Privacy Policy Rojak88 — Malaysia User Data Protection

This Privacy Policy explains how rojak88 ("we", "Platform", or "rojak88") collects, uses, stores, and protects your personal information when you use the rojak88.app website, the rojak88 mobile app, or any services we offer.

As an online gaming platform operating in Malaysia, we are subject to the Personal Data Protection Act 2010 (PDPA) and are committed to ensuring your personal data is handled in a responsible, secure, and transparent manner.

User privacy is one of the core pillars of trust that defines the relationship between rojak88 and our player community. We do not take this lightly — every data-related decision is made with the interests and safety of our users as the top priority.

Rojak88 collects various types of information depending on how you interact with our platform. We only collect data that is genuinely necessary to provide a secure and complete service.

Data you provide directly:

Automatically collected data:

• Technical data — IP address, device type, operating system, browser name
• Usage data — pages visited, games played, session duration, in-platform actions
• Transaction data — records of deposits, withdrawals, wagering and wins
• Cookie data — session cookies and preferences to enhance the user experience
• Location data — country and region based on IP address for legal compliance

Data from third-party sources:

In certain cases, we may receive information from identity verification service providers or payment providers as part of the KYC process and transaction processing. This data is used solely for security and compliance purposes.

Every piece of data we collect has a clear and specific purpose. We do not collect unnecessary data, and we do not use your data for undisclosed purposes without your consent.

• Account management — creating, verifying and maintaining your user account
• Payment processing — processing deposits and withdrawals securely in MYR
• Identity verification (KYC) — ensuring compliance with anti-money laundering laws
• Platform security — detecting and preventing fraud, unauthorized access and illegal activity
• Customer Support — helping resolve issues and queries you raise
• Platform improvements — analyzing usage patterns to improve the user experience
• Service Communications — sending important notifications about your account, transactions and platform updates
• Legal compliance — fulfilling applicable legal and regulatory obligations

We understand that data sharing is a sensitive topic. rojak88 only shares your personal data under very limited and specific circumstances, and only with parties that have a legitimate need to access it.

Parties who may receive your data:

• Payment providers — DuitNow, FPX, Touch 'n Go and GrabPay require transaction information to process deposits and withdrawals. Data is shared in encrypted form and for payment purposes only.
• Identity verification providers — third-party KYC companies that help verify your identity during account registration.
• Game providers — required game information is shared with providers such as Pragmatic Play or Evolution Gaming to enable gameplay. Full names and financial information are not shared.
• Law enforcement agencies — if required by a court order or directive from a legitimate Malaysian authority.
• Auditors and professional advisors — for audit purposes, legal compliance and advisory services, subject to strict confidentiality agreements.

All third parties we work with are required to uphold data protection standards no less stringent than our own. Data processing agreements are signed with all partners who handle user data.

The security of your data is rojak88's technical priority. We continuously invest in security infrastructure to ensure your information is protected at every level.

Security measures we have in place:

• 256-bit SSL Encryption for all data transmitted between your device and our servers
• Encryption of data at rest — all sensitive data stored in our database is encrypted
• Multi-layer access controls — only authorized staff may access user data, and all access is logged and monitored
• Two-factor authentication (2FA) available for user accounts as an additional layer of protection
• Regular security audits by independent third parties to identify and address potential vulnerabilities
• 24/7 Monitoring on the system to detect any suspicious activity

Data retention period: Your personal data will be retained for as long as your account is active and for the period required by law following account closure. Generally, transaction records are kept for a minimum of 7 years for financial regulatory compliance.

Rojak88 uses cookies and similar tracking technologies to enhance your experience on our platform. This is standard industry practice that allows the platform to function more efficiently and personalise your experience.

Types of cookies we use:

• Essential cookies — required for the platform to function properly, including login sessions and security. This cannot be disabled.
• Performance cookies — collecting information on how you use the platform to help us improve functionality and speed.
• Functional cookies — remembering your preferences such as language, theme and display settings for future sessions.
• Analytics cookies — helping us understand overall platform usage patterns in aggregate and anonymized form.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect platform functionality or your user experience. Essential cookies cannot be disabled as they are required for platform security and core operations.

Under Malaysia's Personal Data Protection Act 2010 and the data protection principles we follow, you hold important rights regarding your personal data.

To exercise any of the above rights, contact our customer support team via live chat on the platform. We will process your request within 30 business days. Identity verification may be required before your request is processed.

Rojak88 is a platform that strictly prohibited for individuals under 18 years of age. We do not intentionally collect or process personal data of individuals under the age of 18.

If we discover that personal data of an underage individual has been collected without our knowledge, we will:

• Immediately delete the relevant data from our systems
• Close the associated account
• Return any valid remaining funds to the original deposit method

If you become aware that a child has registered on our platform, please contact our support team immediately so that appropriate action can be taken without delay.

Rojak88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments.

When significant amendments occur, we will notify you via:

• In-account notification upon your next login
• Push notification via the rojak88 mobile app (if enabled)
• Clear notice displayed on the rojak88 website

The "Updated" date at the top of this page will always reflect the date of the latest revision. We encourage you to review this page periodically. Continued use of the platform after any revisions means you accept the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, several channels are available for you to reach our team.

The rojak88 customer support team is available to assist you 24 hours a day, 7 days a week via live chat on the platform. For privacy and data-related matters, you may specify your inquiry topic as "Privacy & Data" so it can be routed to the right team.

We are committed to responding to all privacy-related inquiries within 48 business hours. For user rights requests such as data access or deletion, please expect an initial response within 5 business days and full resolution within 30 business days.