Privacy Policy ria66 – Full Data Protection for Malaysian Members

Ria66 ("we", "the platform") is committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy ("Policy") describes the types of information we collect, how it is used, who it is shared with and how you may exercise your rights in relation to your personal data.

This Policy applies to all users of the ria66 platform, including website visitors, prospective members and registered members using services at ria66.click. By accessing or using any part of the ria66 platform, you acknowledge that you have read and understood this Privacy Policy.

Ria66 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and is committed to ensuring that personal data is processed lawfully, fairly and transparently. Your data will not be processed in a manner inconsistent with the purposes stated in this Policy without prior notice to you.

Ria66 collects several categories of information from our members. Below are full details of the data we collect and how it is obtained:

2.1 Data You Provide Directly

• Registration Information: Full name, Malaysian phone number, email address, date of birth, and the password you choose when registering your ria66 account.
• Identity Verification Information: National identity card number (MyKad), copies of identity documents requested for Know Your Customer (KYC) verification prior to processing withdrawals that exceed certain thresholds.
• Financial Information: eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow numbers and Malaysian bank account details for deposit and withdrawal purposes
• Communications: The content of your correspondence with the ria66 support team via live chat or email

2.2 Data Collected Automatically

• Technical Data: IP address, web browser type, device operating system, screen resolution, and device information
• Usage Data: Pages visited, time spent on the platform, games played, total wagers and in-platform activity patterns
• Location Data: General location information based on IP address for geographic region verification and account security purposes.
• Cookie Data: Session information, saved preferences and analytics data collected via cookies and similar tracking technologies

Ria66 uses members' personal data for the following purposes, all of which are necessary to deliver a quality platform experience:

Ria66 will not use your personal data for purposes beyond those stated above without first obtaining fresh consent from you. If we intend to use your data for a new purpose, you will be informed and given the option to opt out before any processing begins.

Ria66 does not sell members' personal data to any party. However, in the course of operating the platform, we may share limited information with the following categories of third parties:

• Payment Processor: Data required to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysia FPX banks is shared solely with the relevant processors for transaction purposes
• Game Provider: Providers such as Pragmatic Play, PG Soft, and Habanero receive only the minimum session data required to run the games — no personally identifiable information is shared unless necessary
• IT Service Provider: Companies providing server infrastructure, cloud services and technical support, bound by strict confidentiality agreements with ria66
• Regulatory Authority: ria66 will disclose required information to the relevant authorities when mandated by Malaysian law or a valid court order
• Fraud Investigation: In cases of suspected fraud, relevant information may be shared with law enforcement agencies or related industry bodies to assist with investigations

Ria66 stores member personal data using multiple layers of technical and organisational security controls to ensure maximum protection:

• Data Encryption in Transit: All data transmitted between your device and ria66's servers is protected with TLS 1.3 and 256-bit SSL certificates
• Data-at-Rest Encryption: Sensitive data such as passwords and financial information is stored in encrypted form using current-generation encryption algorithms.
• Access Controls: Access to member data is strictly limited to ria66 staff who require it in the course of their duties, based on a minimum-access principle
• Security Audits: ria66's systems undergo periodic security audits conducted by independent experts to identify and address vulnerabilities before they can be exploited.
• Continuous Monitoring: An automated monitoring system operates 24/7 to detect suspicious activity or unauthorized access attempts.

Data Retention Period: ria66 retains members' personal data for as long as your account remains active and for a minimum of seven (7) years after account closure to meet legal requirements relating to financial records. Data that is no longer required will be securely deleted using methods that comply with accepted information security standards.

Ria66 uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic and maintain platform security. The following types of cookies are used:

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled as they are critical to platform operation.
• Preference Cookies: Saves your preferences such as display language and game settings so you don't have to reconfigure them each time you visit.
• Analytics Cookies: Helps ria66 understand how members use the platform — most frequently visited pages, average session duration and navigation patterns. This data is used for platform improvements.
• Security Cookies: Used to detect suspicious login attempts, support two-factor authentication, and prevent fraud.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the ria66 platform. For more information on managing cookies, refer to your browser's help guide.

Members' financial information receives an additional layer of protection given its sensitivity. ria66 applies the following specific measures to financial data:

• All deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or Malaysian bank FPX are processed through secure, encrypted payment channels.
• Ria66 does not store your credit card numbers or sensitive bank account details directly in our systems
• Financial transaction records are stored in a separate database with stricter access controls.
• Every transaction exceeding RM500 is automatically subject to additional verification as a fraud prevention measure
• Suspicious transaction reports will be filed with the relevant financial authorities in line with anti-money laundering (AML) obligations.

Ria66 may send members marketing communications about the latest promotions, new bonuses, upcoming Malaysia Super League football matches available for betting, new slots launches from Pragmatic Play or PG Soft, and platform news. All marketing communications are personalised based on the gaming preferences you have indicated.

You have full control over the marketing communications you receive:

• Marketing Emails: Every marketing email from ria66 includes a clear unsubscribe link. Click the link at any time to stop receiving marketing emails.
• SMS and Notifications: You can manage your SMS notification settings directly from your ria66 account or by contacting our support team.
• Transactional Communications: Transaction-related emails and SMS messages (deposit confirmations, withdrawal notifications, security alerts) cannot be disabled as they are essential to the security of your account.

Requests to opt out of marketing communications will be processed within 10 business days. Please note that unsubscribing from marketing does not affect your access to or use of the ria66 platform in any way.

As a ria66 member subject to Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold about you:

• Right to Access: You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 21 days.
• Right to Rectification: If any information we hold about you is inaccurate or out of date, you have the right to request a correction. Corrections are typically processed within 10 business days.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances — for example, if the data is no longer needed for the purpose it was originally collected. Please note that some data may need to be retained to meet legal obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Portability: You may request your personal data in a machine-readable format to facilitate transfer to another platform.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights above, please contact the ria66 support team via live chat or email at support@ria66.click, stating the right you wish to exercise along with your account details. All requests will be verified for security purposes before being processed.

The ria66 platform is strictly for individuals aged 18 and above. ria66 does not knowingly collect or process personal data from anyone under the age of 18.

If ria66 discovers that personal data belonging to a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that information and close the account in question. Parents or guardians who suspect their child has registered a ria66 account are strongly encouraged to contact us immediately at support@ria66.click.

The ria66 platform may contain links to third-party websites or services, including game providers and payment processors. This Privacy Policy applies only to the ria66 platform and does not cover the privacy practices of those third-party websites.

Ria66 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every third-party website you visit. Data shared with game providers such as Pragmatic Play and PG Soft is shared solely for the purpose of game operations and is subject to binding confidentiality agreements between ria66 and those providers.

Ria66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Members will be notified of significant amendments via their registered email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date displayed at the top of this page indicates when this Privacy Policy was last revised. Your continued use of the ria66 platform after any amendment takes effect constitutes your acceptance of the revised Policy. The latest version of this Policy is always available at ria66.click/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ria66 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24/7 from the ria66 website — the fastest way to reach us for general inquiries
• Email: support@ria66.click — for written enquiries requiring a record, with a response time of 24–48 hours

For formal complaints relating to data protection that cannot be resolved through ria66 support channels, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of the Personal Data Protection Act 2010.