Privacy Policy

This Privacy Policy (the "Policy") is issued by ria88 (hereinafter referred to as "ria88", "we", "us", or "our"), the operator of the online gaming and sports betting platform available at https://ria88.cam (the "Platform"). This Policy applies to all visitors, registered members, and users of the Platform and any associated services.

ria88 is committed to processing personal data responsibly, transparently, and in accordance with applicable data protection laws and the requirements of our international gaming licence. We recognise that the personal data you entrust to us is sensitive — particularly in the context of financial transactions and identity verification — and we treat it with the highest level of care.

This Policy explains what personal data we collect, the purposes for which we process it, the lawful bases on which we rely, how long we retain it, with whom we may share it, the technical and organisational measures we apply to protect it, and the rights you hold over your own data.

By registering an account on the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should not create an account or continue using the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

ria88 collects Personal Data from you directly, automatically through your use of the Platform, and from authorised third parties. The categories of data we collect are as follows:

When you create an account, we collect:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (to verify that you are aged 21 or above);
• Email address and mobile phone number;
• Username and encrypted password;
• Residential address (city, state, postcode) — including city references such as Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, or Johor Bahru;
• Preferred currency (Malaysian Ringgit / MYR by default).

To satisfy our licensing and AML obligations, we collect:

• Scanned copies or photographs of government-issued identity documents (Malaysian MyKad, Passport, or Driver's Licence);
• Proof of address documents (utility bills from TNB or Syabas, bank statements, or official correspondence);
• Selfie photographs taken for biometric matching purposes;
• Source of funds declarations where applicable under enhanced due diligence procedures.

When you transact on the Platform, we collect:

• Deposit and withdrawal amounts and timestamps;
• Payment method identifiers — including e-wallet account references for Touch 'n Go eWallet, Boost, and GrabPay; DuitNow transfer references; FPX bank account details (masked) for Maybank, CIMB, Public Bank, and Hong Leong; and cryptocurrency wallet addresses for USDT TRC20 deposits;
• Transaction history, win/loss records, and bonus redemption data;
• Chargeback and dispute records where applicable.

Automatically collected when you use the Platform:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, pages visited, and in-game behaviour analytics;
• Login timestamps and access logs;
• Cookie identifiers and tracking pixels where you have consented to non-essential cookies.

When you contact ria88 support or engage with our communications:

• Live chat transcripts and support ticket content;
• Email correspondence with our team;
• Survey responses and feedback submissions.

ria88 uses the Personal Data it collects exclusively for the purposes described below. We do not use your data for purposes that are incompatible with those stated at the time of collection without first obtaining your consent.

ria88 processes your Personal Data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your account, process your deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Processing required to comply with our regulatory obligations, including KYC verification, AML monitoring, responsible gambling enforcement, and mandatory reporting to our licensing authority.
• Legitimate Interests: Processing carried out in our legitimate interests as a gaming operator — such as fraud prevention, platform security, and analytics — where those interests are not overridden by your fundamental rights.
• Consent: Where processing is not justified by any of the above, we will seek your explicit consent. In particular, the sending of direct marketing communications is consent-based, and you may withdraw consent at any time.

ria88 does not sell, rent, or trade your Personal Data to third parties. We share Personal Data only in the following limited and controlled circumstances:

• Payment Service Providers: We share transaction data with regulated payment processors that handle deposits and withdrawals on the Platform, including providers facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and USDT TRC20 cryptocurrency transactions. Each provider is bound by its own regulatory obligations and data protection commitments;
• Identity Verification Providers: We share KYC documents with third-party identity verification services to conduct automated and manual identity, age, and document checks;
• Gaming Software Providers: Game providers may receive anonymised or pseudonymised session data strictly for the purposes of game functionality, fairness auditing, and technical support;
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to our licensing authority, financial intelligence units, or law enforcement agencies where we are legally compelled to do so or where we believe disclosure is necessary to prevent fraud, money laundering, or harm to individuals;
• Group Companies: ria88 may share data within its corporate group where necessary for operational, compliance, or internal audit purposes, subject to equivalent data protection standards;
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by ria88 may access Personal Data on a strictly need-to-know basis and under obligations of confidentiality.

