🔒 Updated: January 2026

Ringgit88 Privacy Policy – Personal Data Protection for Malaysian Members

ringgit88 care about your privacy. This policy clearly explains how we collect, use, store, and protect your personal information — all in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to know, and we are committed to being transparent.

PDPA
MY Legal Compliance
SSL
256-bit Encryption
0
Data Sold to Third Parties
24/7
Security Monitoring

Ringgit88's Six Privacy Commitments to Malaysian Members

This is our commitment — not just words, but practices we uphold every single day.

Malaysia PDPA Compliance

All personal data processing at ringgit88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) — the personal data protection law applicable to businesses operating in Malaysia.

256-bit SSL Encryption

All data transmitted between your device and ringgit88's servers is protected by 256-bit SSL encryption. Your payment information is not stored on our servers — it is processed directly through secure payment channels.

No Data Sales

Ringgit88 never sells, rents, or trades members' personal data to any third party for marketing or any other purpose without your explicit consent.

Right of Access & Correction

You have the right to request access to the personal data we hold about you, to request a correction if any information is inaccurate, or to request deletion of your data under certain circumstances.

Defined Retention Periods

Your data is not stored indefinitely. ringgit88 has a clear data retention policy — data is kept only for as long as necessary for operational, legal compliance, and security purposes.

Data Breach Notification

In the event of a data breach that may affect members, ringgit88 will notify impacted members within a reasonable timeframe in accordance with applicable legal requirements.

Introduction – Why This Privacy Policy Matters to You

This Privacy Policy describes how ringgit88 ("Platform", "We") collects, uses, stores, discloses, and protects your personal information ("Personal Data") when you register, access, or use any services provided by the ringgit88 platform. By registering an account or using our platform, you agree to the processing of your personal data in accordance with this Privacy Policy.

Ringgit88 is the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are fully responsible for ensuring your personal data is processed lawfully, fairly, and transparently. For any privacy-related enquiries, you may reach us at support@ringgit88.com at any time.

Note: This Privacy Policy is written in English for the convenience of our Malaysian members. The effective date of this latest version is 1 January 2026. You will be notified of any material amendments via email or an in-platform notification.

Section 1 – Information We Collect BASIC

Ringgit88 only collects data that is necessary to deliver our services safely and efficiently. The categories of data we collect are as follows:

  • Account Registration Data: When you register with ringgit88, we collect your Malaysian mobile number, your encrypted password, and your registration date. Any username or display name you choose is also stored.
    Purpose: To create and manage your account, verify your identity via OTP, and enable secure login.
  • Identity Verification Data (KYC): For withdrawals exceeding certain limits or to meet legal compliance requirements, we may request your MyKad or passport number, your full name as stated on official documents, and your date of birth.
    Purpose: Compliance with anti-money laundering (AML) legal requirements, age verification (18 years and above), and account security.
  • Financial Transaction Data: We maintain records of all deposit and withdrawal transactions, including the amount in MYR (RM), the payment method used (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX), the transaction date and time, and the transaction reference number.
    Purpose: Transaction processing, dispute resolution, financial regulatory compliance, and internal audits.
  • Gaming Activity Data: Sports betting records (football, badminton, cricket, and others), casino and slots game sessions, amounts wagered and winnings in RM, and game types played.
    Purpose: Bet settlement, bonus and promotion management, responsible gaming monitoring, and product improvement.
  • Technical & Device Data: IP address, web browser type, device type and operating system, access times and session data, and technical error logs.
    Purpose: Account security, fraud detection, platform performance improvement, and technical support.
  • Customer Support Communications: Live chat transcripts, emails sent to ringgit88, and WhatsApp call logs (where applicable).
    Purpose: Resolving enquiries and complaints, training the support team, and improving service quality.

Data Minimisation Principle: ringgit88 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is required to operate the platform.

Section 2 – How We Use Your Data

Your personal data is used solely for the following legitimate and stated purposes:

  • Account Management and Services: Creating and managing your account, processing deposits and withdrawals in MYR, settling Sports Betting wagers and Live Casino sessions, and managing the bonuses and promotions you claim.
  • Security and Fraud Prevention: Detecting and investigating suspicious activity on your account, preventing unauthorized access to the platform, enforcing the one-account-per-member policy, and protecting members' finances and data from cybersecurity threats.
  • Legal Compliance: Meeting anti-money laundering (AML) and counter-terrorism financing (CTF) compliance requirements, responding to lawful requests from Malaysian authorities, and fulfilling applicable statutory reporting obligations.
  • Service-Related Communications: Sending important account-related notifications such as deposit confirmations, security alerts, updates to our terms of service, and promotional information (with your consent).
  • Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling, reaching out to members who may need support, and enforcing self-imposed limits set by members.
  • Product and Platform Improvement: Analysing aggregated usage patterns (without identifying individuals) to improve platform design, performance, and overall user experience.
Legal Basis for Data Processing:
Purpose of Processing Legal Basis (PDPA)
Account management & transactions Performance of a contract (you registered an account with us)
AML/KYC Compliance Legal obligation (statutory compliance requirements)
Security & fraud prevention Legitimate interest (protecting the platform and other members)
Marketing communications Consent (which you may withdraw at any time)
Responsible gaming Public interest & legal obligation
Section 3 – Sharing Data with Third Parties IMPORTANT

