rich888 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by rich888 ("the Company", "rich888", "we", "us", "our") in connection with the operation of the online gaming platform accessible at rich888.vu (the "Platform"), including all related services, mobile applications, and communications.

This Policy applies to all registered Members of the rich888 Platform, as well as visitors who access the Platform without registering. It covers personal data collected through the website, the rich888 Android application, live chat, email correspondence, and any other interaction with the Company.

By registering an account on rich888, depositing funds, or otherwise using the Platform, you consent to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should not use the rich888 Platform.

2. Data Controller

rich888 acts as the data controller in respect of the personal data of its Members and Platform users. As data controller, rich888 determines the purposes and means by which personal data is processed. rich888 operates under international gaming authority oversight and processes personal data in compliance with applicable data protection regulations and licensing requirements.

For all data protection enquiries, please contact the rich888 data protection team at the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

rich888 collects personal data from you in the following categories:

3.1 Registration and Identity Data

• Full legal name;
• Date of birth (for age verification purposes — strict 21+ requirement);
• Registered phone number;
• Email address (where provided);
• Username and encrypted password;
• Residential address (where required for KYC verification).

3.2 Financial and Transaction Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, bank account details for FPX transactions, cryptocurrency wallet addresses for USDT transactions);
• Account balance history;
• Bonus and promotion redemption records.

3.3 Gaming Activity Data

• Betting history across all product categories (Sportsbook, Live Casino, Slots, Arcade);
• Game session duration and frequency data;
• Wagering amounts and win/loss records;
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status).

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Login timestamps and session data;
• Cookies and similar tracking technologies (see Section 10).

3.5 Communications Data

Records of your communications with rich888 customer support, including live chat transcripts and email correspondence, are retained for quality assurance, training, and dispute resolution purposes.

4. How We Use Your Personal Data

rich888 uses the personal data we collect for the following purposes:

• Account administration: Creating and maintaining your rich888 member account, verifying your identity and age, and providing access to all Platform services;
• Payment processing: Executing deposits, withdrawals, and bonus transactions in MYR through your chosen payment method;
• Service delivery: Providing sports betting, live casino, slots, and arcade gaming services as requested by you;
• Legal and regulatory compliance: Meeting Know Your Customer (KYC), Anti-Money Laundering (AML), and age verification obligations under applicable gaming regulations;
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Platform;
• Responsible gaming: Monitoring gaming activity to identify problem gambling patterns, enforcing deposit and loss limits, and administering self-exclusion requests;
• Customer support: Responding to enquiries, resolving disputes, and improving support quality;
• Platform improvement: Analysing aggregated usage data to improve the Platform's performance, features, and user experience;
• Communications: Sending account-related notifications, security alerts, and — where you have opted in — promotional communications regarding rich888 offers.

5. Legal Basis for Processing

rich888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the rich888 Terms and Conditions — including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with KYC, AML, age verification, and other regulatory obligations applicable to our gaming licence;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring where these interests do not override your fundamental rights;
• Consent: Processing for marketing communications, where you have explicitly opted in to receive such communications from rich888.

6. Data Sharing and Third Parties

rich888 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

• Payment providers: Transaction data shared with payment processors (including Touch 'n Go, Boost, GrabPay, DuitNow, FPX banking partners, and USDT infrastructure providers) to execute your deposit and withdrawal instructions;
• Game providers: Minimum necessary session data shared with certified game providers (including live casino studio operators and RNG game developers) to deliver gameplay services;
• KYC and compliance services: Identity and document data shared with third-party identity verification providers where required to satisfy KYC obligations;
• Regulatory authorities: Data disclosed to gaming regulatory authorities or law enforcement agencies where required by applicable law or court order;
• Technology service providers: Technical data processed by cloud infrastructure, cybersecurity, and analytics service providers operating under data processing agreements with rich888.

All third-party service providers with whom rich888 shares personal data are contractually required to handle that data securely and in accordance with applicable data protection standards.

7. International Data Transfers

The operation of the rich888 Platform may involve the transfer of personal data to countries outside of Malaysia, including to cloud server infrastructure and game provider systems located in other jurisdictions. Where such transfers occur, rich888 implements appropriate safeguards to ensure that your personal data is protected to a standard equivalent to that required under applicable data protection law, including the use of contractual data protection clauses with receiving entities.

8. Data Retention

rich888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory retention obligations. In general:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements;
• Transaction and financial records are retained for a minimum of seven (7) years;
• Customer support communications are retained for three (3) years from the date of the interaction;
• Technical and session logs are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Security Measures

rich888 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rich888 servers;
• One-way cryptographic hashing of all account passwords — passwords are never stored in readable form;
• Device verification and anomaly detection on account login events;
• Access controls restricting personal data access to authorised rich888 personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform's infrastructure;
• Incident response procedures for detecting and responding to data security events.

While rich888 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely secure. You are responsible for maintaining the security of your account credentials and for notifying rich888 immediately of any suspected unauthorised access.

10. Cookies and Tracking Technologies

The rich888 Platform uses cookies and similar technologies to deliver and improve our services. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function — authentication tokens, session identifiers, and security cookies. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and login status to improve your experience;
• Analytics cookies: Aggregated, anonymised data on how members use the Platform, used to improve performance and content.

You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will impair the functionality of the rich888 Platform, including your ability to log in and maintain an authenticated session.

11. Your Rights as a Data Subject

Subject to applicable law and regulatory constraints (including AML and gaming licence retention obligations), you have the following rights in relation to your personal data held by rich888:

• Right of access: You may request a copy of the personal data rich888 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where there is no legal basis for its continued processing, subject to legal retention obligations;
• Right to restriction: You may request that processing of your data be restricted in certain circumstances;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on legitimate interests in certain circumstances.

To exercise any of the above rights, please contact the rich888 data team as described in Section 14. We will respond to all valid requests within thirty (30) days. We may need to verify your identity before processing your request.

12. Children and Minors

The rich888 Platform is strictly for individuals aged 21 years and older. rich888 does not knowingly collect personal data from individuals below the age of 21. If you believe that a person under 21 has registered an account or provided personal data to rich888, please contact us immediately at the details in Section 14. Upon verification, rich888 will delete the relevant data and close the account without delay. Age verification is conducted as part of the KYC process, and accounts where the age requirement cannot be confirmed will be suspended pending resolution.

13. Changes to This Privacy Policy

rich888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. The "Last Updated" date at the top of this Policy will be revised accordingly. Where changes are material, rich888 will provide advance notice to Members via their registered email address or through an in-platform notification. Your continued use of the rich888 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

14. Contact and Data Enquiries

For all data protection enquiries, access requests, rectification requests, or complaints regarding rich888's handling of your personal data, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the rich888 Platform after login at rich888.vu/rich888-login

For responsible gaming concerns or self-exclusion requests, please refer to our dedicated Responsible Gaming page. For general terms of service, see our Terms & Conditions.