Rapid97 Privacy Policy – Data Protection for Malaysian Users

1Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how rapid97 ("we", "our platform") collects, uses, stores, protects, and discloses personal information you provide when using the rapid97.best website and all related services. This document takes effect from 1 January 2026.

Rapid97 is committed to handling your personal data with full responsibility. We operate in accordance with internationally recognised data protection principles, including data minimisation, lawful purpose, limited retention, and adequate security. Every aspect of data handling at rapid97 is designed to respect the privacy of our members.

This Policy applies to all information collected through:

• The registration process and account management for rapid97 members
• Use of all features and services on the rapid97 platform
• Financial transactions including deposits and withdrawals in MYR
• Interactions with the rapid97 customer support team
• Participation in promotions, bonuses, and loyalty programmes
• Visiting and using the rapid97.best website

2Types of Personal Information We Collect

Rapid97 collects various types of personal information depending on how you interact with our platform. We only collect data that is genuinely necessary to provide you with a safe and reliable service.

Information you provide directly:

• The username you chose during registration
• A Malaysian phone number registered in your name
• Password (stored in encrypted form — we cannot view your actual password)
• Identity information for KYC purposes such as full name and identification card number (when required)
• Payment method details such as your Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay account numbers, or FPX details
• Any information you share when contacting rapid97 customer support

Automatically collected information:

• IP address and general location information (state or city)
• Device type, operating system, and web browser used
• Platform usage data including pages visited, matches watched, and time spent
• Betting history and financial transaction records for record-keeping and regulatory purposes
• Cookie and session data as described in Section 6
• Technical error logs for troubleshooting and platform improvement purposes

3How We Use Your Personal Information

Every piece of data collected by rapid97 has a clear and legitimate purpose. We do not use your data for anything unrelated to platform operations without your explicit consent.

Primary purposes for data use:

• Account management: Verifying your identity, processing your registration, and enabling secure access to your rapid97 account
• Financial transaction processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as withdrawal of winnings in MYR
• Service delivery: Enabling you to use all platform features including Sports Betting, Live Casino, slots, and all other sections
• Security and fraud prevention: Detecting suspicious activity, preventing the use of duplicate accounts, and ensuring platform integrity
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance to members
• Service communications: Sending important notices about your account, transactions, changes to terms, and security updates
• Legal compliance: Fulfilling KYC (Know Your Customer) requirements and applicable legal obligations
• Platform improvements: Analysing usage patterns to improve the design, features, and performance of the rapid97 platform

We may use your information to send marketing communications about rapid97 promotions and offers, but only if you have given your consent to receive them. You may withdraw this consent at any time through your account settings or by contacting our customer support.

4Data Sharing & Disclosure to Third Parties

Rapid97 does not sell, rent, or trade members' personal information to third parties for marketing purposes. This is a fundamental principle we do not compromise on. However, there are limited situations where we may need to share your information:

Trusted service providers:

• Payment providers: Required transaction information shared with eWallet providers and FPX to process your deposits and withdrawals in MYR
• Game providers: Required game session details are shared with licensed casino providers such as Evolution Gaming and Pragmatic Play to operate the games
• Cloud and infrastructure services: Data is stored and processed on servers managed by infrastructure providers that have signed strict data protection agreements with rapid97
• Analytics services: Non-identifiable usage data is used to analyse platform performance and improve the user experience

All third-party service providers working with rapid97 are bound by contractual agreements requiring them to protect your data and prohibiting its use beyond the permitted scope.

Legally mandated disclosure:

Rapid97 may be required to disclose your personal information when mandated by Malaysian law or a valid court order — for example, in investigations involving financial crime or money laundering. In such circumstances, we disclose only the minimum information necessary and will notify you where possible, unless prohibited from doing so by a court order.

5rapid97 Data Security & Protection Measures

Rapid97 invests seriously in security infrastructure to ensure every member's personal data is protected at all times. Our security approach is multi-layered — there is no single point of vulnerability that could compromise the entire system.

Technical security measures:

• 256-bit SSL/TLS encryption for all communications between your browser and rapid97 servers
• Passwords are stored using a one-way hashing algorithm that cannot be reversed — no one at rapid97 can ever see your actual password
• Two-factor authentication (2FA) via SMS OTP for all logins and financial transactions
• Real-time account activity monitoring to detect unusual login patterns
• Multi-layered web application firewall (WAF) to protect against cyberattacks
• Network segmentation that isolates sensitive data servers from the platform's front-end components
• Regular encrypted data backups stored at geographically separate locations

Organisational security measures:

• Access to member personal data is strictly limited to staff who require it solely to carry out their job responsibilities
• All staff with access to sensitive data undergo background checks and comprehensive data security training
• Internal security audits are conducted quarterly and independent external audits are carried out annually
• A clear and tested incident response procedure to address data breaches should they occur

While rapid97 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. You play an important role too — keep your rapid97 account password unique and strong, never share your login credentials with anyone, and always log out on shared devices.

