Privacy Policy — Ringgit88

This Privacy Policy ("Policy") is issued by Ringgit88 ("Company", "Platform", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://ringgit88.cam ("the Platform"). This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Ringgit88 is committed to protecting and respecting your privacy. We operate the Platform in compliance with applicable data protection legislation and industry best practices. Our platform is designed to serve the Malaysian market and serves registered players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions of Malaysia.

By registering a Player Account, accessing the Platform, or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not create an Account or use the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including but not limited to name, identification number, location data, online identifiers, or factors specific to the physical, physiological, economic, or social identity of that person.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, combination, restriction, erasure, or destruction.
• "Data Controller" means Ringgit88, which determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of Ringgit88 pursuant to a written agreement and under our instructions.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your wishes by which you agree to the processing of Personal Data relating to you.
• "Cookies" means small text files placed on your device by a website to store information about your browsing behaviour, preferences, and session state.
• "KYC Data" means identity verification documents and information collected as part of our Know Your Customer process, including government-issued identity documents, proof of address, and payment method verification materials.
• "Services" means all gaming, betting, payment processing, customer support, and related services offered by Ringgit88 through the Platform.

Ringgit88 collects Personal Data from you in several ways: directly from you when you register or use the Platform, automatically through technical systems as you interact with the Platform, and from third parties where legally permitted. The categories of data we collect are as follows:

3.1 Registration and Account Data

When you create a Player Account, we collect the information you provide during the registration process, including your full name, date of birth, email address, mobile phone number, and chosen username. This data is necessary to create and maintain your Account.

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) obligations and to verify player age in accordance with our strict 21+ policy, we collect copies of government-issued identity documents (such as a Malaysian MyKad, passport, or driving licence), proof of residential address, and where applicable, documentation confirming ownership of the payment methods linked to your Account.

3.3 Financial and Transaction Data

We collect records of all financial transactions associated with your Account, including deposits, withdrawals, bonus credits, and wager history. Payment method details — such as bank account numbers linked to FPX or DuitNow transactions, e-wallet identifiers for Touch 'n Go eWallet, Boost, or GrabPay, and masked card or cryptocurrency wallet addresses — are recorded in accordance with our payment processing obligations.

3.4 Gaming and Betting Activity Data

We record your gaming and betting activity on the Platform, including game session data, bet amounts, game outcomes, sports betting selections, and time and duration of gaming sessions. This data is used to provide our Services, to administer responsible gambling tools, and to comply with regulatory reporting obligations.

3.5 Device and Technical Data

When you access the Platform, our systems automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, screen resolution, referring website, pages visited, and session timestamps. This data helps us maintain Platform security and optimise the user experience.

3.6 Communications Data

We retain records of all communications between you and Ringgit88, including live chat transcripts, email correspondence, and support ticket histories. This data is retained for quality assurance, dispute resolution, and regulatory compliance purposes.

We use the Personal Data we collect for the following specific purposes. The table below maps each processing activity to its corresponding purpose and legal basis:

Ringgit88 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing that is necessary to enter into or fulfil our contractual obligations to you under the Terms and Conditions, including account management, payment processing, and provision of gaming Services.
• Legal Obligation: Processing that is required for compliance with our legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and regulatory reporting requirements under applicable gaming licence conditions.
• Legitimate Interests: Processing undertaken in pursuit of our legitimate business interests, provided that those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, platform security monitoring, and internal analytics for service improvement purposes.
• Consent: Processing that is based on your freely given, specific, and informed consent. Consent-based processing includes sending marketing and promotional communications. You may withdraw your consent at any time by contacting our support team or updating your communication preferences within your Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Ringgit88 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your Personal Data with third parties only in the specific circumstances described below:

6.1 Service Providers and Data Processors

We engage trusted third-party service providers to perform certain functions on our behalf, including payment processing infrastructure (supporting FPX, DuitNow, e-wallet integrations), KYC identity verification services, cloud hosting and data storage providers, fraud detection and AML screening platforms, and customer support tooling. All such providers are engaged under written data processing agreements that restrict their use of your data to the provision of services on our behalf and impose security standards consistent with our own obligations.

6.2 Regulatory and Legal Disclosure

We may be required to disclose Personal Data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction in response to lawful requests, court orders, or regulatory requirements. Such disclosures are made only to the extent required by law and, where permissible, we will endeavour to notify you of any such disclosure requirement.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Ringgit88's assets, your Personal Data may be transferred to the relevant successor entity. We will provide notice of any such transfer and ensure that the successor entity is bound by privacy obligations consistent with this Policy.

