Privacy Policy

Privacy Policy 1998 Rich – Personal Data Protection for Malaysian Players

Your privacy is our priority. Find out exactly how 1998 Rich collects, uses, stores, and protects your personal information as a member of our platform.

Last updated: 1 June 2026
Privacy Policy Summary
Your data is not sold to third parties
256-bit SSL encryption for all data
Your right to access, amend & delete your data
Personal Data Protection Act 2010 Compliance
Configurable cookie controls
Immediate notification in the event of a data breach

1998 Rich's Six Core Privacy Principles

1
Data Minimisation

We only collect data that is genuinely necessary to provide our services. No excessive information is requested without a clear and defined purpose.

2
Defined Purposes

Every piece of data we collect has a clearly stated purpose. Data will not be used for any other purpose without your consent.

3
Limited Retention

Your personal data is not retained longer than necessary. Once the purpose has been fulfilled, data is securely deleted or anonymised.

4
Robust Security

Banking-grade security infrastructure is used to protect all personal data from unauthorised access, leaks, or misuse.

5
Full Transparency

We keep you informed about how your data is used. There are no hidden practices — everything is explained in this policy in plain, straightforward language.

6
Your Rights Are Respected

You have the right to access, correct, or request the deletion of your personal data. 1998 Rich respects and facilitates the exercise of these rights.

How 1998 Rich Protects Your Privacy

End-to-End Encryption

All data transmitted between your device and 1998 Rich's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions.

Data Is Not Sold to Third Parties

Your personal information is never sold, rented, or traded to any third party for marketing purposes. Your privacy is not a commodity to us.

PDPA 2010 Compliance

1998 Rich operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing personal data protection in this country.

Secure Servers & Regular Backups

Your data is stored in physically and digitally secured data centres. Regular backups are performed to ensure data is not lost in any unforeseen technical circumstances.

Strict Access Controls

Only authorised personnel with a legitimate business need may access members' personal data. All access is logged and continuously monitored.

Data Breach Notification

In the event of any data breach involving your information, 1998 Rich will notify you within 72 hours and take immediate remedial action.

This Privacy Policy describes our privacy practices 1998 Rich in managing members' personal information. By using our platform, you agree to the collection and use of your information as described here.

1

Introduction

1998 Rich values the privacy of everyone who uses our platform. This Privacy Policy is designed to clearly and transparently explain how we handle your personal information — from the moment you first visit our website through to your time as an active member.

This Policy applies to all services provided by 1998 Rich, including the main website, any mobile applications, and all our official communication channels including email and Live Chat support.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices in personal data management. Our goal is simple: you should feel safe and confident that your information is in responsible hands when you use the 1998 Rich platform.

Definition of "Personal Data" in this policy refers to any information that can be used to identify you as an individual, either directly (such as your name and IC number) or indirectly (such as your IP address or device usage data).


2

Information We Collect

1998 Rich collects several categories of information from users of our platform. Below is a detailed breakdown of the types of data collected and how they are obtained:

Data Categories Type of Information How It Is Collected
Personal Identity Full name, date of birth, MyKad number, gender, nationality Registration forms & KYC verification
Contact Malaysian phone number, email address, mailing address Registration & profile updates
Financial Payment methods (Touch 'n Go, GrabPay, DuitNow, FPX), transaction history, account balance Deposit & withdrawal process
Technical IP address, device type, web browser, operating system, screen resolution Collected automatically during platform use
Behavioural Game history, login frequency, session duration, games played Collected automatically during platform use
Communications Customer support conversation records, complaints, feedback Interactions with the support team

We do not collect sensitive data such as medical information, religious beliefs, or political affiliations unless required by law and with your explicit consent.


3

How Your Information Is Used

Personal data collected by 1998 Rich is used for the following legitimate purposes, which are necessary for the operation of the platform:

  • Account Management — creating, verifying, and maintaining your member account
  • Service provision — enabling you to access all games and features within the 1998 Rich platform
  • Financial Processing — processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, and handling withdrawal of winnings
  • Identity verification — fulfilling mandatory KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements
  • Platform Security — detecting and preventing fraud, account misuse, and unlawful activity
  • Customer support — providing accurate and relevant assistance whenever you contact our team
  • Personalised Experience — tailoring game recommendations and promotions to your preferences
  • Important communications — sending notifications related to your account, security, and service changes
  • Analytics & improvement — understanding usage patterns to continuously improve platform quality
  • Legal compliance — fulfilling reporting and compliance obligations to relevant authorities in Malaysia

Marketing: 1998 Rich will only send you promotional communications if you have given your explicit consent. You may withdraw this consent at any time through your account settings or by contacting our support team.


4

Sharing Information with Third Parties

1998 Rich does not sell, rent, or trade your personal data to third parties for marketing purposes. However, there are limited circumstances where we may need to share certain information:

  • Payment service providers — e-wallet and online banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) that process your financial transactions
  • Technology service providers — companies that provide technical infrastructure, analytics, or cybersecurity services to our platform
  • Game providers — game operators that supply game content to the 1998 Rich platform, who may require session data that cannot be used to personally identify you
  • Relevant authorities — Malaysian government authorities or law enforcement bodies when required by law, court order, or official investigation
  • Professional advisors — lawyers, accountants, or auditors bound by strict professional confidentiality obligations

All third parties working with 1998 Rich are required to uphold data protection standards equivalent to or stricter than our own. Legally binding data processing agreements are signed with all service providers that handle members' personal data.


