rapid88 Privacy Policy – How We Handle Your Data

1. Introduction

rapid88 ("rapid88", "we", "us", "our") is committed to protecting the privacy and personal data of all members and visitors to our platform at rapid88.co (the "Platform"). This Privacy Policy ("Policy") describes how rapid88 collects, processes, stores, and discloses personal information in connection with the operation of our online casino and sportsbook services, and how we comply with applicable data protection legislation.

By registering an account with rapid88 or by accessing any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions, which govern your use of the Platform as a whole.

rapid88 treats the privacy of Malaysian members and all other users with the utmost seriousness. We do not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Data is collected only to the extent necessary for legitimate operational, compliance, and security purposes, as set out in this Policy.

2. Data Controller

For the purposes of applicable data protection law, rapid88 acts as the data controller in respect of personal data collected through the Platform. As data controller, rapid88 determines the purposes and means of processing your personal data. Questions regarding this Policy or requests to exercise your data rights should be directed to our Data Protection team at [email protected].

3. Data We Collect

rapid88 collects the following categories of personal data from members and Platform users:

4. How We Collect Data

rapid88 collects personal data through the following means:

• Direct Provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification agencies, fraud prevention services, payment processors (including Touch n Go, Boost, Maybank, CIMB, Public Bank), and regulatory databases — where rapid88 is required or permitted to obtain data from these sources for compliance purposes.

5. Legal Basis for Processing

rapid88 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and rapid88 (i.e., operating your account, processing transactions, delivering gaming services).
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, gaming licensing obligations, and tax reporting duties.
• Legitimate Interests: Processing in pursuit of rapid88's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, product improvement, and analytics, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — for example, for the receipt of marketing communications. You may withdraw consent at any time by contacting support.

6. How We Use Your Data

rapid88 uses your personal data for the following purposes:

• Opening, maintaining, and administering your rapid88 member account.
• Verifying your identity and age (21+ requirement) as part of our KYC and licensing obligations.
• Processing deposits, withdrawals, and other financial transactions via your chosen payment method.
• Detecting, investigating, and preventing fraud, money laundering, and other unlawful activity on the Platform.
• Monitoring your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour, and proactively contacting members where warranted.
• Providing customer support via Live Chat, email, and other channels.
• Sending you service notifications, account updates, and — where you have opted in — promotional communications regarding rapid88 offers and bonuses.
• Complying with our obligations under applicable gaming authority licensing, including reporting requirements and audit obligations.
• Improving the rapid88 platform, personalising your experience, and conducting internal analytics.

7. Data Sharing & Disclosure

rapid88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of third parties strictly for the purposes described in this Policy:

• Payment Processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers, for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC and age verification services engaged to fulfil our licensing obligations.
• Fraud Prevention & Security Services: Providers of fraud detection, risk assessment, and cybersecurity services who assist rapid88 in protecting the Platform and its members.
• Game Providers & Platform Vendors: Software providers whose games and services are integrated into the rapid88 Platform, to the extent necessary for the operation of those services.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, rapid88 will disclose personal data to competent authorities without prior notice to you.
• Professional Advisers: Lawyers, auditors, and accountants engaged by rapid88 under obligations of professional confidentiality.

8. International Data Transfers

As an internationally licensed gaming platform, rapid88 may transfer your personal data to countries outside Malaysia in connection with the operation of the Platform, including to the jurisdiction where our gaming licence is held and to countries where our third-party service providers are based. Where such transfers occur, rapid88 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses equivalent to the standard required under applicable data protection law. By using the Platform, you consent to such international transfers to the extent required for the operation of your account and the delivery of our services.

9. Data Retention

rapid88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

• Account and identity data: retained for the duration of active membership plus a minimum of five (5) years following account closure, in accordance with AML and licensing requirements.
• Transaction and financial records: retained for a minimum of five (5) years from the date of the transaction.
• Communications and support records: retained for three (3) years from the date of the communication.
• Technical and usage data: retained for up to twenty-four (24) months from collection, unless required for longer for security or compliance purposes.

Upon expiry of the applicable retention period, rapid88 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identified individual.

10. Cookies & Tracking Technologies

rapid88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly — including session authentication, account security, and core game functionality. These cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregate information about how members use the Platform, enabling rapid88 to identify usage patterns and improve the user experience. This data is anonymised and does not identify individual members.
• Functional Cookies: Store your preferences (such as language settings, game lobby layout, and notification preferences) to personalise your experience on subsequent visits.
• Security Cookies: Assist in detecting fraudulent login attempts, identifying unusual session behaviour, and protecting your account from unauthorised access.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access the Platform, though certain preference features may not function as expected.

11. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by rapid88:

• Right of Access: You may request a copy of the personal data rapid88 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected. This right is subject to our legal retention obligations.
• Right to Restriction: You may request that rapid88 restrict the processing of your data in certain circumstances.
• Right to Portability: Where processing is based on your consent or contract, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to verified requests within thirty (30) days. We may require identity verification before processing your request.

12. Data Security

rapid88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and rapid88 servers.
• Encryption of sensitive data fields (including passwords and payment credentials) at rest using current cryptographic standards.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Continuous monitoring of Platform infrastructure for security threats and anomalous activity.
• Regular security assessments and penetration testing by independent security professionals.
• Incident response procedures for detecting, reporting, and mitigating personal data breaches.

While rapid88 applies rigorous security measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights, rapid88 will notify affected members without undue delay in accordance with applicable law.

13. Children & Minors

The rapid88 Platform is strictly restricted to persons aged 21 and above. rapid88 does not knowingly collect personal data from persons under 21 years of age. If rapid88 becomes aware that personal data has been collected from an individual below the minimum age requirement, that account will be immediately closed, all data will be deleted (subject to any mandatory legal retention obligations), and any balance held in the account will be forfeited in accordance with our Terms & Conditions. If you believe a minor may have registered an account with rapid88, please contact our support team immediately.

14. Changes to This Policy

rapid88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. Material changes will be communicated to registered members via email to the registered address and by a notice on the Platform at least seven (7) days before the change takes effect. Your continued use of the Platform after the effective date of any updated Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint regarding rapid88's handling of your personal data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on the Platform — average response time under 2 minutes.

We take all privacy enquiries seriously and will respond to your request within thirty (30) calendar days of receipt.