Ry36 Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy is issued by ry36 ("we", "Platform") and applies to all users who access or use the ry36 website, the ry36 mobile application, and all services provided by ry36 ("Services"). This Policy explains the types of personal data we collect, the purposes for collection, how we protect it, who may access it, and the rights you have as a ry36 player.

Privacy at ry36 is more than a slogan — it is an operating principle built into every aspect of our platform. We understand that when you register an account with ry36, you are entrusting us with important information that must be handled with care. From your full name and Malaysian phone number to deposit transaction records made via Touch 'n Go eWallet or FPX, every piece of your data is managed with full accountability by the ry36 team.

This Privacy Policy should be read together with ry36 Terms & Conditions and together form the entire usage agreement between you and ry36. In the event of any conflict between this Privacy Policy and the Terms & Conditions relating to data protection, this Privacy Policy shall take precedence.

Ry36 collects personal data through various means when you interact with our platform. The following are the main categories of data we collect:

Ry36 does not collect sensitive information such as health details, religious beliefs, political views, or biometric data, unless specifically required for a particular identity verification process and only with your explicit consent.

The personal data we collect is used solely for the following purposes:

• Account Management: Creating and maintaining your ry36 account, processing registration, verifying identity, and managing account security.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX; processing withdrawals to your Malaysian bank account or eWallet; retaining transaction records in MYR (Ringgit Malaysia) for compliance purposes.
• Service Delivery: Enabling you to access all ry36 games and services, including Live Casino, slots, poker, Sports Betting on football, badminton, cricket, and esports.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, duplicate accounts, and any other misuse of the ry36 platform.
• Legal Compliance: Meeting anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and other applicable legal reporting duties.
• Customer Support: Handling enquiries, resolving complaints, and providing technical assistance in Bahasa Malaysia to ry36 players.
• Product Improvement: Analysing aggregated and anonymised usage patterns to improve the ry36 platform, introduce new features, and enhance the experience for Malaysian players.
• Marketing Communications: Sending promotional information, bonus offers, and ry36 updates via email or SMS — only where you have opted in to receive such communications.

Ry36 will not use your personal data for any purpose beyond those listed above without first obtaining your renewed consent.

Ry36 does not sell players' personal data to any party for marketing purposes. However, in the course of operating the platform, ry36 may share limited personal data with the following parties under specific circumstances:

• Malaysian Payment Providers: Required transaction information is shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, and FPX-supported banks such as Maybank and CIMB solely for the purpose of processing your deposits and withdrawals in MYR.
• Game Software Providers: Limited game session information is shared with licensed casino and slots game providers that supply software to the ry36 platform, in order to ensure smooth gameplay.
• Identity Verification Services: Identity information may be shared with approved KYC (Know Your Customer) service providers for the purposes of age and identity verification as required by law.
• Legal Authorities: ry36 will disclose personal data to Malaysian or international authorities where required by court order, lawful regulatory directive, or in the context of a criminal investigation such as money laundering.
• IT Service Provider: Selected cloud infrastructure, cybersecurity, and technical support providers — bound by strict confidentiality agreements with ry36 — may have limited access to data in the course of delivering their services.

All third parties that receive ry36 data are bound by strict data protection agreements and are not permitted to use that data for any purpose other than what is specified in their agreement with ry36.

Ry36 continually invests in the latest cybersecurity infrastructure to protect players' personal and financial data. The key security measures we employ include:

• 256-bit SSL Encryption: All communications between your browser or app and ry36's servers are encrypted using TLS 1.3 with AES-256 encryption — the same standard used by Malaysia's major banks.
• Tiered Access Controls: Access to player data within the ry36 organisation is restricted on a need-to-know basis — only staff who require access to perform their duties are permitted.
• 24/7 Threat Monitoring: ry36's automated security monitoring system operates around the clock to detect and respond to any threats or unauthorised access attempts in real time.
• Two-Factor Authentication (2FA): ry36 players are encouraged to enable two-factor authentication on their accounts as an additional layer of security beyond their regular password.
• Regular Security Audits: The ry36 platform undergoes periodic independent third-party security audits to identify and address any vulnerabilities before they can be exploited.
• Secure Data Backup: Player data is regularly backed up to secure, separate locations to ensure prompt recovery in the event of any disruption or technical incident.

