1988rich Privacy Policy

This Privacy Policy ("Policy") sets out the practices of 1988rich ("the Company", "we", "us", or "our") with respect to the collection, use, storage, disclosure, and protection of personal data belonging to users ("you", "the Player", or "the Data Subject") of the online gaming and sports betting platform operated at https://1988rich.cam ("the Platform").

1988rich operates as a digital entertainment platform targeting adult players throughout Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. The Platform provides live casino games, slots, sports betting (including Liga Super Malaysia, English Premier League, and UFC markets), esports wagering, and associated loyalty and promotional programmes. The provision of these services requires the collection and processing of certain personal data as described in this Policy.

By creating an account on the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data in accordance with the terms set out herein. This Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform as a whole.

If you have any questions about how 1988rich handles your personal data, please contact our data team at [email protected] before using the Platform. This Policy may be updated periodically; the current version will always be published on this page with the date of the most recent revision.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identity card numbers, contact details, financial information, and device identifiers.
• "Data Controller" means 1988rich, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party engaged by 1988rich to process personal data on our behalf, such as payment service providers, KYC verification vendors, and cloud infrastructure operators.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, transmission, combination, restriction, erasure, or destruction.
• "KYC Data" means identity verification documentation submitted by a Player, including copies of national identity cards (MyKad), passports, utility bills, bank statements, and selfie verification images.
• "Gaming Data" means records of a Player's activity on the Platform, including session history, bet and wager records, game outcomes, deposit and withdrawal transactions, and bonus activity.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which you consent to the processing of your personal data for a specified purpose.
• "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, analytics, preferences storage, and fraud detection.

1988rich collects personal data in the following categories, depending on your level of interaction with the Platform:

We do not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or political opinions) except where you voluntarily disclose such information in the course of a responsible gambling support interaction, in which case it is handled with heightened protection and used only for the purpose of providing appropriate support.

1988rich collects personal data through the following channels and methods:

4.1 Direct Collection from You

The majority of personal data we hold is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal request, submit a support enquiry, participate in a promotion, or update your Account profile. You are under no obligation to provide this data, but certain data is a prerequisite for accessing the Platform's services.

4.2 Automated Technical Collection

When you access the Platform, our servers and associated tracking technologies automatically collect certain technical data including your IP address, device fingerprint, browser configuration, operating system, pages visited, session duration, and clickstream data. This data is collected for the purposes of security monitoring, fraud detection, performance optimisation, and service analytics.

4.3 Payment Service Providers

When you transact via Malaysian payment channels — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect — the respective payment service providers transmit transaction confirmation data to 1988rich to enable deposit crediting and withdrawal processing. The scope of data shared is limited to what is necessary to complete the transaction and verify its origin.

4.4 Third-Party KYC Vendors

1988rich may engage licensed third-party KYC verification service providers to assist with identity document validation and age verification. These providers process your KYC documents under contractual data processing agreements that require them to maintain equivalent data protection standards to those described in this Policy.

4.5 Cookies and Tracking Technologies

Please refer to Section 10 of this Policy for a full description of our use of cookies, web beacons, and related tracking technologies.

1988rich processes your personal data for the following specific and legitimate purposes:

