Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by Rejeki66 ("Company", "we", "us", "our"), the operator of the online sports betting and gaming platform available at rejeki66.cam. It governs the collection, use, storage, disclosure, and protection of personal data relating to individuals who access or use the Platform ("Users", "Members", "you").

Rejeki66 serves players across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We understand that trust is fundamental to this relationship, and this Policy is designed to be transparent about our data practices so that you can make informed decisions about how your personal information is used.

By registering an account, accessing the Platform, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact our support team to close your account.

Definitions

The following terms carry specific meanings within this Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify an individual, directly or in combination with other data. This includes but is not limited to name, email address, mobile number, national identification number, IP address, and payment account details.

• "Processing" means any operation performed on Personal Data, including collection, storage, use, alteration, disclosure, retrieval, or erasure.

• "Data Controller" means Rejeki66, which determines the purposes and means of processing your Personal Data.

• "Data Processor" means a third-party service provider that processes Personal Data on behalf of Rejeki66 and subject to its instructions.

• "KYC" means Know Your Customer — the identity and age verification process through which Rejeki66 validates Member details in accordance with anti-money laundering (AML) and responsible gambling requirements.

• "Cookies" means small data files placed on your device by the Platform to facilitate functionality, analytics, and session management.

• "Platform" means the Rejeki66 website at rejeki66.cam and all associated mobile-optimised services operated by the Company.

Data We Collect

Rejeki66 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect include:

3.1 Identity and Contact Data

• Full legal name (as per government-issued ID)
• Date of birth (for age verification — 21+ requirement)
• Malaysian National Identity Card number (MyKad) or passport number
• Email address and mobile phone number
• Residential address (for KYC and correspondence purposes)

3.2 Account and Transaction Data

• Username and encrypted password hash
• Account balance, transaction history, deposit and withdrawal records in MYR
• Betting and wagering history across sports markets (EPL, Liga Super Malaysia, UFC, etc.) and casino games
• Bonus claims and wagering requirement progress
• Payment method details (e-wallet identifiers, bank account references — not full banking credentials)

3.3 Technical and Usage Data

• IP address, device type, operating system, and browser type
• Pages visited, features used, and session duration on the Platform
• Geolocation data (approximate, derived from IP address) for fraud prevention
• Log files and error reports for technical support purposes

3.4 Communications Data

• Records of live chat conversations with our support team
• Email correspondence relating to your account, KYC, or complaints
• Responses to voluntary surveys or feedback requests

How We Collect Your Data

Rejeki66 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.

• Automatically — when you browse or interact with the Platform. Technical data such as your IP address, device identifiers, and session activity are collected via cookies, server logs, and analytics tools.

• From third parties — from identity verification service providers used to conduct KYC checks; from payment processing partners (e.g., FPX gateway operators, e-wallet providers such as Touch 'n Go, Boost, or GrabPay); and from fraud prevention and AML screening services.

Purposes of Data Processing

Rejeki66 processes your personal data for the following purposes:

• Creating and managing your account, including processing registration, password resets, and login authentication.

• Conducting KYC and AML verification to confirm your identity, age (21+ requirement), and the legitimacy of your payment methods.

• Processing deposits and withdrawals in MYR through your chosen payment method (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20, or BTC).

• Delivering our sports betting, live casino, slot, poker, and lottery services, and recording your wagering activity.

• Administering bonuses, promotions, VIP tier benefits, birthday rewards, and referral programme payouts.

• Detecting, preventing, and investigating fraud, money laundering, bonus abuse, and other prohibited activities described in our Terms & Conditions.

• Providing 24/7 customer support via live chat and email, and resolving any disputes or complaints.

• Monitoring for signs of problem gambling and providing access to responsible gambling tools (deposit limits, self-exclusion, cooling-off periods).

• Sending you service-related communications including account notifications, transaction confirmations, security alerts, and policy updates.

• With your consent, sending you promotional communications about offers, new game releases, and events relevant to your account.

• Analysing Platform usage in aggregate to improve our services, user interface, and product offering.

• Complying with applicable legal, regulatory, and licensing requirements.

Legal Basis for Processing

Rejeki66 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and Rejeki66 — specifically, to operate your account, process bets, and handle payments.

• Legal Obligation: Processing is required to comply with applicable laws, including AML regulations, KYC requirements, and responsible gambling mandates.

• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided these do not override your fundamental rights.

