Privacy Policy — RichCity88

Introduction

This Privacy Policy ("Policy") is issued by RichCity88 ("the Platform", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from individuals ("you", "your", "Player", "User") who access or use the RichCity88 online casino and sports betting platform available at richcity88.cam.

RichCity88 is committed to handling your personal data responsibly, transparently, and in accordance with the data protection standards required under the jurisdiction in which we hold our international gaming licence. We take the privacy of our Players seriously — including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" — any information relating to an identified or identifiable natural person ("Data Subject"), including name, identification number, contact details, financial information, location data, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data; in this context, RichCity88 is the Data Controller for all Player data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of RichCity88, under contractual obligation and subject to this Policy.
• "Cookies" — small text files stored on your device by a web browser upon visiting a website, used to retain session information, preferences, and usage data.
• "KYC Data" — Know Your Customer documentation including identity documents, proof of address, and selfie photographs submitted for account verification purposes.

Data We Collect

RichCity88 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically during your use of our services, and in limited circumstances from trusted third-party sources used for verification purposes.

3.1 Registration Data

When you create a RichCity88 account, we collect the following information:

• Full legal name as it appears on your official identification document
• Date of birth (to verify that you are aged 21 or above)
• Residential address, including city and postcode (e.g., Petaling Jaya, Selangor or Johor Bahru, Johor)
• Email address and, where provided, mobile phone number
• Chosen username and hashed password (passwords are never stored in plain text)
• Preferred currency (Malaysian Ringgit / MYR by default)

3.2 KYC Verification Data

To comply with our licensing obligations, we collect and verify:

• A copy of your valid government-issued photo identification — Malaysian MyKad, driver's licence, or passport
• Proof of residential address, such as a utility bill or bank statement issued within the preceding three months
• A self-taken photograph (selfie) holding your identification document
• Where applicable, documentary evidence of the source of funds used for deposits

3.3 Financial and Transaction Data

We collect transactional data related to deposits and withdrawals made using payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT:

• Deposit and withdrawal amounts in Malaysian Ringgit (MYR) or cryptocurrency
• Payment method type, account identifiers (e.g., e-wallet number or bank account last four digits), and transaction reference numbers
• Timestamps and IP addresses at the time of financial transactions

3.4 Usage and Technical Data

When you access and use the Platform, we automatically collect:

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser version
• Session duration, pages visited, games played, and betting activity
• Login timestamps and access logs
• Cookie and similar tracking technology data (see Section 8)

3.5 Communications Data

When you contact our support team via Live Chat, WhatsApp, or email at [email protected], we retain records of those communications, including message content, timestamps, and any attachments, solely for the purposes of resolving your enquiry and improving our service quality.

Data Processing

RichCity88 processes your personal data for the following specific purposes. We process only the minimum data necessary for each purpose and do not use personal data for purposes incompatible with those for which it was originally collected.

4.1 Account Administration

We process your registration data to create and maintain your Player account, authenticate your identity upon each login, and manage your account settings and preferences. This processing is necessary to fulfil our contractual obligations to you as a registered Platform user.

4.2 Payment Processing and Financial Management

Your financial and transaction data is processed to facilitate deposits — including via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks — and to process withdrawal requests. All payment data is transmitted using encryption standards appropriate to financial data.

4.3 Identity Verification and KYC Compliance

KYC data is processed to verify your identity, confirm that you are at least 21 years of age, and comply with anti-money laundering obligations imposed by our licensing jurisdiction. This processing is a legal obligation we cannot waive, and failure to complete KYC verification will prevent withdrawal processing.

4.4 Fraud Prevention and Platform Security

We process usage, technical, and transaction data to detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other conduct prohibited under our Terms & Conditions. This processing is carried out in our legitimate interests and those of all Players to maintain a fair and secure gaming environment.

4.5 Service Personalisation and Communication

With your consent or in pursuance of our legitimate interests, we may process usage data to personalise your in-Platform experience, including game recommendations and relevant promotional offers. We will communicate with you via email or in-Platform notifications regarding account matters, security alerts, and promotional content where you have not opted out of marketing communications.

4.6 Responsible Gambling Monitoring

We process betting activity, deposit patterns, and session data to monitor for signs of problem gambling behaviour and to enforce responsible gambling tools including deposit limits, session controls, and self-exclusion where appropriate. This processing reflects our duty of care to all Players and our licensing obligations.

Legal Basis for Processing

RichCity88 processes personal data on one or more of the following lawful bases, consistent with international data protection standards applicable in our licensing jurisdiction:

• Contractual Necessity: Processing required to perform our obligations under the Player Agreement established upon account registration, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with legal and regulatory requirements including KYC, anti-money laundering obligations, and record-keeping requirements imposed by our gaming licence.
• Legitimate Interests: Processing carried out for the purposes of fraud prevention, platform security, responsible gambling monitoring, and service quality improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as the legal basis for processing (such as for optional marketing communications), you retain the right to withdraw consent at any time without affecting the lawfulness of any prior processing.

Data Sharing & Third-Party Disclosure

RichCity88 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data in limited, controlled circumstances as described below.

