Privacy Policy — rich2club

Section 01

Introduction

This Privacy Policy (hereinafter referred to as "this Policy" or "the Policy") sets out the data processing practices of rich2club (hereinafter referred to as "rich2club", "the Company", "we", "us", or "our") in relation to personal data collected through the operation of our online gaming and sports betting platform, accessible at https://rich2club.cam (the "Platform" or "Website").

rich2club is committed to protecting the privacy and personal data of all registered players, prospective users, and visitors to the Platform. We process personal data in accordance with applicable data protection laws and in a manner that reflects the trust our Malaysian player base places in us.

By registering an account, depositing funds, or otherwise accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

Section 02

Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — a data subject — who can be identified directly or indirectly by reference to an identifier such as name, identification number, location data, or one or more factors specific to their physical, physiological, or online identity.
• "Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means rich2club, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of rich2club, including payment processors, KYC verification providers, and hosting infrastructure suppliers.
• "KYC" (Know Your Customer) means the regulatory identity and age verification process conducted by rich2club to comply with applicable anti-money laundering and responsible gambling obligations.
• "Cookies" means small text files stored on your device by the Platform to facilitate session management, preference storage, and analytics.
• "You" or "Data Subject" means any natural person who accesses or uses the rich2club Platform.

Section 03

Data We Collect

rich2club collects only the personal data that is necessary for the lawful and efficient operation of the Platform. The categories of personal data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless such collection is strictly required by applicable law and you have provided explicit consent.

Section 04

Data Processing

rich2club processes your personal data for the following purposes:

• Account Registration and Management: To create, maintain, and administer your player account on the Platform.
• Identity and Age Verification: To conduct KYC checks confirming that you are at least 21 years of age and to verify your identity in accordance with anti-money laundering obligations.
• Payment Processing: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and other approved Malaysian payment channels, and to maintain accurate transaction records.
• Customer Support: To investigate and respond to support requests, complaints, disputes, and account queries submitted by players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised access, money laundering, and other forms of misconduct or abuse.
• Responsible Gambling: To monitor gaming behaviour and identify patterns potentially indicative of problem gambling, and to action self-exclusion requests, deposit limits, and related tools.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money laundering laws, data protection regulations, and any directions issued by competent regulatory authorities.
• Service Improvement: To analyse usage patterns, improve platform performance, develop new features, and personalise the user experience where you have provided consent.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant gaming updates — only where you have opted in to receive such communications.

Section 05

Legal Basis for Processing

rich2club processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and rich2club — including account registration, payment processing, and the delivery of gaming services — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, anti-money laundering checks, and record-keeping — is conducted on the basis of legal obligation.
• Legitimate Interests: Processing undertaken to protect the Platform from fraud, abuse, and security threats, and to improve the quality of our services, is conducted on the basis of our legitimate business interests, balanced against your privacy rights.
• Consent: Where you have provided explicit consent — for example, in relation to marketing communications or optional personalisation features — we process your data on the basis of that consent. You may withdraw consent at any time by contacting our support team.

Section 06

Data Sharing & Disclosure

rich2club does not sell, rent, or otherwise transfer your personal data to third-party organisations for their own marketing or commercial purposes. Your personal data may be shared with third parties only in the following circumstances and subject to strict contractual data protection obligations:

• Payment Service Providers: Personal and financial data is shared with payment processors and gateway providers — including those supporting FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect — solely to facilitate the processing of your transactions.
• KYC and Identity Verification Providers: Identity documents and related data may be shared with licensed KYC service providers for the purpose of verifying your identity and complying with age-verification obligations.
• Fraud Prevention and Security Partners: Usage data and transaction records may be shared with fraud prevention services to detect and prevent financial crime.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or direction from a competent regulatory authority, rich2club may disclose your personal data to law enforcement agencies, financial regulators, or other governmental bodies.
• Technology Infrastructure Providers: Cloud hosting and infrastructure service providers may have access to personal data as part of platform operations. All such providers are bound by confidentiality and data processing agreements.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of rich2club, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and any applicable changes to this Policy.

