rojak99 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") applies to all personal data collected by rojak99 ("the Platform", "we", "us", "our") through the website rojak99.win, any associated subdomains, and any applications or services that link to this Policy.

1.2 rojak99 acts as the data controller in respect of personal data collected from Players. We are responsible for determining the purposes and means by which that data is processed, and for ensuring that our processing activities are lawful, fair, and transparent.

1.3 In this Policy, "personal data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, phone number, financial information, and device identifiers.

1.4 If you have questions about this Policy or wish to exercise any of your privacy rights, please contact us as described in Section 15.

2. Data We Collect

2.1 Registration Data. When you create a rojak99 account, we collect your full legal name, date of birth, email address, mobile telephone number, residential address, and preferred currency (MYR).

2.2 Identity Verification (KYC) Data. To comply with our gaming licence obligations, we collect copies of government-issued identification documents (such as Malaysian MyKad or passport) and proof of residential address. This data is processed solely for identity and age verification purposes.

2.3 Financial Data. We collect information about your payment method sufficient to process deposits and withdrawals (e.g., e-wallet identifiers associated with Touch 'n Go, DuitNow, Boost; bank account identifiers for FPX transfers). Full payment card numbers are not stored by rojak99. Payment processing is handled by PCI-DSS compliant third-party payment providers.

2.4 Transaction & Gaming Data. We maintain records of all deposits, withdrawals, bets placed, game sessions, bonus claims, and win/loss history associated with your account. This data is retained for regulatory, audit, and responsible gaming purposes.

2.5 Device & Technical Data. When you access the Platform, we automatically collect your IP address, device type, operating system, browser type and version, device identifiers, and session timestamps. This data is used for security, fraud detection, and platform optimisation.

2.6 Communications Data. We retain records of your interactions with our customer support team, including live chat transcripts, email correspondence, and support ticket history.

2.7 Preference Data. We collect information about your game preferences, language settings, and communication preferences to personalise your experience on the Platform.

3. How We Collect Data

3.1 Directly from You. Most of the personal data we hold is provided directly by you when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact customer support, or update your account preferences.

3.2 Automatically. Technical and device data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the Platform. For further information on our use of cookies, see Section 9.

3.3 From Third Parties. We may receive supplementary information from identity verification service providers (for KYC purposes), payment processors, fraud detection services, and, where applicable, data aggregators operating in compliance with applicable data protection law.

4. How We Use Your Data

4.1 rojak99 uses your personal data for the following purposes:

• Account Management: To create and maintain your account, process your login credentials, and provide access to Platform services;
• Identity & Age Verification: To verify that you meet the eligibility requirements set out in our Terms & Conditions, including the 21+ age requirement;
• Payment Processing: To process deposits and withdrawals in MYR via your selected payment method;
• Gaming Services: To facilitate your participation in casino games, live casino, sports betting, and all other products available on the Platform;
• Regulatory Compliance: To fulfil our obligations under our gaming licence, including AML/KYC requirements, transaction reporting, and audit obligations;
• Fraud & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited conduct;
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion requests, and implement deposit and session limits;
• Customer Support: To respond to your enquiries, resolve disputes, and communicate important account information;
• Marketing: To send you promotional communications about offers and products at rojak99, subject to your communication preferences. You may opt out of marketing communications at any time via your account settings or by contacting support;
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, game catalogue quality, and user experience.

5. Legal Basis for Processing

5.1 rojak99 processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to perform our contract with you (i.e., providing the gaming services you have registered for);
• Legal Obligation: Processing required to comply with our gaming licence conditions, AML obligations, and applicable data protection and financial regulations;
• Legitimate Interests: Processing for fraud prevention, security monitoring, and platform improvement, where our interests are not overridden by your data protection rights;
• Consent: Where we rely on your consent (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing

6.1 rojak99 does not sell your personal data. We share personal data only in the following circumstances:

• Service Providers: We share data with carefully selected third-party service providers who process data on our behalf, including payment processors, KYC/identity verification providers, fraud detection services, and cloud infrastructure providers. All service providers are bound by data processing agreements that restrict their use of your data;
• Regulatory Authorities: We are required by our gaming licence and applicable law to report certain information to our licensing authority and, in cases of suspected financial crime, to relevant government bodies;
• Law Enforcement: We will disclose personal data to law enforcement or regulatory agencies where required by valid legal process, court order, or applicable law;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 We do not share your personal data with third-party advertisers or data brokers for their independent marketing or profiling purposes.