6Cookies, Sessions, & Tracking Technologies

Rapid97 uses cookies and similar tracking technologies to enhance your experience on our platform. This is standard practice in the digital services industry.

Types of cookies we use:

• Essential cookies: Required for core platform functionality, such as maintaining your login session and processing transactions. These cookies cannot be disabled as the platform will not function without them.
• Performance cookies: Collecting information on how visitors use the platform — which pages are visited most often and where users may encounter issues. This data is used to improve the platform and is collected in aggregate without identifying individuals.
• Functional cookies: Saving your preferences such as selected language, display layout, and other personal settings to provide a more personalised experience each time you log in to rapid97.
• Session cookies: Session cookies that expire when you close your browser. Used to maintain your login status during an active session.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies will affect your ability to use the rapid97 platform fully — including the login process and financial transactions.

7Cross-Border Data Transfers

To deliver the best platform experience, some data may be processed or stored on servers located outside Malaysia. This applies primarily to:

• Cloud infrastructure supporting the rapid97 platform
• Licensed international casino game providers whose servers may be located in other jurisdictions
• International payment processing systems supporting Malaysian eWallets

When your data is processed outside Malaysia, rapid97 ensures that such transfers are safeguarded through contractual agreements requiring data protection standards equivalent to or higher than those applied in Malaysia. We only work with partners who adhere to internationally recognised data protection practices.

Under all circumstances, the personal data of Malaysian members will not be transferred to jurisdictions that lack adequate data protection mechanisms without your explicit consent.

8Member Rights Regarding Personal Data

As a rapid97 member, you have the following rights regarding your personal data. We respect and facilitate the exercise of all these rights:

To exercise any of the rights above, please contact the rapid97 customer support team at support@rapid97.best. Include your account username and specify which right you wish to exercise. We will verify your identity before processing any data request to protect the security of your account.

9Personal Data Retention Period

Rapid97 retains your personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law.

• Active account data: Retained for the duration your account remains active and for an additional period following account closure as specified below
• Financial transaction history: Retained for a minimum of 7 years to comply with anti-money laundering laws and financial record requirements in Malaysia
• Customer support communication logs: Retained for 2 years to allow reference in the event of recurring issues
• KYC data (identity verification documents): Retained for 5 years after account closure in accordance with legal compliance requirements
• Technical log data: Retained for 90 days for technical troubleshooting and security purposes
• Cookie data: Session cookies expire when you close your browser; persistent cookies expire after a set period (typically 30 days to 1 year)

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised so it can no longer be linked to you. The deletion process uses methods that ensure the data cannot be recovered.

10Children's Privacy & Protection of Minors

Rapid97 is an entertainment platform restricted to individuals aged 21 and above only. We do not knowingly collect or process personal information from individuals under the age of 21.

During the registration process, you are required to confirm that you are 21 years of age or older. rapid97 may request proof of age through a KYC process at any time. If we find that false information was provided regarding age, or if we confirm that a user is under 21, the account will be closed immediately and all related data will be deleted.

If you are a parent or guardian and believe your child under the age of 21 has registered an account with rapid97, please contact us immediately at support@rapid97.best. We will investigate and take prompt action, including closing the account and deleting all associated data.

11Changes to This Privacy Policy

Rapid97 may update this Privacy Policy from time to time to reflect changes in how we operate, new legal requirements, or improvements to our data protection practices. We are committed to notifying you of any material changes.

When material changes are made to this Policy, we will:

• Sending an email notice to the address registered with your rapid97 account at least 7 days before the changes take effect
• Displaying a clear notice on the rapid97 platform homepage throughout the notice period
• Updating the "Last Updated" date at the top of this Policy

Non-material changes (such as spelling corrections, language clarifications, or formatting updates) may take effect immediately without notice. Continued use of the rapid97 platform after the effective date of any material change constitutes acceptance of the updated policy.

If you do not agree with any changes made to this Privacy Policy, you have the right to close your account before the changes take effect. Please contact rapid97 customer support for assistance with this process.

12Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how rapid97 handles your personal data, our team is available 24 hours a day, 7 days a week.

For privacy-related enquiries, please contact us via:

• Email: support@rapid97.best — please include "Privacy Enquiry" in the subject line for prompt routing to the relevant team
• Response time: We are committed to responding to all privacy enquiries within 48 hours on business days
• Service language: Bahasa Malaysia, English, and Mandarin

For data rights requests (access, correction, deletion, etc.), please include your rapid97 account username and full details of your request. We may require additional identity verification before processing the request to safeguard your account security.

Rapid97 takes every privacy-related complaint seriously. Each complaint will be thoroughly investigated and resolved, and you will receive a response detailing the action taken.