Privacy Policy rush88 – Your Personal Data Protection

Introduction

Rush88 takes our responsibility towards your privacy and personal data security seriously. This Privacy Policy explains in detail how we collect, use, store, and protect your personal information when you use the rush88 platform at rush88.app.

By registering for or using rush88 services, you agree to the terms of this Privacy Policy. We encourage you to read this document carefully so that you fully understand both parties' rights and responsibilities regarding personal data.

This Privacy Policy applies to all users of the rush88 platform, including registered members, website visitors, and any party interacting with our services. It covers all access channels, including the website, Android and iOS mobile apps, and any of our official communication channels.

Data We Collect

To provide a secure, efficient, and personalised service, rush88 collects several categories of personal data from our users. This data collection is limited to what is necessary and carried out transparently.

2.1 Information You Provide Directly

This data is collected when you register an account, complete a form, or contact our support team:

• Identity Information: Full name, date of birth, identity card number (MyKad) or passport
• Contact Information: Mobile phone number, email address
• Financial Information: Bank account number, bank name, registered e-wallet details
• Verification Documents: MyKad copy, bank statement, or other required KYC documents
• Account Information: Username, password (stored in hashed form), security questions

2.2 Information Collected Automatically

When you use the rush88 platform, our systems automatically record certain technical information for security and service improvement purposes:

• Device Data: Device type, operating system, phone model, screen resolution
• Network Data: IP address, internet service provider (ISP), general geographic location
• Session Data: Login date and time, session duration, pages visited
• Gaming Data: Wagering history, transaction records, in-game activity
• Cookie Data: Session cookies, preference cookies, device identifiers

2.3 Data from Third-Party Sources

In certain cases, we may receive information about you from trusted sources, such as payment processors verifying your transactions, identity verification service providers for KYC purposes, and financial regulatory bodies where required by law.

How We Use Your Data

Every piece of data we collect has a clear and controlled purpose. rush88 uses your personal information solely for the following purposes:

3.1 Marketing Communications

With your consent, rush88 may send you promotional information, bonus offers, and updates on new games via email or in-app notifications. You may withdraw this consent at any time through your account settings or by contacting our support team.

3.2 Responsible Gaming

Your gaming activity data is used to help monitor and identify signs of problem gambling. rush88 is committed to promoting responsible gaming, and this data enables us to provide timely support to members who need it.

Data Sharing

Rush88 does not share your personal data with any third party except in the following defined circumstances:

4.1 Trusted Service Partners

We work with selected third-party service providers to support platform operations. Data sharing is limited strictly to what is necessary and is governed by stringent confidentiality agreements:

• Payment Processors: DuitNow, FPX, Touch 'n Go, GrabPay, Boost, and other approved payment providers to process your transactions
• KYC Service Provider: Licensed identity verification company that assists with document verification
• IT Infrastructure Provider: Cloud hosting and security provider that keeps our platform running safely
• Game Provider: Game developers who require minimum data to ensure smooth game functionality

4.2 Legal Requirements

Rush88 may disclose your personal data to relevant authorities where required by Malaysian law, a valid court order, recognised criminal investigation, or anti-money laundering (AML) and counter-terrorism financing (CFT) compliance requirements.

Data Security

Protecting your personal data is rush88's top priority. We continually invest in the latest security infrastructure to keep your data safe at all times.

5.1 Technical Security Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and rush88 servers is fully encrypted
• Secure Password Storage: Passwords are stored using one-way hashing functions that cannot be decrypted
• Firewall & Intrusion Detection: A multi-layered protection system that monitors and blocks any unauthorised access attempts
• Secure Server Imaging: Data servers are housed in certified data centres with strict physical access controls
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent experts

5.2 Operational Security Measures

• Mandatory cybersecurity training for all rush88 staff
• Minimum access principle — staff can only access data necessary for their role
• 24/7 internal activity monitoring with automated alerts for suspicious activity
• Documented and tested incident response procedures

5.3 Your Responsibilities

The security of your account also depends on your own actions. We encourage you to use a strong and unique password, enable two-factor authentication, never share your login credentials with anyone, and contact us immediately if you suspect any unauthorised activity on your account.

Cookies & Tracking Technologies

Rush88 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how users interact with our services.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login session verification and security. Cannot be disabled.
• Preference Cookies: Saves your settings such as preferred language and display preferences for a better experience.
• Analytics Cookies: Helps us understand how users navigate the platform so we can make meaningful improvements.
• Security Cookies: Used to detect and prevent fraudulent activity and to ensure the security of your session.

6.2 Managing Cookies

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the rush88 platform. Essential cookies cannot be disabled as they are fundamental to the secure operation of our platform.

Data Retention

Rush88 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations.

• Active Account Data: Retained for as long as your account is active and for a specified period following account closure
• Financial Records: Retained for a minimum of seven (7) years as required by accounting and anti-money laundering laws
• Security Logs: Retained for three (3) months for investigation and audit purposes
• Communication Records: Retained for two (2) years for customer support reference
• KYC Documents: Retained for as long as required by the relevant regulatory authorities

Once the retention period expires, your data will be securely deleted or anonymised using approved procedures, unless a legal or regulatory requirement mandates longer retention.

Your Rights

As a rush88 member and as an individual under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data: