Privacy Policy

Introduction

rezeki66 ("the Platform", "we", "us" or "our") is committed to protecting the privacy and personal data of all users who access the rezeki66 website at rezeki66.cam ("the Site"). This Privacy Policy ("Policy") sets out in clear terms how we collect, use, store, share and protect personal information relating to registered account holders, visitors and any other individuals who interact with our platform.

This Policy has been prepared with reference to internationally recognised data protection principles, including those reflected in frameworks such as the General Data Protection Regulation (GDPR) and the Malaysian Personal Data Protection Act 2010 (PDPA). Where Malaysian law applies to a user's personal data, we endeavour to handle that data in a manner consistent with the PDPA's seven Data Protection Principles.

By accessing the Site, creating an account or submitting any personal data to rezeki66, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree, you must refrain from using the Platform.

Definitions

The following terms carry the meanings assigned to them throughout this Policy:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, email address, identification number, IP address, payment details and device identifiers.
• "Data Subject" — the identified or identifiable individual to whom Personal Data relates; in the context of this Policy, typically the registered user or site visitor.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure and destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data; for the purposes of this Policy, rezeki66.
• "Third-Party Processor" — an external service provider engaged by rezeki66 to process Personal Data on our behalf, bound by contractual data processing obligations.
• "Cookies" — small text files placed on a user's device by the Site for session management, analytics and preference retention purposes.
• "KYC" — Know Your Customer verification, the process through which we confirm a user's identity, age and payment information.

Data We Collect

rezeki66 collects the following categories of Personal Data, the extent of which depends on the nature of your interaction with the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data or biometric identification data unless specifically required by applicable law or regulatory obligation and with your explicit consent.

How We Collect Data

Personal Data is collected through the following primary channels:

• Direct submission — information you voluntarily provide when registering an account, completing KYC verification, submitting support requests or updating account preferences.
• Automated technical collection — data collected automatically when you access the Site, including through cookies, log files and session-tracking technologies described in Section 10.
• Third-party payment processors — transaction-level data received from payment service providers including Malaysian bank transfer systems (Maybank, CIMB, Public Bank, Hong Leong), e-wallet platforms and cryptocurrency network confirmations.
• Identity verification partners — KYC and anti-money laundering (AML) checks may involve regulated third-party identity verification services that cross-reference submitted documents against authorised databases.
• Publicly available sources — in limited circumstances for fraud prevention and compliance purposes, we may consult publicly accessible databases, sanctions lists or adverse media sources.

Data Processing & Lawful Basis

rezeki66 processes Personal Data only where a lawful basis exists for doing so. The applicable lawful bases under internationally recognised data protection frameworks are as follows:

• Contractual necessity — Processing is necessary to fulfil our contractual obligations to you as a registered account holder, including account management, payment processing and support delivery.
• Legal obligation — Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML), counter-terrorism financing (CTF) and Know Your Customer (KYC) obligations imposed under international licensing conditions.
• Legitimate interests — Processing is necessary for the legitimate interests of rezeki66, including fraud detection, platform security, service improvement and responsible gambling monitoring, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — Where Processing is based on consent (for example, optional marketing communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of prior Processing.

Use of Personal Data

Personal Data collected by rezeki66 is used for the following purposes:

• Creating, maintaining and securing your registered account.
• Verifying your identity and age in accordance with KYC requirements applicable to the Platform's international licensing obligations.
• Processing deposits and withdrawals through your nominated Eligible Payment Methods, including Malaysian bank transfers, DuitNow, FPX and supported e-wallets.
• Delivering customer support, resolving account queries and managing formal complaints.
• Monitoring account activity for fraud, money laundering, unauthorised access and responsible gambling indicators.
• Personalising your experience on the Platform, including relevant promotion notifications where you have not opted out.
• Complying with reporting obligations to licensing authorities, financial intelligence units and law enforcement agencies where required by applicable law.
• Conducting internal analytics and product development to improve the quality, reliability and accessibility of the Platform for users across Malaysia.

We do not sell, rent or trade your Personal Data to unaffiliated third parties for their own direct marketing purposes.

