Privacy Policy 1998rich – Data Protection Malaysian Members

This Privacy Policy is published by 1998rich, an online casino and Sports Betting platform accessible at https://1998rich.click. This document outlines our privacy practices concerning personal information collected when you use the platform, our services, or communicate with our team.

1998rich takes privacy seriously and responsibly. We understand that our members entrust us with sensitive personal information — from identity details to financial information related to payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX. That trust is something we do not take lightly.

This Privacy Policy applies to all registered 1998rich members, visitors to our website, and any individual who communicates with us through customer support channels. This Policy should be read together with Terms & Conditions 1998rich which forms part of the overall agreement between you and our platform.

1998rich collects several categories of personal data depending on how you interact with our platform. We follow the principle of data minimisation – we only collect what is genuinely necessary:

• Data you provide directly: Full name, MyKad number, date of birth, email address, Malaysian mobile number, account password, and payment method details — collected during registration, KYC verification, or customer support communications.
• Financial transaction data: Records of all deposits and withdrawals including amounts in Malaysian Ringgit (RM), the method used (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX), timestamps, and transaction status. This data is required for account management and financial regulatory compliance.
• Gaming activity data: Betting history across all games – Baccarat, Blackjack, Live Casino, sports betting (Liga Super Malaysia, EPL, badminton), and e-sports – including bet amounts, winnings, losses, and session duration.
• Technical data: IP address, device and browser information, operating system, access timestamps, and platform usage data collected automatically when you browse or use the 1998rich platform.
• Communications: Content from live chat interactions with customer support, emails you send us, and feedback you provide.

1998rich does not directly collect credit or debit card information. All payment processing via e-wallet and FPX is handled by licensed payment service providers that comply with PCI DSS security standards.

1998rich uses collected personal data solely for legitimate, clearly stated purposes. The following are the primary purposes for which your data is used:

• Account management: Creating and managing your 1998rich account, processing registrations, verifying identity, and maintaining accurate records.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as withdrawal requests to those same methods, securely and promptly.
• Provision of gaming services: Gives you access to all games and betting on the platform — from Live Baccarat and Blackjack tables to football, badminton, and e-sports betting.
• Security & fraud prevention: Detecting and preventing unauthorised account use, fraudulent activity, money laundering, or any violation of the platform's Terms & Conditions.
• Service communications: Sending important account-related notifications, terms updates, transaction receipts, and responses to customer support enquiries. These are not marketing communications — they are essential service notifications.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and support the self-control tools available to members.
• Legal compliance: Meeting reporting obligations and record-keeping requirements under applicable financial laws and regulations in Malaysia.

1998rich's core principle is straightforward: we do not sell or share member personal data for commercial purposes. That said, there are limited situations where 1998rich may need to share data with certain parties in order to operate our services properly:

• Technical service providers: Cloud infrastructure providers, database management systems, and email delivery services that support 1998rich's day-to-day operations. All such providers are bound by strict data protection agreements and may only use your data for the specified purposes.
• Payment service providers: Payment gateway providers that process your deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX. Data shared is strictly limited to what is necessary to complete each transaction.
• Game providers: Gaming companies that provide Live Casino content and table games on the 1998rich platform. Data shared is limited to the minimum technical data required to operate the games.
• Statutory authority: Where required by Malaysian law, a court order, or a legitimate request from a law enforcement agency, 1998rich may be obliged to disclose certain personal data. We will inform you of any such disclosure where permitted by law.

In all data sharing situations described above, 1998rich ensures that recipients adhere to data protection standards equivalent to our own. No 1998rich member's personal data is sold, rented, or traded to advertisers, data brokers, or any third-party commercial parties.

1998rich takes security infrastructure seriously to protect member personal data. The technical and organisational measures we have in place include:

• Data encryption in transit: All communications between your browser and 1998rich servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates. This means that even if someone manages to intercept your network traffic, any captured data would be completely unreadable.
• Stored data encryption: Sensitive data such as member passwords is stored in an irreversible hashed form. Sensitive financial information is encrypted at the database level.
• Two-factor authentication (2FA): An SMS OTP system is used to verify logins and important financial transactions. This ensures that even if your password falls into the wrong hands, your account cannot be accessed without your phone.
• 24/7 security monitoring: The 1998rich security team continuously monitors systems to detect suspicious login activity, unauthorised access attempts, and unusual transaction patterns.
• Internal access controls: The principle of least privilege access applies – only staff with a clear business need are permitted to access specific categories of personal data. All access is logged and audited.
• Regular security testing: 1998rich conducts regular security vulnerability assessments and penetration testing to identify and address potential security risks before they can be exploited.

