Privacy Policy rich1988 – How We Protect Your Data

This Privacy Policy is issued by rich1988 ("we", "our platform") and applies to all users who access or use the rich1988.click website and all related services ("Platform").

We are committed to protecting your privacy and ensuring that the personal information you provide is handled responsibly, transparently, and securely. This Privacy Policy clearly outlines:

• The types of personal information we collect from you.
• The purposes for which we use that information and how.
• Circumstances under which your information may be shared with other parties.
• The security measures we take to protect your information.
• Your rights regarding your personal information.

This Privacy Policy applies to all users of the rich1988 platform in Malaysia. If you are accessing the platform from outside Malaysia, please be aware that data processing will be governed by this Policy regardless of any differences in your local privacy laws.

Rich1988 collects various types of personal information across different contexts. Below is a full breakdown of the information we collect and how it is gathered:

A. Information You Provide Directly:

• Full name as shown on your Malaysian identity card (MyKad).
• National identification number (for KYC processing and age verification).
• Active email address and mobile phone number.
• Date of birth for age verification (must be 18 or above).
• The username and password you chose during registration.
• Bank account or e-wallet information (account number only, not password) for withdrawal processing purposes.
• Identity verification documents uploaded for the KYC process (MyKad copy, proof of address).

B. Automatically Collected Information:

• The IP address of the device used to access the platform.
• Web browser type and operating system version.
• Platform usage data including pages visited, session duration, and in-platform actions.
• Device information, including unique device ID, device model, and language settings.
• General location data (based on IP address, not GPS) for geographic verification.
• Transaction logs include deposit history, withdrawals, and all betting or gaming activity.

Rich1988 uses the personal information collected for the following purposes:

We will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent. If you do not wish to receive marketing communications, you may opt out at any time through your account settings or by contacting us.

Rich1988 processes users' personal data on one or more of the following legal bases:

• Contract Performance: Processing necessary to provide the services you request, including account management, financial transaction processing, and access to games.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, internal analytics, and service improvement — where these interests do not override your rights and freedoms.
• Legal Compliance: Processing required to fulfil legal obligations, including KYC requirements, anti-money laundering (AML) compliance, and reporting to authorities where required by law.
• Consent: For marketing communications and other optional data uses, we rely on your explicit consent. You may withdraw this consent at any time.

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

Rich1988 does not sell users' personal data to any party. However, we may share personal information with the following categories of third parties in limited circumstances:

• Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX. Information shared is limited strictly to what is required to process the transaction.
• Game Provider: Companies providing slots and Live Casino games (such as Pragmatic Play, PG Soft) may receive anonymous session IDs for game processing purposes. This information does not include your full name or personal details.
• KYC Service Provider: Third-party identity verification services used for the KYC process may receive a copy of your identification documents for verification purposes. These providers are bound by strict confidentiality agreements.
• Regulatory Authority: Law enforcement agencies, regulatory bodies, or courts where we are required to do so by law or a valid court order.
• Analytics Services: Analytics services used to understand platform usage receive only anonymised and aggregated data — no information that can directly identify you is shared.

Rich1988 implements multiple layers of technical and operational security to protect users' personal data from unauthorised access, loss, or misuse:

• Data Encryption in Transit: All communications between your browser and our servers are protected with 256-bit TLS/SSL encryption. This means any data transmitted cannot be read by any party that intercepts the communication.
• Stored Data Encryption: Sensitive data stored on our servers, including passwords (hashed using bcrypt) and financial information, is encrypted at rest.
• Access Controls: Only authorised personnel with a legitimate business need may access users' personal data. Access is managed through an identity management system and is subject to regular audits.
• 24/7 Security Monitoring: Our threat detection and intrusion monitoring system watches platform activity around the clock to detect and respond to any suspicious behaviour.
• Regular Security Testing: rich1988 conducts regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Our login system supports two-factor authentication for an added layer of protection against unauthorised access to your account.

While we take all reasonable steps to protect your data, no security system can guarantee 100% protection. You also play an important role in keeping your account secure — particularly by keeping your password confidential and enabling 2FA.

Rich1988 retains users' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law:

• Active Account Data: Retained for the duration your account remains active and in use on the rich1988 platform.
• Data After Account Closure: Upon account closure, core account data is retained for a minimum of 5 years for legal compliance purposes, anti-money laundering (AML) reporting requirements, and to prevent re-registration by banned users.
• Financial Transaction Logs: All financial transaction records are retained for a minimum of 7 years in compliance with financial regulations and tax reporting requirements.
• Live Casino Game Recordings: Live casino game recordings are retained for a minimum of 90 days for dispute resolution purposes.
• Customer Support Communication Data: Customer support communication logs are retained for 2 years after the last interaction.

Once the relevant retention period has expired, your personal data will be securely deleted or permanently anonymised so that it can no longer be associated with you.

Rich1988 uses cookies and similar tracking technologies to enhance user experience, analyse platform usage, and deliver more relevant content. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Preference Cookies: Stores your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics Cookies: We collect anonymous information about how you use the platform to help us understand usage patterns and improve our services. This data is aggregated and contains no personally identifiable information.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect the security of your account.

We also use web pixels and similar technologies embedded in our marketing emails to determine whether emails are opened and links are clicked. You can disable this by opting out of marketing emails or by turning off automatic image loading in your email client.

As a rich1988 platform user, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at support@rich1988.click:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 30 days of your request.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data. However, this right is subject to our legal obligations to retain certain data.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while you are disputing the accuracy of that data.
• Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

We will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by up to 60 days, with prior notice to you. We do not charge for reasonable requests.

The rich1988 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

All users are required to confirm they are aged 18 or above at the point of registration. We also conduct age verification as part of our KYC procedures to ensure ongoing compliance with this requirement.

Rich1988 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to you via:

• An email notice will be sent to your registered email address at least 7 days before any changes take effect.
• A prominent notice on the rich1988 platform homepage.
• Update the "Last Updated" date at the top of this document.

Continued use of the rich1988 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you disagree with any changes made, you have the right to close your account and request deletion of your personal data (subject to applicable legal retention obligations) before the changes take effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Email: support@rich1988.click
• Response Time: Within 48 working hours for general enquiries; 30 calendar days for formal data rights requests.
• Website: rich1988.click

When contacting us regarding a data rights request, please clearly state the type of request (access, correction, deletion, etc.) and provide sufficient information for us to verify your identity before processing the request. This identity verification step is essential to protect your data from unauthorised access.