Data Sharing & Disclosure

rezeki66 may share Personal Data with the following categories of recipients where necessary and permitted under applicable law:

• Payment service providers — banks, e-wallet operators, FPX gateway providers and cryptocurrency network intermediaries required to execute your deposit and withdrawal instructions.
• Identity verification and KYC partners — regulated third-party service providers engaged to verify identity documents and conduct AML screening.
• Technology and infrastructure providers — cloud hosting, cybersecurity, content delivery and analytics service providers that process data on our behalf under binding data processing agreements.
• Legal and regulatory authorities — courts, law enforcement agencies, licensing regulators and financial intelligence units where disclosure is required by law, court order or regulatory direction.
• Professional advisers — lawyers, auditors and compliance consultants bound by professional confidentiality obligations.

All Third-Party Processors engaged by rezeki66 are required to implement appropriate technical and organisational security measures and to process Personal Data only in accordance with our documented instructions.

International Data Transfers

Given the international nature of rezeki66's operating infrastructure, Personal Data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, rezeki66 takes reasonable steps to ensure that appropriate safeguards are in place, including:

• Transferring data only to recipients in jurisdictions that provide an adequate level of data protection as recognised by applicable international standards.
• Implementing contractual protections, including standard contractual clauses or equivalent binding instruments, with overseas processors.
• Applying encryption and access controls to data in transit and at rest.

By using the Platform, you acknowledge that your Personal Data may be processed outside Malaysia in connection with the services described in this Policy.

Data Retention

Personal Data is retained for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and audit obligations. The following general retention guidelines apply:

• Account and identity data — retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping obligations.
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction.
• KYC documentation — retained for a minimum of five (5) years following the completion of the KYC review, or longer where required by a specific regulatory obligation.
• Support communications — retained for up to three (3) years from the date of the last interaction, unless a related dispute or legal proceeding requires longer retention.
• Technical and usage logs — retained for up to twelve (12) months for fraud and security analysis purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Cookies & Tracking Technologies

The rezeki66 Site uses cookies and similar tracking technologies to support core platform functionality, improve user experience and gather aggregate analytics data. The following categories of cookies may be used:

Non-essential cookies are set only with your consent, which may be managed through your browser settings or any cookie preference tool available on the Site. Please note that disabling certain cookies may impair the functionality of the Platform.

User Rights

Subject to applicable law and any overriding legal obligations, registered users and data subjects have the following rights in respect of their Personal Data held by rezeki66:

• Right of access — you may request a copy of the Personal Data we hold about you.
• Right to rectification — you may request correction of inaccurate or incomplete Personal Data.
• Right to erasure — you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations.
• Right to restrict processing — you may request that we limit our use of your Personal Data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability — you may request a machine-readable copy of Personal Data you have provided to us, where technically feasible.
• Right to object — you may object to Processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent — where Processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior Processing.

To exercise any of these rights, please contact us using the details in Section 15. We will respond to verified requests within thirty (30) calendar days. We may require proof of identity before processing a rights request. Certain rights may be limited where compliance would conflict with our AML, fraud prevention or legal reporting obligations.

Data Security

rezeki66 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and our servers.
• Encryption at rest for stored Personal Data, KYC documentation and financial records.
• Role-based access controls limiting staff access to Personal Data to those with a documented operational need.
• Regular security assessments and penetration testing of platform infrastructure.
• Incident response procedures covering detection, containment, notification and remediation of data security events.

Minors & Age Policy

The rezeki66 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to belong to individuals under the minimum age will be suspended immediately.

If you believe that a minor has submitted Personal Data to the Platform, please contact us immediately at the details provided in Section 15. Upon verification of such a report, we will delete the relevant data and close the associated account without undue delay.

Amendments to This Policy

rezeki66 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law or platform functionality. Material changes will be communicated to registered users via their registered email address and/or a prominent notice on the Site no less than seven (7) days before the effective date of the change, except where an immediate update is required for security or legal compliance reasons.

The "last updated" date at the top of this Policy indicates the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with a change, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

Contact Us

If you have questions, concerns or formal requests relating to this Privacy Policy or the handling of your Personal Data, please contact the rezeki66 Data Support team through the following channel:

Support is available 24 hours a day, seven days a week via live chat for general account queries. Average response time for live-chat enquiries is approximately 3–5 minutes.