Key Commitment: ringgit88 never sells, rents, or trades members' personal data to third parties for marketing purposes. Data sharing only occurs in the limited situations set out below.

  • Payment Service Providers: Minimal transaction data is shared with licensed payment processors such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and Malaysian banks via FPX (Maybank2u, CIMB Clicks) — solely to process your deposits and withdrawals. These providers are bound by strict data protection agreements.
  • Licensed Game Providers: Minimal game session data is shared with licensed game providers such as Pragmatic Play, PG Soft, and Evolution Gaming for the purposes of game processing, dispute resolution, and auditing. All such providers maintain their own privacy policies and are subject to international regulatory oversight.
  • Legal Authorities: ringgit88 will disclose personal data to Malaysian authorities (such as the police, MACC, or financial regulators) when required by law or a valid court order. We will not disclose data beyond what is legally required.
  • Technology Service Providers: Certain technical data (not personally identifiable information) may be shared with cloud infrastructure providers, bot detection services, and cybersecurity tools used by ringgit88. All such providers are bound by confidentiality and data protection agreements.
  • Business Transfer: In the event of a merger, acquisition, or asset sale involving ringgit88, members' personal data may be transferred as part of that process. Members will be notified in advance if such a transfer occurs and their rights will be protected.
Section 4 – Data Security & Protection

Ringgit88 implements comprehensive technical and organisational security measures to protect your personal data:

End-to-End Encryption
SSL 256-bit encryption covering all communication between your device and ringgit88 servers.
Two-Factor Authentication (2FA)
SMS OTP for logins and critical transactions, ensuring only you can access your account.
24/7 Monitoring
Our cybersecurity team monitors platform activity around the clock to detect threats.
Internal Access Controls
Only authorised personnel with a legitimate business need may access member data.
Payment Data Not Stored
Your card or bank account details are never stored on ringgit88 servers. They are processed directly through a secure gateway.
Data Backup & Recovery
Data is backed up regularly to a secure location to ensure continuity of service.
  • Your Responsibilities for Account Security: While ringgit88 takes all reasonable steps to protect your data, account security also depends on your own actions. Use a strong, unique password, never share your login credentials with anyone, log out of the platform when using a shared device, and contact ringgit88 support immediately if you suspect any suspicious activity on your account.
  • Ringgit88 Will Never Ask for Your Password: The ringgit88 team — including customer support — will never ask for your account password through any communication channel. If you receive such a request, it is a phishing attempt and you should report it to us immediately.
Section 5 – Cookie Policy

Ringgit88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Cookie Type Purpose Duration
Essential Cookies Ensures the platform functions correctly — login sessions, security, and core platform functionality. Cannot be disabled. Session / 30 days
Preference Cookies Saves your preferences such as language, display settings, and personal preferences to provide a more comfortable experience. 1 year
Analytics Cookies Collecting aggregated, anonymised usage data to help us understand how members use the platform and to improve it. 90 days
Security Cookies Detecting suspicious activity, preventing unauthorised access, and protecting your account from bot attacks and fraud. Session
  • Cookie Controls: You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the ringgit88 platform — you may be unable to log in or use certain features properly.
  • Third-Party Cookies: Some third-party game providers and analytics services used by ringgit88 may set their own cookies. These cookies are subject to the respective providers' privacy policies.
Section 6 – Your Rights as a Data Subject YOUR RIGHTS

Under Malaysia's PDPA, you have the following rights regarding your personal data held by ringgit88:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide it within 21 business days of receiving a valid request.

Right to Correction

If the personal data we hold about you is inaccurate or out of date, you may request a correction. We will update it within a reasonable timeframe.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data, subject to applicable legal retention requirements.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time and we will stop immediately.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.

Right to Data Portability

You may request the data you have provided to us in a machine-readable format for transfer to another service provider, where applicable.

