Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by rapid97 ("we", "us", "our", "the Platform") and applies to all individuals ("you", "the User", "Data Subject") who access or use the rapid97 website and services available at rapid97.cam, including sports betting, live casino, slot games, customer support, loyalty programmes, and all associated features.

rapid97 is committed to processing personal data in a lawful, transparent, and responsible manner consistent with applicable data protection principles. We have designed this Policy to help you clearly understand what personal data we collect, why we collect it, how long we retain it, with whom we share it, and what rights you hold regarding your information.

By registering an account on rapid97, accessing the Platform, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to close your account.

2. Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably identify a living individual, directly or indirectly, such as full name, email address, phone number, financial account details, IP address, or device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, modification, retrieval, use, disclosure, or deletion.
• "Data Controller" — rapid97, which determines the purposes and means by which personal data is processed.
• "Data Processor" — any third party that processes personal data on behalf of rapid97 under a data processing agreement, including payment service providers and KYC verification vendors.
• "KYC" — Know Your Customer identity verification processes required to verify your identity and satisfy anti-money laundering (AML) obligations.
• "Cookies" — small text files stored on your device by the Platform that record session and preference information to improve your user experience.
• "Account" — your personal registered account on the rapid97 Platform.

3. Personal Data We Collect

rapid97 collects personal data across several categories depending on your level of interaction with the Platform:

3.1 Identity and Contact Data

• Full legal name as appearing on official identification;
• Date of birth (to verify minimum age requirement of 21 years);
• Email address and mobile phone number;
• Residential address (city, state, postcode — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru);
• Government-issued identification number (e.g., MyKad number or passport number for Malaysian residents).

3.2 Financial Data

• Payment method identifiers (e.g., last four digits of bank account, e-wallet ID for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong);
• Transaction history including deposit amounts, withdrawal amounts, and transaction reference numbers;
• Cryptocurrency wallet addresses where applicable (BTC, ETH, USDT, LTC).

3.3 Betting and Gaming Activity Data

• Betting history, wager amounts, selected markets, odds accepted, and settlement outcomes;
• Game session logs including duration, games played, RTP results, and wagering totals;
• Bonus participation records, loyalty points earned, and VIP tier status.

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Session timestamps, login history, and platform navigation data;
• Cookie identifiers and similar tracking technology data.

3.5 Communications Data

• Records of communications between you and rapid97 customer support, including live chat transcripts, email correspondence, and WhatsApp message logs;
• Survey responses, feedback forms, and any voluntary information you submit to rapid97.

4. How We Collect Personal Data

rapid97 collects personal data through the following channels:

• Direct submission — information you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, contacting support, or participating in promotions;
• Automated collection — technical data collected automatically when you access the Platform, including IP address, device information, browser data, and session behaviour via cookies and similar technologies;
• Third-party sources — identity verification data received from KYC verification service providers; transaction confirmation data from payment processors including DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay; fraud screening data from anti-fraud service providers;
• Publicly available sources — limited to sanction list screening and fraud prevention checks where required by law.

5. Purpose & Legal Basis for Processing

We process your personal data only for defined purposes and on one or more of the following legal bases:

5.1 Contractual Necessity

Processing necessary to perform the contract we have with you — specifically to create and manage your account, process deposits and withdrawals through Malaysian payment channels, settle bets and game results, manage your VIP tier status, and provide customer support.

5.2 Legal Obligation

Processing required to comply with applicable law — including KYC identity verification, anti-money laundering (AML) checks, age verification (21+ requirement), sanctions screening, and financial transaction record-keeping as may be required by regulatory frameworks applicable to rapid97's operations.

5.3 Legitimate Interests

Processing necessary for rapid97's legitimate business interests where those interests are not overridden by your rights — including fraud prevention and platform security, responsible gambling monitoring, platform performance analytics, and improving the user experience for Malaysian players.

