Privacy Policy RichDaddy — Malaysia Member Data Protection

1 Information We Collect

To provide you with a safe and seamless gaming experience at richdaddy, we need to collect certain categories of personal information. We only collect data that is strictly necessary to operate the platform safely and efficiently.

Registration & Identity Information:

• Full name as shown on your identity card or passport.
• Date of birth to verify age eligibility (18 years and above).
• Identity card or passport number for the KYC process.
• Full current residential address.
• An active mobile number registered in your name.
• A valid and active email address.

Financial Information:

• Bank account or e-wallet number for processing deposits and withdrawals.
• Deposit and withdrawal transaction records for legal compliance purposes.
• Information related to the payment method you use — however, full card numbers are never stored by RichDaddy.

Platform Usage Information:

• IP address of the device used to log in.
• Device type, operating system, and browser version.
• Game history, wagering activity, and in-platform actions.
• Login session timestamps and duration.
• Language preference and personal settings within the platform.

2 How We Use Your Data

Every piece of information we collect is used for a clear and transparent purpose. richdaddy uses your data for the following:

For marketing and promotional purposes, we will only send you communications if you have given your consent. You may withdraw this consent at any time by contacting our customer support team or through your account settings.

3 Data Storage & Security

RichDaddy continuously invests in the latest cybersecurity infrastructure to ensure your personal data remains protected against both external and internal threats.

Our technical security measures include:

• Advanced data encryption — all sensitive data is encrypted using AES-256 at rest and SSL/TLS in transit.
• Multi-zone secure servers — your data is stored in data centers compliant with ISO 27001 security standards with full redundancy.
• Strict access controls — only authorized personnel with specific operational requirements may access member personal data, and every access is logged.
• Regular security testing — our systems undergo regular penetration testing and independent security audits.
• Automatic Backup — your data is automatically backed up to separate secure locations to ensure service continuity.

Data Retention Period:

RichDaddy retains your personal data for the duration your account remains active and for up to 7 years after account closure to fulfil legal requirements relating to financial compliance and anti-money laundering. After this period, your data will be securely deleted from all our systems.

4 Information Sharing

Richdaddy does not sell or disclose your personal information to third parties without your consent, except in the following situations required for platform operations or legal obligations:

• Payment service providers: Payment gateways and banks integrated with our platform receive only the minimum information required to process your transactions securely. All providers are bound by strict confidentiality agreements.
• KYC service providers: Trusted third parties responsible for verifying member identities — they receive only the information required for the verification process and are not permitted to use that data for any other purpose.
• Relevant authorities: RichDaddy will disclose information lawfully requested by authorities such as the MACC, PDRM, or financial intelligence units in the course of financial crime investigations, based on a court order or applicable legal requirements.
• Technical service providers: Cloud infrastructure providers, transactional email services, and analytics tools that help us run platform operations — all bound by strict data protection requirements.

In all of the above circumstances, we ensure that any party receiving your data complies with data protection standards equivalent to this Privacy Policy. RichDaddy does not transfer your data to advertising companies, data brokers, or any other commercial entities unrelated to the operation of our platform.

5 Cookies & Tracking Technologies

RichDaddy uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies (Mandatory): Required for core platform functions such as login sessions, account security, and language preferences. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies (Analytics): Helps us understand how members interact with the platform — most visited pages, time spent, and any errors encountered. Data is collected in aggregate and anonymised form.
• Functional Cookies: Saves your personal preferences such as display settings, favourite game selections, and language preferences so you don't have to reconfigure them every time you log in.
• Security Cookies: Used to detect and prevent fraudulent activity, automated bots, and suspicious login attempts.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the RichDaddy platform and your overall gaming experience. We recommend keeping essential cookies enabled for the best experience.

6 Your Rights as a User

Under Malaysia's Personal Data Protection Act (PDPA) and international privacy principles, you have the following rights regarding your personal data held by RichDaddy:

• Right of Access: You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days.
• Right to Rectification: If any of your personal information is inaccurate or outdated, you have the right to request immediate correction. Inaccurate information may affect your KYC process and withdrawals.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data from our systems, subject to legal retention obligations that may prevent complete removal.
• Right to Restriction of Processing: You may request that we restrict the processing of your data while any dispute regarding its accuracy or use is being resolved.
• Right to Withdraw Consent: For data processed based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe your privacy rights have been violated, you may lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact richdaddy's customer support team, available 24/7. Requests relating to personal data will be processed within the timeframe required by applicable law. We may require additional identity verification before processing your request to ensure the security of your data.

7 International Data Transfers

In operating the RichDaddy platform, some of your data may be processed or stored on servers located outside Malaysia. This includes cloud infrastructure, data backup systems, and international technical service providers.

When this occurs, RichDaddy ensures that:

• Data transfers are only carried out to countries or entities that provide an adequate level of data protection equivalent to Malaysia's standards.
• Legally binding data transfer agreements are in place between RichDaddy and overseas data recipients.
• All international providers must comply with richdaddy's privacy policy and are not permitted to use data for unauthorized purposes.
• Data transferred overseas remains subject to the same access and deletion rights as outlined in Section 6.

8 Privacy Policy Amendments

RichDaddy reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or improvements to our data protection measures.

• Any material amendments will be communicated to you via email to your registered address and through in-platform notifications at least 14 days before the changes take effect.
• Minor amendments (such as language corrections or additional clarifications that do not alter the substance of the policy) may be updated without prior notice.
• The "Updated" date at the top of this page will always reflect the most current version of this policy.
• Continued use of the RichDaddy platform after the effective date of any amendment constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically, especially when you receive an amendment notification from us. If you disagree with any amendment, you have the right to close your account before the amendment takes effect.

FAQ – Privacy & Data