Richdaddy | Policy Privacy

Richdaddy takes the privacy of all its users seriously. We understand that personal information is a valuable asset and we are committed to managing it responsibly, transparently, and securely. This Privacy Policy has been drawn up in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data protection.

This document clearly explains what data we collect from you, why we need it, how we use it, and the measures we take to ensure your data remains safe and protected. richdaddy never sells your personal data to third parties for marketing purposes and will not do so.

If you have any questions or concerns about how we handle your personal data, the richdaddy support team is available to assist you at any time through the provided communication channels.

Richdaddy collects various types of personal data depending on how you interact with our platform. This data falls into two main categories:

Data You Provide Directly

• Identity information: Full name, date of birth, ID card or passport number.
• Contact information: Email address, mobile phone number, mailing address.
• Financial information: Bank account number, bank name, eWallet details used for deposits and withdrawals.
• Verification documents (KYC): Copies of your ID card, passport, utility bill, or other documents required for identity verification.
• Account information: Username, password (stored in hashed form), account preferences.

Automatically Collected Data

• Technical data: IP address, browser type, device operating system, screen resolution.
• Activity data: Gaming history, deposit and withdrawal records, session duration, games played.
• Approximate location data: Country and region based on IP address for compliance purposes.
• Cookie data: Session information, language preferences, login status.

Summary Table of Data Collected

Richdaddy uses collected personal data solely for legitimate purposes directly related to the provision of our services. We never use your data for any other purpose without your consent. The following are the primary purposes for which data is used:

• Account management: Creating, maintaining and protecting your member account, including login verification and account recovery.
• Identity verification (KYC): Fulfilling legal obligations to verify member identity in order to prevent fraud and money laundering, in line with Malaysia's Anti-Money Laundering (AML) regulations.
• Transaction processing: Processing deposits, withdrawals and bonus payments securely and accurately.
• Customer support: Resolving complaints, responding to enquiries and providing technical assistance more effectively.
• Platform security: Detecting and preventing fraudulent activity, system abuse and cybersecurity threats.
• Legal compliance: Meeting reporting and compliance requirements with relevant regulatory bodies.
• Relevant marketing: Sending you information about promotions, bonuses and service updates — provided you have given consent and may unsubscribe at any time.
• Service improvement: Analysing aggregated usage patterns to enhance the richdaddy platform experience.

Richdaddy does not sell, rent, or disclose your personal data to any third party for their own marketing purposes. However, there are limited situations where data sharing is necessary for our service operations:

Permitted Sharing

• Payment processor: Required financial information is shared with FPX, eWallet providers (Touch 'n Go, GrabPay, Boost) and banks to securely process your transactions.
• Game software provider: Username and session data are shared with gaming platform providers to enable gameplay — without exposing your full identity information.
• Identity verification service: Your KYC documents may be processed through trusted and certified third-party identity verification systems.
• Legal obligations: Data may be disclosed to authorities, law enforcement agencies, or courts where required by Malaysian law or a valid court order.
• Business transfer: In the event of a merger, acquisition, or sale of richdaddy assets, user data may be transferred as part of that transaction — with adequate notice provided to you.

All third parties working with richdaddy are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.

The security of your personal data is richdaddy's top priority. We continuously invest in the latest security infrastructure to ensure your data is protected against unauthorised access, breaches, or misuse.

Technical Security Measures

• 256-bit SSL encryption: All data transmitted between your browser and richdaddy servers is encrypted using TLS 1.3 protocol with 256-bit encryption — the highest security standard in the industry.
• End-to-end data encryption: Sensitive data such as financial information and identity documents is stored in encrypted form on our servers.
• Two-factor authentication (2FA): richdaddy provides a 2FA option for an additional layer of protection on your account.
• Firewall and intrusion detection systems: Our infrastructure is protected by enterprise-grade firewalls and 24/7 security monitoring systems.
• Regular penetration testing: Our security systems are regularly tested by certified third-party cybersecurity experts.

Organisational Measures

• Access to members' personal data is granted only to staff who require it for their job responsibilities (need-to-know principle).
• All richdaddy staff who handle personal data undergo regular data protection training.
• Any confirmed data breach will be reported to the relevant authorities and affected members within the timeframe required by law.

Richdaddy uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyze platform usage patterns. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session management, language preferences, and security. These cookies cannot be disabled as they are necessary for the website to operate.
• Performance Cookies: Collecting information on how visitors use our website — such as the most frequently visited pages — to help us improve our services. This data is collected in aggregate and does not personally identify you.
• Functional Cookies: Remembering your preferences such as username, language and display settings to deliver a more personalised experience.
• Analytics Cookies: We use internal analytics tools to understand usage patterns and continuously improve the richdaddy platform.

You may manage or delete cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality and security of your account on the richdaddy platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by richdaddy. We fully respect these rights and provide a simple process for you to exercise them:

To exercise any of the above rights, contact the richdaddy support team via Live Chat or our support email. We will process your request within 30 working days from the date the request is received. In complex cases, this period may be extended with notice provided to you.

Richdaddy only retains your personal data for as long as it is needed for the purposes stated in this policy, or for as long as required by applicable law. The following are our data retention guidelines:

• Active account data: Retained for as long as your account is active and for a specified period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysian legal requirements relating to AML and financial reporting.
• KYC documents: Retained for 5 years after termination of the business relationship in accordance with compliance requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Cookie and analytics data: Session cookies expire when you close your browser; persistent cookies expire after a set period (typically 30–365 days).

Once the retention period expires and there is no legal requirement to retain the data further, richdaddy will securely delete or dispose of your personal data using industry-recognised methods.

Richdaddy reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When material changes are made, we will notify you via:

• Pop-up notifications or banners within the richdaddy platform upon login.
• Email to your registered email address at least 14 days before the changes take effect.
• A clear notice at the top of this Privacy Policy page with an updated revision date.

Your continued use of the richdaddy platform after any policy changes take effect will be considered your acceptance of the revised policy. If you disagree with any changes, you have the right to close your account before they take effect by contacting our support team.

We recommend revisiting this page periodically to stay informed of the latest richdaddy privacy policy. The "Updated" date shown at the top of this page reflects when this policy was last reviewed.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the richdaddy support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the richdaddy platform — the fastest way to get a response.
• Support email: [email protected] — for more detailed inquiries or those requiring documentation.

Our team will endeavour to respond to all privacy-related enquiries within 3 working days. For formal requests relating to personal data rights (access, correction, deletion), processing time is up to 30 working days.