ramly888 Privacy Policy

1 Who We Are — Data Controller

ramly888 ("we", "us", "our") operates the online gaming platform accessible at ramly888.lat and is the data controller responsible for the personal data of its registered Members. For the purposes of applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA), ramly888 is the entity that determines the purposes and means of processing personal data collected through the Platform.

This Privacy Policy applies to all personal data collected from or about registered Members and prospective Members who interact with the Platform, whether through the website, live chat, email correspondence, or any other channel operated by ramly888.

2 Personal Data We Collect

ramly888 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

3 How We Collect Your Data

ramly888 collects personal data through the following methods:

• Direct submission — data you actively provide during registration, KYC document upload, deposit and withdrawal requests, and support interactions.
• Automated technical collection — data collected automatically when you access the Platform, including IP addresses, browser fingerprinting data, and session logs, via server logs and cookies.
• Third-party providers — identity verification data returned by our KYC service providers upon document submission; transaction confirmation data returned by payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB).
• Publicly available sources — in limited circumstances, ramly888 may supplement Member data with information from publicly available fraud prevention databases or sanctions screening lists in fulfilment of our AML obligations.

4 Purposes of Processing

ramly888 processes your personal data for the following purposes:

1. Account creation and management — to register, verify, operate, and maintain your Member account.
2. Identity verification and fraud prevention — to fulfil KYC, AML, and responsible gaming obligations; to detect and prevent fraudulent, collusive, or unlawful activity.
3. Payment processing — to execute deposit and withdrawal transactions via your nominated MYR payment methods.
4. Service provision — to deliver casino games, sportsbook markets, live dealer sessions, and promotional offers to your account.
5. Customer support — to respond to enquiries, investigate complaints, and resolve disputes.
6. Responsible gaming monitoring — to identify patterns of play that may indicate problem gambling behaviour and to enforce player-configured account limits and self-exclusions.
7. Legal and regulatory compliance — to fulfil reporting obligations to relevant authorities, respond to lawful requests, and enforce our Terms & Conditions.
8. Platform analytics and improvement — to analyse aggregated usage patterns and improve Platform performance, game selection, and user experience.
9. Marketing communications — to send promotional offers and platform updates to Members who have opted in to receive such communications. You may opt out at any time by contacting support.

5 Legal Basis for Processing

ramly888 relies on the following legal bases for processing your personal data:

• Contractual necessity — processing required to perform the Member Agreement (registration, account management, payment processing, game delivery).
• Legal obligation — processing required to comply with applicable laws and regulations, including AML legislation and data retention requirements.
• Legitimate interests — processing for fraud prevention, platform security, and internal analytics, where these interests are not overridden by your data protection rights.
• Consent — processing for optional marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

ramly888 does not sell your personal data. We share your data only with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Identity verification providers — third-party KYC/AML service providers who process identity documents and perform sanctions screening on our behalf.
• Payment processors — Malaysian payment rails and e-wallet providers (DuitNow, Touch 'n Go eWallet, Boost, FPX, Maybank, CIMB, Public Bank) as required to execute financial transactions.
• Game providers — licensed software providers (Pragmatic Play, Playtech, NetEnt, Habanero, and others) who receive technical session data necessary to deliver games within your account.
• IT and infrastructure providers — hosting, content delivery, and security providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities — where required by applicable law, court order, or regulatory directive, ramly888 will disclose data to competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Professional advisors — lawyers, auditors, and compliance consultants acting under duties of confidentiality where necessary to obtain professional advice.

7 International Data Transfers

Some of ramly888's service providers and infrastructure partners may be located outside of Malaysia. Where personal data is transferred to recipients in jurisdictions that do not provide a level of data protection equivalent to Malaysia's PDPA, ramly888 implements appropriate safeguards including contractual data protection clauses and technical security measures to protect the transferred data.

By registering as a Member of ramly888, you acknowledge and consent to such international transfers of your personal data as described in this Policy.

8 Data Retention

ramly888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements. Specific retention periods are as follows:

• Account and KYC data — retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Transaction records — retained for a minimum of five (5) years following the date of each transaction.
• Support communications — retained for three (3) years following resolution of the relevant enquiry or complaint.
• Technical and usage data — retained for up to twenty-four (24) months from the date of collection, after which it is anonymised or deleted.
• Marketing consent records — retained for the duration of active consent, plus one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ramly888's data disposal procedures.

9 Security Measures

ramly888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive personal data stored at rest, including KYC documents and financial records.
• Multi-factor authentication requirements for administrative access to data systems.
• Role-based access controls limiting data access to personnel with a legitimate operational need.
• Regular third-party penetration testing and vulnerability assessments.
• Automated intrusion detection and real-time anomaly monitoring.
• Documented incident response procedures including notification timelines in the event of a data breach.

While ramly888 takes all reasonable measures to protect your data, no transmission over the internet is entirely risk-free. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access.

10 Cookies & Tracking Technologies

ramly888 uses cookies and similar tracking technologies to operate the Platform and improve the user experience. The categories of cookies used are:

• Strictly necessary cookies — required for session management, authentication, and security. These cannot be disabled without impairing core Platform functionality.
• Functional cookies — used to remember your preferences (language, display settings) and to maintain your login session between visits where "Remember me" is selected.
• Analytics cookies — first-party analytics used to understand aggregate usage patterns, page performance, and game engagement. Data is processed in anonymised form.

ramly888 does not deploy third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform.

11 Your Data Protection Rights

Subject to applicable law and the rights of third parties, you have the following rights in respect of your personal data held by ramly888:

• Right of access — you may request a copy of the personal data we hold about you.
• Right of correction — you may request that inaccurate or incomplete personal data be corrected.
• Right of erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing — you may request that we limit our processing of your data in certain circumstances.
• Right to withdraw consent — where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time.
• Right to complain — you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact our support team at [email protected]. We will respond to verified requests within thirty (30) days. We may require identity verification before processing a data rights request.

12 Children's Privacy

The ramly888 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If ramly888 becomes aware that personal data has been collected from a person under this age threshold, the associated account will be immediately closed and all personal data will be securely deleted without undue delay.

If you believe that a minor has registered an account on ramly888, please notify us immediately at [email protected] so that we may take appropriate action.

13 Third-Party Links

The ramly888 Platform may contain references to third-party game providers whose software is delivered within the Platform environment. Where such providers operate their own privacy practices, those practices are governed by their respective privacy policies. ramly888 is not responsible for the data handling practices of third-party providers beyond the contractual data protection obligations imposed on them as our data processors.

ramly888 does not include links to external third-party websites. Any navigation links on the Platform point exclusively to pages within the ramly888 domain.

14 Changes to This Privacy Policy

ramly888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be notified to registered Members via a Platform notice or email to the registered account address at least seven (7) days before the revised Policy takes effect.

The effective date of the current version is stated at the top of this page. Your continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you must cease use of the Platform and request account closure.

15 Contact Us — Data Enquiries

For all privacy-related enquiries, data rights requests, or to report a suspected data security incident, please contact the ramly888 data team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 via the Platform chat widget
• Response Time: Within 30 days for formal data rights requests; under 5 minutes for live chat enquiries

This Privacy Policy was last reviewed and updated on 1 January 2026 and applies to all Members of the ramly888 platform.