  • How to Exercise Your Rights: To exercise any of the rights above, contact us by email at support@ringgit88.com, stating the right you wish to exercise and the information needed to verify your identity. We will respond within 21 business days.
  • Identity Verification for Privacy Requests: To protect you, we are required to verify your identity before processing any request relating to your privacy rights. This ensures your data is not disclosed to unauthorised individuals.
  • Fee for Access Requests: Ringgit88 does not charge a fee for the first data access request within any 12-month period. Repeated or excessive requests within the same period may be subject to a reasonable administrative fee.
Section 7 – Data Storage & Deletion
  • Active Account Data Retention Period: For as long as your account remains active on ringgit88, we retain all data necessary to operate your account. This data is continuously updated in line with your activity.
  • Retention Period After Account Closure: After an account is closed, ringgit88 retains financial transaction records and compliance data (KYC) for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements. Data that is no longer required for legal purposes will be deleted or anonymised within 12 months of account closure.
  • Technical Log Data: Technical logs and device data are typically retained for 90 days for security and technical troubleshooting purposes. After this period, they are automatically deleted or anonymised.
  • Customer Support Records: Customer support communication records are retained for 2 years for reference and service improvement purposes. After this period, they are archived with restricted access or deleted.
  • Secure Deletion Methods: When data is due for deletion, ringgit88 uses secure deletion methods to ensure the data cannot be recovered by any party. This includes secure file erasure and cryptographic deletion for digital data.
Section 8 – Children's Data & Vulnerable Individuals IMPORTANT
  • Strict Prohibition for Minors: The ringgit88 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store the personal data of anyone under the age of 18. If we determine that a person under 18 has registered an account, the account will be closed immediately and all related data will be deleted.
  • Responsibilities of Parents and Guardians: If you are a parent or guardian and believe your child under the age of 18 has registered an account on ringgit88, please contact us immediately at support@ringgit88.com. We will take prompt action to close the account and delete all associated data.
  • Vulnerable Individuals: Ringgit88 recognises the specific needs of vulnerable individuals in the context of data protection. Those who have been victims of identity theft or whose accounts have been used without their authorisation may contact us for immediate assistance through our support channels, which operate 24/7.
Section 9 – Policy Amendments & Contact Us
  • Right to Amend This Policy: ringgit88 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to how we handle data. Material amendments will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect.
  • How to Find Out About Amendments: The "Last Updated" date at the top of this page will always reflect the latest version of our Privacy Policy. We encourage you to check this page from time to time.
  • Contact Our Privacy Officer: For any privacy or data protection enquiries, requests, or complaints, you may reach us at: Email: support@ringgit88.com (please indicate "Privacy Enquiry" in the subject line), or via the 24/7 live chat within your ringgit88 platform.
  • Complaints to the Authorities: If you are not satisfied with how ringgit88 has handled your personal data after contacting us, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia.

Effective Date: This Privacy Policy is the latest version, effective from 1 January 2026 and supersedes all previous versions.

Understanding the Ringgit88 Privacy Policy – A Quick Guide for Malaysian Members

When you sign up on any online platform — whether for shopping, banking, or entertainment — you are entrusting them with your personal information. That trust is not something we at ringgit88 take lightly. This Privacy Policy is more than a legal formality — it is a trust agreement between us and each of our 500,000+ members across Malaysia.

For Malaysians, the protection of personal data is governed by Personal Data Protection Act 2010 (PDPA). Under this Act, every organisation that collects and processes the personal data of Malaysians has clear legal obligations — covering how data is collected, how it is used, who it is shared with, how long it is retained, and individuals' rights to access or delete their data. ringgit88 complies with all principles set out in the PDPA as part of our commitment to Malaysian members.

The most important thing for you to know about how ringgit88 handling your data is the principle of "minimum necessity" — we only collect data that is genuinely required to deliver our services. When you register, we need your Malaysian phone number and a password. That is all it takes to get started. We do not ask for your full name, date of birth, or identity documents unless there is a specific legal compliance requirement, such as for large withdrawals or KYC verification. Compared to many other platforms that gather extensive data "for product improvement purposes", our approach is simpler and more respectful of your privacy.

In the context of financial transactions, ringgit88 works with Malaysian payment methods you already know and trust — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX via Maybank2u or CIMB Clicks. Here is something important to understand: your bank account or digital wallet details are never stored on ringgit88 servers. When you make a deposit, your payment information is processed directly through a licensed, secure payment gateway — ringgit88 only receives confirmation that the transaction succeeded or failed, not your account details. This is an important additional layer of protection.