As an internationally licensed online gaming platform, ria88 may transfer your Personal Data to service providers and partners located in countries outside of Malaysia. Where such transfers occur, ria88 takes steps to ensure that an adequate level of data protection applies through one or more of the following mechanisms:

• Entering into standard contractual clauses or data processing agreements with receiving entities that impose data protection obligations equivalent to those applicable in Malaysia;
• Transferring only to jurisdictions that have been assessed as providing an adequate level of data protection;
• Ensuring that any transfer is necessary for the performance of a contract with you (e.g., processing a payment through a global payment network).

You may request further information about the safeguards applied to international data transfers by contacting our support team at the details provided in Section 15.

ria88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods applicable to the primary categories of data are as follows:

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

ria88 implements a layered set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Encryption in Transit: All data exchanged between your device and the ria88 Platform is protected using TLS 1.2 or higher (256-bit SSL encryption). This applies to all account activity, payment processing, and support communications;
• Encryption at Rest: Sensitive personal data — including identity documents and financial records — is stored in encrypted form using industry-standard AES-256 encryption;
• Access Controls: Internal access to Personal Data is restricted on a role-based need-to-know basis. All staff with access to personal data undergo mandatory data protection training;
• Two-Factor Authentication: Two-factor authentication (2FA) is available to all Members and is mandatory for certain high-value account operations;
• Penetration Testing: ria88 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in its infrastructure;
• Incident Response: ria88 maintains a documented data breach response procedure. In the event of a breach that poses a risk to Data Subjects, we will notify affected individuals and relevant authorities in a timely manner consistent with applicable legal obligations.

ria88 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. The categories of cookies we use are described below:

You may manage your cookie preferences for non-essential categories through your browser settings at any time. Please note that disabling certain cookies may affect the functionality or performance of the Platform. ria88 does not respond to browser "Do Not Track" signals at this time, pending the emergence of a consistent industry standard.

Subject to applicable data protection law and certain limited exceptions (including our regulatory retention obligations), you hold the following rights in respect of your Personal Data:

To exercise any of the rights listed above, please contact ria88's data protection team using the contact details set out in Section 15 of this Policy. We will acknowledge your request within 72 hours and respond substantively within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

The ria88 Platform is strictly for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals below the age of 21. Age verification is a mandatory component of the KYC process, and we will refuse or suspend any account where verification indicates the user is below this minimum age.

If ria88 discovers or is notified that Personal Data has been collected from a person under the age of 21 without the required verification having been completed, we will take immediate steps to delete such data and close the relevant account. If you believe that a minor has registered on the Platform, please notify us immediately through our customer support channels.

The ria88 Platform may contain links to or integrations with third-party services, including game providers, payment processors, and responsible gambling resources. This Privacy Policy applies only to Personal Data collected and processed by ria88. ria88 is not responsible for the privacy practices of third-party services, and we encourage you to review the privacy policies of any third-party service you access through or in connection with the Platform.

In particular, payment service providers — including those operating the Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank platforms — maintain their own independent privacy policies that govern the processing of your financial and personal data within their respective systems. ria88 is not liable for the data handling practices of these third parties.

ria88 reserves the right to update or revise this Privacy Policy at any time, including to reflect changes in applicable law, regulatory guidance, our services, or our data processing practices. When material changes are made, we will notify active Members by email or via a prominent in-Platform notification before the changes take effect.

The "Last Updated" date at the top of this Policy will be revised each time the Policy is updated. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the changes. We therefore recommend that you review this page periodically to remain informed about how ria88 processes your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by ria88, please contact our data protection team through any of the following channels:

When submitting a data rights request, please include your registered email address and a description of the right you wish to exercise. To protect your privacy, we may need to verify your identity before acting on your request. We will not charge a fee for reasonable data rights requests.