1998 Rich Privacy Policy – Personal Data Protection for Malaysian Players

At 1998 Rich, your privacy is not merely a legal obligation — it is our moral responsibility to every player who trusts our platform. This document clearly explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: January 2026
Malay (ms-MY)
PDPA 2010 Compliant
Main Content
Data We Collect
Purpose of Data Use
Protection & Security
Your Rights as a User
Use of Cookies
Contact Data Officer

Welcome to 1998 Rich Privacy Policy. As an online casino platform serving players across Malaysia, we fully recognise the importance and sensitivity of your personal data. This document serves as our official notice to you regarding our personal data processing practices, and forms part of the overall agreement between you and 1998 Rich together with Terms & Conditions us.

Our Commitment: 1998 Rich operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We only process your personal data for purposes that are lawful, necessary, and have your consent — whether given explicitly at registration or implicitly through your use of our services.

01

Introduction & Scope of This Privacy Policy

This Privacy Policy applies to all individuals who access or use the platform 1998 Rich — including website visitors, prospective members, registered members, and former members. It covers all channels through which you interact with us, namely:

  • The official website 1998rich.biz and all associated subdomains.
  • The 1998 Rich mobile app (Android and iOS), where available.
  • Communications via email, WhatsApp, live chat, and other customer support channels.
  • Financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and other supported Malaysian payment methods.

This policy does not apply to third-party websites or services that may be accessible via links on our platform. We encourage you to read the respective privacy policies of those third parties separately.

02

Types of Personal Data We Collect

We collect your personal data through various means — directly when you provide it to us, automatically as you use the platform, and occasionally from legitimate third-party sources. The categories of data we collect are as follows:

Data Category Specific Examples How We Collect Data
Identification Data Full name, MyKad number, date of birth, gender Registration form, KYC
Contact Data Mobile number, email address, residential address Registration, profile updates
Financial Data Bank name, account number, e-wallet ID, transaction history Deposit and withdrawal process
Technical Data IP address, device type, web browser, operating system Automatic server logs
Usage Data Games played, total bets placed, session duration Platform analytics systems
Communication Data Live chat transcripts, support emails, complaints Customer support interactions

Note: We not collect credit card numbers directly — all payments are processed through PCI-DSS certified third-party payment gateways. We receive only verification tokens, not full card numbers.

03

Purpose of Personal Data Collection & Use

1998 Rich uses your personal data solely for lawful, relevant, and proportionate purposes. We do not process your data for unrelated purposes without first obtaining fresh consent from you. The primary purposes for which data is used are as follows:

  • Account Management: Creating, verifying, and managing your member account, including the login process, two-factor authentication, and password recovery.
  • Transaction Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other supported Malaysian payment methods securely and accurately.
  • Identity Verification (KYC): Fulfilling anti-money laundering (AML) and counter-terrorism financing (CFT) obligations through legally mandated identity verification.
  • Customer Support: Handling your enquiries, complaints, and support requests efficiently and effectively.
  • Platform Security: Detecting and preventing fraud, account abuse, illegal activity, and other security threats.
  • Promotional Communications: Sending information about bonuses, promotions, and special offers — only to members who have opted in to receive marketing communications.
  • Responsible Gaming: Monitors gaming patterns to identify signs of problem gambling and provide appropriate support through our responsible gaming programme.
  • Legal Compliance: Fulfilling reporting and compliance obligations under applicable Malaysian laws, including PDPA 2010, the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001, and directives issued by relevant authorities.
04

Legal Basis for Data Processing

In accordance with Malaysia's PDPA 2010, 1998 Rich only processes your personal data where a valid legal basis exists. Depending on the type of data and purpose of processing, the legal bases we rely on are:

  • Consent: For marketing communications and any processing beyond core operational requirements — you provide explicit consent at registration and may withdraw it at any time.
  • Contract Performance: Processing necessary to fulfil our obligations to you under the Terms & Conditions, including account management and payment processing.
  • Legitimate Interests: Processing for security purposes, fraud detection, and service improvement, where our legitimate interests do not override your fundamental rights and freedoms.
  • Legal Obligations: Processing required under Malaysian law, including KYC, AML, and reporting obligations to the relevant authorities.
05

Sharing of Data with Third Parties

1998 Rich does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in the course of operating a secure and compliant platform, we may share your data with the following categories of third parties:

  • Payment Service Providers: Payment gateways and e-wallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX providers to securely process your financial transactions.
  • KYC Service Provider: Accredited third-party identity verification companies that assist us in conducting the KYC and AML checks required by law.
  • Game Software Providers: Casino game software companies (such as Pragmatic Play and Evolution Gaming) that may require certain technical data to ensure games function correctly.
  • Cloud Hosting & Security Services: Server infrastructure and cybersecurity providers that process data on our behalf under strict data processing agreements.
  • Legal Authorities: Law enforcement agencies, regulatory bodies, or courts when we are required to do so under Malaysian law.

Contractual Protection: All third parties who receive your personal data are bound by strict data protection agreements that prohibit them from using your data for any purpose beyond what has been agreed. They are also required to implement security measures that meet our standards.

06

Security Measures & Data Protection

1998 Rich takes the security of your personal data very seriously. We implement multiple layers of technical and organisational safeguards to protect your data from unauthorised access, disclosure, alteration, or destruction:

Technical Safeguards
  • 256-bit SSL/TLS encryption for all data transmissions
  • Static data encryption (data at rest) at the database level
  • Two-factor authentication (2FA) for account access
  • Firewalls and 24/7 intrusion detection systems
  • Regular security (penetration) testing
Organisational Safeguards
  • Data access restricted to authorised personnel only
  • Mandatory data privacy and security training for all staff
  • Non-disclosure agreements (NDAs) binding all employees
  • Documented data incident response procedures
  • Internal security audits every quarter

While we take every reasonable step to protect your data, no data transmission over the internet can be guaranteed 100% secure. You are also responsible for keeping your account password confidential and not sharing it with anyone.

