Privacy Policy — rtf888

1. Introduction

rtf888 ("we", "us", "our", "the Company") operates the online gaming platform accessible at rtf888.app (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered Players, visitors, and prospective members.

This Privacy Policy is prepared in accordance with internationally recognised data protection principles and the obligations imposed on rtf888 by its international gaming authority licence. It explains what personal information we collect, why we collect it, how we use it, with whom we may share it, and what rights you have in relation to your data.

By registering on or using the rtf888 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not accept the practices described herein, please discontinue use of the Platform. This Policy forms part of and should be read alongside the rtf888 Terms & Conditions.

2. Personal Data We Collect

Depending on how you interact with the rtf888 Platform, we may collect the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (for age verification — all Players must be 21 years of age or older).
• Malaysian identity card number (MyKad) or passport number, as applicable.
• Registered mobile phone number.
• Email address, where provided.

2.2 Financial Data

• Bank account details, including bank name, account number, and account holder name, for withdrawal processing.
• eWallet identifiers (e.g. Touch 'n Go eWallet account, Boost account, GrabPay ID) where used for deposits or withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method identifiers.

2.3 Account & Gaming Data

• Username and account login credentials (passwords are stored in hashed form and are never accessible to rtf888 staff).
• Betting and gaming history, including game titles played, wager amounts, game outcomes, and session durations.
• Bonus and promotion uptake history.
• Responsible gaming settings applied to your account (deposit limits, self-exclusion periods, session time reminders).

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP at the time of login.
• Device type, operating system, browser type and version.
• Session timestamps and duration.
• Referral source, where applicable.

2.5 Communications Data

• Records of live chat conversations and email correspondence with rtf888 support.
• Complaint and dispute records.

3. How We Collect Your Data

rtf888 collects personal data through the following mechanisms:

• Direct provision: Information you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting customer support.
• Automated collection: Technical and device data collected automatically when you access the Platform via cookies, server logs, and similar tracking technologies (see Section 9).
• Third-party verification services: Identity and age verification data received from licensed KYC verification providers where we use such services to validate registration information.
• Payment processors: Transaction confirmation data received from our payment processing partners (e.g. FPX, Touch 'n Go eWallet, DuitNow) confirming deposit and withdrawal completions.

4. Purposes of Processing

rtf888 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your rtf888 member account.
• Identity and age verification: Confirming that all registered Players meet the 21+ age requirement and are who they claim to be, as required by our gaming licence.
• Payment processing: Facilitating deposits, processing withdrawal requests, and maintaining accurate transaction records.
• Platform operation: Providing access to games, sportsbook markets, and other Platform features.
• Customer support: Responding to enquiries, resolving disputes, and processing complaints.
• Regulatory compliance: Meeting anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations imposed by our licence.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, account takeovers, and Platform abuse.
• Marketing communications: Sending promotional offers and Platform updates, where you have opted in to receive such communications. You may withdraw consent at any time via account settings.
• Platform improvement: Analysing aggregated usage data (in anonymised form) to improve Platform features and user experience.

5. Legal Basis for Processing

rtf888 processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services described in the Terms & Conditions to which you are a party as a registered Player.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC requirements, and gaming licence conditions.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where our legitimate interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

rtf888 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment service providers: FPX banking network, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and other payment processors, to facilitate transactions.
• KYC and identity verification providers: Licensed verification services used to confirm Player identity and age.
• Game studio providers: To the extent technically necessary for live casino stream authentication and game session data.
• Regulatory authorities: Our gaming licensor, anti-money laundering authorities, and law enforcement agencies, where required by law or regulatory direction.
• Professional advisers: Legal counsel, auditors, and compliance consultants, under strict confidentiality obligations.

7. International Data Transfers

The rtf888 Platform and its data infrastructure may involve the processing of personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, rtf888 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection standards equivalent to those described in this Policy on all recipient parties.

rtf888 does not transfer your personal data to jurisdictions that do not offer an adequate level of data protection without implementing additional protective measures.

8. Data Retention

rtf888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following indicative retention periods apply:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, as required by applicable AML regulations.
• Transaction and gaming history: Retained for a minimum of five (5) years following each transaction, consistent with financial record-keeping obligations.
• Customer support records: Retained for three (3) years following the close of each support interaction.
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for ongoing security investigation.

Following expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our data destruction procedures.

9. Cookies and Tracking Technologies

rtf888 uses cookies and similar tracking technologies on the Platform to maintain session state, prevent fraud, and collect aggregated analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impacting Platform functionality.
• Analytics cookies: Used to collect anonymised data about how Players use the Platform, including pages visited and session duration. This data is used in aggregate only to improve Platform performance.
• Preference cookies: Store your display preferences (e.g. language settings) to personalise your experience.

You may manage cookie preferences through your browser settings. Disabling all cookies may impair your ability to log in or use certain Platform features.

10. Security Measures

rtf888 implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and rtf888 servers.
• Passwords stored exclusively in irreversible hashed format — rtf888 staff cannot view your password.
• Access to personal data restricted to authorised personnel on a strict need-to-know basis, with access logging.
• Regular security audits and penetration testing of Platform infrastructure.
• Multi-factor authentication for all administrative access to systems that process personal data.
• Incident response procedures to identify, contain, and notify affected parties of any data breach within the timeframes required by applicable law.

While rtf888 takes every reasonable precaution to protect your data, no internet transmission is completely secure. You are responsible for keeping your login credentials confidential and for reporting any suspected account compromise to rtf888 support immediately.

11. Your Data Rights

Subject to applicable law and regulatory obligations, you have the following rights in relation to your personal data held by rtf888:

• Right of access: You may request a copy of the personal data rtf888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rtf888's overriding legal and regulatory retention obligations.
• Right to restriction: You may request that processing of your data be restricted in certain circumstances (e.g. while accuracy is being contested).
• Right to data portability: You may request a machine-readable copy of the personal data you provided to rtf888, where processing is based on consent or contract performance.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw consent at any time via account settings or by contacting support.

To exercise any of the above rights, please contact rtf888 via live chat or by email at [email protected]. We will respond to verified requests within thirty (30) calendar days. We may require identity verification before processing a data subject request.

12. Minors and Age Restriction

The rtf888 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect or process personal data of individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, return any unplayed balance in accordance with our policies, and securely delete the personal data concerned.

If you believe that a minor has accessed or registered on rtf888, please contact support immediately so that we can investigate and act promptly.

13. Third-Party Links and Services

The rtf888 Platform may contain links to third-party websites or embed third-party services (such as live game studio providers). rtf888 is not responsible for the privacy practices of any third-party website or service. We encourage you to review the privacy policies of any third-party services you access through the Platform.

Third-party payment providers (e.g. Touch 'n Go eWallet, DuitNow, Maybank FPX) operate under their own privacy policies and terms. Your use of those services is subject to the respective provider's terms, which are independent of rtf888.

14. Changes to This Privacy Policy

rtf888 reserves the right to update this Privacy Policy at any time. Where a material change is made, we will post a notice on the Platform and, where practicable, notify registered Players directly. The "Last updated" date at the top of this Policy will be revised to reflect any changes.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, please discontinue use of the Platform and contact support to close your account.

15. Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by rtf888, please contact us through the following channels:

• Live Chat: Available 24/7 from your rtf888 member dashboard. First response typically under five minutes.
• Email: [email protected] — plain text address, not a clickable link. Responses within 24 business hours for general enquiries; within 30 days for formal data subject requests.

rtf888 takes data privacy enquiries seriously. All formal requests will be acknowledged in writing and processed in accordance with applicable data protection law.