While ry36 takes all reasonable precautions, no digital security system is entirely perfect. In the unlikely event of a data security incident affecting ry36 players, we are committed to notifying affected players within the timeframe required by applicable law.

Ry36 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small data files stored on your device when you visit the ry36 website.

Types of cookies used by ry36:

• Essential Cookies: Required for the core functionality of the ry36 platform — including maintaining your login session, processing transactions securely, and saving your language preferences. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Allows ry36 to remember your preferences — such as favourite sports, odds display format, and account settings — to deliver a more personalised experience.
• Analytics Cookies: Helps ry36 understand how players use the platform — most visited pages, average session duration, and other technical details. This data is used in aggregated, anonymised form to improve the platform.
• Security Cookies: Assists ry36's security systems in detecting suspicious activity, unauthorised login attempts, and any misuse of the platform.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect certain features of the ry36 platform. For more detailed cookie management, you can access the cookie settings panel available at the bottom of the ry36 website.

Ry36 retains players' personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable law. The following guidelines apply to our data retention periods:

• Active Account Data: For as long as your account remains active with ry36, your personal data is retained to enable continued use of the platform.
• Data After Account Closure: Upon account closure, ry36 will retain your personal data for the minimum period required by law – typically between 5 and 7 years for financial records, for audit purposes and compliance with anti-money laundering regulations.
• Financial Transaction Records: All deposit, withdrawal, and transaction records in MYR are retained for a minimum of 7 years in accordance with applicable financial regulatory requirements.
• Customer Support Data: Communication records with the ry36 support team are retained for 2 years for quality assurance purposes and to assist in resolving any future disputes.
• Analytics Data: Aggregated and anonymised usage data may be retained for longer periods for trend analysis and product improvement purposes.

Once data is no longer needed and the minimum retention period has elapsed, ry36 will securely delete or anonymise that data in accordance with established procedures.

As a ry36 player, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. All such requests will be processed within 14 business days.
• Right to Rectification: If any personal data we hold about you at ry36 is inaccurate or out of date, you have the right to request a correction. Basic profile information can be updated directly through Profile Settings in your ry36 account.
• Right to Erasure: In certain circumstances (subject to legal data retention obligations), you may request the deletion of your personal data from ry36's systems.
• Right to Object to Processing: You have the right to object to the use of your data for direct marketing purposes at any time. Such requests will be actioned immediately.
• Right to Withdraw Consent: Where processing of your data is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
• Data Portability Rights: You may request ry36 to provide your personal data in a machine-readable format for transfer to another service provider where applicable.

To exercise any of the above rights, please contact the ry36 privacy team by email at support@ry36.xyz, stating the right you wish to exercise along with the required identity verification details.

The ry36 platform is strictly for individuals aged 18 and above. ry36 does not knowingly collect, process, or store personal data from anyone under the age of 18.

If ry36 discovers that personal data belonging to a minor has been collected without parental or guardian knowledge and consent, we will take immediate steps to delete that data and close the account in question. Any remaining deposit balance will be returned to the original payment method used.

If you believe your child or someone under the age of 18 has registered a ry36 account, please contact the ry36 support team immediately at support@ry36.xyz with the relevant details so we can take prompt action.

Ry36 reserves the right to amend this Privacy Policy from time to time in line with changes to data protection legislation, technological developments, or changes in how we operate our services. All updates will be published on this page with the new amendment date clearly noted.

For material amendments that significantly affect players' privacy rights — such as changes to how we use your data or the introduction of new third parties receiving your data — ry36 will endeavour to notify players via in-account notifications or their registered email address at least 14 days before the changes take effect.

Continued use of the ry36 platform after any Privacy Policy amendments are published will be considered acceptance of the revised policy. We encourage players to review this page periodically to stay informed about how ry36 handles your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ry36 handles your personal data, we are always ready to help. Please reach out to us through the following channels:

• Privacy Email: support@ry36.xyz — include "Privacy Enquiry" in the subject line to be directed to the appropriate team
• Live Chat: Available 24/7 within your ry36 account — typical response time is under 2 minutes
• Language of Service: Fully in Bahasa Malaysia – no language barriers for Malaysian players
• Response Time: Privacy rights requests are processed within 14 business days; general enquiries are typically responded to within 24 hours

For information on the Terms & Conditions governing use of the platform, please visit the Terms & Conditions ry36. For information on responsible gambling and self-control tools, please visit the Responsible Gambling ry36.