Privacy Policy — ria66

ria66 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at ria66.cam. We take the privacy and security of our users' personal data seriously. This Privacy Policy sets out the basis on which we collect, process, store, and share personal information obtained from players, registered account holders, and visitors to the Platform.

This Policy applies to all personal data we hold relating to individuals who: (a) register an account on ria66; (b) deposit funds or engage in gaming or betting activity on the Platform; (c) contact our customer support team; or (d) visit the Platform without registering.

By accessing the Platform, creating an account, or making a deposit, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree to this Policy, you should not access or use the Platform.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your relationship with ria66.

In this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, ria66.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of ria66, such as payment service providers, analytics platforms, or KYC verification services.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process conducted by ria66 to comply with applicable regulatory requirements and responsible gambling obligations.
• "Cookie" means a small text file stored on a user's device by a web browser, used to retain session information, preferences, or tracking data.
• "PDPA 2010" means the Personal Data Protection Act 2010 (Malaysia), which sets out obligations for the processing of personal data in commercial transactions involving Malaysian individuals.

For the purposes of this Privacy Policy and applicable data protection law, ria66 is the Data Controller responsible for the Personal Data collected through the Platform. ria66 determines the purposes for which Personal Data is collected and the manner in which it is processed.

ria66 has designated a data protection point of contact responsible for overseeing compliance with this Policy and responding to data subject enquiries. All data-related requests, including access requests, correction requests, and erasure requests, should be directed to our support team using the contact details provided in Section 16 of this Policy.

ria66 collects Personal Data through a variety of means, including account registration, KYC verification, transactional activity, customer support interactions, and automated technical collection. The categories of Personal Data we collect are set out below.

ria66 does not knowingly collect Special Category Data (such as health data, racial or ethnic origin, religious beliefs, or political opinions) unless it arises incidentally in the context of a responsible gambling support interaction, in which case it is handled with the highest level of confidentiality.

ria66 processes your Personal Data only where a lawful basis for doing so exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, deposit processing, withdrawal execution, and bonus administration — is carried out on the basis that it is necessary to fulfil our contract with you.
• Legal obligation: Certain processing activities — particularly KYC identity verification, anti-money laundering (AML) checks, and age verification — are required by applicable regulatory obligations. We are obligated to conduct these checks regardless of individual consent.
• Legitimate interests: ria66 processes certain data on the basis of its legitimate business interests, including fraud detection and prevention, platform security, system performance monitoring, and improvement of user experience. Where legitimate interests are relied upon, we have assessed that these interests are not overridden by your fundamental rights.
• Consent: Where consent is required — for example, for optional marketing communications or the use of non-essential cookies — we will obtain your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

ria66 uses the Personal Data we collect for the following specific purposes:

• Account creation and management: Creating and maintaining your registered account on the Platform, including password management, account preferences, and communication preferences.
• Identity and age verification (KYC): Verifying that you are at least 21 years of age and that you are who you say you are, as required by our responsible gambling obligations and applicable regulations.
• Processing financial transactions: Facilitating deposits in MYR via Malaysian payment channels (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB) and cryptocurrency (BTC, ETH, USDT, LTC), and processing withdrawal requests to verified payment instruments.
• Providing gaming and betting services: Enabling access to slot games, live casino tables, and sports betting markets (including Liga Super Malaysia, EPL, Champions League, and other events) in accordance with our Terms & Conditions.
• Bonus and promotion administration: Tracking bonus eligibility, wagering requirement completion, and promotion claims to administer our bonus programme fairly and in accordance with published bonus terms.
• Fraud prevention and security: Detecting and investigating suspicious activity, duplicate accounts, money laundering, and other prohibited conduct as set out in our Terms & Conditions.
• Responsible gambling monitoring: Monitoring gaming behaviour to identify indicators of problem gambling and administering player-requested tools including deposit limits, self-exclusion, and cool-off periods.
• Customer support: Responding to enquiries, complaints, and technical support requests submitted through our Live Chat, WhatsApp, and email channels.
• Platform improvement: Analysing aggregated and anonymised usage data to identify areas for improvement in platform performance, game offerings, and user experience.
• Legal compliance: Meeting our obligations under applicable law, including responding to lawful requests from regulatory authorities and law enforcement agencies.

ria66 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the limited circumstances described below:

• Payment service providers: We share financial data with our payment processing partners — including operators of Malaysian e-wallet infrastructure (Touch 'n Go, Boost, GrabPay), Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB), DuitNow/FPX network operators, and cryptocurrency processing services — solely to facilitate deposits and withdrawals on your behalf.
• KYC and identity verification providers: Identity documents and verification data are shared with certified third-party KYC service providers operating under contractual obligations that comply with applicable data protection law. These providers process your documents solely for the purpose of verifying your identity and age.
• Game software providers: Where you play third-party games on the Platform, limited technical data (such as session identifiers and wagered amounts) may be transmitted to the relevant game provider for the purpose of delivering the game experience and calculating results. Game providers are bound by contractual data protection obligations.
• Anti-fraud and AML service providers: We may share data with third-party fraud prevention and anti-money laundering screening services to fulfil our compliance obligations. These services process data under strict contractual controls.
• Legal and regulatory authorities: ria66 may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a court order, or a lawful regulatory request. We will notify the affected user where legally permitted to do so.
• Professional advisers: Personal Data may be shared with legal counsel, auditors, or compliance advisers on a strictly need-to-know basis and subject to professional confidentiality obligations.

