Ritz99 Privacy Policy – Personal Data Protection for Malaysian Players: What You're Entitled to Know

This Privacy Policy is published by ritz99 ("we", "the platform") and applies to all ritz99 platform users, including registered players, website visitors, and ritz99 mobile app users. This document describes our privacy practices regarding the collection, use, disclosure, and protection of your personal data.

Ritz99 operates in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. We are committed to ensuring that the personal data you share with us is handled with the responsibility, confidentiality, and security that your trust in us deserves.

By registering an account, using any ritz99 service, or browsing our website, you consent to the collection and use of your personal data in the manner described in this Privacy Policy. If you do not agree, please cease using the platform immediately and contact us to request deletion of your data.

Ritz99 collects several categories of personal data from players to enable the platform to operate safely and effectively. The following are the categories of data we collect:

Ritz99 collects personal data through various channels — both directly and indirectly — as you interact with our platform:

• During account registration: You fill out a registration form requiring your name, email, phone number, and other basic details.
• KYC Process (Identity Verification): You will be asked to upload verification documents such as a copy of your MyKad or passport to meet regulatory requirements.
• Financial transactions: Payment method details are collected when you make a deposit or submit a withdrawal request.
• Platform usage: Our systems automatically record your gameplay activity, bets placed, login and logout events, and usage patterns.
• Support communications: When you contact ritz99 customer support, conversations are recorded for quality assurance and security purposes.
• Cookies and tracking technologies: The ritz99 website and app use cookies to improve the user experience and for analytical purposes (see Section 8).

Ritz99 uses your personal data solely for legitimate, clearly stated purposes. We will not use your data for any other purpose without first obtaining your additional consent:

• Account management: To create, verify, and manage your ritz99 account, including a secure login process.
• Transaction processing: To process deposits, withdrawals, and bonus payments in MYR via Touch 'n Go, GrabPay, DuitNow, Maybank2u, and other Malaysian payment methods.
• Legal compliance: To meet KYC requirements, anti-money laundering (AML) obligations, and reporting requirements under applicable Malaysian law.
• Platform security: To detect, prevent, and investigate fraud, account misuse, and security threats.
• Customer support: To enable the ritz99 support team to assist you in resolving any issues or enquiries.
• Service improvement: To analyse aggregated usage patterns (without identifying individuals) for the purpose of improving ritz99's products and user experience.
• Marketing communications: To send you relevant ritz99 promotional information and bonuses — only if you have given your consent to receive such communications.

Ritz99 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This is our absolute commitment.

However, there are limited circumstances in which ritz99 may need to share your data with certain parties:

• Payment service providers: Providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX-supported banks need to receive relevant transaction information in order to process payments.
• Technical service providers: Hosting companies, cloud infrastructure providers, and game providers (such as Live Casino providers) who are bound by strict confidentiality agreements with ritz99.
• Competent authority: ritz99 will disclose data when directed by a court order, the Malaysian Communications and Multimedia Commission (MCMC), or any other competent Malaysian authority.
• Fraud prevention: Information may be shared with anti-fraud agencies operating in Malaysia to protect the digital financial ecosystem.

Ritz99 stores your personal data on secure servers with multi-layered protection measures. All data is encrypted using the 256-bit SSL — the same encryption technology used by Malaysia's leading banking institutions such as Maybank and CIMB.

Data retention period: ritz99 retains your personal data for as long as your account remains active and for 7 years after account closure, in line with Malaysia's legal requirements for financial records and AML compliance. Data that is no longer required will be securely deleted or anonymised.

The technical and organisational security measures we employ include:

• SSL/TLS encryption for all communications between your device and ritz99's servers
• Two-factor authentication (2FA) available for all ritz99 accounts
• Strict access controls — only authorised personnel may access player data, and only when there is a legitimate need to do so
• Regular security audits conducted by independent third parties every quarter
• Round-the-clock threat monitoring and automated intrusion detection systems
• Encrypted data backups stored across multiple locations to protect against data loss

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding your personal data held by ritz99:

To exercise any of the rights above, please contact us by email at support@ritz99.biz by clearly stating your request. We will process your request within 21 working days.

The ritz99 website and mobile app use cookies — small text files stored on your device — to enhance the user experience and ensure the platform functions properly. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may prevent you from logging in or using certain features on the ritz99 platform.

The ritz99 platform is strictly prohibited for individuals under the age of 18. ritz99 does not knowingly collect, process, or store any personal data from minors.

If we discover that personal data belonging to a minor has been collected without our knowledge, we will take the following steps immediately:

• Immediately terminating the associated account
• Permanently deleting all related personal data from our systems
• Returning any funds remaining in the account

If you are a parent or guardian who believes your child has registered a ritz99 account, please contact us immediately at support@ritz99.biz.

Ritz99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, Malaysian legal requirements, or the technologies we use. Any changes will be published on this page with a new "last updated" date.

For material changes that significantly affect your rights, ritz99 will:

• Sending a notification via email to your registered address at least 14 days before the changes take effect
• Displaying a prominent notice on the ritz99 platform's main page
• Sending a notification via the ritz99 mobile app (if installed)

Continued use of the ritz99 platform after any changes take effect will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions or concerns, or wish to exercise your rights under this Privacy Policy, please contact the ritz99 Data Privacy Officer at: