Privacy Policy Rupiah126 – Our Commitment to Protecting Your Personal Data

At rupiah126, we understand that your trust is the foundation of our relationship. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, place a bet on a Malaysia Super League match, or play roulette in our live casino, you are entrusting us with your personal information. We take that trust seriously.

This Privacy Policy has been prepared to give you a clear and transparent picture of how rupiah126 handling your personal data — what we collect, why we need it, how it is protected, who it may be shared with, and your rights as the owner of that data.

All data collection and processing operations rupiah126 comply with Personal Data Protection Act 2010 (PDPA) Malaysia — the primary data protection legislation governing how organisations handle personal information in Malaysia. We also follow industry best practices in cybersecurity and data privacy to ensure protection that goes beyond the minimum legal requirements.

If you have any questions regarding this Privacy Policy or how rupiah126 handling your personal data, please contact us at support@rupiah126.my or via our 24/7 in-platform LiveChat.

Rupiah126 collects various categories of personal data from you depending on how you interact with our platform. Our guiding principle is data minimisation — we only collect what is genuinely necessary for the stated purpose.

• Identity Data: Full name, date of birth, identity card number (MyKad) or passport, gender, and nationality — collected during account registration and KYC (Know Your Customer) verification.
• Contact Data: Email address, Malaysian phone number, and residential address — required for account communication, transaction verification, and customer support.
• Financial Data: Details related to the payment methods you use — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX via Maybank2u or CIMB Clicks — including account name, account number (partially masked), and your deposit and withdrawal transaction history in MYR.
• Verification Documents: Identity card images, bank statements, or other supporting documents requested during the KYC process to meet anti-money laundering legal requirements.
• Communications: Correspondence history with the rupiah126 customer support team, including LiveChat logs, emails, and WhatsApp.

• Technical Data: IP address, web browser type, device operating system, screen resolution, and other technical information collected automatically when you browse the rupiah126 platform.
• Usage Data: Pages you visit, games you play, bets you place, session times and duration, and how you interact with the platform — all used to improve your experience.
• Cookie Data: Information stored in cookies and similar tracking technologies — see Section 7 for further details.

Every piece of data collected by rupiah126 have a specific and legitimate purpose. We do not use your data for any undisclosed purpose without first obtaining your consent.

• Account Management: Creating and managing your account, processing registrations, verifying your identity, and granting access to all rupiah126 products — from badminton Sports Betting to live roulette at the Live Casino.
• Transaction Processing: Processes deposits and withdrawals in MYR using your preferred Malaysian payment method, maintains accurate financial records, and sends transaction confirmations.
• Legal Compliance: Meeting anti-money laundering (AML) requirements, conducting Know Your Customer (KYC) checks, complying with directives from relevant Malaysian authorities, and maintaining records for audit purposes.
• Platform Security: Detecting and preventing fraud, multi-account usage, promotional abuse, money laundering, and any other unlawful activity that could compromise the integrity of the rupiah126 platform.
• Customer Support: Resolving your enquiries, complaints, and requests accurately and efficiently. Communication history is retained to ensure continuity of service.
• Service Communications: Sending important notifications relating to your account — including transaction confirmations, security alerts, policy changes, and rupiah126 service updates.
• Marketing (With Consent): With your consent, we may send you information about rupiah126 promotions, bonuses and special offers relevant to your gaming interests. You may opt out of marketing communications at any time.
• Platform Improvements: Analysing usage patterns to improve the functionality, design, and content of the rupiah126 platform for a better experience for all Malaysian players.
• Responsible Gambling: Using betting activity data to identify patterns that may indicate problem gambling risk, and providing appropriate support in line with rupiah126's commitment to Responsible Gambling.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), rupiah126 has a valid legal basis for every data processing activity we carry out. These bases are as follows:

• Consent: When you register a rupiah126 account, you give us your consent to process your personal data for the stated purposes. This is the primary basis for most of our processing activities, including marketing communications.
• Contract Performance: The majority of our data processing is necessary to perform the agreement between you and rupiah126 — including processing deposits, withdrawals, and bets in MYR using Malaysian payment methods.
• Legal Obligation: We are required under Malaysian law to process certain data for compliance purposes, including KYC requirements, anti-money laundering (AML) reporting, and licensing compliance obligations.
• Legitimate Interest: For specific purposes such as fraud prevention, platform security, and service improvement, we process data on the basis of the legitimate interests of rupiah126 and its members — provided those interests do not override your privacy rights.

Rupiah126 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we may need to share certain information with trusted external parties:

We share necessary data with service providers who help us operate the rupiah126 platform, including:

• Malaysian Payment Providers: Payment gateways that process your transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX. These providers receive only the data required to process your transaction and are subject to strict security and privacy requirements.
• Casino Software Providers: Licensed international casino software providers that supply slots, Live Casino, and roulette games to rupiah126. Only the minimum technical data required for game functionality is shared.
• Identity Verification Services: Third-party KYC providers who assist us in verifying member identities in accordance with Malaysian legal compliance requirements.
• Analytics Services: An analytics platform that helps us understand how users interact with the platform, enabling us to make improvements — all data is anonymised before sharing.

