Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by Rilex77 ("we", "us", "our", "the Platform") and sets out the basis on which personal data collected from users ("Player", "you", "your") of the website at https://rilex77.cam will be processed, stored, and protected.

Rilex77 is an online casino and sports betting platform primarily serving users in Malaysia, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We take the privacy of our players seriously and are committed to handling your personal information with care, transparency, and respect.

By registering an account on the Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, email address, mobile number, identity document number, IP address, and payment details;
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction;
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is Rilex77;
• "Data Subject" — the natural person to whom the personal data relates, i.e., you, the registered player;
• "Third Party" — any person or entity other than you and Rilex77, including payment service providers, identity verification agencies, and analytics service providers;
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose;
• "KYC" — Know Your Customer; identity verification procedures required prior to processing withdrawals or in compliance with applicable regulations.

3 Data Controller

Rilex77 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, Rilex77 is responsible for determining how and why your personal data is processed.

Rilex77 operates under international online gaming licensing arrangements. The Platform does not hold any Malaysian government-issued gaming or data processing licence — no such framework currently applies to international online gaming operators in Malaysia. Players are responsible for understanding the data protection laws applicable in their own jurisdiction.

For all data protection enquiries, you may contact Rilex77 at: [email protected]. We respond to all data-related queries within 14 calendar days.

4 Data We Collect

Rilex77 collects the following categories of personal data in connection with the provision of our services:

5 How We Collect Your Data

Rilex77 collects personal data through the following means:

6 Legal Basis & Purpose of Processing

Rilex77 processes your personal data only where we have a lawful basis to do so. The following table sets out the primary purposes of processing and the legal basis relied upon for each:

7 Data Sharing & Disclosure

Rilex77 does not sell, rent, or otherwise transfer your personal data to third parties for commercial marketing purposes. We may, however, share your data with carefully selected third parties in the following circumstances:

• Payment Service Providers: We share payment-related data with providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfer processors (Maybank, CIMB, Public Bank, Hong Leong) solely to facilitate the processing of your deposits and withdrawals;
• Identity Verification Providers: Your KYC documents may be shared with third-party identity verification services engaged by Rilex77 to fulfil our verification obligations. These providers are bound by strict data processing agreements;
• Fraud Prevention Services: Where necessary to detect or prevent fraudulent activity or money laundering, we may share relevant data with specialist screening services;
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive;
• Group Entities: Where Rilex77 operates through related entities, limited data sharing may occur within the corporate group for consolidated reporting, security, and operational purposes, subject to equivalent data protection standards;
• Service Providers: Third-party providers who assist with IT infrastructure, hosting, analytics, and customer support operations may process your data on our behalf, under data processing agreements that prohibit independent use of your data.

Where data is transferred to third parties outside the jurisdiction in which Rilex77 is licensed, we take reasonable steps to ensure that equivalent levels of data protection are maintained through contractual safeguards.

8 Data Retention

Rilex77 retains your personal data for only as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory obligations. Our general retention principles are as follows:

• Active Account Data: Retained for the duration of your account relationship with Rilex77 and for a period of five (5) years following account closure, unless a longer period is required by law;
• Transaction Records: Financial transaction data is retained for a minimum of seven (7) years from the transaction date to satisfy our anti-money-laundering and financial record-keeping obligations;
• KYC Documents: Identity verification documents are retained for a period of at least five (5) years following your last transaction or account closure, whichever is later;
• Support Communications: Live chat logs and email correspondence are retained for up to three (3) years for quality assurance and dispute resolution purposes;
• Cookie and Technical Data: Session cookies are deleted at the end of each browsing session. Analytical cookies and technical logs are retained for up to 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in such a way that it can no longer be linked to you as an individual.

9 Cookies & Tracking Technologies

The Rilex77 Platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and gather aggregated analytics data. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load balancing identifiers. You cannot opt out of these cookies while using the Platform;
• Functional Cookies: Store your preferences such as language settings, game display options, and last-used payment method. These improve the usability of your account;
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, including which pages are visited most frequently and how long sessions last. This helps us improve the Platform over time;
• Security Cookies: Used to detect and prevent fraudulent login attempts, multiple account activity, and unusual session behaviour.

You can manage or disable non-essential cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

10 Security Measures

Rilex77 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including identity documents, payment credentials, and KYC records;
• Access controls limiting personal data access to authorised personnel on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of Platform infrastructure;
• Two-factor authentication (2FA) available for player account login;
• Automatic session timeout for inactive sessions to reduce the risk of unauthorised access;
• Segregation of player funds from operational funds at the banking level.

11 Your Rights as a Data Subject

Subject to applicable law and our legitimate interests (including fraud prevention and legal compliance obligations), you have the following rights with respect to your personal data held by Rilex77:

To exercise any of the rights listed above, please submit a request to [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days, in which case we will notify you accordingly.

Please note that some rights may be limited where exercising them would conflict with our legal obligations — for example, we are required to retain certain KYC and transaction records for prescribed minimum periods regardless of deletion requests.

12 Children's Privacy

The Rilex77 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that we have inadvertently collected personal data from an underage individual, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has created an account on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13 Third-Party Services & Links

The Rilex77 Platform may contain references to or integrations with third-party payment services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong. When you interact with these services — for example, by initiating a deposit or withdrawal — you are also subject to the privacy policies of those third-party providers.

Rilex77 is not responsible for the privacy practices of third-party services, payment providers, or any other external platforms. We encourage you to review the privacy policies of any third-party service before providing them with your personal data.

14 Amendments to This Policy

Rilex77 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide reasonable prior notice by posting a notice on the Platform or, where contact details are available, via email.

Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of those changes. The Effective Date at the top of this page indicates when the current version was last updated. We recommend reviewing this Policy periodically.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Rilex77, please contact us through the following channels:

• Email: [email protected] — mark your message as "Privacy Enquiry" for prioritised routing;
• Live Chat: Available 24/7 via the Platform. Average response time: 3–5 minutes;
• Languages Supported: Bahasa Melayu, Mandarin Chinese, and English.

For account-related requests including data access or deletion, please be prepared to verify your identity before we can process your request. This is to ensure that personal data is disclosed or actioned only to the authorised account holder.