Privacy Policy

1Introduction

This Privacy Policy ("Policy") sets out how rugi88 ("rugi88", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "your", "Player") who access or use the rugi88 website at https://rugi88.cam and any associated mobile or web applications (collectively, the "Platform").

rugi88 recognises the importance of privacy and is committed to handling your personal information responsibly. By registering an Account on the Platform or otherwise accessing our services, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

2Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identification numbers, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means rugi88, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third party that Processes Personal Data on behalf of rugi88 under a contractual arrangement.
• "KYC Data" means identity and verification documentation provided by a Player in connection with our Know Your Customer obligations.
• "Cookies" means small text files placed on your device by the Platform to collect standard internet log information and visitor behaviour information.
• "Account" means the personal Player account created upon registration on the Platform.

3Data We Collect

We collect and process the following categories of Personal Data:

3.1 Registration & Identity Data

• Full legal name as it appears on your identity document;
• Date of birth (for mandatory age verification — players must be aged 21 or above);
• Residential address, including city and postcode;
• Email address and contact telephone number;
• Username and encrypted Account password.

3.2 KYC & Verification Data

• Copies of government-issued identity documents (e.g., Malaysian MyKad, Passport, or Driver's Licence);
• Proof of residential address (e.g., utility bill, bank statement dated within 3 months);
• Selfie photograph for liveness and identity match verification;
• Documentation confirming the source of funds where required by our compliance procedures.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Malaysian Ringgit (MYR / RM) and timestamps;
• Payment method details used for transactions (e.g., FPX account reference, e-wallet identifier for Touch 'n Go, Boost, or GrabPay; partial card details where applicable);
• Cryptocurrency wallet addresses for USDT and BTC transactions;
• Account balance history and betting transaction records.

3.4 Usage & Technical Data

• IP address and approximate geolocation derived therefrom;
• Browser type, operating system, and device identifiers;
• Session duration, pages visited, features used, and click-stream data;
• Login timestamps and Account access logs.

3.5 Communications Data

• Records of communications between you and our customer support team via live chat or email;
• Records of promotional communications where you have consented to receive them.

4How We Collect Your Data

rugi88 collects your Personal Data through the following channels:

Collection Method	Examples of Data Collected
Direct registration	Name, date of birth, email, contact number, address entered during sign-up
KYC submission	Identity documents, selfie photograph, proof of address
Payment processing	FPX/DuitNow references, e-wallet identifiers, crypto wallet addresses
Platform usage	IP address, device data, session logs, game history
Cookies & tracking	Browser preferences, visit frequency, feature engagement
Customer support interactions	Chat transcripts, email correspondence, complaint records
Third-party verification providers	Identity verification results, fraud screening scores

5Data Processing

rugi88 processes your Personal Data for the following purposes:

• Account administration: To create, manage, and maintain your Player Account, including processing deposits, withdrawals, and game participation.
• Identity verification: To complete KYC checks required under our international gaming licence, verify that you meet the 21+ age requirement, and confirm the legitimacy of your payment methods.
• Transaction processing: To process deposits and withdrawals via FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, USDT, and BTC.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited activities.
• Regulatory compliance: To meet our obligations under our gaming licence and applicable anti-money laundering requirements, including maintaining transaction records and reporting to competent authorities where required.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible gambling: To administer player protection tools including deposit limits, session reminders, and self-exclusion where requested.
• Platform improvement: To analyse usage patterns, resolve technical issues, and improve the features and performance of the Platform.
• Marketing communications: To send promotional offers and updates where you have provided consent and in accordance with applicable regulations. You may opt out at any time.

6Legal Basis for Processing

rugi88 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing necessary to perform our contract with you, including Account management and payment processing.
• Legal obligation: Processing required to comply with our regulatory and licensing obligations, including KYC, anti-money laundering checks, and record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting us or updating your Account preferences.

