Privacy Policy – rft88 Platform

1.Introduction

rft88 ("we", "us", "our") operates the online gaming platform accessible at rft88.app. We are committed to protecting the privacy and personal data of every individual who visits, registers with, or otherwise interacts with the rft88 Platform, whether from Kuala Lumpur, Penang, Johor Bahru, or anywhere else in Malaysia.

This Privacy Policy explains what personal data rft88 collects, why we collect it, how we use and protect it, who we share it with, and what rights you have in relation to your personal data. Please read this Policy carefully. By registering an account or continuing to use the rft88 Platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read together with the rft88 Terms & Conditions. Capitalised terms not defined herein have the meanings ascribed to them in the Terms & Conditions.

2.Personal Data We Collect

rft88 collects personal data in the following categories:

We do not intentionally collect special category data (such as racial origin, health data, or political opinions) unless specifically required by a regulatory obligation and with your explicit consent where required.

3.How We Collect Your Data

rft88 collects personal data through the following means:

• Direct interactions – data you provide when registering an rft88 account, completing KYC verification, making deposits or withdrawal requests, contacting support, or responding to surveys or promotions.
• Automated technologies – technical and usage data collected automatically when you access and use the rft88 Platform, including through cookies, session logs, and server-side analytics.
• Third-party sources – identity verification data from KYC service providers; fraud and risk screening data from anti-fraud partners; payment verification data from payment processors including banks and e-wallet operators.

4.How We Use Your Personal Data

rft88 uses the personal data it collects for the following purposes:

• To register your rft88 account and verify your identity and age eligibility.
• To process deposits, withdrawals, and in-platform transactions in Malaysian Ringgit.
• To operate and personalise your Platform experience, including game recommendations and promotional eligibility assessments.
• To administer promotional bonuses and loyalty programmes and ensure compliance with applicable bonus terms.
• To detect, prevent, and investigate fraud, money laundering, and other prohibited activities.
• To monitor and enforce compliance with our Terms & Conditions and Responsible Gaming policies.
• To communicate with you regarding your account, transactions, Platform changes, and where you have opted in, promotional offers.
• To comply with legal and regulatory obligations, including reporting requirements under applicable anti-money laundering legislation.
• To improve Platform performance, stability, and user experience through aggregated analytics.

rft88 will not use your personal data for any purpose materially different from those listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

5.Legal Basis for Processing

rft88 processes your personal data on the following legal bases:

• Contractual necessity – processing required to perform the member agreement between you and rft88, including account operation, transaction processing, and support provision.
• Legal obligation – processing required to comply with applicable laws and regulations, including KYC, AML, and data retention requirements.
• Legitimate interests – processing for fraud prevention, platform security, product improvement, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent – processing for direct marketing communications where you have provided explicit opt-in consent. You may withdraw consent at any time through your account preferences.

6.Data Sharing & Disclosure

rft88 does not sell your personal data. We may share your data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Game providers – to facilitate game access, session management, and RNG certification audits. Game providers receive only the minimum data necessary to provide their services.
• Payment processors – banks, e-wallet operators (Touch n Go eWallet, Boost), and cryptocurrency service providers to process financial transactions.
• KYC and fraud prevention partners – third-party identity verification and fraud screening services to comply with our regulatory obligations.
• Regulatory and legal authorities – licensing bodies, law enforcement agencies, and courts where disclosure is required by law or is necessary to protect the rights of rft88 or third parties.
• Technology service providers – cloud hosting, platform infrastructure, and security service providers operating under contractual data processing agreements with rft88.

All third-party service providers with whom rft88 shares personal data are required by contract to maintain appropriate security standards and to process data only in accordance with rft88's instructions and applicable law.

7.International Data Transfers

The rft88 Platform is operated from servers located in jurisdictions that may differ from your country of residence. Where personal data is transferred outside of Malaysia, rft88 will implement appropriate safeguards to ensure that your data receives a standard of protection equivalent to that applicable in Malaysia, including contractual data transfer agreements with receiving parties.

By registering an rft88 account, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where necessary to operate the Platform and provide the services described herein.

8.Data Retention

rft88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your membership and for a period thereafter as required by applicable legal, regulatory, accounting, or reporting obligations.

As a general guide:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records are retained for the same minimum five-year period.
• Customer support communications are retained for three (3) years.
• Technical and usage data (logs, session data) is retained for up to twelve (12) months.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with rft88's data disposal procedures.

9.Cookies & Similar Technologies

rft88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies – required for the Platform to function. These include session management cookies that keep you logged in to rft88 during your visit. These cannot be disabled.
• Functional cookies – remember your preferences such as language settings, default stake levels, and display preferences. These improve your Platform experience but are not essential.
• Analytics cookies – collect aggregated, anonymised data about how members use the rft88 Platform, such as which games are most played and which pages are most visited. This data helps us improve the Platform.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality. rft88 does not use cookies to serve third-party advertising on the Platform.

10.Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by rft88:

• Right of access – to request a copy of the personal data rft88 holds about you.
• Right to rectification – to request correction of inaccurate or incomplete personal data.
• Right to erasure – to request deletion of your personal data in circumstances where continued processing is no longer justified, subject to rft88's legal retention obligations.
• Right to restriction – to request that rft88 limits its processing of your personal data in certain circumstances.
• Right to data portability – to receive a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to object – to object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to withdraw consent – where processing is based on your consent (e.g., direct marketing), to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the rft88 Data Protection team via the support channel. rft88 will respond to verified requests within 30 calendar days. Where a request is complex or numerous, the response period may be extended by a further 60 days with notification to you.

11.Security Measures

rft88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and rft88 servers.
• Encryption at rest for all sensitive personal data stored on rft88 infrastructure.
• One-way cryptographic hashing for all account passwords – rft88 personnel cannot access your plaintext password.
• Role-based access controls limiting data access to authorised personnel with a documented operational need.
• Regular penetration testing and security audits by independent cybersecurity specialists.
• Real-time anomaly detection and intrusion prevention systems monitoring Platform infrastructure.

While rft88 takes every reasonable precaution to protect your personal data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your rft88 login credentials and for notifying rft88 support immediately if you suspect unauthorised access to your account.

12.Children's Privacy

The rft88 Platform is strictly intended for adults aged 21 years and above. 21+

rft88 does not knowingly collect personal data from individuals under the age of 21. If rft88 discovers or is informed that personal data has been collected from a person under 21, such data will be immediately deleted and the associated account will be permanently closed. If you are a parent or guardian and believe that a minor has registered with rft88, please contact our support team immediately so that appropriate action can be taken.

13.Third-Party Platform Links

The rft88 Platform may contain references to game providers and payment services operated by third parties. rft88 is not responsible for the privacy practices of any third-party operators or platforms. This Privacy Policy applies only to data collected and processed by rft88 through the rft88 Platform. We encourage you to review the privacy policies of any third-party services you interact with in connection with your rft88 account.

14.Updates to This Privacy Policy

rft88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Any material changes will be communicated to active Members via the registered email address on file and will be published on this page with an updated effective date.

Your continued use of the rft88 Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the updated Policy, please cease using the Platform and contact support to request account closure.

15.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or rft88's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 directly within the rft88 Platform
• Email: [email protected]

For data rights requests specifically, please mark your communication clearly as a "Data Rights Request" and include sufficient information to verify your identity. rft88 will acknowledge receipt of your request and provide a substantive response within 30 calendar days.