7. International Data Transfers

7.1 In order to operate the Platform, some of your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, rojak99 ensures that appropriate safeguards are in place — including contractual protections — to ensure that your data receives a level of protection equivalent to that afforded under the jurisdiction in which your data was collected.

7.2 Our payment service providers and identity verification providers may process data in their respective operational jurisdictions. All such providers are selected based on their compliance with internationally recognised data protection standards.

8. Data Retention

8.1 rojak99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our gaming licence:

• Account data and KYC documentation: minimum 5 years following account closure;
• Transaction and gaming records: minimum 5 years from the date of each transaction;
• Customer support communications: minimum 3 years from the date of the last interaction;
• Marketing preference records: until you withdraw consent or request deletion, and for 1 year thereafter for audit purposes.

8.2 Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

9. Cookies & Tracking Technologies

9.1 rojak99 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function, including session management, login state maintenance, and security features. These cannot be disabled without breaking core Platform functionality;
• Functional Cookies: Used to remember your preferences (e.g., language, game settings) to personalise your experience;
• Analytics Cookies: Used in aggregated, anonymised form to understand how players interact with the Platform and to identify areas for improvement. No individual player is identified through analytics data;
• Fraud Prevention Cookies: Used by our security infrastructure to detect suspicious behaviour, bot activity, and account compromise attempts.

9.2 rojak99 does not use third-party advertising or behavioural tracking cookies for cross-site profiling purposes.

9.3 Most browsers allow you to control cookie settings via their privacy or security settings. Note that disabling strictly necessary cookies will prevent you from using key Platform features including account login.

10. Your Rights

10.1 Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by rojak99:

• Right of Access: To request a copy of the personal data we hold about you;
• Right of Rectification: To request correction of inaccurate or incomplete personal data;
• Right of Erasure: To request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to Restrict Processing: To request that we limit our processing of your data in certain circumstances;
• Right to Data Portability: To receive your personal data in a structured, machine-readable format;
• Right to Object: To object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time.

10.2 To exercise any of these rights, please contact our support team as described in Section 15. We will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, with notice to you.

11. Children's Privacy

11.1 The rojak99 Platform is strictly for individuals aged 21 and above. We do not knowingly collect, use, or store personal data from individuals under 21 years of age. Where we discover or are notified that an account has been registered by a minor, we will immediately close that account, delete associated personal data (subject to any regulatory reporting obligations), and take such additional steps as may be required by our gaming licence.

11.2 If you believe a minor has registered a rojak99 account, please contact our support team immediately.

12. Security Measures

12.1 rojak99 implements a layered security architecture to protect your personal data, including:

• TLS encryption for all data in transit between your browser and our servers;
• AES-256 encryption for sensitive data at rest;
• Industry-standard password hashing (no plaintext passwords stored);
• Multi-factor authentication options for account login;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular independent security audits and penetration testing;
• Real-time fraud and anomaly detection systems monitoring all transactions.

12.2 In the event of a personal data breach that poses a risk to your rights and freedoms, rojak99 will notify affected Players and the relevant regulatory authority in accordance with applicable legal requirements and our gaming licence obligations.

13. Third-Party Links

13.1 The rojak99 Platform may contain references to third-party services (such as payment providers). This Policy applies only to the rojak99 Platform. rojak99 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any third-party platforms you use in connection with your rojak99 account.

14. Policy Amendments

14.1 rojak99 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Players via email to their registered address or via a prominent notice on the Platform, no less than 7 days prior to the effective date of the change.

14.2 The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Complaints

15.1 For any questions, requests, or complaints relating to this Privacy Policy or our data processing practices, please contact our Data Protection team via customer support live chat on the Platform, or by email. Our contact email is displayed below as plain text:

15.2 If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to our gaming licensing authority's designated data protection or player complaints channel, or to any applicable data protection supervisory authority in your jurisdiction.