Privacy Policy

RK55 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of all individuals who access or use the services available at rk55.casa. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by RK55.

This Policy applies to all Users of the RK55 Platform, including registered members, prospective members who visit our website, and any individual who interacts with our customer support team. By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which also form part of your agreement with RK55.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" — any operation or set of operations performed on personal data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data; in this case, RK55.
• "Data Processor" — any third party that processes personal data on behalf of RK55 under a contractual arrangement.
• "User" / "you" — any individual who accesses or uses the RK55 Platform.
• "Cookies" — small text files placed on a User's device by a website for the purpose of tracking activity and storing preferences.
• "KYC" — Know Your Customer; identity verification processes conducted to comply with anti-money laundering and age verification requirements.
• "Sensitive Data" — a subset of personal data warranting heightened protection, such as financial account information and government-issued identification documents.

RK55 collects personal data through several channels — directly from you during registration or account management, automatically through your use of the Platform, and from third-party payment processors and verification services. The following table summarises the categories of data we collect and the source of each.

RK55 does not intentionally collect sensitive personal data beyond what is necessary for KYC and responsible gambling obligations. We do not collect racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required by applicable law.

RK55 uses collected personal data for the following purposes:

• Account Management: To create, maintain, and administer your RK55 account, including verifying your identity and eligibility to use the Platform.
• Service Delivery: To process deposits and withdrawals through supported Malaysian payment methods (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong) and cryptocurrency channels (USDT, BTC, ETH), and to deliver the gaming and betting services you have requested.
• KYC & Age Verification: To confirm that you are at least 21 years of age and to comply with anti-money laundering (AML) obligations, as required under applicable regulations.
• Responsible Gambling: To monitor betting patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit or session limits requested by you.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, chargebacks, account takeovers, and other unlawful activity on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and improve our support services based on interaction history.
• Communications: To send service-related notifications, security alerts, and — where you have opted in — promotional offers and marketing communications about RK55 products and bonuses.
• Platform Improvement: To analyse usage patterns, betting behaviour, and technical performance in order to improve the Platform's features, stability, and user experience.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable laws, respond to lawful requests from regulatory authorities, and maintain required records.

RK55 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil the Terms & Conditions you have agreed to — including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing carried out in pursuit of RK55's legitimate business interests — including fraud detection, platform security, and service improvement — where such interests are not overridden by your rights.
• Consent: Where you have given us your explicit consent for a specific processing activity, such as receiving marketing communications. You may withdraw consent at any time by contacting support.

We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors & Financial Institutions: To process your deposits and withdrawals via Touch 'n Go, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks. These processors operate under their own privacy policies and security standards.
• KYC & Identity Verification Providers: To verify your identity, age, and the legitimacy of your source of funds, as required by applicable regulations.
• Game Content Providers: Where a game is supplied by a third-party studio integrated into the Platform, certain session and gameplay data may be shared with that provider for the purpose of delivering the game and calculating results.
• Fraud Prevention & Security Services: Specialist third-party services that assist in detecting and preventing fraudulent activity across the Platform.
• Legal & Regulatory Authorities: Where required by law, court order, or at the request of a competent regulatory authority, RK55 may disclose your personal data without prior notice to you.
• Professional Advisers: Lawyers, auditors, and accountants engaged in connection with RK55's business operations, subject to strict confidentiality obligations.

All third-party data processors are contractually bound to handle your data solely in accordance with RK55's instructions and to maintain appropriate technical and organisational security measures.

RK55 uses cookies and similar tracking technologies to operate core Platform functionality, improve the User experience, and — with your consent — to analyse usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management, authentication tokens, and security cookies. These cookies cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: Used to remember your preferences (such as language settings and previously selected payment methods) and to personalise your experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform — including pages visited, session duration, and device type — to inform product improvements. This data does not identify you personally.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content related to RK55. You may opt out of marketing cookies at any time via your browser settings or by contacting support.

Most modern browsers allow you to control cookie settings. Disabling certain cookies may affect your ability to use some features of the RK55 Platform.

RK55 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general, the following retention periods apply:

• Active Account Data: Retained for the duration of your membership plus a minimum of 5 years following account closure, to meet AML and regulatory record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Transaction Records: Retained for a minimum of 7 years for financial audit and compliance purposes.
• Customer Support Communications: Retained for 3 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Analytics & Log Data: Typically retained in anonymised or aggregated form for up to 24 months.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised using industry-standard data destruction processes.

RK55 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption across all data transmissions between your device and the RK55 Platform;
• At-rest encryption for all stored personal data and KYC documents;
• Role-based access controls limiting staff access to personal data to those with a demonstrable business need;
• Two-factor authentication (2FA) available to all Users and mandatory for administrative accounts;
• Regular third-party penetration testing and vulnerability assessments;
• 24/7 intrusion detection systems and anomaly monitoring;
• Cold-wallet storage for all cryptocurrency holdings, reducing exposure to online threats.

As a User of the RK55 Platform, you have a number of rights in relation to your personal data. To exercise any of the rights listed below, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

RK55 may need to verify your identity before processing a data rights request. Requests that cannot be verified or that are manifestly unfounded or excessive may be refused or subject to a reasonable fee.

Your key rights are summarised in the User Rights section below this policy document.

RK55 operates servers and may engage data processors located outside of Malaysia. Where your personal data is transferred to a country that does not provide an equivalent level of data protection, RK55 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by recognised data protection authorities;
• Processor binding corporate rules where applicable;
• Contractual obligations imposing equivalent privacy standards on all international data processors.

By using the RK55 Platform, you acknowledge and consent to the transfer of your personal data to servers and processors located outside Malaysia, subject to the safeguards described above.

The RK55 Platform may contain references to or integrations with third-party payment services (such as Touch 'n Go, DuitNow, or cryptocurrency network explorers). These services operate independently of RK55 and are governed by their own privacy policies. RK55 is not responsible for the privacy practices of any third-party service, and we encourage you to review their policies before submitting personal data to them.

The inclusion of a reference to a third-party payment method or service does not constitute an endorsement of that party's privacy or security practices.

RK55 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our services. The date of the most recent revision is clearly displayed at the top of this page.

Where a change is material — such as a change to the categories of personal data we collect, the purposes for which we process it, or the rights available to you — RK55 will notify registered Users by email or via a prominent in-platform notification prior to the change taking effect.

Your continued use of the RK55 Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any material change, you may request account closure and deletion of your personal data by contacting support.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or would like to raise a data protection concern, please contact the RK55 Data Protection team through the following channels:

For concerns about responsible gambling, including self-exclusion or deposit limit requests, please visit our Responsible Gambling page.