Even with all these measures, no security system is 100% perfect. In the unlikely event of a data breach affecting member personal information, 1998rich will notify the affected members and the relevant authorities within the timeframe required under Malaysian law.

1998rich retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal obligations. The following are retention guidelines for the various categories of data:

• Active account data: For as long as your account remains active with 1998rich, plus a further 6 months after account closure to allow for the resolution of any potential claims.
• Financial transaction records: Seven years from the transaction date, in accordance with the Companies Act and applicable Malaysian financial regulations.
• KYC identity verification data: Five years from the account closure date, in accordance with applicable anti-money laundering requirements.
• Customer support communication logs: Two years from the date of interaction, for quality control and dispute resolution purposes.
• Technical data and access logs: One year, used for security purposes and system performance analysis.
• Marketing data (with consent): Until you withdraw your marketing consent or close your account, whichever comes first.

Once the specified retention period expires, data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual.

Under Malaysia's Personal Data Protection Act (PDPA), you have specific rights regarding the personal data held by 1998rich. We respect and facilitate the exercise of these rights:

To exercise any of the rights above, please contact our Privacy Officer by email at support@1998rich.click with the subject line "Privacy Rights Request – [Request Type]". Include sufficient identifying information so we can verify your identity before processing the request. All requests will be responded to within 14 business days.

1998rich uses cookies and similar technologies to enhance the user experience and account security. There are three categories of cookies we use:

• Essential Cookies (Required): These cookies are essential for core platform functions, including maintaining secure login sessions, preventing CSRF (Cross-Site Request Forgery) attacks, and ensuring continuity of active gameplay. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Preference Cookies (Optional): These cookies remember your preferences such as language settings, display options, and table limits you frequently use. They help deliver a more personalised experience each time you log in to 1998rich. You can disable this category without affecting the core functionality of the platform.
• Analytics Cookies (Optional): Anonymous data on how members use the platform — pages visited, time spent, and navigation patterns. This helps us identify areas where the user experience can be improved. The data is aggregated and cannot be linked back to you as an individual.

You can manage cookies through your browser settings at any time. Please note that disabling essential cookies will affect login functionality and session security on the 1998rich platform. For guidance on managing cookies in your browser, please refer to the official documentation for your browser of choice (Chrome, Firefox, Safari, Edge).

In the course of its operations, 1998rich may need to transfer members' personal data to servers or infrastructure located outside Malaysia — particularly in connection with cloud service providers and international gaming systems. Any such data transfers are carried out with appropriate safeguards in place:

• We only engage overseas service providers that comply with internationally recognised data protection standards.
• Comprehensive Data Processing Agreements are enforced with all third-party providers that receive personal data of 1998rich members.
• All data transfers are carried out using encryption and secure channels to ensure your data is not exposed in transit between servers.

If you have concerns about cross-border data transfers related to your account, please contact our Privacy Officer for more information.

1998rich services are exclusively for individuals aged 21 and above. Our platform is not designed, produced, or marketed toward children or minors in any way.

1998rich does not knowingly collect personal data from individuals under the age of 21. If we discover that data has been collected from someone below the stipulated age without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes that your child or dependent under the age of majority has registered an account with 1998rich, please contact us immediately at support@1998rich.click so we can take the appropriate action without delay.

1998rich reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or the way we operate our services.

When significant changes are made to this Privacy Policy, we will notify you through one or more of the following: a prominent notice on the platform's homepage, an in-account notification upon login, or an email to the address registered to your 1998rich account.

The "updated" date shown at the top of this document reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the 1998rich platform following the publication of any amendments constitutes your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 1998rich handles your personal data, please reach out to us through the following channels:

• Privacy Officer Email: support@1998rich.click (include "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 via the chat icon in the corner of the 1998rich platform
• Response time: Privacy enquiries are responded to within 3 business days; formal data rights requests within 14 business days.

If you are not satisfied with our response to a privacy inquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for enforcing the PDPA in Malaysia.