Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by 1998rich ("the Platform", "we", "us", "our") and applies to all personal data processed in connection with your use of our website at https://1998rich.cam, including all associated services, games, features, account functions, and support communications.

1998rich is an online gaming platform serving users in Malaysia and other eligible jurisdictions. We understand that the handling of personal data carries significant responsibility, particularly in a market where our users span major urban centres including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We are committed to processing personal data lawfully, fairly, and transparently.

By registering an account on 1998rich or by otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, residential address, phone number, financial account details, and IP address.
• "Processing" means any operation performed on personal data, including collection, storage, organisation, structuring, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, 1998rich.
• "Data Processor" means any third party that processes personal data on behalf of 1998rich under a data processing agreement.
• "User" means any individual who registers an account on, accesses, or otherwise interacts with the 1998rich platform.
• "KYC Data" means identity verification documents and associated information submitted by a User to fulfil Know Your Customer obligations, including government-issued identification, proof of address, and selfie verification.
• "Cookies" means small text files placed on a User's device by the platform to enable certain functionality and collect analytical data, as described in Section 8.

Data We Collect

We collect personal data across several categories, each serving a defined purpose within our platform operations. The categories of data we collect include:

3.1 Registration & Account Data

When you create an account on 1998rich, we collect:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Residential address (Malaysian addresses accepted — all states and territories)
• Username and encrypted password
• Phone number (optional, used for two-factor authentication where enabled)

3.2 KYC Identity Verification Data

To comply with Anti-Money Laundering (AML) and identity verification requirements, we collect:

• Government-issued photo identification (MyKad, Driver's Licence, or Passport)
• Proof of residential address (utility bill or bank statement dated within 3 months)
• Selfie photograph holding the identification document
• Source of funds documentation (where requested under AML obligations)

3.3 Financial Transaction Data

When you make deposits or request withdrawals via our supported payment methods — including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency wallets (BTC, ETH, USDT) — we collect and retain records of:

• Transaction amount in MYR (or cryptocurrency equivalent)
• Payment method used and associated reference identifiers
• Date, time, and outcome of each transaction
• Wallet or bank account identifiers (masked where applicable)

3.4 Gaming & Wagering Activity Data

• Game type, session duration, bets placed, and outcomes
• Sports betting selections across markets (e.g., EPL, Liga Super Malaysia, UFC)
• Bonus claims and wagering progress
• Win/loss history and account balance movements

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Login timestamps and session duration
• Referring URL and in-platform navigation behaviour

3.6 Support & Communication Data

• Content of live chat and email support exchanges
• Nature of support requests and resolutions provided
• Feedback and survey responses where voluntarily submitted

How We Collect Your Data

1998rich collects personal data through the following primary channels:

Data Processing & Use

1998rich processes your personal data for the following specific purposes. We do not use your data for purposes beyond those described below without first obtaining your explicit consent or as otherwise required by law.

5.1 Account Management

To create, maintain, and manage your user account, verify your identity, enforce the single-account policy, and provide you with access to the full suite of platform features.

5.2 Transaction Processing

To process your deposit and withdrawal requests accurately and efficiently via your chosen Malaysian payment method or cryptocurrency wallet, and to maintain complete, auditable transaction records in accordance with our financial record-keeping obligations.

5.3 Legal & Regulatory Compliance

To satisfy our Know Your Customer (KYC) obligations, Anti-Money Laundering (AML) requirements, responsible gambling obligations, age verification requirements (21+), and any other applicable legal or regulatory duties.

5.4 Platform Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions. IP address data and device fingerprinting are used as part of our fraud prevention systems.

5.5 Customer Support

To investigate and resolve support queries, disputes, and complaints submitted by users. Support communication data is retained for quality assurance and training purposes.

5.6 Platform Improvement

To analyse aggregated, anonymised usage patterns for the purpose of improving platform performance, user experience, game selection, and feature development. Individual-level data is not used for this purpose without aggregation.

5.7 Marketing Communications (Opt-In Only)

Where you have expressly opted in to receive marketing communications, we may send you promotional emails or platform notifications about new games, bonuses, seasonal promotions, or platform updates. You may withdraw consent at any time by updating your communication preferences in Account Settings or by contacting our support team.

Legal Basis for Processing

We process your personal data on the following legal grounds, each of which applies to one or more of the processing purposes described in Section 5:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account management, transaction processing, and customer support.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations — including AML obligations, KYC requirements, and age verification mandates.
• Legitimate Interests: Processing for fraud prevention, platform security, and analytical improvement of our services, where our interests do not override your fundamental privacy rights.
• Consent: Processing for optional services such as marketing communications, where you have provided explicit, freely given consent that can be withdrawn at any time.

