ritz99 Privacy Policy

1. Introduction

ritz99 ("we", "us", "our") operates the online gaming platform accessible at ritz99.asia. This Privacy Policy explains how ritz99 collects, uses, discloses, stores, and protects the personal data of individuals who access or use the ritz99 platform, including registered account holders and visitors to our website.

By accessing the ritz99 platform, registering an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

ritz99 is committed to handling your personal data responsibly and in accordance with applicable data protection laws and regulations, as well as the data-related requirements of our international gaming authority licence.

2. Data Controller

For the purposes of applicable data protection legislation, ritz99 is the data controller of the personal data you provide when using the ritz99 platform. This means ritz99 determines the purposes for which, and the means by which, your personal data is processed.

If you have any questions or concerns regarding the processing of your personal data by ritz99, you may contact us at the details provided in Section 15 of this Policy.

3. Personal Data We Collect

ritz99 collects the following categories of personal data from players and platform users:

3.1 Registration and Identity Data

• Full legal name
• Date of birth
• National identity number (MyKad) or passport number
• Residential address
• Email address
• Mobile phone number

3.2 Financial and Transaction Data

• Bank account details and payment method information (e.g. Touch n Go eWallet account reference, Maybank or CIMB account details used for transactions)
• Deposit and withdrawal history
• Bonus and promotional activity
• Source of funds documentation (where required by AML obligations)

3.3 Technical and Usage Data

• IP address and approximate geolocation data
• Device type, operating system, and browser type
• Session duration, login timestamps, and game session logs
• Pages visited and navigation patterns on the ritz99 platform

3.4 Communications Data

• Records of communications with ritz99 customer support, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records

4. How ritz99 Uses Your Personal Data

ritz99 uses your personal data for the following purposes:

• Account management: To create, verify, and maintain your ritz99 account, including identity verification (KYC) and age verification to comply with our 21+ policy.
• Payment processing: To process your deposits and withdrawals via Touch n Go eWallet, Boost, FPX banking, and other supported payment channels.
• Platform provision: To provide access to ritz99 games, sportsbook markets, promotions, and account features.
• Legal and regulatory compliance: To meet our obligations under our international gaming authority licence, including AML/KYC requirements, responsible gambling obligations, and record-keeping requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Customer support: To respond to enquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to administer deposit limits, loss limits, session controls, and self-exclusion requests.
• Communications: To send service-related notifications, account alerts, security warnings, and — where you have consented — promotional communications about ritz99 offers and updates.
• Platform improvement: To analyse usage patterns and technical performance data to improve the ritz99 platform experience.

5. Legal Basis for Processing

ritz99 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the ritz99 platform services you have registered for, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and the requirements of our gaming licence, including AML/KYC obligations and responsible gambling regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have given explicit consent. You may withdraw this consent at any time by contacting ritz99 support or using the unsubscribe mechanism in marketing emails.

6. Sharing of Personal Data

ritz99 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: Financial institutions and e-wallet operators (including Touch n Go, Boost, and FPX banking partners) as necessary to process your transactions.
• Identity verification providers: Third-party KYC and AML compliance services used to verify your identity and comply with licensing obligations.
• Game providers: Software providers whose games are hosted on the ritz99 platform may receive pseudonymised game session data necessary to operate their games and resolve disputes.
• Regulatory authorities: Licensing authorities, law enforcement agencies, and other governmental bodies where disclosure is required by law, court order, or our licensing obligations.
• Technical service providers: Cloud infrastructure, cybersecurity, and platform maintenance providers operating under strict data processing agreements that prohibit use of your data for their own purposes.

ritz99 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own independent marketing or commercial purposes.

7. Cookies and Tracking Technologies

The ritz99 platform uses cookies and similar tracking technologies to enable core platform functionality, maintain session state, and analyse usage patterns. The categories of cookies used by ritz99 include:

• Essential cookies: Required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impacting core functionality.
• Functional cookies: Store your preferences such as language settings, display options, and game lobby filters to improve your experience.
• Analytics cookies: Collect pseudonymised data about how players navigate and use the ritz99 platform, used to improve platform performance and user experience.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from accessing your ritz99 account and using platform services.

8. Data Retention

ritz99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and licensing obligations. Specific retention periods include:

• Account data: Retained for the duration of your ritz99 account and for a minimum of 5 years following account closure, in compliance with AML and gaming licence record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Communications records: Customer support communications retained for a minimum of 2 years from the date of the last communication in a thread.
• Technical logs: Security and access logs retained for a minimum of 12 months.

Where personal data is no longer required for any lawful purpose, ritz99 will securely delete or anonymise it.

9. International Data Transfers

ritz99 may transfer your personal data to servers or service providers located outside of Malaysia in connection with the provision of platform services, including cloud infrastructure, game software hosting, and payment processing. Where personal data is transferred internationally, ritz99 implements appropriate safeguards — including contractual data processing agreements incorporating standard data protection clauses — to ensure your data remains protected to an equivalent standard as required under applicable Malaysian data protection law.

10. Your Data Protection Rights

Subject to applicable law and ritz99's legal retention obligations, you have the following rights in respect of your personal data held by ritz99:

• Right of access: You may request a copy of the personal data ritz99 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires retention.
• Right to restrict processing: You may request that ritz99 temporarily suspend processing of your personal data in certain circumstances.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to ritz99, where processing is based on consent or contract.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact the ritz99 Data Privacy team via the support contact details in Section 15. ritz99 will respond to verified requests within 30 days.

11. Children's and Minors' Privacy

The ritz99 platform is strictly for adults aged 21 years and above. ritz99 does not knowingly collect personal data from individuals under 21 years of age. If ritz99 discovers that personal data has been collected from a person under 21, that account will be immediately closed, all associated data will be deleted, and any deposited funds will be returned after identity verification.

If you believe a minor has registered or is accessing a ritz99 account, please contact us immediately via the support details in Section 15.

12. Security Measures

ritz99 implements technical and organisational security measures appropriate to the risk associated with processing your personal data, including:

• SSL/TLS encryption for all data transmitted between your device and the ritz99 platform
• Encryption of sensitive data fields (including payment information) at rest
• Role-based access controls limiting internal data access to authorised personnel on a need-to-know basis
• Regular security testing and vulnerability assessments of the ritz99 platform infrastructure
• Incident response procedures for detecting, containing, and notifying affected parties of data security incidents

While ritz99 takes all reasonable steps to protect your personal data, no online system is entirely immune from security risk. You are responsible for maintaining the confidentiality of your ritz99 account credentials and for notifying ritz99 immediately if you suspect unauthorised access to your account.

13. Third-Party Platform Links

The ritz99 platform does not contain links to external third-party websites for general browsing purposes. Where third-party services (such as payment processors or game providers) are accessed through the ritz99 interface, those third parties operate under their own privacy policies which ritz99 does not control. ritz99 is not responsible for the privacy practices of third-party services integrated within the platform.

14. Updates to This Privacy Policy

ritz99 may update this Privacy Policy from time to time to reflect changes in applicable law, our licensing obligations, or our data processing practices. Material changes will be communicated to registered account holders via platform notification or to your registered email address before taking effect.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the ritz99 platform after the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree to the updated Policy, you should close your ritz99 account.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or ritz99's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the ritz99 platform — the fastest response channel for all data-related requests.
• Email: [email protected] — please mark your subject line "Privacy Request" for priority routing to the ritz99 data privacy team.

ritz99 will acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 days of receipt of a verifiable request.