• Consent: For optional processing activities — such as marketing communications — we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

Rejeki66 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank), e-wallet operators (Touch 'n Go, Boost, GrabPay, DuitNow), and cryptocurrency network processors — solely for the purpose of executing your transactions.

• Identity Verification Partners: Third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements.

• Technology Providers: Cloud hosting, platform infrastructure, and analytics service providers who act as Data Processors under contract with Rejeki66 and are bound by confidentiality and data protection obligations.

• Game Content Providers: Third-party game studios whose products are integrated into the Platform may receive limited session data necessary to deliver their services.

• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities where required by law, court order, or in response to a valid regulatory request.

• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the Company's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

Data Retention

Rejeki66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account relationship plus a minimum post-closure period as required by AML and regulatory obligations (typically 5 to 7 years following account closure).

• Transaction and Wagering Records: Retained for a minimum of 5 years from the date of each transaction or wagering activity, in compliance with financial record-keeping requirements.

• KYC Documents: Retained for the period required under applicable identity verification and AML regulations, which is typically 5 years from the end of the account relationship.

• Support and Communications Records: Retained for up to 3 years from the date of the communication, or longer where relevant to an unresolved dispute.

• Technical and Log Data: Retained for up to 12 months for security and fraud investigation purposes.

• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever occurs first.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.

Cookies & Tracking Technologies

Rejeki66 uses cookies and similar tracking technologies on the Platform to ensure functionality, improve user experience, and analyse usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies, authentication tokens, and security cookies. They cannot be disabled without affecting core functionality.

• Functional Cookies: Remember your preferences such as language settings, display options, and account customisation choices.

• Analytics Cookies: Collect anonymised or pseudonymised data about how users interact with the Platform (pages visited, time spent, features used) to help us improve the service.

• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including bot detection and IP-based risk scoring.

Data Security

Rejeki66 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.

• Encryption at rest for sensitive data categories including identity documents and payment references.

• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis.

• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.

• Two-factor authentication (2FA) options for Member accounts to reduce the risk of unauthorised login.

• Secure deletion procedures applied to data that has exceeded its retention period.

While we take all reasonable steps to protect your data, no internet transmission or storage system is completely secure. You are responsible for maintaining the confidentiality of your login credentials. Rejeki66 will never ask for your password via email, live chat, or any other channel. If you suspect unauthorised access to your account, please contact our 24/7 support team immediately.

International Data Transfers

In the course of operating the Platform, your personal data may be transferred to and processed in jurisdictions outside of Malaysia — for example, where our cloud infrastructure providers or KYC service partners are based. Rejeki66 takes steps to ensure that any such international transfers are conducted with appropriate safeguards, including:

• Transferring data only to countries or service providers that offer an adequate level of data protection as determined by applicable regulatory standards.

• Implementing contractual data protection clauses with all international Data Processors to ensure they are bound by obligations equivalent to those applicable in Malaysia.

• Where necessary, obtaining your explicit consent prior to transferring specific categories of sensitive data internationally.

User Rights

As a data subject, you hold the rights described in the "Your Data Rights" section above. To exercise any of these rights, please submit a written request to our support team via live chat (available 24/7) or via email ([email protected]). Please include sufficient information to verify your identity before we action any request.

We will acknowledge receipt of your request within 3 business days and aim to fulfil it within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Children & Minors

The Rejeki66 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If you are a parent or guardian and believe that your child has provided personal data to Rejeki66 in connection with an account registration, please contact us immediately at [email protected].

Upon receiving such a notification, we will take prompt steps to verify the claim and, where confirmed, delete the relevant account and all associated personal data without undue delay.

Our registration process includes an age declaration step. However, if an underage individual provides false date-of-birth information to circumvent this control, Rejeki66 accepts no liability for data collected prior to discovering the misrepresentation.

Amendments to This Policy

Rejeki66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The revised Policy will be published on this page with an updated Effective Date.

Where changes are material — for example, a change to the categories of data we collect, the purposes for which we process it, or the parties with whom we share it — we will notify you by email to your registered address and display a notice on the Platform at least 14 days before the changes take effect.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you have the right to close your account and withdraw from the Platform.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Rejeki66 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Rejeki66 Platform. This is the fastest route for urgent privacy-related queries.

• Email: [email protected] — please include "Privacy Request" in the subject line, your registered username, and a clear description of your query or request. We aim to respond within 4 business hours during standard operating periods.

All data subject requests are treated with strict confidentiality. We will verify your identity before actioning any request that involves access to, modification of, or deletion of personal data.