Ringgit88 uses cookies and similar tracking technologies to operate the Platform effectively, improve your user experience, and maintain security. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core functionality including session management, login state maintenance, and security token validation. The Platform cannot function without these cookies and they cannot be disabled.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, session duration, and technical error events. This data helps us identify and resolve issues and improve Platform performance.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and previously selected options, to personalise your experience on the Platform.
• Session Cookies: Temporary cookies that expire when you close your browser. These are used to maintain the continuity of your gaming or betting session.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair Platform functionality. By continuing to use the Platform, you consent to our use of cookies as described in this section.

Ringgit88 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to our legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your Account's active status and for a minimum period of five (5) years following Account closure, to meet anti-money laundering record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of collection, or longer where required by applicable regulatory licence conditions.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• Gaming and Betting Activity Logs: Retained for a minimum of three (3) years, or longer where required for dispute resolution or regulatory audit purposes.
• Support Communications: Retained for three (3) years from the date of the last relevant interaction, or as required for ongoing dispute resolution.
• Marketing Consent Records: Retained until you withdraw consent or for three (3) years from the date of consent, whichever is sooner.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the resulting data set no longer constitutes Personal Data and may be retained indefinitely for analytical purposes.

Ringgit88 implements comprehensive technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, and disclosure. Our security framework includes the following measures:

• Encryption: All data transmitted between your device and the Platform is encrypted using TLS 1.3. Personal Data stored on our servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All internal access to Personal Data is logged, monitored, and subject to regular audit review.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation technologies.
• Two-Factor Authentication: Player Accounts are eligible for two-factor authentication (2FA) to provide an additional layer of protection against unauthorised login attempts.
• Penetration Testing: Our platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: Ringgit88 maintains a documented data breach incident response plan. In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within the timeframes required by applicable law.

While we implement robust security measures, no system is entirely impenetrable. You are responsible for maintaining the security of your Account login credentials and should contact our support team immediately if you suspect any unauthorised access to your Account.

Subject to applicable law and any overriding legitimate interests or legal obligations, you hold the following rights in respect of your Personal Data processed by Ringgit88. To exercise any of these rights, please contact our support team using the details provided in Section 15 of this Policy.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how we use it.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain categories of data (such as AML transaction records).
• Right to Restrict Processing: You have the right to request that we restrict our processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to Data Portability: You have the right to receive a copy of the Personal Data you have provided to us in a structured, commonly used, machine-readable format, and to request that we transfer this data to another service provider where technically feasible.
• Right to Object: You have the right to object to our processing of your Personal Data where processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to verified rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days with notification to you. There is no fee for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive.

The Ringgit88 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Our KYC process includes mandatory age verification procedures to enforce this requirement.

If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will take immediate steps to delete that data from our systems, close the associated Account, and forfeit any associated balances in accordance with our Terms and Conditions and applicable regulatory obligations.

Parents and guardians who have reason to believe that a minor has registered on the Platform or provided us with Personal Data should contact our support team immediately at [email protected] (plain text — not a clickable link) so that we can take appropriate action without delay.

The Ringgit88 Platform may incorporate or link to services provided by third parties, including payment gateways supporting FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay integrations, as well as gaming content provided by licensed international game studios. These third-party services operate under their own privacy policies and data processing terms, which are independent of this Policy.

Ringgit88 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party service providers whose services you use in connection with the Platform. Our engagement with third-party Data Processors is governed by written agreements that impose data protection obligations consistent with our own standards.

Ringgit88 operates as an international gaming platform and may process and store your Personal Data on servers located outside of Malaysia. Where Personal Data is transferred to jurisdictions that may not provide the same level of data protection as Malaysia, we will take appropriate measures to ensure that your Personal Data remains adequately protected.

Such measures may include entering into standard contractual clauses with data recipients, ensuring that recipients are located in jurisdictions with adequate data protection frameworks, or obtaining your explicit consent to the transfer where required.

All international data transfers are conducted in strict compliance with applicable data protection legislation and are subject to the same security standards that apply to data processed within Malaysia.

Ringgit88 reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. All amendments will be published on this page with an updated "Last Updated" date.

Where changes are material — meaning they significantly affect how we process your Personal Data or the rights you hold — we will provide prominent notice on the Platform and, where practicable, email notification to registered Players. Your continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the revised terms.

We recommend that you review this Policy periodically to remain informed of how we protect your Personal Data. Where you do not agree with any amended terms, you should discontinue use of the Platform and contact our support team to request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Ringgit88, you may contact us through the following channels. We treat all privacy-related enquiries with the utmost seriousness and will respond within the timeframes set out in Section 10 of this Policy.

Privacy Enquiries: [email protected] (plain text — not a clickable link)

Live Chat Support: Available 24 hours a day, 7 days a week via the Ringgit88 Platform. Our support agents are based in Malaysia and target a first-response time of under 90 seconds.

When submitting a privacy-related request, please include your registered email address and Account username to allow us to verify your identity and process your request efficiently. We may request additional verification information for certain categories of rights requests, particularly where disclosure of Personal Data is involved.