Rich1988 Privacy Policy — Malaysia Personal Data Protection

Rich1988 ("we", "platform" or "the Company") is the data controller responsible for all personal data collected from members and users of the rich1988.biz platform. We take this responsibility seriously and are committed to protecting your privacy at all times.

This Privacy Policy has been drawn up in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and outlines:

• The types of personal data we collect from you.
• The purpose and legal basis for each type of data processing.
• The parties who may receive your data and the circumstances under which they may do so.
• Data retention periods and the security measures we have in place.
• Your rights regarding your personal data and how to exercise them.

This Privacy Policy covers all Rich1988 services, including online slots, Sports Betting spanning the Malaysia Super League, BWF World Tour badminton and the EPL, Live Casino with real dealers, progressive jackpots, e-sports, lottery, and all other services offered through our platform.

Rich1988 collects your personal data through various means — directly when you register or submit information, automatically as you use the platform, and in some cases through legitimate third parties. Below is a detailed breakdown of the types of data we collect:

Identity & Contact Data collected during the account registration process and identity verification (KYC) process. This includes your full name, identification card number, date of birth, Malaysian mobile number, and email address.

Financial Data collected when you make a deposit or request a withdrawal using local Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u and CIMB Clicks. Rich1988 does not store your full credit or debit card details — all transactions are processed through a secure, PCI-DSS compliant payment gateway.

Technical & Activity Data collected automatically as you use the platform. This helps us identify technical issues, prevent fraud, and improve your overall user experience.

Rich1988 only uses your personal data for lawful and necessary purposes. Below is a detailed explanation of each purpose for which data is used and its legal basis under PDPA 2010:

• Service Provision: Identity and contact data is used to create and manage your account, process deposits and withdrawals, grant access to all games and Sports Betting on Rich1988, and send important account-related notifications.
• Identity Verification (KYC): Rich1988 is legally required under regulatory and financial regulations to verify member identities in order to prevent fraud, money laundering, and use of the platform by underage individuals. This KYC process is a legal requirement, not optional.
• Payment Processing: Financial data is used to process your deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, and to process withdrawal of winnings to the account you have registered.
• Security & Fraud Prevention: Technical data and activity are used by Rich1988's security systems to detect and prevent fraudulent activity, multiple account use, automated bots, and other security threats that could compromise the integrity of the platform and harm the interests of all members.
• Responsible Gambling: Your gaming activity history allows Rich1988 to monitor gameplay patterns and identify members who may benefit from responsible gambling support. This forms part of our social commitment.
• Marketing Communications: With your consent, Rich1988 may use your email address and phone number to send you information about new promotions, bonuses, and exclusive offers. You can unsubscribe from marketing communications at any time through your account settings.
• Platform Improvement: Anonymised usage data is used to understand how members use our platform, identify areas for improvement, and develop new features relevant to Malaysian users.

Rich1988 does not sell, rent, or share members' personal data with third parties for their own marketing or commercial purposes. However, in the course of operating our platform, there are specific situations where we may need to share your data with trusted parties:

• Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, we are required to share the necessary transaction information with the respective payment service providers. All such providers are bound by strict data protection agreements.
• Game Software Providers: Game providers such as Pragmatic Play, PG Soft, and Evolution Gaming may receive the minimum technical data required to run games on our platform. They do not receive your personal identity information.
• KYC & Verification Services: To verify member identities as required under Malaysian law, we use a licensed third-party identity verification service that is fully compliant with the PDPA.
• Legal Authorities: Rich1988 will disclose personal data to the relevant authorities (such as the police, consumer commission, or courts) if lawfully required to do so under Malaysian law through the proper legal process.
• Professional Advisors: Our lawyers, accountants, and auditors, who are bound by professional confidentiality obligations, may access certain data solely for the purpose of legal or financial advice.

All third parties that receive your data are required to process it in accordance with Rich1988's instructions and are bound by data processing agreements compliant with Malaysia's PDPA 2010. They are not permitted to use your data for any other purpose.

Rich1988 continually invests in technical and organisational security infrastructure to ensure your personal data is always protected against unauthorised access, loss, destruction, or accidental disclosure.

Technical security measures we have implemented:

• 256-bit SSL encryption for all data transmitted between the platform and your device.
• Passwords are stored using a one-way hashing algorithm that cannot be reversed — meaning even Rich1988 staff are unable to view your actual password.
• Round-the-clock 24/7 security monitoring by automated threat detection systems.
• Role-based access control — only authorised staff have access to specific data based on their job responsibilities.
• Regular independent security testing and audits to identify and address any vulnerabilities.
• Regular data backups stored at a separate, secure location.

Data Retention Period: Rich1988 retains your personal data for as long as your account remains active and for the period required after account closure under Malaysian law. Financial transaction data is retained for a minimum of 7 years in accordance with accounting and financial legal requirements. Data that is no longer needed will be securely deleted or anonymised.

Like most digital platforms, Rich1988 uses cookies and similar tracking technologies to ensure the platform functions properly, enhance the user experience, and understand how our platform is used. The types of cookies we use are as follows:

You can manage and delete cookies through your web browser settings. Please note, however, that disabling or blocking certain cookies may affect the functionality of the Rich1988 platform and your gaming experience.

As a Rich1988 member and as an individual in Malaysia protected under PDPA 2010, you have a range of rights concerning your personal data. Rich1988 is committed to making it easy for you to exercise these rights:

The Rich1988 platform is strictly for adults aged 18 and above. We do not knowingly collect, process, or store any personal data of individuals under the age of 18.

Should we become aware that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to:

• Closing the account in question immediately.
• Delete all personal data collected from that individual.
• Returning any outstanding financial balance to the original payment method.
• Reporting incidents to the relevant authorities when required.

If you discover that someone under the age of 18 has been using the Rich1988 platform, please contact us immediately at support@rich1988.biz so that we can take the appropriate action without delay.

The Rich1988 platform may contain links or references to third-party websites or services — for example, game provider websites or payment service providers. This Privacy Policy applies solely to the Rich1988 platform and does not cover the privacy practices of any such third-party websites.

Rich1988 is not responsible for the content, privacy policies, or practices of any third-party websites you may access through links on our platform. We encourage you to read the privacy policy of every website you visit, especially before providing any personal information.

Rich1988 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new Malaysian legal requirements, or the expansion of our platform services.

When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this document.
• Displaying a prominent notice on the Rich1988 platform homepage for a minimum period of 14 days.
• Sending email notices to all registered members to inform them of important changes.

We encourage you to review this Privacy Policy page periodically. Your continued use of the Rich1988 platform after any amendments are published will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how Rich1988 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Data Protection Email: support@rich1988.biz
• Live Chat: Available 24/7 directly on the Rich1988 platform — responses are typically received in under 5 minutes.
• WhatsApp: Reach us via the WhatsApp link available on the platform's support page.

We will acknowledge receipt of any privacy enquiry within 48 working hours and aim to provide a full response within 14 working days. For more complex requests, this period may be extended to 30 days, with prior notice given to you.

We prefer to resolve any privacy concerns directly with you. However, if you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia, which is the regulatory authority for the PDPA 2010.