🔐 rugi99 Privacy Policy

1. Who We Are

rugi99 ("we", "us", "our") operates the online casino and sportsbook platform accessible at rugi99.app and through associated mobile applications. rugi99 is the data controller responsible for the personal data of all registered players.

For the purposes of this Privacy Policy, references to "you" and "your" mean any individual who accesses rugi99.app, registers a rugi99 account, or uses any rugi99 service, including players based in Kuala Lumpur, Penang, Johor Bahru, and across Malaysia.

Our designated Data Protection contact can be reached at the email address provided in Section 13 of this policy.

2. Data We Collect

2.1 Registration Data

When you create a rugi99 account, we collect the information you provide during registration, including your full name, date of birth, email address, phone number, and chosen username.

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) and anti-money laundering obligations, rugi99 may request and retain copies of government-issued identity documents (e.g., Malaysian MyKad or passport), proof of address, and in some cases proof of payment method ownership. This data is collected from players aged 21 and above only.

2.3 Financial Data

We collect records of your deposit and withdrawal transactions, including payment method identifiers (e.g., Touch 'n Go eWallet account reference, bank account suffix, DuitNow ID). Full payment credentials are processed via PCI-DSS-compliant third-party payment processors — rugi99 does not store your full card or bank account numbers on its own systems.

2.4 Gaming Activity Data

We record your gaming history, including games played, stakes placed, game results, bonus activity, and session duration. This data is used to operate the platform, resolve disputes, and support responsible gaming monitoring.

2.5 Technical & Device Data

When you access rugi99, we automatically collect technical data including your IP address, browser type, device type and operating system, session timestamps, and pages visited. This data is used for security, fraud prevention, and platform analytics.

2.6 Communications Data

If you contact rugi99 support, we retain records of those communications — including live chat transcripts and email correspondence — for quality assurance, dispute resolution, and training purposes.

3. How We Use Your Data

rugi99 uses your personal data for the following purposes:

• To create, verify, and manage your rugi99 account;
• To process deposits and withdrawals via Malaysian payment methods including Maybank2u, CIMB, Touch 'n Go eWallet, Boost, DuitNow, GrabPay, and FPX;
• To verify your identity and age (21+) in accordance with KYC obligations;
• To detect and prevent fraud, money laundering, and unauthorised account access;
• To operate, personalise, and improve the rugi99 gaming platform and mobile application;
• To provide 24/7 customer support and resolve disputes;
• To enforce our Terms & Conditions and applicable legal obligations;
• To monitor gaming patterns for responsible gaming purposes and to enforce self-exclusion;
• To send you transactional communications (deposit confirmations, withdrawal updates, security alerts);
• To send you marketing communications, subject to your marketing consent preferences.

4. Legal Basis for Processing

rugi99 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the rugi99 Terms & Conditions, including account management and payment processing;
• Legal Obligation: Processing required to comply with applicable AML, KYC, and regulatory obligations;
• Legitimate Interests: Processing for fraud prevention, platform security, and product improvement that does not override your privacy rights;
• Consent: Marketing communications and non-essential cookies, where we rely on your specific, informed consent.

5. Data Sharing & Third Parties

rugi99 does not sell your personal data. We may share your personal data with the following categories of third parties, solely to the extent necessary to deliver and operate the rugi99 service:

• Payment Processors: FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and banking partners (Maybank, CIMB, Public Bank) to process financial transactions;
• KYC/AML Providers: Identity and document verification service providers engaged to fulfil our regulatory verification obligations;
• Game Content Providers: Where technically necessary, game software providers may receive session identifiers to operate game rounds;
• IT & Infrastructure Providers: Cloud hosting, CDN, and cybersecurity service providers that process data on rugi99's behalf under strict data processing agreements;
• Regulatory Authorities: Where required by law, we may disclose personal data to regulatory, law enforcement, or governmental authorities.

All third parties with whom rugi99 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for their own independent purposes.

6. Cookies & Tracking Technologies

rugi99.app uses cookies and similar tracking technologies to operate the platform and improve your experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function — including session management, login state, and security tokens. These cannot be disabled;
• Performance & Analytics Cookies: Collect anonymised data about how players use rugi99 to help us improve the platform. These are set only with your consent;
• Preference Cookies: Remember your settings and personalisation choices (e.g., language, game lobby layout);
• Marketing Cookies: Used to deliver relevant promotional content. These are set only with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences at any time through your browser settings or the rugi99 cookie preference centre. Please note that disabling certain cookies may affect platform functionality.

7. Data Retention

rugi99 retains your personal data for as long as your account is active and for such further periods as are required by applicable law or are necessary for legitimate business purposes. Specifically:

• Account and registration data is retained for the duration of your account and for a minimum of five (5) years following account closure, as required by AML regulations;
• KYC and identity documents are retained for a minimum of five (5) years from the date of verification;
• Financial transaction records are retained for a minimum of seven (7) years in accordance with financial record-keeping obligations;
• Gaming activity logs are retained for five (5) years from the date of the relevant activity;
• Support communications are retained for two (2) years from the date of the interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

rugi99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and rugi99 servers;
• Encryption at rest for sensitive personal and financial data;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for internal system access;
• Regular security assessments and penetration testing;
• Incident response procedures for the detection and notification of data breaches.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by rugi99:

• Right of Access: Request a copy of the personal data rugi99 holds about you;
• Right of Rectification: Request correction of inaccurate or incomplete personal data;
• Right of Erasure: Request deletion of your personal data, subject to our legal retention obligations;
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances;
• Right to Object: Object to processing based on legitimate interests, including direct marketing;
• Right to Data Portability: Request your data in a structured, machine-readable format;
• Right to Withdraw Consent: Withdraw consent for processing based on consent (e.g., marketing emails) at any time without affecting prior processing.

To exercise any of these rights, please contact our support team using the details in Section 13. We will respond to all verifiable requests within 30 days. We may need to verify your identity before processing your request.

10. Children's Privacy

rugi99 services are strictly restricted to individuals aged 21 years and above. rugi99 does not knowingly collect or process personal data from individuals under 21 years of age. Age is verified during the KYC process.

If rugi99 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned to the source payment method after appropriate investigation.

11. Marketing Communications

With your consent, rugi99 may send you marketing communications about promotions, new games, sportsbook offers, and platform updates via email, SMS, or in-app notification. You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your notification preferences in your rugi99 account dashboard;
• Contacting our support team directly.

Opting out of marketing communications will not affect transactional communications (e.g., deposit confirmations, withdrawal updates, security alerts), which are sent as part of our contractual obligations to you.

12. Changes to This Policy

rugi99 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email to the address on file and/or via a notice on the rugi99 platform prior to the changes taking effect.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically. Continued use of the rugi99 platform following notification of any amendment constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or rugi99's handling of your personal data, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: Privacy Request – [Your Username]
• Support Hours: 24/7 (GMT+8 Malaysia Time)
• Response Time: Within 5 business days for general queries; within 30 days for formal data subject requests.

When submitting a data subject request, please include your registered email address, rugi99 username, and a clear description of your request. We may request additional verification to confirm your identity before processing your request.