Data Sharing & Disclosure

1998rich does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Personal data is shared only in the following limited and defined circumstances:

7.1 Service Providers & Data Processors

We engage trusted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include KYC identity verification services, payment gateway operators (including those processing DuitNow, FPX, e-wallet, and cryptocurrency transactions), fraud detection platforms, and cloud infrastructure providers. All processors are contractually bound to process data only as instructed by 1998rich and to apply appropriate security measures.

7.2 Legal & Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, or government authorities where we are required to do so by law, court order, or regulatory instruction. We will notify affected Users of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of the platform, personal data held by 1998rich may form part of the transferred assets. Affected users will be notified in advance and will retain the rights described in Section 11 of this Policy.

Cookies & Tracking Technologies

1998rich uses cookies and similar tracking technologies to enable platform functionality, maintain session state, detect fraud, and gather anonymised usage analytics.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies — particularly strictly necessary and security cookies — may impair your ability to log in or use key platform features. Strictly necessary cookies cannot be disabled without affecting core platform functionality.

Data Retention

1998rich retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations.

• Active Account Data: Retained for the full duration of your account activity on the platform.
• KYC Identity Documents: Retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for regulatory compliance purposes.
• Support Communication Data: Retained for up to two (2) years from the date of the most recent interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following consent withdrawal, to maintain an accurate record of consent history.
• Analytical & Log Data: Anonymised and aggregated after 90 days; raw log data deleted within 12 months.

Upon account closure at your request, your personally identifiable account data will be deleted or anonymised within 30 days, subject to the minimum retention periods mandated by our legal and regulatory obligations noted above.

Data Security

1998rich implements industry-standard technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using AES-256 encryption across HTTPS-only connections.
• Data-at-Rest Encryption: Stored personal data — including KYC documents and financial records — is encrypted at rest on secured servers.
• Access Controls: Internal access to personal data is role-based and restricted to staff who require it for their specific job function. All access is logged and audited.
• Intrusion Detection Systems: Our infrastructure is monitored 24/7 for anomalous access patterns and potential security threats.
• Regular Security Audits: We conduct periodic penetration testing and security reviews to identify and remediate vulnerabilities.
• Password Security: User passwords are stored in hashed, salted form using a modern cryptographic hashing algorithm. Plaintext passwords are never stored or transmitted.

In the event of a personal data breach that poses a significant risk to your rights and freedoms, 1998rich will notify affected users promptly and take all reasonable steps to contain, investigate, and mitigate the impact of the breach.

Your Rights

You hold the following rights in respect of the personal data 1998rich holds about you. Requests relating to any of these rights can be submitted to our support team at [email protected]. We aim to respond to all data rights requests within 30 days of receipt.

Minors & Age Policy

The 1998rich platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the verified source. If you believe a minor has registered an account on 1998rich, please contact us immediately at [email protected].

We encourage all Malaysian households with minors to make use of parental control software and internet filtering tools to prevent underage access to online gambling platforms. For more information on protecting young people online, please visit our Responsible Gambling page.

Third-Party Services

The 1998rich platform integrates with certain third-party service providers as part of its core operational infrastructure. These include licensed payment processors for Malaysian banking and e-wallet services (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay), KYC identity verification providers, cryptocurrency payment processors, and cloud hosting infrastructure.

Each third-party provider operates under its own privacy policy and data protection standards. Where personal data is transmitted to these providers, we ensure that appropriate contractual safeguards — including data processing agreements — are in place. We do not control the privacy practices of third-party providers beyond these contractual obligations.

This platform does not contain links to external third-party websites outside of our own service ecosystem. We are not responsible for the privacy practices of any external websites that users may navigate to independently.

Changes to This Privacy Policy

1998rich reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, regulatory requirements, or platform features. When material changes are made, we will notify registered users via the email address associated with their account and by posting a prominent notice on the platform.

The date at the top of this Policy will always reflect when it was last updated. We encourage you to review this Policy periodically. Your continued use of the platform following notification of changes constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you may request account closure in accordance with our Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data 1998rich holds about you, please contact our support team. All privacy-related inquiries are handled in English and responded to within 30 days.

For questions about our gameplay rules and platform terms, please refer to our Terms & Conditions. For responsible gambling tools and self-exclusion requests, please visit our Responsible Gambling page.