07

Personal Data Retention Period

1998 Rich retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by Malaysian law. Our general data retention principles are as follows:

  • Active Account Data: Retained for the duration your account remains active and in use.
  • Post-Account Closure Data: Retained for a minimum of 7 years following account closure to meet legal, tax, and audit requirements under the Anti-Money Laundering Act 2001.
  • Financial Transaction Data: Deposit records, withdrawal records, and betting history are retained for a minimum of 7 years for AML compliance and financial audit requirements.
  • Support Communication Logs: Retained for 3 years for quality control purposes and as a reference in the event of a dispute.
  • Technical Data (Server Logs): Retained for 12 months for security purposes and technical troubleshooting.
  • Marketing Data: Retained until you withdraw your consent to receive marketing communications.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

08

Your Rights Under PDPA 2010

As a data subject under Malaysia's PDPA 2010, you have certain rights regarding the personal data we hold about you. 1998 Rich is committed to respecting and facilitating the exercise of these rights:

1
Right of Access

You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 21 business days. A reasonable processing fee may apply.

2
Right to Rectification

You have the right to request the correction of any personal data we hold that is inaccurate, incomplete, or out of date. Basic information can be updated directly through your account settings.

3
Right to Withdraw Consent

You may withdraw your consent to the processing of your data for marketing purposes at any time by clicking "Unsubscribe" in any email or by contacting our support team.

4
Right to Object to Processing

You have the right to object to the processing of your personal data for specific purposes, particularly processing based on our legitimate interests, subject to applicable legal obligations.

5
Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. This right is subject to our legal obligations to retain data for the minimum period prescribed by law.

6
Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or through our internal complaints channel.

To exercise any of the above rights, please contact our Data Protection Officer at privacy@1998rich.biz including your full name, account number, and a clear description of your request.

09

Use of Cookies & Tracking Technologies

Platform 1998 Rich uses cookies and similar tracking technologies to enhance user experience, analyse website traffic, and ensure account security. The types of cookies we use are as follows:

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential to platform operation.
  • Performance Cookies: Collects information on how you use our website — pages visited, time spent, and any errors encountered — to help us improve our services.
  • Functional Cookies: Storing your preferences such as language, preferred currency, and display settings to provide a more personalised experience.
  • Analytics Cookies: Helping us understand overall platform usage patterns for strategic planning and product improvement purposes. This data is collected in aggregate and does not identify you individually.

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and your experience on our platform.

10

Links to Third-Party Websites

Platform 1998 Rich may contain links to third-party websites or services for your convenience. This includes game software providers, payment providers, and regulatory bodies. Please note that:

  • This Privacy Policy applies only to the 1998 Rich only and does not cover third-party websites linked through our platform.
  • We are not responsible for the privacy practices or content of any third-party websites.
  • We encourage you to read the privacy policy of every third-party website you visit before providing any personal information.
11

Changes to This Privacy Policy

1998 Rich reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending notifications to all registered members via email or in-app notifications at least 14 days before changes take effect.
  • Displaying a clear notice on our platform's homepage regarding upcoming changes.

Continued use of the platform 1998 Rich after the effective date of such changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and discontinue use of our services.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your personal information. Previous versions of this Privacy Policy are available upon request from our support team for reference.

12

Contact Our Data Protection Officer

1998 Rich has appointed a Data Protection Officer responsible for ensuring PDPA 2010 compliance and handling all privacy-related enquiries. If you have any questions, concerns, or wish to exercise your rights, please contact us through the following channels:

Privacy-Specific Email
privacy@1998rich.biz
Response within 72 hours
Live Chat 24/7
Available on platform
Immediate response
General Support
support@1998rich.biz
Response within 24 hours

Why Your Privacy Is Safe with 1998 Rich

Six core pillars of our data protection commitment to every player in Malaysia

256-Bit SSL Encryption Across All Levels

Every bit of data transmitted between your device and our servers 1998 Rich is protected with 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions such as Maybank and CIMB. Your personal information and financial transactions are never transmitted in the clear.

Full Compliance with Malaysia's PDPA 2010

Privacy Policy and data processing practices 1998 Rich is designed and periodically reviewed by legal experts to ensure full compliance with the Personal Data Protection Act 2010. You have clear and enforceable rights under Malaysian law.

Strict Data Access Controls

Your personal data is only accessible to staff 1998 Rich who genuinely require it to carry out their duties. All access is automatically logged and monitored. No staff member may access your data without clear justification and tiered authorisation.

Secure Payments via Local Channels

All financial transactions on 1998 Rich processed through PCI-DSS certified payment gateways — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. Your full card number or bank account details are never stored directly in our systems.

No Sale of Data to Third Parties

1998 Rich has never sold, rented, or traded your personal data to any third party for their marketing purposes, and never will. Your data belongs to you — we use it solely to provide you with the best possible service and to meet our legal obligations.

Full Rights Over Your Data

You may request access to, correction of, or deletion of your personal data at any time. You may also withdraw your marketing consent with immediate effect. Our Data Protection Officer team is ready to help you exercise all rights guaranteed under PDPA 2010.

Ready to Play with Peace of Mind at 1998 Rich?

Your personal data is fully protected. Enjoy a secure Malaysian online casino experience — from slots, baccarat, and table games to Live Casino and Sports Betting on the Super League and EPL. Register now and claim your exclusive welcome bonus.

PDPA 2010 Protected Data
256-bit SSL Encryption
Certified KYC
Bahasa Melayu