rezeki77 Privacy Policy

rezeki77 ("we", "us", "our") operates the online casino and sports betting platform accessible at rezeki77.one (the "Platform"). We act as the data controller in respect of all personal data collected through the Platform. Our Platform is operated under an international gaming authority licence, and our data practices are governed by that licensing framework as well as applicable international data protection principles.

If you have questions about how rezeki77 handles your personal data, please contact our Data Protection team as described in Section 14 of this Policy.

When you register for and use the rezeki77 Platform, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and a copy of your government-issued identification document (e.g., MyKad, passport).
• Contact Data: Email address, Malaysian mobile telephone number, and, where provided, a residential address.
• Financial Data: Details of payment methods used (e.g., Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank account references), transaction history, deposit and withdrawal records denominated in Malaysian Ringgit (MYR).
• Account & Gaming Data: Login credentials (stored in hashed form), game play history, bet records, bonus redemption history, and session data.
• Technical Data: IP address, browser type and version, device type and operating system, time zone, and cookie identifiers.
• Usage Data: Information about how you navigate and interact with the rezeki77 Platform, including pages visited, features used, and time spent.
• Communications Data: Records of support interactions via live chat or email, including the content of those communications.

rezeki77 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, using cookies, web beacons, and server logs as described in Section 9.
• Third-party sources: Identity verification and fraud prevention data obtained from licensed KYC service providers and payment processors, solely for the purpose of verifying your identity and preventing financial crime.

rezeki77 uses your personal data for the following purposes:

• To create, manage, and maintain your rezeki77 Account and provide access to the Platform and Services;
• To process deposits and withdrawals and fulfil payment transactions in MYR;
• To verify your identity and age (21+ requirement) in compliance with our international gaming authority licence conditions;
• To conduct anti-money laundering (AML), counter-terrorism financing (CTF), and fraud prevention checks as required by our licence;
• To administer bonuses, promotions, and the rezeki77 VIP loyalty programme;
• To provide 24/7 customer support and resolve disputes;
• To send transactional communications, including deposit confirmations, withdrawal notifications, and security alerts;
• To send marketing communications, where you have provided consent or where permitted under applicable law — you may opt out at any time;
• To monitor Platform usage and improve the rezeki77 player experience, game catalogue, and payment infrastructure;
• To comply with our legal obligations under applicable gaming, financial, and data protection regulations.

rezeki77 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to provide the Services you have contracted with us to receive.
• Legal obligation: Processing required to comply with our international gaming authority licence conditions, AML/CTF obligations, and other applicable laws.
• Legitimate interests: Processing for fraud prevention, Platform security, product improvement, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing of data for marketing communications and non-essential cookies, where we have obtained your prior consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

rezeki77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients under appropriate contractual safeguards:

• Payment processors: Including Touch n Go eWallet, Boost, and bank payment gateways, solely to process your financial transactions.
• KYC and identity verification providers: To verify your identity documents as required by our gaming licence.
• Game technology providers: Game providers may receive non-identifiable session data necessary to deliver game content and resolve technical disputes.
• IT infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers operating under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or our gaming licence obligations, we may disclose data to regulators, law enforcement agencies, or gaming authorities.

All third-party data processors engaged by rezeki77 are contractually required to implement appropriate technical and organisational measures to protect your personal data and to use it only for the specified purpose.

As an internationally licensed platform, rezeki77 may process and store personal data in jurisdictions outside Malaysia. Where such transfers occur, we ensure appropriate safeguards are in place — including standard contractual clauses approved by competent data protection authorities — to ensure that your data receives a level of protection consistent with applicable international data protection standards.

rezeki77 retains your personal data for as long as your Account is active and for a period of at least five (5) years following account closure. This retention period is required by our international gaming licence conditions to satisfy AML record-keeping obligations and to enable the resolution of any post-closure disputes or regulatory enquiries.

Technical and usage data collected via cookies and server logs may be retained for shorter periods consistent with their operational purpose. Where data is no longer required, it is securely deleted or anonymised.

The rezeki77 Platform uses cookies and similar tracking technologies to operate core Platform functions, analyse usage patterns, and — where consent is obtained — deliver relevant promotional content. The categories of cookies used include:

• Strictly necessary cookies: Required for login session management, security tokens, and Platform functionality. These cannot be disabled without impairing your ability to use the Platform.
• Analytics cookies: Used to understand aggregate player behaviour and improve Platform performance. Data is processed in anonymised or pseudonymised form.
• Preference cookies: Store your language, currency, and display preferences to personalise your experience on subsequent visits.
• Marketing cookies: Used only where you have provided explicit consent to receive personalised promotional communications.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access the core rezeki77 gaming and betting Services.

rezeki77 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, and disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform;
• Encryption at rest for all sensitive personal and financial data stored on our servers;
• Password hashing using industry-standard cryptographic algorithms — rezeki77 does not store plain-text passwords;
• Two-factor authentication (2FA) available for all Player accounts;
• Automated intrusion detection and DDoS mitigation systems;
• Strict role-based access controls limiting internal staff access to personal data on a need-to-know basis;
• Regular penetration testing and third-party security audits.

Notwithstanding the above measures, no internet-based transmission or electronic storage system is completely secure. In the event of a personal data breach that creates a risk to your rights and freedoms, rezeki77 will notify affected Players and, where required, the relevant supervisory authority, in accordance with applicable legal obligations.

Subject to applicable law and our legitimate interests and legal obligations, you have the following rights in respect of your personal data held by rezeki77:

• Right of access: To request a copy of the personal data we hold about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected (subject to our legal retention obligations);
• Right to restriction: To request restriction of processing of your personal data in certain circumstances;
• Right to data portability: To receive your personal data in a structured, commonly used, machine-readable format;
• Right to object: To object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact our Data Protection team as described in Section 14. We will respond to all valid requests within 30 calendar days.

The rezeki77 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age is verified during the mandatory KYC process that all Players must complete before accessing full Platform functionality.

If rezeki77 becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately suspended, all associated data will be securely deleted, and any deposits will be returned to the originating payment method following identity verification of the legal guardian.

rezeki77 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify active Players by email or via in-Platform notification at least 14 days before the revised Policy takes effect. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

The current version of this Privacy Policy, including the "Last updated" date, is always available at rezeki77.one/privacy-policy.

For questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact the rezeki77 Data Protection team:

• Email: support at rezeki77.one
• Live Chat: Available 24/7 via the Platform

All privacy-related requests will be acknowledged within 48 hours and fully addressed within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your concern to the relevant supervisory authority in our licensing jurisdiction.