Effective Date: This Privacy Policy is effective as of 1 January 2026. It applies to all registered users, visitors, and any person who accesses or interacts with the RCB988 platform at rcb988.cam.
01 Introduction
RCB988 ("Company", "Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use the RCB988 platform at rcb988.cam. This Privacy Policy ("Policy") describes how RCB988 collects, uses, stores, discloses, and protects personal information in connection with your use of our online casino, sportsbook, and associated services.
This Policy applies to all users of the Platform, including registered account holders, persons browsing the website without an account, and anyone who contacts our support team via live chat or email. By accessing or using the RCB988 Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
This Policy should be read in conjunction with our Terms & Conditions, which govern the overall relationship between you and RCB988, and our Responsible Gambling Policy, which sets out our commitments to player welfare.
Malaysian Users: RCB988 handles the personal data of players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all regions of Malaysia with the same standard of care. Data submitted through Malaysian payment channels — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong — is processed in accordance with this Policy and applicable data protection standards.
02 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, financial information, IP address, and device identifiers.
- "Data Controller" means RCB988, which determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor" means any third party that processes personal data on behalf of RCB988, such as payment service providers or KYC verification partners.
- "Data Subject" means any natural person whose personal data is processed — in the context of this Policy, primarily you as the User.
- "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
- "Consent" means a freely given, specific, informed, and unambiguous indication by which you agree to the processing of your personal data for one or more specific purposes.
- "Cookies" means small text files placed on your device by the Platform to store session, preference, and analytics information.
- "KYC" means Know Your Customer — the identity verification process required for regulatory compliance and fraud prevention.
03 Personal Data We Collect
RCB988 collects personal data only to the extent necessary to provide our services, comply with legal obligations, and protect the security and integrity of the Platform. The categories of data we collect are as follows:
| Category |
Examples |
Purpose |
| Identity Data |
Full legal name, date of birth, nationality, gender |
Account registration, KYC verification, age verification (21+) |
| Contact Data |
Email address, phone number, residential address |
Account communications, support, address verification |
| Identity Documents |
MyKad, Passport, Driver's License images; utility bills; selfie with ID |
KYC / AML compliance, fraud prevention |
| Financial Data |
Bank account details, e-wallet identifiers, transaction history, deposit/withdrawal amounts in MYR or cryptocurrency |
Payment processing, AML screening, withdrawal verification |
| Technical Data |
IP address, device type, browser type, operating system, session tokens |
Security, fraud detection, session management |
| Usage Data |
Pages visited, games played, bets placed, time on site, click patterns |
Platform optimisation, personalisation, responsible gambling monitoring |
| Communications Data |
Live chat transcripts, email correspondence, support ticket content |
Customer support, quality assurance, dispute resolution |
| Preferences Data |
Language settings, marketing preferences, responsible gambling limit settings |
Personalisation, regulatory compliance |
04 How We Collect Personal Data
RCB988 collects personal data through the following channels and methods:
- Direct Collection: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to surveys and promotions.
- Automated Collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, pixel tags, and server logs.
- Payment Providers: Transaction confirmation data shared by DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network confirmations as part of deposit and withdrawal processing.
- KYC & Identity Verification Partners: Third-party identity verification services may share the results of document validation checks with RCB988 as part of the onboarding and compliance process.
- Fraud Prevention & AML Screening Services: External databases used to screen users against sanctions lists, politically exposed persons (PEP) registers, and fraud watchlists.
- Publicly Available Sources: In limited circumstances, we may supplement account information with data from publicly available records for fraud prevention or compliance purposes.
05 Legal Basis for Processing
RCB988 processes personal data on the following legal grounds, each applicable to the specific purpose described:
- Contractual Necessity: Processing required to fulfil our obligations under the account agreement with you — including account creation, payment processing, and the provision of gaming and betting services.
- Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and any other regulatory obligations applicable to our operations.
- Legitimate Interests: Processing conducted for the legitimate business interests of RCB988, including fraud prevention, security monitoring, platform improvement, and responsible gambling compliance — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where we rely on your consent, such as for marketing communications or optional personalisation features, you have the right to withdraw that consent at any time by contacting our support team or updating your account preferences.
06 How We Use Your Personal Data
RCB988 uses the personal data we collect for the following purposes:
- Account Administration: Creating, maintaining, and securing your RCB988 account, processing login requests, and managing account settings.
- Service Delivery: Enabling you to play games, place bets, deposit funds, and withdraw winnings through the Platform.