6.1 Service Providers and Data Processors

We engage trusted third-party service providers who process data on our behalf under binding contractual obligations that prohibit them from using your data for any purpose other than providing services to RichCity88. These include payment processing partners supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking integrations; identity verification and KYC technology providers; fraud detection and cybersecurity vendors; and hosting and cloud infrastructure providers.

6.2 Regulatory and Legal Disclosure

We may disclose personal data to competent regulatory authorities, law enforcement agencies, or other governmental bodies where we are required to do so by applicable law, court order, or binding regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal obligation and will notify you where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of the RichCity88 business or its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such an event, we will provide reasonable notice prior to any such transfer and will ensure the receiving entity is bound by a privacy policy that offers equivalent or greater protection to this Policy.

Data Retention

RichCity88 retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal, regulatory, and licensing obligations. The retention periods applicable to each category of personal data are set out in the table in Section 3.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised or aggregated data that can no longer be linked to any individual may be retained indefinitely for statistical and service improvement purposes.

Where you request deletion of your personal data under your rights described in Section 10, we will assess your request against our retention obligations. Where we are required by law or regulatory obligation to retain certain data, we will inform you accordingly and retain that data in a restricted-access environment until the obligation is satisfied.

Cookies & Tracking Technologies

RichCity88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that enable our systems to recognise your browser and provide a personalised experience.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function, including session management, authentication, and security. These cannot be disabled without impairing Platform functionality.
• Preference Cookies: Used to remember your settings and preferences, such as language selection and display preferences.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players use the Platform, enabling us to identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security Cookies: Used to detect fraudulent activity, authenticate users, and protect the Platform from malicious access attempts.

8.2 Managing Cookies

Most web browsers allow you to manage cookies through your browser settings, including the ability to refuse or delete cookies. Please be aware that disabling certain categories of cookies may impair your ability to access some features of the Platform, including maintaining your login session. Instructions for managing cookies are available in the help documentation for your specific browser.

Security Measures

RichCity88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard Transport Layer Security protocols.
• Data Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted in storage using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular security training.
• Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection and prevention systems.
• Vulnerability Testing: We conduct periodic security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication on their accounts as an additional layer of security.

Despite our extensive security measures, no system of data transmission or storage can be guaranteed to be 100% secure against all possible threats. We encourage all Players to use strong, unique passwords for their RichCity88 accounts, to enable two-factor authentication, and to report any suspected unauthorised access to our support team immediately.

User Rights

Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by RichCity88. To exercise any of these rights, please contact our support team using the contact details in Section 14.

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed. We will respond to verified access requests within a reasonable timeframe, typically within 30 days of receipt.

10.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For certain data types, such as your email address or registered address, you may be able to update this directly through your account settings.

10.3 Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (in cases where consent is the legal basis), or where you object to processing and there are no overriding legitimate grounds. Please note that we may be required by law or our licensing obligations to retain certain data regardless of such a request, in which case we will inform you of the applicable retention period.

10.4 Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, pending verification, or where processing is unlawful but you prefer restriction over erasure.

10.5 Right to Object

Where we rely on our legitimate interests as the legal basis for processing, you have the right to object to that processing. We will cease processing upon receipt of your objection unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

10.6 Right to Withdraw Consent

Where we rely on your consent as the legal basis for any processing activity (such as optional marketing communications), you may withdraw that consent at any time by contacting our support team or using the unsubscribe option in any marketing communication. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to withdrawal.

Minors and Age-Restricted Services

RichCity88 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to KYC age verification to enforce this requirement.

If we become aware that personal data has been submitted by or on behalf of a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by our regulatory obligations, and report the matter to relevant authorities where required.

If you are a parent or guardian and believe that a minor under your care has registered on or accessed the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

International Data Transfers

RichCity88 operates internationally and may transfer your personal data to countries other than Malaysia for storage, processing, or service delivery purposes. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as Malaysia or your country of residence, we take appropriate safeguards to ensure that your data remains protected.

Safeguards we apply to international data transfers include contractual data processing agreements with all third-party recipients that incorporate standard data protection clauses, and selection of service providers who maintain recognised security certifications and data protection frameworks.

By using the RichCity88 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia in accordance with this Policy.

Amendments to This Policy

RichCity88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this Policy, we will notify registered Players by posting a prominent notice on the Platform and, where appropriate, by sending a notification to your registered email address.

The updated Policy will take effect from the "Last Updated" date stated at the top of this document. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the amended Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Archived versions of previous policies are available upon request from our support team.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or the exercise of your data rights, please contact the RichCity88 Data and Privacy team through any of the following channels:

• Email: [email protected] — please mark your subject line "Privacy Request" for prioritisation
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform — please state "Privacy Enquiry" at the start of your conversation
• Support Languages: English, Bahasa Melayu, and Mandarin

We aim to respond to all privacy-related enquiries and data subject access requests within 30 days of receipt. For complex or multi-faceted requests, we may require up to 60 days, in which case we will notify you of the extended timeline within the initial 30-day period.

Please note that we will verify your identity before processing any data rights request to ensure that we do not disclose your personal data to any unauthorised third party. Please be prepared to provide sufficient identifying information to enable us to locate your records.