1 Introduction & Rojak99's Privacy Commitment
Rojak99 is a leading online entertainment platform operating exclusively for Malaysian users, offering a wide range of gaming categories including slots, Live Casino, Sports Betting, badminton, e-sports and match odds. In operating this platform, Rojak99 needs to collect and process certain personal data to ensure services run smoothly, securely and in line with each member's needs.
This Privacy Policy is designed to explain clearly and transparently to all users — whether registered or simply browsing the site — what types of data we collect, the purposes for which it is collected, how we store and protect it, and the rights you hold over your own personal data.
Rojak99 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations currently in force. We take this responsibility seriously and continually update our data protection practices in line with the latest legal and technological developments.
2 Types of Personal Data We Collect
Rojak99 collects your personal data through various means as you interact with our platform. The following are the categories of data we collect:
Registration & Account Data:
- Full name as shown on your identity card or passport.
- National identity card number (MyKad) or passport number for identity verification.
- An active email address and a Malaysian phone number.
- Date of birth for minimum age verification of 18 years.
- Username and encrypted password (we do not store passwords in plain text).
Financial Data:
- Deposit and withdrawal transaction records including date, time and amount in Malaysian Ringgit (MYR).
- Supported payment methods: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks.
- Relevant bank account details for withdrawal purposes — account numbers are encrypted and never displayed in full.
Usage & Activity Data:
- Betting and gaming history, including Sports Betting (Malaysia Super League, EPL, badminton, NBA), slots, Live Casino and e-sports.
- Login records including time, date and IP address.
- Records of interactions with the customer support team.
- Game preferences and account settings selected by the user.
Technical Data:
- IP address and general geolocation information.
- Device type, operating system and web browser used.
- Cookie data and similar tracking technologies.
- Error logs and platform technical performance data.
| Data Categories | Primary Purpose | Retention Period |
|---|---|---|
| Registration Data | Identity verification, account management | For the duration of the active account + 7 years |
| Financial Data | Transaction processing, AML, audit | 7 years from the date of transaction |
| Gaming Activity Data | Responsible gaming support, analytics | 3 years from the date of activity |
| Technical Data | Security, troubleshooting | 12 months |
3 Purposes for Data Collection and Processing
Rojak99 only collects and processes your personal data for the following legitimate and necessary purposes:
- Account management: Creating, verifying and managing your member account, including the mandatory KYC (Know Your Customer) process.
- Transaction processing: Processing deposits and withdrawals through available Malaysian payment methods at Rojak99.
- Service delivery: Enabling access to all Rojak99 products including slots, Live Casino, Sports Betting, badminton, e-sports and match odds.
- Security & fraud prevention: Detecting and preventing fraud, money laundering, unauthorised access, and platform abuse.
- Legal compliance: Meeting our obligations under Malaysia's PDPA 2010, anti-money laundering laws (AMLA), and applicable licensing regulations.
- Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to members who need it.
- Service communications: Sending important notifications related to your account, transactions, policy updates and security information.
- Platform improvement: Analysing aggregated, anonymised usage data to improve Rojak99's products and user experience.
4 Data Sharing with Third Parties
Rojak99 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in order to operate the platform securely and in compliance with applicable laws, we may share your data with the following limited categories of third parties:
- Payment providers: Digital wallet and banking service providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and banks supporting FPX — solely for the purpose of processing your financial transactions.
- Game providers: Gaming software providers that supply slots, live casino, and other games on Rojak99 receive only the minimum session data necessary for game operations.
- Legal authorities: Malaysian government agencies, law enforcement bodies or courts where we are required to do so by law, court order or in the context of financial crime investigations.
- Technical service providers: Hosting, cybersecurity and analytics companies that support Rojak99's platform operations — all bound by strict confidentiality agreements.
In all of the data sharing scenarios described above, Rojak99 ensures that the relevant third parties maintain adequate data protection standards and use the data solely for the specified purposes.
