Rft88 Privacy Policy – Personal Data Protection for Malaysian Players

Rft88 ("we", "platform" or "rft88.ws") takes your privacy seriously. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you use the rft88 platform – including the website, mobile app and all related services we provide.

This document has been drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and reflects rft88's commitment to responsible, transparent, and ethical data management. We believe your trust is our most valuable asset, and we will never compromise it.

By registering an rft88 account or continuing to use any of our services, you confirm that you have read and understood this Privacy Policy and agree to how we handle your personal data as described herein.

Rft88 collects your personal information through several methods – either information you provide directly, or data collected automatically as you use our platform.

We not collect sensitive information such as biometric data, medical records, or religious/political affiliations, except where specifically required by applicable Malaysian law.

The personal data we collect is used solely for the following purposes:

• Account management: Creating, verifying, and managing your rft88 account, including the login process and identity verification (KYC).
• Transaction processing: Processes deposits and withdrawals in MYR via local payment methods including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks).
• Service provision: Provides access to all rft88 games, including Live Casino, slots, Sports Betting (Malaysia Super League, EPL), e-sports, and Virtual Sports.
• Service communications: Sending important notifications regarding your account, transactions, changes to terms, and security updates.
• Marketing communications: Sending information about rft88 promotions, bonuses, and exclusive offers – only if you have consented to receive them.
• Platform improvements: Analysing usage patterns to improve the user experience, identify technical errors, and develop new features.
• Fraud prevention: Detecting and preventing fraudulent activity, multi-account usage, money laundering, and other security breaches.
• Legal compliance: Fulfilling obligations under Malaysian law, including PDPA 2010 and any directives issued by the relevant authorities.

Rft88 does not sell your personal data to any party. However, under certain circumstances, we may need to share your information with the following parties:

• Payment service provider: Payment processors that facilitate your deposit and withdrawal transactions, including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow operators, and FPX-participating banks. They receive only the minimum information necessary to process your payment.
• Game provider: Companies such as Evolution Gaming, Pragmatic Play, Microgaming and others may receive basic gameplay data for technical purposes and game fairness audits.
• Lawful authorities: rft88 will disclose data when required by court order, direction from a Malaysian law enforcement agency, or a relevant regulatory authority.
• Technical service provider: Companies providing IT infrastructure, cybersecurity and analytics services to rft88, bound by strict confidentiality agreements.

Rft88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction:

• 256-bit SSL/TLS Encryption for all data communications between you and rft88's servers.
• Encrypted password storage using one-way hashing algorithms that cannot be decrypted.
• Two-factor authentication (2FA) available and encouraged for all rft88 accounts.
• 24/7 security monitoring by our cybersecurity team to detect suspicious activity.
• Regular security audits by independent parties to identify and address system vulnerabilities.
• Strict internal access controls – only authorised personnel may access user data, and only to the extent required for their role.
• Data backups that are encrypted and stored in a secure location to ensure data recovery in the event of a technical incident.

While we take all reasonable steps to protect your data, no online system can be guaranteed 100% secure. We therefore encourage you to take personal security measures as well, such as using a strong password and keeping your login credentials confidential.

Rft88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality such as login sessions and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the rft88 platform to help us improve our services. All data is collected anonymously.
• Functional Cookies: Saves your preferences such as favourite game types, display settings and language choice for a more personalised experience.
• Targeting Cookies: Used to show you relevant promotions and advertisements based on your interests and usage patterns on the rft88 platform.

You can manage your cookie preferences through your web browser. However, disabling certain cookies may affect the functionality of some parts of the rft88 platform.

Rft88 retains your personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations:

• Active account data: Retained for the duration of your active account on the rft88 platform.
• Financial transaction data: Retained for minimum 7 years after a transaction, in line with Malaysia's financial reporting and anti-money laundering requirements.
• Game history data: Retained for 5 years for audit, dispute resolution, and regulatory compliance purposes.
• Log & Security Data: Retained for 2 years for security incident investigation purposes.
• Following account closure: Data required for legal compliance will be retained for the period prescribed by law, while all other data will be securely deleted.

As a rft88 user and a Malaysian citizen or resident, you have the following rights under the Personal Data Protection Act 2010 (PDPA) Malaysia:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you.
• Right to Rectification: You may request us to amend or update any personal data that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data (subject to our legal obligations).
• Right to Withdraw Consent: You may withdraw consent given for the processing of your data at any time, without affecting the validity of any processing already carried out.
• Right to Object: You may object to the processing of your data for direct marketing purposes.

To exercise any of the rights above, please contact the rft88 data protection team by email at support@rft88.ws. We will respond to your request within 14 business days.

In certain situations, your personal data may be transferred to or processed in other countries, particularly when international gaming service providers such as Evolution Gaming or Pragmatic Play — which operate across multiple global locations — are involved.

• Rft88 ensures that all cross-border data transfers comply with the requirements of Section 129 of the Malaysia PDPA.
• We only transfer data to countries or organisations that provide an equivalent level of protection with Malaysian standards.
• Legally binding data transfer agreements are established with all data recipients outside Malaysia.

The rft88 Platform exclusively for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If you are a parent or guardian and believe your underage child has registered an account on rft88, please contact us immediately at support@rft88.ws. We will investigate and close the account immediately, and promptly delete all associated data.

Rft88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When changes are made:

• The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent update.
• For significant changes, we will notify you via in-platform notifications or email us at the registered address.
• Continued use of the rft88 platform after changes are published will be considered acceptance of the updated policy.

We encourage you to review this page periodically to stay informed about how rft88 protects your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how rft88 handles your personal data, please contact us via:

• Email: support@rft88.ws
• Live Chat: Available 24/7 via the rft88 platform
• FAQ: Visit the page FAQ us for answers to frequently asked questions

The rft88 data protection team will respond to all enquiries within 3 working days. For user rights requests (access, correction, deletion), please provide sufficient information for us to verify your identity before we process the request.