Privacy Policy

This Privacy Policy ("Policy") describes the practices of rpvip1 ("the Company", "we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal data belonging to users ("you", "your") of the rpvip1 platform at https://rpvip1.lat and all associated interfaces and services (collectively, "the Platform").

rpvip1 takes the privacy of its players seriously. We serve Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond, and we recognise that trust is the foundation of every relationship on our platform. Handling personal data with care, transparency, and in full compliance with applicable data protection legislation is a non-negotiable obligation for us.

By registering an account on the Platform, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy.

The following terms have the meanings set out below whenever they appear in this Privacy Policy:

• "Personal Data" — any information that can directly or indirectly identify a living individual, including name, email address, phone number, device identifiers, IP address, financial account details, and gameplay history.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — rpvip1, the entity that determines the purposes and means of processing personal data.
• "Data Processor" — a third party that processes personal data on behalf of rpvip1 under a data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "Cookies" — small text files stored on your device by a website to retain session, preference, and analytics information.
• "KYC" — Know Your Customer; the identity and age verification process required before a withdrawal is processed.
• "AML" — Anti-Money Laundering; regulatory compliance procedures that require monitoring and reporting of suspicious financial activity.
• "Special Category Data" — particularly sensitive personal data including health information, biometric data, or data regarding criminal offences.

rpvip1 collects the following categories of personal data in connection with the operation of the Platform:

rpvip1 does not intentionally collect Special Category Data (e.g., health information, biometric data). If such data is inadvertently disclosed to us, it will be deleted promptly and will not be processed for any purpose.

rpvip1 collects personal data through the following channels:

rpvip1 processes personal data only where a valid legal basis exists under applicable data protection legislation. The legal bases we rely on are as follows:

• Contractual Necessity: Processing required to provide the services you have registered for, including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, AML transaction monitoring, age verification (21+ requirement), and regulatory reporting.
• Legitimate Interests: Processing conducted for rpvip1's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Where required, processing based on your freely given and withdrawable consent — in particular, for direct marketing communications and the use of non-essential cookies.

rpvip1 uses the personal data we collect for the following purposes:

1. Account Management: Creating and administering your rpvip1 account, processing login and authentication, managing account preferences and settings.
2. Identity & Age Verification: Confirming that all registered users are aged 21 or above in compliance with our legal obligations and responsible gambling commitments.
3. Payment Processing: Facilitating deposits and withdrawals in MYR via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and supported banks; processing cryptocurrency transactions.
4. Gaming Services: Delivering casino games, live dealer tables, and sports betting markets (including Liga Super Malaysia, EPL, UFC, and other competitions) and recording associated gameplay history.
5. Fraud & Security: Detecting and preventing fraudulent activity, unauthorised access, multi-accounting, and money laundering through automated monitoring and manual review.
6. Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and applying responsible gambling tools such as deposit limits, loss limits, and self-exclusion.
7. Regulatory Compliance: Meeting legal obligations including AML monitoring, suspicious activity reporting, and cooperation with regulatory or law enforcement authorities where required by law.
8. Customer Support: Responding to queries, resolving disputes, and improving support quality via review of support communications.
9. Marketing & Promotions: Sending relevant promotional communications and personalised bonus offers to users who have opted in to receive such communications. You may opt out at any time.
10. Platform Improvement: Analysing aggregated usage data and technical performance metrics to improve the Platform's reliability, speed, and user experience.

rpvip1 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

The nature of rpvip1's technology infrastructure means that personal data may be processed in countries outside Malaysia. Where personal data is transferred internationally, rpvip1 ensures that appropriate safeguards are in place to protect your data to the same standard required under applicable Malaysian data protection legislation.

Such safeguards may include standard contractual clauses, data processing agreements incorporating appropriate technical and organisational measures, and the selection of service providers located in jurisdictions that provide an adequate level of data protection.

You may request further information about international data transfer mechanisms by contacting our Privacy team as described in Section 15 of this Policy.

rpvip1 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, tax, or accounting obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, to satisfy AML and KYC regulatory obligations.
• Transaction and financial data: Retained for a minimum of 7 years following the date of each transaction, in accordance with financial record-keeping requirements.
• Support communications: Retained for 3 years following the date of the communication, or longer where the matter remains unresolved.
• Gameplay and betting data: Retained for 5 years following account closure for responsible gambling monitoring and dispute resolution purposes.
• Marketing preference data: Retained until you withdraw your marketing consent or request deletion, subject to regulatory minimum retention periods.
• Technical and log data: Retained for up to 12 months in identifiable form, then anonymised or deleted.

When personal data is no longer required for the purposes set out above, it will be securely deleted, anonymised, or archived in accordance with rpvip1's data retention and disposal procedures.

rpvip1 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device that help us recognise returning visitors, maintain session state, and gather analytical information.

Subject to applicable law, you hold the following rights with respect to your personal data held by rpvip1. You may exercise any of these rights by contacting our support team as set out in Section 15:

rpvip1 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• At-rest encryption for stored personal and financial data.
• Two-Factor Authentication (2FA) available to all registered users to protect account access.
• Role-based access controls limiting access to personal data strictly to rpvip1 personnel who require it to perform their duties.
• Regular security audits and penetration testing of Platform infrastructure.
• Real-time fraud monitoring and anomaly detection systems.
• Staff training on data protection obligations and security best practices.

While rpvip1 takes every reasonable precaution to protect your personal data, no system is completely immune to security threats. If you suspect that your account has been compromised, please contact our support team immediately via live chat.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rpvip1 will notify affected users and, where required by law, the relevant regulatory authority, within the timeframes prescribed by applicable legislation.

The rpvip1 Platform is strictly intended for individuals aged 21 years and above. rpvip1 does not knowingly collect or process personal data from individuals under the age of 21.

All users are required to confirm at registration that they are at least 21 years of age. rpvip1 operates a mandatory KYC age verification process that requires documentary proof of age (Malaysian MyKad or valid Passport) before any withdrawal is processed. Where there is reasonable suspicion that a registered user may be under 21, the account will be suspended pending verification.

If rpvip1 becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted promptly and the associated account will be permanently closed. Any deposits made by an underage user will be returned via the original payment method.

If you believe that a minor has registered an account on the Platform, please notify us immediately via the contact details in Section 15.

rpvip1 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will publish a revised version of this Policy at https://rpvip1.lat/privacy-policy and, where feasible, notify registered users by posting a notice on the Platform or by sending a notification to the email address held on your account.

The date of the most recent revision is displayed at the top of this page under "Last Updated". Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes described therein.

We encourage you to review this Policy periodically to remain informed about how rpvip1 handles your personal data. If you disagree with any changes to this Policy, you should stop using the Platform and may request account closure as described in our Terms and Conditions.

If you wish to exercise any of your data rights, raise a concern about how rpvip1 handles your personal data, or seek clarification on any aspect of this Privacy Policy, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the rpvip1 Platform. Our team can handle data enquiries in English, Bahasa Melayu, and Chinese. Average response time is under 5 minutes.
• Email: [email protected] — please mark your subject line "Privacy Enquiry" or "Data Subject Request" for priority routing.
• Coverage: Our support team serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam, on a 24-hour, 7-day basis.

rpvip1 will acknowledge data subject requests within 3 business days and endeavour to fulfil all valid requests within 30 calendar days of acknowledgement. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.