5.4 Consent

Where we rely on your consent for specific processing activities — such as sending promotional marketing communications — you may withdraw that consent at any time by contacting our support team or updating your account communication preferences without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

rapid97 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment service providers — Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong, RHB), e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX, and cryptocurrency payment processors receive only the transaction data necessary to complete your deposit or withdrawal;
• KYC and identity verification vendors — accredited third-party identity verification providers receive your identity documents and biometric data solely to verify your identity and age as required for account approval;
• Fraud prevention and security providers — we share limited technical and transaction data with fraud prevention services to protect the platform and its users;
• Regulatory and law enforcement authorities — we will disclose personal data to competent authorities where we are legally required to do so, including in response to court orders, government investigations, or anti-money laundering reporting obligations;
• Corporate transactions — in the event of a merger, acquisition, or sale of assets, personal data held by rapid97 may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. International Data Transfers

Where personal data is transferred to service providers or infrastructure located outside Malaysia, rapid97 takes appropriate steps to ensure that an equivalent level of data protection is maintained. Such steps may include entering into data transfer agreements with the relevant service providers, implementing standard contractual clauses, or relying on other lawful transfer mechanisms.

The majority of rapid97's data processing infrastructure is designed to minimise international transfers. Where transfers do occur — for example, in connection with cloud hosting, payment gateway routing, or fraud detection services — rapid97 ensures all receiving parties are contractually bound to maintain data security standards consistent with this Policy.

8. Data Retention

rapid97 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account data — retained for the duration of your account and for a period of up to seven (7) years following account closure, as may be required for AML record-keeping obligations;
• Transaction records — financial transaction data is retained for a minimum of five (5) years from the date of transaction in line with financial record-keeping requirements;
• KYC documentation — identity documents submitted for verification are retained for up to seven (7) years following account closure or as required by applicable law;
• Communications data — support interaction records are retained for up to three (3) years from the date of the interaction;
• Marketing preferences — retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with rapid97's data deletion procedures.

9. Security Measures

rapid97 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the rapid97 Platform;
• AES-256 encryption for all personal data stored at rest in rapid97's database systems;
• Two-factor authentication (2FA) available for all member accounts and mandatory for administrative access;
• Role-based access controls ensuring that rapid97 staff can only access personal data relevant to their specific job function;
• Regular third-party security penetration testing and vulnerability assessments;
• Secure data deletion protocols for personal data reaching the end of its retention period;
• Incident response procedures for identifying, containing, and notifying relevant parties in the event of a data breach.

While rapid97 employs industry-standard security practices, no online platform can guarantee absolute security against all threats. We encourage all members to use strong, unique passwords, enable 2FA, and report any suspicious account activity to our support team immediately at [email protected].

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the rapid97 Platform. They enable the Platform to recognise your device across sessions, remember your preferences, keep you logged in, and support the overall functionality and security of the Platform.

10.2 Types of Cookies We Use

• Strictly necessary cookies — required for core Platform functionality including session management, login authentication, and security. These cannot be disabled;
• Functional cookies — remember your preferences such as language settings, display preferences, and notification preferences;
• Analytics cookies — collect aggregated, anonymised data about how users navigate the Platform to help us improve performance and user experience;
• Session cookies — temporary cookies deleted when you close your browser, used to maintain your session state during a single visit to the Platform.

10.3 Managing Cookies

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies are available in your browser's help section. Continued use of the rapid97 Platform constitutes acceptance of our use of strictly necessary cookies.

11. Your Data Rights

As a rapid97 member and data subject, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting our Data Privacy team via the contact details in Section 14.

12. Minors and Age Restriction

The rapid97 Platform and all associated Services are strictly intended for individuals aged 21 years and above. rapid97 does not knowingly collect or process personal data from individuals under the age of 21.

During registration, all users must declare that they are 21 or older, and rapid97 performs age verification as part of the KYC process. Where rapid97 discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account without delay. Any funds in an underage account will be returned to the originating payment method after identity verification.

13. Changes to This Privacy Policy

rapid97 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how we collect, use, or share your personal data — will be communicated to you by email to your registered address or via a prominent notice on the Platform at least seven (7) days before the changes take effect.

Non-material changes, such as corrections of typographical errors or clarifications that do not alter the substance of our data processing practices, may be made without advance notice. The "Last Updated" date at the top of this page always reflects the date of the most recent revision.

Your continued use of the rapid97 Platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the Platform and contact us to close your account.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the rapid97 Data Privacy team through the following channels:

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. Our support team is available in English, Bahasa Melayu, and Mandarin Chinese to serve all Malaysian members effectively.