• Account Registration and Management: To create, verify, maintain, and administer your 1988rich Account, including processing login authentication, managing Account settings, and maintaining your gaming history and loyalty tier status.
• KYC Identity Verification and Age Verification: To fulfil our obligation to verify that all Players are 21 years of age or older and to confirm identity as required by our operating compliance standards. The 21+ age restriction is a fundamental requirement of the Platform.
• Payment Processing: To process deposit and withdrawal transactions via Malaysian e-wallets (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX bank transfers, direct bank transfers, and cryptocurrency channels (USDT TRC20, Bitcoin). Financial data is processed only to the extent necessary to complete transactions accurately and securely.
• Fraud Prevention and Security: To monitor for suspicious activity, detect and prevent fraud, identify money laundering indicators, investigate prohibited conduct, and protect the security of the Platform and its users. This includes automated transaction monitoring and IP-based anomaly detection.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, provide technical assistance, and maintain records of our communications with you for quality assurance and regulatory purposes.
• Regulatory and Compliance Obligations: To comply with applicable gaming compliance requirements, anti-money laundering obligations, KYC standards, and any lawful request from competent regulatory or law enforcement authorities.
• Personalisation and Platform Improvement: To customise your experience on the Platform based on your game preferences and betting history, and to analyse aggregate usage data for the purpose of improving Platform performance, features, and game offerings.
• Marketing Communications (with consent): To send promotional offers, bonus notifications, and product updates to Players who have explicitly opted in to receive marketing communications. You may withdraw this consent at any time through your Account settings or by contacting support.
• Responsible Gambling: To monitor gaming patterns that may indicate problematic gambling behaviour, to administer deposit limits, session controls, and self-exclusion requests, and to provide appropriate responsible gambling support as described in our Responsible Gambling Policy.

For each category of personal data processing, 1988rich relies on one or more of the following lawful bases:

1988rich does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data may be disclosed to third parties only in the following circumstances and to the extent strictly necessary for the stated purpose:

7.1 Payment Service Providers

To process deposits and withdrawals, 1988rich shares relevant financial data with payment processors including Touch 'n Go eWallet, Boost eWallet, GrabPay, DuitNow network participants, Financial Process Exchange (FPX) member banks, and cryptocurrency processing services. These providers act as independent data controllers in relation to their own processing activities under their respective privacy policies.

7.2 KYC and Identity Verification Vendors

Where we engage third-party KYC service providers to verify identity documents and age, your KYC Data is transmitted to these vendors under binding data processing agreements. These vendors are prohibited from using your data for any purpose other than the verification services contracted by 1988rich.

7.3 IT Infrastructure and Cloud Providers

1988rich operates on cloud and managed hosting infrastructure provided by reputable third-party technology vendors. These providers may have incidental access to personal data in the course of providing infrastructure services, and are contractually bound to process such data only on our documented instructions.

7.4 Legal and Regulatory Authorities

1988rich may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by law, where necessary to protect the rights, property, or safety of the Company or its users, or where required in connection with the investigation or prosecution of fraud or other criminal activity.

7.5 Corporate Transactions

In the event of a merger, acquisition, business transfer, or insolvency of the Company, personal data held by 1988rich may be transferred to a successor entity as part of that transaction, subject to the successor's obligation to maintain equivalent data protection standards.

1988rich retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of the Account relationship and for a period of 5 years following Account closure or last activity, to satisfy compliance, fraud prevention, and dispute resolution obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or Account closure, whichever is later, in accordance with applicable anti-money laundering record-keeping standards.
• Financial Transaction Records: Retained for 5 years from the date of each transaction to satisfy financial compliance and audit requirements.
• Gaming Activity Records: Retained for 5 years from the date of the relevant gaming session or transaction.
• Customer Support Correspondence: Retained for 3 years from the date of the last interaction in the relevant support thread, or longer where the correspondence relates to an unresolved dispute or legal matter.
• Technical and Log Data: Typically retained for 12 months for security monitoring and forensic investigation purposes, after which it is aggregated or deleted.
• Marketing Preference Records: Retained for the duration of the marketing relationship and for 3 years following withdrawal of consent, to maintain evidence of consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible, the data is held in restricted-access storage pending secure destruction.

