Privacy Policy – 1988rich

1. Introduction

1988rich ("1988rich", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the 1988rich online gaming platform, website at 1988rich.win, mobile applications, and all associated services (collectively, the "Platform").

This Privacy Policy ("Policy") describes how 1988rich collects, uses, stores, discloses, and safeguards personal information provided by or collected from users ("you", "your", "Player") in connection with your use of the Platform. It also sets out the rights available to you in relation to your personal data.

By registering an account, using the Platform, or continuing to browse 1988rich.win, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described herein, please do not use the Platform.

This Policy should be read alongside the 1988rich Terms & Conditions, which are incorporated by reference.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data collected through the Platform is 1988rich, operating under its international gaming licence. Correspondence regarding data protection matters should be directed to the contact details provided in Section 14 of this Policy.

3. Information We Collect

1988rich collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name;
• Date of birth (for age verification purposes);
• Malaysian phone number or email address;
• Username and encrypted password;
• National identity card (MyKad) number or passport number, where required for KYC verification.

3.2 Financial Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references;
• eWallet identifiers (e.g., Touch 'n Go eWallet, Boost) used for deposits and withdrawals — full account credentials of these services are never stored by 1988rich;
• Bank account details provided for withdrawal processing, stored in encrypted form.

3.3 Gaming Activity Data

• Game session logs, wager amounts, win/loss records, and session durations;
• Bonus usage, promotional activity, and VIP tier progression;
• Sports betting selections, stake amounts, and settlement outcomes.

3.4 Technical & Device Data

• IP address, device type, operating system, and browser version;
• Geolocation data (country and city level) derived from IP address;
• Session timestamps, login history, and failed authentication attempts.

3.5 Communications Data

• Records of live chat conversations, support emails, and in-platform messaging with 1988rich staff;
• Responses to surveys or feedback forms where you voluntarily participate.

4. How We Use Your Data

1988rich uses collected personal data for the following purposes:

• Account creation and management: To register your account, verify your identity and age (21+), and maintain your player profile;
• Payment processing: To facilitate deposits and withdrawals via supported MYR payment methods and to comply with anti-money laundering (AML) obligations;
• Service delivery: To provide access to casino games, slots, live dealer tables, and the sportsbook;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account compromise, and abuse of Platform features;
• Legal and regulatory compliance: To fulfil obligations under applicable gaming regulations, AML laws, and KYC requirements imposed by our licensing authority;
• Customer support: To respond to your queries, resolve complaints, and manage support interactions;
• Responsible gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, and to administer self-exclusion and limit tools;
• Marketing communications: To send promotional offers, bonus notifications, and product updates where you have provided consent or where a legitimate interest applies, subject to your opt-out rights;
• Platform improvement: To analyse aggregated usage data, diagnose technical issues, and improve user experience.

5. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, 1988rich relies on the following:

• Contractual necessity: Processing required to provide the services you have requested when creating an account and using the Platform;
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, and other legal duties imposed on 1988rich as a licensed gaming operator;
• Legitimate interests: Processing for fraud prevention, security, and platform improvement where those interests are not overridden by your rights;
• Consent: Processing for direct marketing communications, where consent has been explicitly given and can be withdrawn at any time.

6. Cookies & Tracking Technologies

The 1988rich Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your session, and improve user experience. Cookies used by 1988rich fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Store your preferences such as language selection and display settings to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how the Platform is used to help improve features and performance. No individual player is identifiable from analytics data.
• Marketing cookies: Used to deliver relevant promotional content on-Platform where you have consented to this use.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in and use the Platform.

7. Data Sharing & Disclosure

1988rich does not sell, rent, or trade your personal data to any third party. Data may be shared in the following limited circumstances:

• Game providers: Game session data is shared with game providers (e.g., Pragmatic Play, PG Soft, Microgaming) to the minimum extent necessary to operate their games on the Platform;
• Payment processors: Transaction data is shared with payment service providers (e.g., FPX gateway operators, eWallet platforms) solely to facilitate deposits and withdrawals;
• Compliance and legal authorities: 1988rich will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or to protect the rights, property, and safety of 1988rich, its players, or the public;
• KYC verification services: Identity and age verification data may be processed by third-party KYC service providers who are contractually bound to process data only on 1988rich's instructions and to the same data protection standards;
• Corporate transactions: In the event of a merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction, subject to the same privacy protections.

8. International Data Transfers

As an internationally licensed gaming operator, 1988rich may transfer personal data to servers and service providers located outside Malaysia. Where such transfers occur, 1988rich takes reasonable steps to ensure that adequate data protection safeguards are in place, including contractual data processing agreements with receiving parties that reflect internationally recognised data protection principles.

By using the Platform, Malaysian players acknowledge and consent to the transfer of their personal data to jurisdictions outside Malaysia where the Platform's infrastructure and licensed service providers operate.

9. Data Retention

1988rich retains personal data for as long as your account is active and for a period thereafter as required by applicable law and our licensing obligations. Specific retention periods apply as follows:

• Account and identity data: Retained for a minimum of five (5) years after account closure, as required by AML and KYC regulations;
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements;
• Gaming session logs: Retained for three (3) years after the session date;
• Customer support communications: Retained for two (2) years after the date of the last communication;
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 1988rich:

• Right of access: You may request a copy of the personal data 1988rich holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances;
• Right to data portability: You may request a machine-readable copy of data you have provided to us;
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 1988rich support via live chat or at [email protected]. We will respond within 30 days. Some rights may be limited where we are required to retain data by law or to fulfil our gaming licence obligations.

11. Security Measures

1988rich implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 1988rich servers;
• Encrypted storage of passwords using industry-standard hashing algorithms — plaintext passwords are never stored;
• Two-factor authentication (2FA) available on all accounts and recommended for players who deposit regularly;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular internal security assessments and third-party penetration testing;
• Automatic session timeout for inactive accounts.

12. Children's Privacy

The 1988rich Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe a minor may have registered on the Platform should contact support immediately.

13. Changes to This Policy

1988rich reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered players via email or in-Platform notification at least seven (7) days before taking effect where operationally practicable. The "Last updated" date at the top of this page indicates the most recent revision. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

14. Contact & Complaints

For privacy-related queries, requests to exercise your data rights, or complaints regarding how 1988rich handles your personal data, please contact us via:

• Live Chat: Available 24/7 via the Platform — fastest response channel;
• Email: [email protected] — please include "Privacy Request" in the subject line.

1988rich will acknowledge privacy requests within 5 business days and aim to resolve all complaints within 30 days. If you are dissatisfied with our response, you may have the right to lodge a complaint with a relevant data protection supervisory authority in your jurisdiction.