- Identity & Age Verification: Confirming that you are at least 21 years of age and that your identity documents match the information provided during registration.
- Payment Processing: Facilitating deposits and withdrawals in Malaysian Ringgit (MYR) or cryptocurrency, verifying transaction legitimacy, and reconciling financial records.
- Fraud Prevention & AML Compliance: Detecting, investigating, and preventing fraudulent, deceptive, or unlawful activity on the Platform, including money laundering and identity fraud.
- Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of our support services.
- Responsible Gambling: Monitoring account activity to identify potential problem gambling patterns and enforcing limits, cooling-off periods, and self-exclusion requests where applicable.
- Platform Improvement: Analysing usage data in aggregate or anonymised form to improve the design, performance, and content of the RCB988 Platform.
- Legal Compliance: Fulfilling obligations under applicable laws and responding to lawful requests from regulatory authorities, law enforcement bodies, or courts of competent jurisdiction.
- Marketing Communications: Where you have provided consent, sending you updates about promotions, new games, and platform features relevant to your interests. You may opt out of marketing communications at any time.
No Data Selling: RCB988 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Any data sharing is strictly limited to what is necessary for the operational and compliance purposes described in this Policy.
07 Data Sharing & Disclosure
RCB988 may share your personal data with third parties only in the following circumstances:
- Payment Service Providers: Financial institutions and e-wallet operators — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network facilitators — receive the minimum transaction data necessary to process your payments securely.
- KYC & Compliance Partners: Third-party identity verification, AML screening, and fraud detection providers receive document images and identity data solely for the purpose of fulfilling regulatory verification requirements.
- Technology Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under strict data processing agreements that prohibit independent use of the data.
- Game Content Providers: Licensed game studios receive anonymised or pseudonymised gameplay data necessary to operate and certify their game software. No personally identifiable information beyond a session token is shared.
- Regulatory & Law Enforcement Authorities: Where required by law, court order, or formal regulatory directive, RCB988 will disclose personal data to the appropriate authority. We will notify affected users where legally permissible to do so.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data held by RCB988 may be transferred to the acquiring entity, subject to the same privacy protections set out in this Policy.
All third-party data processors engaged by RCB988 are bound by contractual obligations that require them to maintain appropriate security standards and process personal data only for the specified authorised purposes.
08 Cookies & Tracking Technologies
RCB988 uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The categories of cookies we use are as follows:
- Strictly Necessary Cookies: Essential for core Platform functionality including secure login, session management, and fraud prevention. These cannot be disabled without significantly impairing your ability to use the Platform.
- Functional Cookies: Store your preferences such as language settings, responsible gambling limit configurations, and display preferences to personalise your experience.
- Analytics Cookies: Collect anonymised or aggregated data about how users interact with the Platform to enable us to identify areas for improvement. No personally identifiable information is contained in analytics reports.
- Security Cookies: Used to detect and prevent fraudulent activity, credential stuffing attacks, and bot traffic attempting to access the Platform.
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. RCB988 does not use third-party advertising cookies or share cookie data with advertising networks.
09 Data Retention
RCB988 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. Our standard retention periods are as follows:
- Active Account Data: Retained for the duration of your account relationship with RCB988 and for a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping regulations.
- KYC Documents: Identity documents and verification records are retained for a minimum of five (5) years from the date of verification or from the date of the last transaction, whichever is later.
- Transaction Records: Financial transaction records are retained for a minimum of six (6) years to comply with applicable financial reporting obligations.
- Communications Data: Live chat transcripts and support correspondence are retained for up to three (3) years for quality assurance, dispute resolution, and compliance purposes.
- Technical & Usage Data: Log files and session data are typically retained for up to ninety (90) days unless required for ongoing security investigations.
- Marketing Preferences: Records of your marketing consent or withdrawal of consent are retained for the duration of your account and for three (3) years thereafter.
Where personal data is no longer required for any legitimate purpose, RCB988 will securely delete or anonymise it in a manner that prevents recovery or reconstruction.
10 Data Security
RCB988 implements a comprehensive set of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure.
- Encryption in Transit: All data transmitted between your device and the RCB988 Platform is protected by TLS 1.2 or higher (SSL) encryption. All pages, including the cashier, account settings, and support chat, operate exclusively over HTTPS.
- Encryption at Rest: Sensitive personal data and financial records stored on our servers are encrypted using AES-256 or equivalent standards.
