rojak99 Privacy Policy

1. Introduction and Scope of Application

This Privacy Policy is published by rojak99 ("we", "Platform") and applies to all users who register an account, use our services or browse the rojak99.best website ("Website"). By continuing to use this Website, you acknowledge that you have read, understood and agreed to the terms set out in this Privacy Policy.

This policy covers all data processing activities carried out by rojak99, including account registration, deposits and withdrawals, participation in slot games, live casino, sports betting, virtual sports and arcade games, as well as any communications with our support team.

2. Personal Information We Collect

In providing our services, rojak99 collects several categories of personal information from users. All data collection is carried out lawfully, fairly and transparently.

We only collect information that is necessary and relevant to the stated purposes. You are not required to provide information beyond what is requested in the official registration form.

3. How We Use Your Information

The personal information collected is used solely for legitimate purposes as stated below. We do not use your data for any other purpose without first obtaining your consent.

• Verifying your identity and ensuring your account is secure from unauthorised access.
• Processing deposits via Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay and cryptocurrency, as well as withdrawals within 5–30 minutes.
• Delivering account-related notifications, promotions, bonuses and relevant service updates.
• Conducting monitoring to detect fraudulent activity, money laundering or platform misuse.
• Fulfilling legal obligations under the international licensing we comply with.
• Supporting responsible gambling programmes, including risk assessment and player protection measures.
• Improving our products and services based on feedback and usage patterns analysed in aggregate and anonymised form.

4. Lawful Basis for Data Processing

Every personal data processing activity we carry out is based on one or more of the following grounds:

• Contract: Processing is necessary to fulfil the service agreement between you and rojak99, including account management and financial transactions.
• Legal Obligation: We are required by law and licensing requirements to retain certain records and carry out identity verification procedures.
• Legitimate Interests: We process data for platform security, fraud prevention and service improvement — balancing these interests against your privacy rights.
• Consent: For optional marketing communications and non-essential cookies, we obtain your explicit consent beforehand.

5. Use of Cookies and Tracking Technologies

The rojak99 Website uses cookies and similar technologies to ensure core functions work properly, analyse traffic patterns and personalise your experience. Cookies are divided into two main categories:

• Essential Cookies: Required for login session authentication, transaction security and website navigation. These cookies cannot be disabled without affecting the core functions of the platform.
• Analytical and Preference Cookies: Used to understand how users interact with the platform for improvement purposes. You can manage these cookies through your web browser settings.

We do not use cookies to track your activity on external websites without your knowledge. For more information on managing cookies, please use the privacy settings function in your web browser.

6. Sharing Data with Third Parties

rojak99 does not sell your personal information. Data sharing only takes place in limited circumstances as follows:

• Payment Service Providers: Required data is shared with payment processors such as Touch 'n Go, DuitNow and FPX services to enable your deposit and withdrawal transactions to be processed securely.
• Game Platform Providers: Game session information is shared with licensed game providers to ensure games run smoothly and fairly.
• Statutory Authorities: We will disclose information to the relevant authorities when required by law or a valid court order.
• Identity Verification Services: Your KYC information is shared with licensed identity verification service providers to ensure compliance with anti-money laundering requirements.

All third parties with whom we share data are bound by strict confidentiality agreements and are required to protect your information to a standard equivalent to this policy.

7. Data Retention Period

rojak99 only retains your personal information for as long as it is needed to fulfil the original purpose of collection or to meet legal and regulatory obligations. The general principles we follow are as follows:

• Active account data is retained for as long as your account is active and for the period required afterwards for record-keeping and audit purposes.
• Financial transaction records are retained in accordance with the minimum legal requirements applicable under our licensing.
• Customer support communication logs are retained for service improvement purposes and historical reference.
• Technical log data is retained for the period required for security and fraud detection purposes.

When data is no longer needed, we will securely delete it or anonymise it so that it can no longer be personally associated with you.

8. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) and the international licensing standards we comply with, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the rojak99 support team via live chat or email. We will process your request promptly. Please note that certain rights may be subject to legal obligations that prevent us from fulfilling requests in full in all circumstances.

9. Technical and Organisational Security Measures

We implement adequate technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or accidental disclosure. These measures include:

• Data encryption during transmission using the latest TLS/SSL protocols.
• Password storage using strong cryptographic hashing methods.
• Role-based access control for internal staff.
• Continuous security monitoring and an established incident response process.
• Regular security audits by independent third parties.
• Data security training for all staff who handle user data.

In the event of a data security incident affecting your rights or freedoms, we will notify you and the relevant authorities within the timeframes required by law.

10. How to Contact Us About Privacy

If you have any questions, concerns or complaints about how rojak99 handles your personal data, you can contact us through the following channels:

• Live Chat: Direct support is available 24 hours a day, 7 days a week via the live chat icon on the Website.
• Email: [email protected]

Our team is ready to assist in Bahasa Melayu and English. We are committed to taking every privacy-related enquiry seriously and responding within a reasonable time.

11. Amendments to This Privacy Policy

rojak99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business operations, legal requirements or industry standards. All material amendments will be communicated through:

• A prominent notice on the main page of the Website or on this Privacy Policy page.
• Email notifications to registered users for significant changes.

The "Updated" date at the top of this page will always reflect the latest version of this policy. Continued use of the Website after an amendment notice is considered your acceptance of the updated terms.