1988rice Privacy
Policy & Data Protection

This Privacy Policy ("Policy") describes how 1988rice ("the Company", "we", "us", or "our") collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "the Player", or "the User") who access or use the1988rice online gaming platform available at https://1988rice.cam ("the Platform").

1988rice is committed to protecting the privacy of all players and handling personal data with the care, transparency, and security it deserves. This Policy has been drafted in accordance with applicable data protection principles and outlines the lawful basis on which we process personal data.

By registering an account or continuing to use the Platform, you acknowledge that you have read, understood, and consent to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should cease using the Platform and contact us to request account closure.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

1988rice collects personal data only to the extent necessary for the operation of the Platform, the provision of gaming services, regulatory compliance, and the protection of player accounts. The categories of personal data we collect are as follows:

3.1 Data Provided Directly by You

• Account Registration: Full legal name, date of birth, gender, residential address, email address, and telephone number.
• Identity Verification (KYC): Government-issued identification documents such as MyKad, passport, or driving licence; proof of address documents; and, where required, selfie verification images.
• Financial Data: Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), and transaction records associated with deposits and withdrawals. We do not store full card numbers or CVV codes.
• Communications: Messages and correspondence submitted to our support team via live chat or email, including any attachments you voluntarily provide.
• Preferences & Self-Declarations: Responsible gambling tool settings, deposit limit preferences, and self-exclusion requests.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage & Behavioural Data: Pages visited, time spent on the Platform, features accessed, game sessions initiated, and betting history.
• Session Data: Login timestamps, session duration, and logout events.
• Cookie & Tracking Data: Data collected through cookies, web beacons, and similar technologies as described in Section 7 of this Policy.

3.3 Data from Third Parties

• Payment Processors: Transaction confirmation data from Malaysian payment partners including DuitNow, FPX, and banking networks.
• Identity Verification Services: Verification outcomes from third-party KYC providers used to confirm identity documents.
• Fraud Prevention Providers: Risk signals and fraud scores from third-party security services used to protect player accounts and platform integrity.

1988rice uses personal data for the following purposes, each of which is supported by a legitimate legal basis as described in Section 5:

All personal data processing by 1988rice is conducted one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform our obligations under our Terms and Conditions and to provide the gaming services you have registered for. This includes account management, payment processing, and service delivery.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including AML/CTF requirements, age verification mandates, and reporting obligations to relevant authorities.
• Legitimate Interests: Processing is conducted for the legitimate interests of 1988rice or a third party, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, and general analytics.
• Consent: Where processing is based on your consent — such as marketing communications or optional analytics tracking — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent, please contact our support team.

1988rice does not sell personal data to third parties. We may share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary financial and identity data with Malaysian payment processors — including DuitNow network operators, FPX, and e-wallet providers such as Touch 'n Go eWallet and Boost — solely for the purpose of completing payment transactions.
• Identity Verification Partners: KYC document data is shared with third-party identity verification services to confirm the authenticity of documents and player identity. These providers are bound by strict data processing agreements.
• Fraud Prevention & Security Services: Risk and security data may be shared with fraud prevention platforms to detect and prevent account takeovers, money laundering, and other prohibited conduct.
• Game Content Providers: Aggregated or pseudonymised session data may be shared with game studio integration partners for technical integration purposes. No personally identifiable information is shared with game studios for marketing or profiling purposes.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to government bodies, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive.
• Professional Advisers: Personal data may be shared with legal advisers, auditors, and compliance consultants where strictly necessary and subject to professional confidentiality obligations.

The 1988rice Platform uses cookies and similar tracking technologies to operate core Platform functionality, improve user experience, and support security and analytics. The following categories of cookies are used:

You may control optional cookies through your browser settings at any time. Please note that disabling certain cookies may affect Platform functionality. We do not use cookies for third-party advertising or cross-site behavioural tracking.

1988rice retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guide:

• Account Data: Retained for the duration of your active account relationship, plus a minimum of five (5) years following account closure to meet AML/CTF record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping requirements.
• Customer Support Records: Retained for three (3) years from the date of the relevant interaction.
• Marketing Preferences: Retained until you withdraw consent or close your account.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud analysis purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents recovery or re-identification.

1988rice maintains a comprehensive information security programme designed to protect personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest within our database infrastructure.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Two-factor authentication (2FA) for all administrative system access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems and real-time security monitoring.
• Staff training on data protection obligations and secure data handling practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 1988rice will notify affected Players without undue delay through their registered email address and will take all appropriate remedial action.

Subject to applicable law, you hold the following rights in respect of your personal data held by 1988rice. To exercise any of these rights, please contact our support team with your registered account details and a description of your request.

We will respond to all data rights requests within 30 calendar days of receipt. In complex cases we may extend this by a further 60 days, in which case we will notify you of the extension and the reason for it.

To submit a data rights request, please contact our support team via live chat or at [email protected] with the subject line "Data Rights Request".

The 1988rice Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect, process, or store personal data relating to persons under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If we become aware that personal data has been collected from a person under 21 years of age without verified parental or guardian consent in circumstances where it was inadvertently provided, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor may have accessed or registered on the Platform, please contact our support team immediately at [email protected].

The 1988rice Platform may contain references to third-party services, such as payment provider platforms (Maybank2u, CIMB Clicks, Touch 'n Go eWallet, etc.) accessed when completing deposits or withdrawals. Please be aware that once you leave the 1988rice Platform to interact with a third-party service, that service's own privacy policy governs the collection and use of your data.

1988rice is not responsible for the privacy practices, security standards, or content of any third-party service. We encourage you to read the privacy policies of any third-party service you interact with in connection with your1988rice account.

1988rice reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where changes are material, we will notify registered Players via their registered email address and post a prominent notice on the Platform at least14 days prior to the effective date of the change.

The "Last Updated" date at the top of this Policy indicates the date of the most recent revision. The version published on this page supersedes all prior versions of the 1988rice Privacy Policy. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you object to any changes in this Policy, please cease using the Platform and contact our support team to request account closure and data deletion, subject to applicable legal retention obligations.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which 1988rice processes your personal data, please contact us using the following channels:

• Live Chat: Available24 hours a day, 7 days a week via the support widget on the Platform. Please state "Privacy Query" at the start of your chat session for priority routing.
• Email: [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate. We aim to respond to all privacy-related emails within 2 business hours during standard operating hours, and within 30 calendar days formal data rights requests.

We treat all privacy and data protection enquiries with the utmost seriousness. If you are not satisfied with our response to a complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your applicable jurisdiction.