Rupiah126 may disclose personal data to Malaysian government authorities or law enforcement if required to do so by applicable law, a valid court order, or in efforts to prevent and investigate serious crimes such as money laundering or fraud.

Protecting your personal data is a technical and operational priority rupiah126. We implement multiple layers of security to keep your data protected at all times:

• 256-bit SSL Encryption: All communication between your browser and rupiah126's servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by Maybank2u, CIMB Clicks, and Malaysia's leading financial institutions.
• Stored Data Encryption: Sensitive information stored in our databases, including passwords and financial details, is encrypted using robust cryptographic algorithms. Passwords are never stored in plain text.
• Two-Factor Authentication (2FA): We offer two-factor authentication for all member accounts as an additional layer of security, and we encourage all rupiah126 users to activate it.
• 24/7 Security Monitoring: Our automated security monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or any unauthorised access to rupiah126's systems.
• Internal Access Controls: Access to member personal data among rupiah126 staff is strictly limited on a "need-to-know" basis — only staff who require it to carry out their duties are permitted to access sensitive data.
• Regular Security Audits: The rupiah126 security infrastructure is regularly audited by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

Platform rupiah126 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored in your web browser when you visit our site.

• Strictly Necessary Cookies: These cookies are essential for the core functionality of the rupiah126 platform — including maintaining your login session, remembering your language preference, and ensuring transaction security. They cannot be disabled without affecting platform functionality.
• Functional Cookies: Allows the platform to remember your preferences and settings — such as favourite games, betting limit configurations, and display preferences — to deliver a more personalised experience.
• Analytics Cookies: Helping us understand how users interact with the rupiah126 platform — the most frequently visited pages, time spent, and navigation patterns — so we can continuously improve our service.
• Security Cookies: Used to detect and prevent fraudulent activity, duplicate accounts, and other security threats to the rupiah126 platform and its members.

You can manage and control your cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the rupiah126 platform, including your ability to log in and complete transactions.

In certain operational situations, your personal data may need to be transferred to or processed outside Malaysia — for example, when we use licensed casino software from international certified providers for our live roulette or jackpot slots games.

In all such situations, rupiah126 ensures that any cross-border data transfers are carried out with adequate safeguards equivalent to the standards set out in Malaysia's PDPA 2010. We only work with international providers that comply with recognised data protection standards and have entered into strict data processing agreements with rupiah126.

Rupiah126 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with applicable Malaysian legal requirements. Our retention policy is as follows:

• Active Account Data: For as long as your rupiah126 account remains active, we retain all personal data and transaction records necessary to provide our services and meet our legal obligations.
• Data After Account Closure: After account closure, we retain certain data for 7 years to comply with Malaysia's financial, audit, and anti-money laundering legal requirements. After this period, data will be securely deleted or anonymised.
• Security Logs: Security logs and access records are retained for 12 months for security incident investigation purposes where necessary.
• Support Communications: Customer support correspondence records are retained for 3 years to ensure service continuity and the resolution of any disputes that may arise.

When data is no longer needed and there is no legal obligation to retain it, rupiah126 will securely delete or anonymise that data using methods that ensure it cannot be recovered or reused.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have rights that are guaranteed by law. Rupiah126 is committed to respecting and facilitating the exercise of these rights:

Platform rupiah126 is strictly for individuals aged 18 and above only. We do not knowingly collect or process personal data of children under the age of 18.

Our registration and KYC verification process is designed to ensure that only adults can open and use an account on rupiah126. If we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate action to delete that data and close the account in question.

If you believe that someone under the age of 18 has registered or attempted to use the platform rupiah126, please notify us immediately at support@rupiah126.my so that we can take the appropriate action.

Rupiah126 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new Malaysian legal requirements, or changes to the services we offer. All updates will be published on this page with a clear revision date at the top.

For material or significant changes to how we process your personal data, we will notify you via email notification or a prominent notice within the rupiah126 platform. at least 14 days before the changes take effect, giving you sufficient time to review and consider their implications.

Continued use of the platform rupiah126 following the effective date of any Privacy Policy amendment will be deemed as your acceptance of the updated policy. It is your responsibility to review this page periodically. This policy was last updated on 1 January 2026.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rupiah126 handling your personal data, we encourage you to reach out to us directly. We are committed to addressing every concern with care and transparency.

You can reach our Privacy Officer through:

• Email: support@rupiah126.my — please include "Privacy Enquiry" in the subject line of your email to help us process it faster.
• LiveChat: Available 24 hours a day, 7 days a week, directly within the rupiah126 platform. Our team is fluent in both Malay and English.
• Office: Rupiah126, Kuala Lumpur, Malaysia. Correspondence may be sent to our registered office address for matters requiring formal written communication.

We are committed to responding to all privacy-related enquiries within 14 working days. If you are not satisfied with our response, you have the right to escalate your complaint to the Personal Data Protection Commissioner of Malaysia, who is responsible for enforcing the PDPA 2010.