5 Data Security & Protection Measures
Rojak99 takes the security of your data very seriously. We implement multiple layers of technical and operational safeguards to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
- 256-bit SSL Encryption: All communications between your browser and Rojak99's servers are encrypted using the latest TLS/SSL protocols, ensuring that data in transit cannot be intercepted by third parties.
- Data encryption at rest: Sensitive data such as financial information and identity details is encrypted at rest within our database using the latest industry-standard encryption protocols.
- Internal access controls: Only Rojak99 staff who require access to specific data within the scope of their role are permitted to do so — the "need to know" principle is strictly enforced.
- 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts and anomalies in data access patterns.
- Regular security audits: Penetration testing and independent security audits are conducted on a regular basis to identify and address vulnerabilities before they can be exploited.
- Two-factor authentication (2FA): Available to all Rojak99 members as an additional security layer to protect account access.
While we take all reasonable steps to protect your data, no system can be guaranteed to be one hundred percent secure. In the event of a data breach affecting your information, we will notify you in accordance with Malaysia's PDPA legal requirements within the stipulated timeframe.
6 Cookie Policy & Tracking Technologies
Rojak99 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and maintain the security of your login session. The types of cookies used are:
- Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting the basic functionality of the Rojak99 platform.
- Preference Cookies: Saving your preference settings such as language, time zone and display preferences so you do not need to reconfigure them each time you log in.
- Analytics Cookies: Collecting aggregated, anonymised usage data to help us understand how users interact with the Rojak99 platform and identify areas for improvement.
- Security Cookies: Detecting unauthorised access attempts, monitoring suspicious login patterns, and protecting your account from attacks.
You can manage your cookie preferences through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some areas of the Rojak99 platform.
7 Your Rights Regarding Personal Data
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Rojak99's privacy policy, you have the following rights in relation to your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
- Right to Rectification: If any of your personal data is inaccurate or out of date, you have the right to request an immediate correction.
- Right to Withdraw Consent: For data processing based on consent (such as marketing communications), you may withdraw your consent at any time.
- Right to Object: You have the right to object to the processing of your personal data for specific purposes, within the limits permitted by law.
- Right to Opt Out of Marketing Communications: Unsubscribe from all Rojak99 marketing communications via the link in any email or through your account settings.
To exercise any of the rights above, contact our privacy team at support@rojak99.click with the subject line "Data Privacy Request" along with the details of your request. We will respond within 14 business days.
8 Children's Privacy & Minor Users
The Rojak99 platform is NOT suitable and NOT designed for children or individuals under the age of 18. We do not knowingly collect personal data from anyone under the age of 18. All account registrations require age verification, and Rojak99 enforces strict age checks through our KYC process.
Should we discover that personal data has been inadvertently collected from a minor, we will promptly delete that data and close the account in question. Parents or guardians who become aware that their child has registered an account on Rojak99 should contact us immediately at support@rojak99.click.
9 Cross-Border Data Transfers
In certain operational circumstances, your personal data may be processed or stored by service providers operating outside Malaysia — for example, cloud service providers or international game providers. Rojak99 ensures that any such data transfer:
- Only takes place with countries or entities that provide adequate data protection.
- Protected by strict data processing agreements (DPA) between Rojak99 and the relevant providers.
- Complying with Malaysia's PDPA requirements and all relevant data protection legislation.
- Limited to the minimum data necessary for the specified operational purpose only.
10 Changes to This Privacy Policy
Rojak99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or platform operations. You will be notified of any significant changes via an in-platform notice or an email to your registered address at least 14 days before the changes take effect.
Your continued use of the Rojak99 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically. The "last updated" date at the top of this page indicates when this Privacy Policy was last revised.
If you have any questions, concerns, or requests regarding your data privacy at Rojak99, please do not hesitate to contact us at support@rojak99.click. Our Bahasa Malaysia-proficient team is available to assist you 24 hours a day, 7 days a week.