ria66 uses cookies and similar tracking technologies on the Platform to support essential functionality, improve user experience, and gather analytical data. The cookies we use fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during your gaming session, CSRF protection tokens, and load-balancing cookies. These cookies do not collect personally identifiable information beyond what is strictly required for the session.
• Functional cookies: These cookies remember your preferences — such as language settings, preferred payment method, and display preferences — to provide a more personalised experience. They persist across sessions and can be cleared through your browser settings.
• Analytical cookies: These cookies collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation patterns — to help us improve the Platform's design and content. No individually identifiable information is collected through analytical cookies.
• Security and fraud detection cookies: These cookies assist our fraud detection systems in identifying unusual patterns of access that may indicate account compromise, bot activity, or other security threats.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent essential Platform features from functioning correctly. ria66 does not use third-party advertising cookies or retargeting pixels.

ria66 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where a legal hold or ongoing investigation requires extended retention, data will be preserved for the duration of that requirement and deleted promptly upon its resolution.

ria66 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, loss, alteration, or disclosure. Key security controls include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the ria66 Platform.
• Encrypted data storage: Sensitive Personal Data, including identity documents and financial details, is stored in encrypted form in access-controlled infrastructure.
• Access controls: Access to Personal Data is granted on a strict need-to-know basis. Internal staff access is governed by role-based permissions and subject to regular review.
• Multi-factor authentication is required for internal system access by ria66 staff.
• Regular security audits and penetration testing are conducted to identify and remediate vulnerabilities in the Platform's infrastructure.
• Incident response procedures: ria66 maintains documented procedures for responding to data security incidents, including notification obligations where required by applicable law.

While ria66 takes all reasonable precautions to protect your Personal Data, no transmission of data over the internet or electronic storage system can be guaranteed as completely secure. You are responsible for keeping your account credentials — including your password and any one-time authentication codes — confidential.

Subject to applicable law and certain limitations, you have the following rights in respect of your Personal Data held by ria66:

• Right of Access: You may request a copy of the Personal Data ria66 holds about you, together with information about how it is processed. We will respond to verified access requests within 30 calendar days.
• Right to Correction: If the Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as contact details) can typically be made directly through your account settings.
• Right to Erasure: In certain circumstances — such as where Personal Data is no longer necessary for the purpose for which it was collected, or where you withdraw consent — you may request erasure. This right is subject to our legal retention obligations, which may require us to retain certain data even after account closure.
• Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in specific circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Object: You have the right to object to processing based on legitimate interests, and to opt out of direct marketing communications at any time.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact our support team using the details in Section 16. We may require you to verify your identity before processing a rights request to ensure we are responding to the correct individual.

The ria66 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

All account registrations are subject to age verification as part of our KYC process. Where we have reason to believe that a registered account is held by a person under the age of 21, we will:

• Immediately suspend access to the account;
• Void any bets placed and withhold any associated winnings or bonuses;
• Retain relevant data for the minimum period necessary to investigate and document the breach; and
• Securely delete all other Personal Data associated with the account as promptly as the above obligations permit.

In the course of providing the Platform's services, your Personal Data may be transferred to, stored in, or processed in countries outside Malaysia. This may occur where, for example, our KYC service providers, game software suppliers, or infrastructure providers operate servers in other jurisdictions.

Where such international transfers take place, ria66 ensures that appropriate safeguards are in place to protect your Personal Data to a standard consistent with the PDPA 2010 and other applicable data protection law. Safeguards may include:

• Data processing agreements incorporating standard contractual clauses;
• Transfers to jurisdictions deemed to provide an adequate level of data protection; or
• Other legally recognised transfer mechanisms as applicable.

You may request information about the safeguards applied to international transfers of your Personal Data by contacting us using the details in Section 16.

The ria66 Platform integrates services provided by third-party organisations, including payment processors, game developers, and analytics tools. While these services are accessed through the ria66 Platform, they are governed by the respective privacy policies of the third-party providers.

ria66 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service with which you interact, including Malaysian payment services such as Touch 'n Go eWallet, Boost, GrabPay, and banking partners like Maybank, CIMB, and Public Bank, each of which operates under its own independent privacy framework.

All third-party Data Processors engaged by ria66 are required to enter into data processing agreements that impose data protection obligations consistent with this Policy and applicable law.

ria66 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where a material change is made, we will provide reasonable prior notice to registered users by email or through a prominent notice on the Platform before the revised Policy takes effect.

The current version of this Privacy Policy, together with its effective date, will always be published at ria66.cam/privacy-policy. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

If you do not agree with an amendment, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the ria66 data protection team through the following channels:

• Email: [email protected] — subject line: "Privacy / Data Request"
• Live Chat: Available 24 hours a day, 7 days a week on the ria66 Platform. Average response time: 3–5 minutes.
• WhatsApp: Available 24/7. Access details are provided within the Platform after login.

We will acknowledge data-related requests within 5 business days. Where identity verification is required before processing a request, we will notify you promptly and specify the documentation required.