rde1996 Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by rde1996 in connection with your use of the rde1996 Platform, accessible at rde1996.net, and any associated services, mobile interfaces, or communications channels operated by rde1996.

By registering an Account on rde1996, accessing the Platform, or communicating with us through any channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the rde1996 Terms & Conditions, which govern your overall use of the Platform and are incorporated into this Policy by reference. In the event of any conflict between this Policy and the Terms, the Terms shall prevail unless the conflict relates specifically to data protection obligations, in which case this Policy governs.

2. Data Controller

For the purposes of applicable data protection law, rde1996 is the data controller in respect of personal data collected from Members and visitors through the Platform. References to "rde1996", "we", "us", or "our" in this Policy refer to the rde1996 operating entity and its authorised data processors acting on its behalf.

rde1996 may appoint third-party data processors — including payment service providers, KYC (Know Your Customer) verification services, and licensed game content providers — to process certain categories of personal data on rde1996's behalf and under rde1996's documented instructions. Such processors are contractually bound to process data only for the purposes specified by rde1996 and to maintain appropriate security standards.

3. Data We Collect

rde1996 collects personal data in the following categories:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identification document.
• Malaysian mobile number (used as the primary Account identifier and 2FA channel).
• Date of birth (for mandatory age verification — all members must be 21 or above).
• National identification number or passport number, where required for KYC verification.
• Residential address.

3.2 Financial & Transaction Data

• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, FPX bank account number, Maybank/CIMB/Public Bank account details) — stored as tokenised references, not raw account numbers.
• Deposit and withdrawal transaction history, amounts, timestamps, and method used.
• Wallet balance history and bonus credit/debit records.

3.3 Gaming Activity Data

• Betting and wagering history, including game type, stake amounts, outcomes, and session duration.
• Platform navigation and product usage patterns.
• Responsible gaming tool usage, including deposit limits set, self-exclusion requests, and session alerts acknowledged.

3.4 Technical & Device Data

• IP address, device type, operating system, and browser type at the time of login and during active sessions.
• Session duration, pages visited, and interaction events (clicks, form completions) collected via server logs and first-party analytics.
• Cookie identifiers and similar tracking technologies as described in Section 6.

3.5 Communications Data

• Contents and metadata of live chat communications with the rde1996 support team.
• Email correspondence sent to or received from rde1996's support address.
• Records of any marketing communications sent to you and whether they were opened or acted upon (if you have opted in to marketing).

4. How We Use Your Data

rde1996 uses the personal data described in Section 3 for the following purposes:

• Account management: Creating, verifying, maintaining, and securing your rde1996 Account, including processing deposits, withdrawals, and bonus credits.
• Age and identity verification: Confirming that you meet the minimum age requirement of 21 years and that you are who you claim to be, in compliance with rde1996's licensing obligations.
• Service delivery: Providing access to and operation of all rde1996 Platform products — live casino, sportsbook, slots, lottery, and arcade games.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, money laundering, collusion, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling and enabling the responsible gaming tools available to Members.
• Regulatory compliance: Meeting reporting, record-keeping, and cooperation obligations under rde1996's international gaming licence and applicable financial crime prevention frameworks.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the rde1996 Platform, identify technical issues, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications.
• Customer support: Resolving Account queries, processing disputes, and providing assistance through the rde1996 live chat and email support channels.

5. Legal Basis for Processing

rde1996 processes personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations under the Member Agreement formed upon account registration — including payment processing, game provision, and account management.
• Legal obligation: Processing required to comply with rde1996's obligations under its gaming licence, applicable anti-money laundering regulations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement, where such processing does not override your fundamental privacy rights.
• Consent: Processing for optional marketing communications, where you have provided explicit, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Cookies & Tracking Technologies

rde1996 uses first-party cookies and similar technologies on the Platform for the following purposes:

• Strictly necessary cookies: Session management, authentication state, and security tokens required for the Platform to function correctly. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Storing your language preferences, game lobby layout preferences, and "remember me" login state where you have enabled this option.
• Analytics cookies: First-party analytics to understand how Members navigate the Platform, which features are used most, and where technical issues arise. rde1996 does not use third-party advertising networks or cross-site tracking technologies.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