On the topic of sharing data with third parties — this is something that understandably concerns many users. The short answer from ringgit88 is: we do not sell your data, ever, to anyone. Your data may be shared with a limited set of service providers — payment processors to handle your transactions, game providers to run your gaming sessions, and legal authorities where required by Malaysian law. Every instance of data sharing is limited to what is strictly necessary, and all parties who receive your data are bound by data protection agreements.

One topic that is becoming increasingly important in this digital age is cookies. Ringgit88 uses cookies to keep the platform running smoothly — storing your login session so you don't have to sign in every time, remembering your language and display preferences, and helping our security systems flag suspicious activity. We keep cookie use to a minimum, each with a clear purpose. You can manage cookies through your web browser settings, though doing so may affect certain platform features.

Your rights as a data subject under the PDPA are something that ringgit88 deeply respects. You have the right to know what data we hold about you, to request corrections if any information is inaccurate, to object to the use of your data for marketing, and in certain circumstances, to request that your data be deleted. All such requests can be submitted by email to support@ringgit88.com and we will respond within 21 business days. This process is free of charge for the first request each year.

Finally, it should be noted that this Privacy Policy will be updated from time to time in response to changes in law, technology, or ringgit88's practices. Whenever material amendments are made, members will be notified by email or via an in-platform notification. We believe transparency is the foundation of trust — and trust is the foundation of the long-term relationship between ringgit88 and the millions of sports and casino enthusiasts across Malaysia whom we serve every day.

FAQ – ringgit88 Privacy Policy

The most frequently asked questions from members about data protection and privacy.

ringgit88 stores several categories of personal data depending on how you use the platform. At a fundamental level, we retain Malaysian mobile phone number yours (used for login and OTP), transaction records (deposits and withdrawals in RM, payment methods used), game activity records (Sports Betting on football, badminton, cricket and more, as well as Live Casino sessions), and technical data such as IP address and device type. If you have completed the KYC process, we also retain your identity verification data. For a full list of the data we hold about you, you may submit a data access request to support@ringgit88.com.

ringgit88 never sells or trades your personal data. Data sharing occurs only in three limited situations: (1) Required service providers — payment processors such as DuitNow, TNG eWallet, GrabPay, Boost, ShopeePay, and FPX providers require minimal data to process your transactions; licensed game providers such as Pragmatic Play and Evolution Gaming require session data to operate games; (2) Legal requirement — we will disclose data to Malaysian authorities when required by law or court order; (3) Technology providers — limited technical data is shared with infrastructure providers who are bound by strict confidentiality agreements. All data sharing is governed by the principle of minimum necessity.

To request the deletion of your personal data, send an email to support@ringgit88.com with the subject line "Data Deletion Request" and include your registered phone number along with the reason for your request. We will first verify your identity, then process the request within 21 business days. Please note that full deletion may not be possible in all circumstances — particularly for data required for legal compliance, such as financial transaction records (which must be retained for 7 years under Malaysia's anti-money laundering laws) and KYC data. Data not subject to legal retention requirements will be permanently deleted using secure erasure methods.

If you suspect your ringgit88 account has been accessed without your authorisation, take the following steps immediately: (1) Contact ringgit88 customer support via 24/7 live chat or email at support@ringgit88.com — we can suspend your account immediately to prevent any further access; (2) Change your password immediately if you still have access to your account; (3) Check recent transaction records your account and report any transactions you do not recognise; (4) Enable two-factor authentication (2FA) if you have not already done so. The ringgit88 security team will investigate your account activity and take appropriate action. Please note that ringgit88 will never ask for your password through any communication channel.

Yes, you can opt out of marketing communications from ringgit88 at any time. There are several ways to do so: (1) Click the "Unsubscribe" link (unsubscribe) link found at the bottom of every marketing email we send; (2) Update notification settings your ringgit88 account under the "Privacy Settings" or "Notification Preferences" section; (3) Contact customer support via live chat or email to request removal from our marketing communications list. Please note that even after opting out of marketing communications, we will continue to send you important account-related messages such as transaction confirmations, security alerts, and terms of service updates, as these are necessary for the operation of your account.
Ringgit88's Commitment to Protecting Your Data

Ringgit88 protects all your personal information — including account data and transaction details — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We do not disclose or sell your data to any third party without your consent. For privacy enquiries, contact us at support@ringgit88.com. To understand the full terms governing use of the platform, please read Terms & Conditions us.

A Platform That's Secure & Trustworthy

Join ringgit88 – Your Data Protected, Your Privacy Respected

Over 500,000 Malaysian members trust ringgit88 with their data and money. SSL 256-bit encryption, PDPA compliance, and a 24/7 security team ensure you are always in safe hands.

Malaysia PDPA Compliance 256-bit SSL Encryption No Data Sales 24/7 BM Support
Bahasa Melayu