All third-party processors are vetted for data security compliance before engagement, and all processing agreements include appropriate data protection clauses consistent with applicable law.

Section 07

Cookies & Tracking Technologies

The rich2club Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session state, and gather aggregated usage analytics. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state and security tokens. These cookies cannot be disabled without affecting core Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated and anonymised data about how visitors use the Platform — including pages visited, session duration, and navigation paths. This information helps us improve Platform design and user experience.
• Functionality Cookies: Used to remember your preferences — such as language settings, game filters, and display options — to personalise your experience on return visits.
• Marketing Cookies: Used only where you have provided consent, to display relevant promotional content and track the effectiveness of marketing campaigns. You may opt out of marketing cookies at any time via your browser settings or by contacting our support team.

You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Most modern browsers allow you to refuse cookies or receive an alert when a cookie is being sent.

Section 08

Data Retention

rich2club retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention framework is as follows:

• Active Account Data: Retained for the duration of your account and for a period of at least 5 years following account closure, in accordance with standard financial recordkeeping obligations.
• Transaction and Financial Records: Retained for a minimum of 7 years from the date of the relevant transaction, in line with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of 5 years following account closure or the last transaction, whichever is later.
• Communication and Support Records: Retained for up to 3 years following the resolution of the relevant support interaction or complaint, unless a longer period is required for ongoing legal proceedings.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it will be deleted or anonymised within a reasonable period.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Section 09

Data Security

rich2club implements a comprehensive programme of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• At-rest encryption for databases containing personal and financial data.
• Multi-factor authentication for all internal staff accessing production systems.
• Role-based access control ensuring staff access only the data required for their specific function.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals.
• Intrusion detection systems and real-time security monitoring across all Platform infrastructure.
• Comprehensive incident response procedures with defined escalation paths and regulatory notification obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rich2club will notify you and, where required by applicable law, the relevant supervisory authority, without undue delay.

Section 10

User Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by rich2club. To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to all verified requests within a reasonable timeframe.

Please note that certain rights are subject to conditions and exceptions under applicable law. Where we are unable to fulfil a request in full — for example, due to overriding legal obligations — we will explain the reasons in our response. You will not be charged a fee for exercising your data rights in most circumstances.

Section 11

Minors

The rich2club Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21.

Age verification is conducted at the point of registration and may be reinforced through documentary KYC checks at any subsequent stage of the account lifecycle. Where rich2club discovers that an account has been registered by a person under 21, the account will be immediately suspended, all funds will be returned to the source payment method, and all personal data associated with the account will be securely deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that your minor child has registered an account or provided personal data to rich2club, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

Section 12

Third-Party Links & Integrations

The rich2club Platform may contain references to or integrations with third-party services — including payment gateways such as FPX and DuitNow, and e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay — for the purposes of facilitating financial transactions.

When you interact with a third-party service — for instance, when completing a payment through your Maybank2u or CIMB Clicks interface — you do so under that provider's own privacy policy and terms of service. rich2club is not responsible for the data practices of third-party providers and strongly recommends that you review the privacy policies of any third-party service you interact with.

rich2club does not receive access to your online banking credentials. All payment authentication occurs directly within the relevant bank or e-wallet application and is not visible to or stored by rich2club.

Section 13

Changes to This Policy

rich2club reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — meaning they significantly affect how we collect, use, or protect your personal data — we will provide advance notice via email notification or a prominent notice on the Platform prior to the amended Policy taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how rich2club protects your personal information. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you have concerns about any material change to this Policy, you may close your account and request deletion of your data in accordance with Section 10 of this Policy.

Section 14

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rich2club processes your personal data, please contact our support team using the details below. We serve players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and beyond — and our team is available around the clock.

For data protection requests specifically — including access requests, erasure requests, and objections to processing — please include "Data Protection Request" in the subject line of your email to ensure prompt routing to the appropriate team member.