- Access Controls: Access to personal data is restricted to authorised RCB988 personnel and vetted third-party processors on a strict need-to-know basis. All internal access is logged and regularly audited.
- Two-Factor Authentication: Available to all account holders and enforced internally for staff accessing data management systems.
- Regular Security Audits: The Platform undergoes periodic penetration testing and vulnerability assessments conducted by independent security specialists.
- Incident Response: RCB988 maintains a documented data breach response procedure. In the event of a confirmed breach that poses a risk to your rights, affected users will be notified without undue delay in accordance with applicable regulations.
Your Responsibility: While RCB988 takes robust measures to secure your data on the Platform, you are responsible for maintaining the confidentiality of your account credentials. Do not share your password with any third party. RCB988 will never ask you for your password via live chat, email, or any other channel.
11 Your Data Rights
As a Data Subject, you hold the following rights with respect to the personal data RCB988 holds about you. These rights may be subject to certain legal exceptions and operational limitations where compliance would conflict with our regulatory obligations.
Right of Access
Request a copy of the personal data we hold about you, along with information about how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary or where you withdraw consent, subject to legal retention requirements.
Right to Restriction
Request that we limit how we process your data in certain circumstances, such as whilst a dispute is under investigation.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
Right to Object
Object to processing of your data on the basis of legitimate interests, including direct marketing, at any time.
Withdraw Consent
Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.
Automated Decisions
Request human review of decisions made solely by automated processing that significantly affect your account or access.
To exercise any of the above rights, please contact us via the live chat support function or by emailing [email protected] from your registered email address. We will acknowledge your request within 72 hours and respond substantively within 30 calendar days. In complex cases, this period may be extended by a further 30 days, of which you will be informed.
No Fees: RCB988 does not charge a fee for processing data rights requests. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request, with reasons provided in writing.
12 Children & Minors
The RCB988 Platform is strictly intended for persons aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. The Platform does not target or market to minors in any form.
If RCB988 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, void all associated transactions, and permanently close the account. Age verification may be requested at any stage of the account lifecycle.
Parental Advisory: Parents and guardians are advised to implement device-level parental controls to prevent minors from accessing gambling websites including RCB988. If you believe a minor has registered on our Platform, please contact our support team immediately at
[email protected].
13 International Data Transfers
RCB988 may transfer personal data to servers or third-party processors located in jurisdictions outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections applicable in your home jurisdiction.
Safeguards used for international transfers may include contractual clauses binding the recipient to data protection standards, reliance on the recipient jurisdiction's adequacy determination, or other legally recognised transfer mechanisms. Details of the specific safeguards applicable to a given transfer are available on request by contacting [email protected].
14 Third-Party Links & Services
The RCB988 Platform does not contain links to third-party websites for advertising or affiliate purposes. Where technical integrations with third-party payment processors, game studios, or identity verification providers exist, those providers operate under their own privacy policies with respect to data they independently collect and process.
RCB988 is not responsible for the data practices of third-party service providers beyond the scope of the data processing agreements that govern our operational relationships with them. We encourage you to review the privacy practices of any third-party provider whose services you access directly, independently of the RCB988 Platform.
15 Policy Updates
RCB988 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Material changes to this Policy will be communicated to registered users via email notification to the address on file and/or via a prominent notice displayed on the Platform prior to the changes taking effect.
We encourage you to review this Policy periodically to remain informed of how we protect your personal data. The effective date displayed at the top of this page will be updated each time the Policy is revised. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.
If you have concerns about any proposed change to this Policy, you are entitled to contact us prior to the effective date to raise those concerns, or to close your account and request deletion of your personal data in accordance with Section 11.
16 Contact Us
If you have any questions, concerns, or formal complaints regarding this Privacy Policy or how RCB988 handles your personal data, please contact us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week via the Platform's live chat support feature. This is the fastest channel for general privacy enquiries. Average first response under 2 minutes.
- Email: [email protected] (plain text — not a clickable link). When submitting a privacy-related request by email, please use your registered email address and include "Privacy Request" or "Data Rights Request" in the subject line to ensure prompt routing to the relevant team.
All privacy-related communications are handled exclusively in English. We aim to acknowledge all privacy requests within 72 hours and provide a substantive response within 30 calendar days.
Data Controller: RCB988 is the Data Controller responsible for personal data processed through the Platform. All data rights requests, subject access requests, and formal privacy complaints should be directed to the contact details above.