1988rich Privacy Policy

1988rich acts as the data controller in respect of personal data collected through the 1988rich platform. As data controller, 1988rich determines the purposes and means by which personal data is processed. References to "1988rich", "we", "us", or "our" in this Policy refer to the platform operator responsible for your data. For all data-related enquiries, including the exercise of your rights as a data subject, please contact our support team via the details provided in Section 12 of this Policy.

1988rich collects personal data through multiple channels in the ordinary course of providing the platform's services. The categories of data collected include:

1. Registration data: Full legal name, date of birth, email address, mobile number, and country of residence provided at the time of account creation.
2. Identity verification data: Government-issued photographic identification (such as MyKad or passport), proof of address documentation, and any additional documents requested as part of the KYC process.
3. Financial data: Bank account details, e-wallet identifiers, and transaction records related to deposits and withdrawals processed through the 1988rich platform including via Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, and Boost.
4. Gaming data: Records of bets placed, games played, win/loss outcomes, and session activity across all product areas including live casino, slots, sportsbook, e-sports, and crash games.
5. Technical data: IP address, device type and operating system, browser type, session timestamps, and geolocation data where relevant to jurisdictional compliance checks.
6. Communications data: Records of interactions with 1988rich customer support via live chat or email.

Personal data collected by 1988rich is used for the following purposes:

1. Creating and managing your 1988rich account and providing access to platform services;
2. Verifying your identity and age in compliance with KYC requirements;
3. Processing deposits and withdrawals via your chosen Malaysian payment methods;
4. Detecting and preventing fraudulent activity, money laundering, and abuse of the platform;
5. Monitoring gaming activity for responsible gaming purposes and enforcing self-exclusion where applicable;
6. Sending transactional communications including deposit confirmations, withdrawal notifications, and security alerts;
7. Complying with applicable legal, regulatory, and licensing obligations;
8. Improving platform performance, user experience, and game content based on aggregated usage data.

1988rich does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human oversight, except where required by anti-fraud or AML screening systems, which are subject to human review.

1988rich processes personal data on the following legal bases: (a) Contractual necessity — processing required to perform our obligations under the Terms and Conditions you have accepted, including account management and payment processing; (b) Legal obligation — processing required to comply with applicable AML, KYC, and regulatory requirements; (c) Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights; and (d) Consent — where you have provided explicit consent to specific processing activities such as receiving promotional communications, which you may withdraw at any time.

1988rich does not sell your personal data. We may share your data with the following categories of third parties in the circumstances described:

1. Game providers: Certified gaming studios including Pragmatic Play, PG Soft, and Spadegaming receive the minimum necessary data to deliver game sessions and maintain game integrity.
2. Payment processors: Malaysian payment infrastructure providers including FPX, DuitNow, and e-wallet operators receive transaction data necessary to process deposits and withdrawals.
3. Identity verification services: Third-party KYC and AML screening providers who operate under strict data processing agreements with 1988rich.
4. Regulatory and law enforcement authorities: Where 1988rich is legally required to disclose data in response to valid legal process, regulatory investigation, or court order.
5. Business successors: In the event of a merger, acquisition, or sale of the 1988rich platform, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third parties with whom 1988rich shares personal data are contractually required to handle such data in accordance with applicable data protection standards and may not use it for any purpose other than the specific service they provide.

1988rich retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following: account data and transaction records are retained for a minimum of five years following account closure in compliance with applicable AML regulations; KYC documentation is retained for the period required by our licensing authority; communications records are retained for a period of three years; technical log data is retained for up to 12 months for security and fraud detection purposes. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

As described in detail in the visual summary above, you have the right to access, rectify, erase, object to, restrict, and port your personal data held by 1988rich, subject to applicable legal limitations. To exercise any of these rights, submit a request to our support team via live chat or by email. 1988rich will respond to all substantiated rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, with notification provided. 1988rich reserves the right to verify your identity before processing any rights request.

The 1988rich platform uses cookies and similar tracking technologies to maintain your session state, remember your preferences, and monitor platform performance. Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a defined period. You may configure your browser to refuse or delete cookies; however, doing so may affect the functionality of certain features of the 1988rich platform, including the ability to remain logged in between sessions. 1988rich does not use cross-site tracking technologies to follow your activity on third-party websites. Analytics data collected through cookies is aggregated and anonymised before being used for platform improvement purposes.

1988rich implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include: 256-bit SSL/TLS encryption for all data in transit; cryptographic hashing of account passwords; role-based access controls limiting employee access to personal data to those with a demonstrable operational need; regular security audits and penetration testing; fraud monitoring systems operating in real time; and incident response procedures for managing any data security events. In the event of a data breach that is likely to affect your rights and interests, 1988rich will notify you in accordance with applicable regulatory requirements.

The 1988rich platform is intended exclusively for adults aged 21 years and above. 1988rich does not knowingly collect personal data from individuals under the age of 21. If 1988rich becomes aware that personal data has been collected from a person below the minimum age, the relevant account will be immediately suspended and the data deleted in accordance with our data destruction procedures. If you believe a minor has registered on the 1988rich platform, please contact our support team immediately so that the matter can be investigated and resolved without delay.

1988rich reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where amendments are material, 1988rich will provide notice to registered members via the email address associated with their account or through a prominent notice on the platform. Continued use of the 1988rich platform following the effective date of any amendment to this Policy constitutes acceptance of the revised terms. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

For all privacy-related enquiries, data subject rights requests, or questions regarding this Policy, please contact the 1988rich data team through one of the following channels: live chat support available directly within your account dashboard (24/7, average response time 3–5 minutes) or by email at [email protected]. Please include "Privacy Request" in the subject line of any email enquiry to ensure prompt routing to the appropriate team.