7Data Sharing & Disclosure

rugi88 does not sell or rent your Personal Data to third parties. We may share your Personal Data with the following categories of recipients where necessary:

• Payment service providers: Our approved payment processors (including FPX, DuitNow, and e-wallet operators) receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify identity documents and conduct age verification checks.
• Fraud prevention and security services: External services that assist in detecting and preventing fraudulent activity, including IP screening and device fingerprinting providers.
• IT infrastructure providers: Cloud hosting and infrastructure providers who store and process Platform data on our behalf under strict data processing agreements.
• Regulatory authorities: Where required by law, regulation, court order, or competent authority directive, we will disclose Personal Data without prior notice to you.
• Professional advisers: Legal, accounting, and compliance advisers who are bound by professional confidentiality obligations.

8Data Retention

rugi88 retains your Personal Data only for as long as is necessary for the purposes set out in this Policy or as required by applicable law and our regulatory obligations. The following general retention periods apply:

Data Category	Retention Period
Account registration data	Duration of Account plus 5 years following closure
KYC & identity verification documents	Duration of Account plus 5 years following closure
Financial transaction records	Minimum 5 years from date of transaction
Customer support correspondence	3 years from date of last interaction
Platform usage and technical logs	Up to 13 months on a rolling basis
Marketing consent records	Until consent is withdrawn plus 3 years

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised. Where deletion is not immediately feasible for technical reasons, we will ensure the data is isolated and protected from further use until it can be securely destroyed.

9Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session integrity, and collect analytical data. The categories of cookies we use include:

• Strictly necessary cookies: Essential for the operation of the Platform, including session management, login authentication, and fraud prevention. These cannot be disabled.
• Functional cookies: Allow the Platform to remember your preferences, such as language settings and display options.
• Analytical cookies: Used to collect anonymised data about Platform usage, including pages visited, session duration, and feature engagement. This helps us improve the Platform over time.
• Marketing cookies: Used only where you have consented, to personalise promotional content and measure the effectiveness of our campaigns.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Most browsers allow you to refuse or delete cookies — refer to your browser's help documentation for instructions.

10Your Rights as a Data Subject

As a data subject, you hold the following rights in relation to your Personal Data held by rugi88. To exercise any of these rights, please contact us at the details provided in Section 15.

We will respond to all verified data subject requests within 30 days of receipt. In complex cases this period may be extended by a further 60 days, in which case you will be notified of the extension and the reasons for it.

11Data Security

rugi88 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and our servers;
• Encryption of sensitive Personal Data and KYC documentation at rest;
• Role-based access controls limiting internal access to Personal Data to authorised personnel only;
• Regular penetration testing and security vulnerability assessments;
• Multi-factor authentication requirements for administrative access to production systems;
• Incident response procedures to detect, contain, and report data security incidents in accordance with applicable notification requirements.

12Minors and Age Restriction

The Platform is strictly intended for individuals aged 21 years and above. rugi88 does not knowingly collect, process, or retain the Personal Data of any person under the age of 21. We enforce mandatory age verification at the point of registration and during the KYC process.

If we discover or have reasonable grounds to believe that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. If you are aware that a minor has registered on our Platform, please contact us immediately at the details in Section 15.

13Cross-Border Data Transfers

rugi88 operates globally and may transfer your Personal Data to servers or service providers located outside of Malaysia. When we transfer Personal Data internationally, we take appropriate steps to ensure that the receiving jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards are in place between rugi88 and the receiving entity.

These safeguards may include standard contractual clauses, binding corporate rules, or other recognised transfer mechanisms. By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia where necessary for the provision of our services.

14Policy Amendments

rugi88 reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page. In the event of significant changes affecting your rights, we will provide notice via your registered email address or through a prominent notice on the Platform.

Your continued use of the Platform after the publication of revised Terms constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how we are protecting your information.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by rugi88, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the Platform
• Email: [email protected]

Please mark your correspondence with the subject line "Privacy & Data Protection Request" to ensure your enquiry is directed to the appropriate team. We will acknowledge your request within 5 business days and aim to resolve all privacy-related matters within 30 days.