1988rich implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and the Platform is encrypted using 256-bit TLS encryption, the same standard used by Malaysian financial institutions and major e-commerce platforms.
• Encryption at Rest: Sensitive personal data and financial records stored in our databases are encrypted at rest using AES-256 or equivalent symmetric encryption standards.
• Access Controls: Personal data is accessible only to authorised 1988rich staff and contracted processors on a strict need-to-know basis. Access is governed by role-based permissions, multi-factor authentication, and audit logging.
• Real-Time Fraud Monitoring: Automated systems monitor transaction patterns, login behaviour, and Account activity in real time to detect and respond to anomalies indicative of fraud or unauthorised access.
• Penetration Testing and Security Audits: The Platform undergoes periodic security assessments by independent cybersecurity specialists to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach affecting your personal data, 1988rich will notify affected individuals and relevant authorities in accordance with applicable notification obligations. Notifications will be issued without undue delay following confirmation of a breach.

While 1988rich takes all reasonable steps to protect your personal data, no transmission or storage system is completely immune to security threats. You are responsible for maintaining the security of your Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.

1988rich uses cookies and similar tracking technologies to operate and improve the Platform, maintain session security, analyse user behaviour, and support fraud detection.

10.1 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security identifiers, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how Players interact with the Platform, including pages visited, features used, and session duration. This data is used to improve Platform performance and identify technical issues.
• Functional Cookies: Remember your preferences and settings (such as language preference, game display settings, and responsible gambling tool configurations) to personalise your experience.
• Security and Fraud Detection Cookies: Support our real-time fraud monitoring systems by tracking device characteristics and behaviour patterns to identify anomalous or potentially fraudulent activity.

10.2 Managing Cookies

You can control cookie settings through your browser's privacy settings. Please note that disabling non-essential cookies may affect the functionality of certain Platform features. Strictly necessary cookies cannot be disabled as they are required for the Platform's core operation.

Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by 1988rich. To exercise any of these rights, contact our data team at [email protected] with your Account username and a description of the right you wish to exercise.

1988rich operates with cloud infrastructure and third-party service providers that may process personal data in locations outside Malaysia. Where such international transfers occur, the Company takes steps to ensure that adequate protections are in place to safeguard your data to the same standard as required under this Policy.

Protective measures for international transfers may include: contractual data processing agreements incorporating standard data protection clauses, adequacy assessments of the destination country's data protection regime, and technical safeguards such as end-to-end encryption that protect data regardless of the physical location of processing.

By using the Platform and accepting this Policy, you acknowledge and consent to the transfer of your personal data to such processing locations where necessary for the provision of the Platform's services, subject always to the protections described in this Policy.

If 1988rich becomes aware that personal data has been collected from an individual under the age of 21, the Account will be immediately suspended, all personal data will be securely deleted, and any funds held in the Account will be processed in accordance with our Terms and Conditions and applicable compliance obligations.

If you believe that an individual under 21 has registered an Account on the Platform, please report this to [email protected] immediately. We take underage access reports with the utmost seriousness and will investigate and act on all credible reports without delay.

1988rich reserves the right to update, modify, or replace this Privacy Policy at any time. When material changes are made to this Policy — particularly changes that affect how we collect, use, or share your personal data — we will publish the revised Policy on this page and update the "Last Updated" date at the top of the document.

We may also notify registered Players of material changes via email notification to the address registered to your Account or via an in-platform notification banner, where the nature of the change warrants such notification. However, it is your responsibility to review this Policy periodically to stay informed of our current data practices.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you disagree with any change to this Policy, you must discontinue use of the Platform and close your Account by contacting support.

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact the 1988rich data team through the following channels. All data-related enquiries are handled with priority and confidentiality.

• Email: [email protected] — for all data rights requests, privacy complaints, and general data enquiries. Please include your Account username and the nature of your request in the subject line. Requests are acknowledged within 24 hours and substantively responded to within 30 days.
• Live Chat: Available 24/7 from any page on the Platform. For initial queries about data rights or this Policy, live chat agents can direct your enquiry to the appropriate data team contact.

We are committed to resolving all data-related concerns promptly and transparently. If you are not satisfied with our response to a data rights request or privacy complaint, you may escalate the matter in accordance with the applicable dispute resolution procedures for the relevant jurisdiction.