7. Sharing of Personal Data

rde1996 does not sell or rent your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors: Transaction data is shared with FPX, Touch 'n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank) solely to process deposits and withdrawals on your behalf.
• KYC and identity verification providers: Identity and date-of-birth data is shared with licensed verification service providers to fulfil age and identity verification obligations.
• Game content providers: Anonymised session identifiers may be shared with licensed game providers whose content appears on the rde1996 Platform, to the extent required to operate individual games.
• Regulatory and law enforcement authorities: rde1996 will disclose personal data to competent regulatory, governmental, or law enforcement authorities where required by law, court order, or applicable licensing obligations — without prior notice to you where legally prohibited.
• Business succession: In the event of a merger, acquisition, or transfer of rde1996's business, personal data may be transferred to the successor entity, subject to the same or equivalent privacy protections as this Policy.

8. International Data Transfers

As rde1996 operates under an international gaming licence, certain personal data may be processed or stored on servers located outside Malaysia. Where such transfers occur, rde1996 implements appropriate safeguards — including standard contractual clauses and processor agreements that impose data protection obligations equivalent to those described in this Policy — to ensure that your personal data receives adequate protection regardless of where it is processed.

By using the rde1996 Platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia where rde1996 or its authorised processors maintain infrastructure, subject to the safeguards described above.

9. Data Retention

rde1996 retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:

• Account and identity data: Retained for the duration of your active membership and for a period of five (5) years following account closure, as required by rde1996's licensing and anti-money laundering obligations.
• Transaction and financial data: Retained for a period of seven (7) years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
• Gaming activity data: Retained for a period of three (3) years following last account activity, for responsible gaming monitoring, dispute resolution, and regulatory reporting purposes.
• Support communications: Retained for a period of two (2) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained until consent is withdrawn and for a further period of one (1) year thereafter as evidence of consent management.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with rde1996's data lifecycle management procedures.

10. Security Measures

rde1996 implements and maintains technical and organisational security measures proportionate to the risk associated with the categories of personal data we process. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the rde1996 Platform.
• Encryption of sensitive personal data fields (including payment identifiers and identity documents) at rest using industry-standard cryptographic algorithms.
• Role-based access controls limiting internal access to personal data to personnel who require it for their specific operational functions.
• Multi-factor authentication requirements for all rde1996 staff accessing systems that process Member personal data.
• Regular security assessments, penetration testing, and vulnerability scanning of rde1996 infrastructure.
• Incident response procedures providing for prompt investigation, containment, and notification in the event of a personal data breach.

Notwithstanding these measures, no internet-based system is entirely immune to security risk. You are responsible for maintaining the confidentiality of your rde1996 Account credentials and for ensuring that the devices you use to access the Platform are adequately secured.

11. Your Rights

Subject to applicable law and regulatory restrictions, you have the following rights in respect of your personal data held by rde1996:

• Right of access: You may request a copy of the personal data rde1996 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rde1996's overriding legal and regulatory retention obligations.
• Right to restrict processing: You may request that rde1996 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on consent or contract, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the rde1996 support team via live chat or at [email protected]. rde1996 will respond to verified requests within 30 calendar days. We may require identity verification before processing a data subject request.

12. Children's Privacy

The rde1996 Platform is strictly intended for adults aged 21 years and above. rde1996 does not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is applied at registration and at subsequent points during membership where warranted.

If rde1996 becomes aware that personal data has been collected from an individual under the age of 21 without valid parental consent, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the rde1996 Platform, please notify our support team immediately via live chat.

13. Changes to This Policy

rde1996 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, rde1996 will notify active Members via the Platform notification system or by electronic communication to your registered contact details prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this Policy. Continued use of the rde1996 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the Platform and request account closure.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by rde1996, please contact us through the following channels:

• Live Chat: Available 24/7 via the on-site chat widget. Average response time: 3–5 minutes. This is the fastest channel for data subject requests.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line for faster routing.

rde1996 will acknowledge all privacy-related enquiries within 48 hours and will respond substantively within 30 calendar days of receiving a verified request. For complex requests requiring extended review, we will notify you of the extended timeline within the initial 30-day period.