention and security: Detecting and investigating suspicious activity, multiple account registrations, bot usage, and other prohibited conduct outlined in our Terms & Conditions.

5.Legal Basis for Processing

rapid88 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to enter into or perform the agreement between you and rapid88 (i.e., operating your player account, processing deposits and withdrawals, and providing gaming services).
• Legal obligation: Processing required to comply with AML, KYC, CTF, and responsible gaming obligations imposed by our international gaming authority licence and applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes — including marketing communications — conducted only where you have given clear and voluntary consent, which may be withdrawn at any time.

6.Sharing of Personal Data

rapid88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances:

• Licensed game providers: We share session identifiers and wager data with game suppliers to facilitate gameplay. These providers are bound by data processing agreements and may only use your data for the purpose of delivering their services to rapid88.
• Payment processors: Financial data necessary to process your transactions is shared with Touch n Go, Boost, DuitNow, FPX, and our banking partners as required for payment execution.
• KYC and AML service providers: Identity documents and verification data may be shared with accredited identity verification and AML screening services engaged by rapid88.
• Regulatory and licensing authorities: rapid88 may be required to disclose player data to our licensing authority, law enforcement agencies, or financial intelligence units in response to lawful requests or as required by our licence conditions.
• Fraud prevention networks: Where fraud or multi-accounting is suspected, rapid88 may share relevant data with industry fraud prevention bodies to protect the platform and other players.
• Corporate transfers: In the event of a merger, acquisition, or sale of all or part of rapid88's business assets, player data may be transferred to the successor entity subject to equivalent privacy protections.

7.International Data Transfers

Given the international nature of rapid88's operations and its engagement with global game providers, payment processors, and technology vendors, your personal data may be transferred to and stored in countries outside Malaysia. rapid88 takes steps to ensure that such transfers are conducted lawfully and that your personal data continues to be protected to standards equivalent to those applied within Malaysia.

Where personal data is transferred internationally by rapid88, we rely on applicable transfer mechanisms including standard contractual clauses, binding corporate rules where relevant, or transfers to jurisdictions that provide an adequate level of data protection as recognised under applicable law.

8.Data Retention

rapid88 retains personal data for as long as is necessary for the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. The following retention periods apply as general guidance:

• Active account data: Retained for the duration of the account relationship plus a minimum of 5 years following account closure, to comply with AML record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable law or licensing authority.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 3 years from the date of the last interaction unless the subject matter requires longer retention.
• Marketing consent records: Retained for 3 years from the date of consent or until consent is withdrawn, whichever is earlier.

Where retention is required beyond these standard periods due to an ongoing investigation, dispute, or regulatory requirement, rapid88 will retain data for the duration of that requirement. Data no longer required will be securely deleted or anonymised.

9.Cookies & Tracking Technologies

rapid88 uses cookies and similar tracking technologies on its website for the following purposes:

• Strictly necessary cookies: Required for the platform to function — including maintaining your login session, storing your account preferences, and enabling the gaming lobby to load correctly. These cannot be disabled.
• Analytics cookies: Used to understand how players navigate the rapid88 platform, which pages and games are most visited, and where technical issues occur. This data is aggregated and anonymised where possible.
• Fraud prevention cookies: Device fingerprinting and session monitoring cookies used to detect suspicious access patterns, multiple account registrations, and bot activity.
• Preference cookies: Store your language, currency, and display preferences to improve your rapid88 experience on return visits.

You can manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the rapid88 platform and may prevent login or gaming access.

10.Security Measures

rapid88 implements technical and organisational security measures appropriate to the risk profile of the data we process. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rapid88's servers
• Salted hashing for all stored account passwords — plain-text passwords are never stored by rapid88
• Access controls restricting internal access to personal data to authorised personnel on a need-to-know basis
• Regular third-party penetration testing and security audits of the rapid88 platform infrastructure
• Intrusion detection systems monitoring for anomalous access patterns
• Data breach incident response procedures, including notification obligations to affected players and regulators where required by law

Whilst rapid88 takes all reasonable precautions to protect your data, no system is entirely immune to risk. You are responsible for maintaining the security of your own rapid88 login credentials and for notifying us promptly if you suspect unauthorised access to your account.

11.Your Data Rights

Subject to applicable law and our legitimate operational and regulatory requirements, you have the following rights in respect of your personal data held by rapid88:

• Right of access: Request confirmation of whether rapid88 holds personal data about you and, if so, obtain a copy of that data.
• Right to rectification: Request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our retention obligations under applicable law and our licensing conditions.
• Right to restriction: Request restriction of processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to portability: Where processing is based on consent or contractual necessity, request that rapid88 provide your personal data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including profiling. Object at any time to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the rapid88 privacy team via live chat or by email at [email protected]. rapid88 will respond to all valid requests within 30 days. In some cases, requests may be refused or limited where applicable law or our licensing obligations require it — in such cases, rapid88 will explain the basis for any refusal.

12.Children & Minors

rapid88 does not knowingly collect personal data from persons under the age of 21. The rapid88 platform is strictly restricted to adults aged 21 years and above. Age verification is conducted as part of the KYC process on all accounts before withdrawal is permitted.

If rapid88 becomes aware that personal data has been collected from a person under 21 — whether through fraudulent registration or any other means — the account will be immediately closed, all data will be deleted to the extent permitted by law, and any deposited funds will be returned to source following verification.

If you believe that rapid88 may hold personal data relating to a minor, please contact us immediately at [email protected].

13.Third-Party Links & Services

The rapid88 platform may contain references to third-party game providers and payment services. rapid88 is not responsible for the privacy practices or content of any third-party services accessed through the platform. This Policy applies solely to data collected directly by rapid88 through the rapid88 website and associated services.

Third-party game providers operating within the rapid88 platform are bound by data processing agreements. However, any separate interactions you may have with those providers outside the rapid88 platform — including visiting their own websites — will be governed by their own privacy policies, for which rapid88 accepts no responsibility.

14.Changes to This Privacy Policy

rapid88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. Material changes will be notified to registered players via the rapid88 platform or by email to the address registered on your account.

The "Last Updated" date at the top of this Policy reflects when the most recent changes were made. We encourage you to review this Policy periodically. Your continued use of the rapid88 platform following notification of changes constitutes your acceptance of the updated Policy.

15.Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by rapid88, please contact us through any of the following channels:

• 24/7 Live Chat: Available directly on-site at rapid88.club — the fastest way to reach our team
• Email: [email protected] — for privacy-specific enquiries, please include "Privacy Request" in your subject line

rapid88 will acknowledge receipt of all privacy-related enquiries within 3 business days and aims to resolve all requests within 30 calendar days, subject to the complexity of the request and any applicable legal constraints.