Privacy Policy rp55 – Personal Data Protection for Malaysia Members

1. Who Is Responsible for Your Data

Rp55 is the data controller for all personal information collected through our platform at rp55.ml. We are fully committed to ensuring that your data is collected, processed, stored, and protected in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and international data protection principles.

If you have any privacy-related questions or concerns, our team is available via live chat or our support email, operating 24 hours a day, 7 days a week with no holidays.

2. Information We Collect

Rp55 collects various categories of information to enable us to provide you with the best possible service. This data collection is carried out transparently and only for the stated purposes.

2.1 Information You Provide Directly

• Account Information: Full name, date of birth, gender, identity card number (MyKad), email address, and mobile phone number.
• Financial Information: Bank account details, bank name, and account number for deposit and withdrawal purposes.
• KYC Documents: Identity card copy, proof of address, and other identity verification documents required for the KYC process.
• Communications: Any messages, complaints, or enquiries you send to the rp55 support team.

2.2 Information Collected Automatically

• Technical Data : IP address, browser type, operating system, screen resolution, and device information used to access the platform.
• Session Data: Login time, session duration, pages visited, and actions taken within the platform.
• Cookies: Cookie files and similar tracking technologies that help us recognise you on return visits and improve your user experience.
• Location Data: General location data based on IP address for legal compliance and fraud detection purposes.

3. Why We Use Your Information

Every piece of data we collect has a clear and legitimate purpose. rp55 does not collect data without a sound reason.

Purpose of Use	Legal Basis	Data Used
Account management and identity verification	Contract performance	Name, email, MyKad, date of birth
Processing deposits and withdrawals	Contract performance	Bank details, transaction history
Fraud and money laundering prevention	Legal obligation	IP, device data, transaction patterns
Service communications and notifications	Legitimate interests	Email, phone number
Platform improvement and analytics	Legitimate interests	Session data, usage patterns
KYC and regulatory compliance	Legal obligation	Identity verification documents

4. Who We Share Your Information With

Rp55 does not sell or rent your personal information to any party. However, in the following limited situations, we may need to share your data:

4.1 Approved Service Providers

Rp55 works with carefully selected third-party service providers to support platform operations, including payment processors, encryption service providers, and analytics platforms. All such providers are bound by strict confidentiality agreements and are permitted to use your data solely for the specified purposes.

4.2 Legal Requirements

Rp55 will disclose your personal information to the relevant authorities where required by Malaysian law, court order, or a valid official investigation process. In all such cases, we will only disclose the minimum information necessary.

4.3 Protection of rp55's Rights

In situations where it is necessary to protect the legitimate rights, property, or safety of rp55, our members, or the public — including cases of suspected fraud — we reserve the right to share relevant information with the appropriate parties.

5. How Long We Retain Your Data

Rp55 retains your personal data for as long as your account is active or as long as necessary to provide services to you. After account closure, certain data will be retained for the following periods to fulfil legal obligations:

• Financial and transaction data: Minimum 7 years in line with Income Tax Act requirements and anti-money laundering regulations.
• KYC Documents: Minimum 5 years after account closure or the date of the last transaction.
• Communication and support logs: 2 years from the date of last interaction.
• Session data and technical logs: 90 days for security and troubleshooting purposes.

Once the retention period expires, your data will be securely deleted or anonymised using industry-standard procedures.

6. Your Data Security

Rp55 continuously invests in security infrastructure to ensure your personal data is always protected against unauthorised access, modification, disclosure, or destruction.

7. Your Privacy Rights

As a rp55 member under Malaysian jurisdiction, you have the following rights regarding your personal data, in accordance with PDPA 2010:

8. Cross-Border Data Transfers

In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia — for example, for backup or international payment processing purposes. In all such cases, rp55 ensures that data transfers comply with the requirements of PDPA 2010 and data protection standards equivalent to or higher than those required under Malaysian law.

9. Children's Privacy

The rp55 platform is strictly for individuals aged 18 and above. We do not knowingly collect or store personal data of individuals under the age of 18. Should we discover that we have collected data from a minor without proper verification, we will immediately delete that data and close the account in question.

10. Amendments to the Privacy Policy

Rp55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material amendments will be communicated to you via email or an in-platform notification at least 14 days before taking effect.

Your continued use of the rp55 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.