5

Data Security

1998 Rich continually invests in robust data security infrastructure to protect your personal information. The technical and organisational measures we implement include:

  • 256-bit SSL/TLS encryption for all data transmissions
  • Encryption of data at rest using the AES-256 algorithm
  • Role-based access control (RBAC) with the principle of least privilege
  • Two-factor authentication (2FA) for all staff access to systems containing personal data
  • 24/7 security monitoring and intrusion detection systems
  • Regular penetration testing conducted by independent security firms
  • Mandatory data security awareness training for all staff
  • Documented incident response procedures that are regularly tested

Important: While we take all reasonable steps to protect your data, no digital system can be guaranteed 100% secure. You are also responsible for keeping your account login credentials safe and not sharing your password with anyone.


6

Cookies & Tracking Technologies

The 1998 Rich platform uses cookies and similar tracking technologies to enhance the user experience and gather analytical data. The types of cookies we use include:

  • Essential Cookies — required for core platform functions such as login session management. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies — collecting information on how you use the platform to help us improve our services (e.g. most frequently visited pages, error messages encountered).
  • Functional Cookies — saving your preferences such as language, display settings, and other personal configurations to improve your experience.
  • Analytical Cookies — helping us understand aggregate, anonymised platform usage patterns for continuous improvement.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the 1998 Rich platform.


7

Financial & Payment Data

As 1998 Rich involves financial transactions, we take an especially cautious approach to handling our members' financial data.

Key things you need to know about your financial data at 1998 Rich:

  • 1998 Rich does not store complete credit card or debit card details — transactions are processed through certified and secure payment providers
  • All deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX are processed through payment gateways that comply with PCI DSS standards
  • Your transaction history is retained for the period required for audit, dispute resolution, and legal compliance purposes
  • A summary of your transaction history is available in your account at any time for your personal review
  • Any unusual transaction activity will be monitored and you will be notified if necessary

Transaction Security: If you notice any unauthorised transactions in your 1998 Rich account, please contact our support team immediately at support@1998rich.ws so we can take the appropriate protective action.


8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by 1998 Rich:

Right to Access

Request a copy of the personal data we hold about you within 21 business days.

Right to Rectification

Request the correction of any inaccurate or incomplete data in your records.

Right to Erasure

Request the deletion of your personal data under certain circumstances as provided for by law.

Right to Restriction

Request a restriction on the processing of your data in certain situations while a dispute is being resolved.

Right to Object

Object to the processing of your personal data for direct marketing purposes at any time.

Right to Data Portability

Request your data in a machine-readable format for transfer to another platform.

To exercise any of the rights above, submit a written request to support@1998rich.ws with the subject line "PRIVACY RIGHTS REQUEST", along with your account number and a copy of your identity verification document.


9

Data Retention & Deletion

1998 Rich retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required under Malaysian law.

  • Active account data — retained for the duration your account remains active and for 5 years following account closure (for audit and compliance purposes)
  • Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian tax and financial legal requirements
  • Customer support chat logs — retained for 2 years from the date of interaction
  • Analytics data and technical logs — retained for 12 months before being anonymised or deleted
  • Marketing data — deleted within 30 days of you withdrawing your marketing consent

Once the retention period expires, your personal data will be securely deleted or anonymised using methods that prevent any possibility of re-identification.


10

Cross-Border Data Transfer

In certain operational situations, your personal data may need to be transferred or processed outside Malaysia — for example, when using cloud computing services or international technology providers.

Where cross-border data transfers are required, 1998 Rich ensures that:

  • The recipient country or entity maintains an equivalent or stricter level of data protection
  • Appropriate contractual agreements are signed to safeguard your data throughout the transfer process
  • Transfers are carried out only when necessary and via the most secure methods available
  • You will be notified of any significant cross-border transfers involving your personal data

11

Children & Minors

1998 Rich Platform not intended for individuals under the age of 21 and we do not knowingly collect personal data from minors.

Should we discover that personal data belonging to a child or minor has been collected without our knowledge, the following steps will be taken immediately:

  • The account in question will be suspended and investigated immediately
  • All collected personal data will be deleted within 48 hours
  • Parents or guardians who believe their child may have registered on our platform are encouraged to contact us immediately at support@1998rich.ws

Shared Responsibility: Parents and guardians are encouraged to monitor their children's online activity. 1998 Rich takes the responsibility of minor protection very seriously and consistently adopts proactive measures in this regard.


12

Changes to This Privacy Policy

1998 Rich reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We will notify you of significant changes through:

  • In-platform notifications for logged-in members
  • An email to your registered address at least 14 days before the changes take effect
  • Update of the "Last updated" date at the top of this page

Your continued use of the 1998 Rich platform after any changes are published will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed.


13

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

  • Email: support@1998rich.ws — please include "PRIVACY" in your email subject line
  • Live Chat: Available 24/7 on the 1998 Rich platform
  • WhatsApp: Available to members who are logged in to the platform

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data rights requests (such as access or deletion), please include a copy of your identity verification document to help expedite processing.

For general enquiries unrelated to privacy, please visit our FAQ us or contact general customer support.

Your Privacy Is Protected —
Play with Confidence at 1998 Rich

Your data is fully protected. Register today and enjoy a safe, fair, and exciting online entertainment experience alongside over 500,000 Malaysian members who already trust 1998 Rich.

256-bit SSL data protection
PDPA 2010 Compliant
Data is never sold
24/7 Support
Bahasa Melayu