Privacy Policy

Section 1 Introduction

RC88 ("RC88", "we", "us", or "our") operates the online gaming platform accessible at https://rc88.casa (the "Platform"). RC88 is committed to protecting the privacy and personal data of all individuals who access, register on, or use the Platform ("Members", "Users", or "you").

This Privacy Policy ("Policy") sets out in clear and transparent terms how RC88 collects, uses, stores, shares, and otherwise processes personal data in connection with the Platform and any associated services. It has been prepared in accordance with applicable data protection legislation and reflects RC88's ongoing commitment to responsible, lawful, and transparent data handling practices.

This Policy should be read in conjunction with RC88's Terms and Conditions, which govern the use of the Platform generally. By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

Section 2 Definitions

In this Policy, the following terms carry the meanings set out below:

Section 3 Data We Collect

RC88 collects Personal Data through several channels, including Account registration, KYC verification, platform usage, payment transactions, and communications with our support team. The categories of data we collect are detailed below.

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identity document;
• Date of birth (used to verify the21+ age requirement);
• Email address and contact telephone number;
• Residential address, including city and postcode (relevant cities include Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam, among others);
• Username and encrypted Account password.

3.2 KYC Verification Documents

• Copies of government-issued photo identification: Malaysian MyKad (NRIC), Driver's Licence, or Passport;
• Proof of residential address: utility bills, bank statements, or official correspondence dated within three (3) months;
• Selfie photographs taken alongside valid identity document;
• Payment method ownership documentation confirming the registered payment method is held in the Member's verified legal name.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references;
• Payment method details (bank account references, eWallet identifiers for Touch'n Go eWallet, Boost, GrabPay, or cryptocurrency wallet addresses for BTC/USDT) — note that full payment credentials such as card numbers are not stored by RC88 directly;
• MYR balance history and bonus credit records.

3.4 Technical & Usage Data

• IP address, device type, browser type and version, and operating system;
• Session duration, pages visited, game activity, betting history, and navigation patterns;
• Login timestamps and geographic access data.

3.5 Communications Data

• Content and metadata of live chat conversations, email correspondence, and support tickets submitted to RC88;
• Survey responses, feedback submissions, and promotional opt-in preferences.

Section 4 How We Use Your Data

RC88 uses Personal Data for the following purposes:

RC88 does not use Personal Data to make fully automated decisions that produce legal or similarly significant effects without human oversight, except where explicitly permitted by applicable law and clearly disclosed to Members.

Section 5 Legal Basis for Processing

RC88 processes Personal Data one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the Account agreement with you — including Account creation, payment processing, and KYC verification;
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, age verification obligations, and regulatory reporting requirements;
• Legitimate Interests: Processing necessary for RC88's legitimate operational interests, including fraud prevention, platform security, and customer support — where those interests are not overridden by your fundamental rights;
• Consent: Processing based on your freely given, specific, and informed consent — such as receiving promotional communications from RC88. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

Section 6 Data Sharing & Disclosure

RC88 does not sell, rent, or trade Personal Data to third parties. We share Personal Data only in the following circumstances and with the following categories of recipients:

6.1 Payment Service Providers

To facilitate MYR deposits and withdrawals, RC88 shares transaction-relevant data with authorised payment processors. This includes the FPX network, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and supported cryptocurrency processing partners. These providers act as Data Processors under binding agreements and are permitted to use shared data only for the specific transaction purpose.

6.2 KYC & Compliance Verification Partners

RC88 uses accredited third-party identity verification services to conduct KYC checks. Identity documents and verification photographs submitted by Members are shared securely with these partners solely for verification purposes and are not retained beyond the verification period without a legitimate legal basis.

6.3 Regulatory & Law Enforcement Authorities

RC88 may disclose Personal Data to regulatory bodies, law enforcement authorities, or government agencies where required or permitted by applicable law — including in response to lawful requests, court orders, or regulatory audit obligations.

6.4 Professional Advisors

RC88 may share Personal Data with legal counsel, auditors, and other professional advisors where necessary for the conduct of our business, subject to binding confidentiality obligations.

Section 7 Data Retention

RC88 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to any applicable legal or regulatory retention obligations. The following general retention guidelines apply:

• Active Account data: Retained for the duration of your Account's active status and for period of up to five (5) years following Account closure, in accordance with standard AML and financial record-keeping obligations;
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory standards;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Communications records: Support and dispute resolution correspondence retained for a minimum of two (2) years following case closure;
• Marketing consent records: Retained for the duration of the consent period and for a period thereafter sufficient to demonstrate compliance in the event of a regulatory enquiry.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Section 8 Data Security

RC88 implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and the RC88 Platform;
• Two-factor authentication (2FA) for Member Account access;
• Role-based access controls limiting RC88 personnel access to Personal Data to those with a documented business need;
• Encrypted data storage for sensitive Account and KYC information at rest;
• Continuous monitoring and automated anomaly detection to identify and respond to suspicious access patterns;
• Regular security audits and penetration testing conducted by independent third-party specialists.

Section 9 Cookies & Tracking Technologies

RC88 uses cookies and similar tracking technologies on the Platform. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies, authentication tokens, and security cookies. These cookies cannot be disabled without rendering core Platform functionality inoperable.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how Members interact with the Platform — including pages visited, session durations, and error reports — to improve Platform performance and user experience.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories, to personalise your Platform experience.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform effectively. RC88 does not deploy third-party advertising or social media tracking cookies.

Section 10 Your Data Rights

Subject to applicable data protection law, you hold the following rights in respect of your Personal Data held by RC88. To exercise any of these rights, please submit a written request to RC88's data protection contact at [email protected]. RC88 will respond to all valid requests within thirty (30) calendar days of receipt.

In certain circumstances, RC88 may be required to decline or restrict the exercise of a right — for example, where compliance with a retention obligation under AML or regulatory law takes precedence. RC88 will inform you of any such restriction and its grounds at the time of response.

Section 11 Minors & Age Verification

The RC88 Platform is strictly restricted to individuals aged 21 years and above. RC88 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the Account registration process and is confirmed through KYC documentation review.

If RC88 becomes aware that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the associated Account, delete all associated Personal Data to the extent permitted by applicable law, and report the matter in accordance with our regulatory obligations. If you believe that a minor has accessed or registered on the RC88 Platform, please contact us immediately at [email protected].

Section 12 International Data Transfers

RC88 operates with technical infrastructure and service providers that may be located in jurisdictions outside Malaysia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, RC88 will implement appropriate safeguards — such as standard contractual clauses or binding operational agreements — to ensure that Personal Data receives a level of protection consistent with this Policy and applicable law.

RC88 requires all third-party Data Processors that receive Personal Data to: (a) process such data only for the specified purpose; (b) implement appropriate technical and organisational security measures; and (c) delete or return the data upon expiry of the processing relationship.

Section 13 Changes to This Policy

RC88 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. Material changes will be communicated to registered Members by posting a prominent notice on the Platform and, where appropriate, by email to the registered Account address.

The revised Policy will take effect on the date stated in the notice. Your continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of and consent to the revised terms. We encourage you to review this Policy periodically to remain informed of how RC88 protects your Personal Data.

Section 14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by RC88, please contact our Data Protection team using the details below. RC88 aims to respond to all privacy-related enquiries within thirty (30) calendar days of receipt.

Data Protection Contact:
Email: [email protected]
Subject Line: Privacy Request — [Your Account Username]

For urgent account security matters — such as suspected unauthorised access to your Account — please use the live chat feature available on the RC88 Platform for the fastest possible response.