Rwbola Privacy Policy — Data Protection You Are Our Priority

1 Introduction

Rwbola ("we", "our platform") values the privacy of every player. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the rwbola website, our mobile app, and all related services.

As an online entertainment platform operating in the Malaysian market, we are bound by the Personal Data Protection Act 2010 (PDPA) of Malaysia. We only collect data that is genuinely necessary to provide a safe, fair, and enjoyable experience for our players.

Your privacy is more than a legal obligation to us — it is part of our commitment to building a platform players can fully trust. We do not sell, rent, or trade your personal data to any party for marketing purposes without your consent.

2 Personal Data We Collect

Rwbola collects your personal data through several channels — during registration, during platform use, and through automated technologies. Below is a summary of the data we collect:

Data We Do Not Collect

Rwbola does not collect sensitive information such as biometric data, medical records, political views, or religious beliefs. We also do not collect data from individuals under 18 years of age — if we find that an account has been registered by a minor, that account will be terminated immediately.

3 How We Use Your Data

Every piece of data we collect is used for a specific and lawful purpose. rwbola does not use your data for purposes unrelated to the operation of the platform without your prior consent.

Primary Purpose of Data Use

• Account Management: Registering your account, verifying your identity through the KYC process, and securing login access via encryption and two-factor authentication.
• Transaction Processing: Securely and accurately processing deposits and withdrawals in Malaysian Ringgit (MYR) via FPX, DuitNow, Touch 'n Go eWallet, Boost and GrabPay.
• Customer Service: Handling your enquiries, complaints and technical support requests via 24/7 live chat.
• Security & Fraud Prevention: Detecting suspicious activity, preventing unauthorised access, and protecting platform integrity against manipulation.
• Legal Compliance: Fulfilling anti-money laundering (AML) compliance obligations, KYC requirements, and other applicable statutory reporting requirements.
• Platform Improvements: Analysing usage patterns to improve the user experience, introduce new features, and maintain optimal platform performance.
• Marketing Communications: Sending promotional information, bonuses and special offers — only if you have given consent to receive such communications.

4 Data Sharing with Third Parties

Rwbola does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share your data with trusted parties to enable the smooth operation of the platform.

Third Parties That May Receive Your Data

• Payment Providers: Financial institutions and e-wallet providers such as local banks, FPX, DuitNow, and e-wallet providers required to process your deposit and withdrawal transactions.
• Game Providers: Gaming software companies that provide slots, Live Casino, and fish shooting games on our platform. The minimum data required to ensure games run correctly is shared within a secure environment.
• Identity Verification Providers: Third-party KYC services that assist us in verifying player identities to comply with anti-money laundering legal requirements.
• Legal Authority: Law enforcement agencies, regulatory bodies, or courts when we are required to do so under applicable Malaysian law.
• Analytics Providers: Analytics services that help us understand platform usage patterns. Data shared is in aggregated form and cannot be individually identified.

All third parties that receive your data are bound by strict data protection agreements and are only permitted to use that data for purposes agreed upon with us. We ensure every partner meets a data protection standard equal to or higher than our own.

5 Your Personal Data Security

Protecting your personal data is a responsibility we take seriously. rwbola implements multiple layers of technical and organisational security to ensure your data remains protected at all times.

Technical Security Measures

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected by industry-standard SSL encryption. You can verify this via the padlock icon in your browser's address bar.
• Encryption of Stored Data: Sensitive data such as financial details and identity information is encrypted in our database using the latest encryption algorithms.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an added layer of protection on their accounts.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and repel any unauthorised access attempts.
• Regular Penetration Testing: rwbola conducts regular security audits and penetration tests by independent security experts to identify and address system vulnerabilities.

Organisational Measures

• Access to player personal data is restricted to staff who require it to perform their duties.
• All staff who handle personal data undergo regular data protection training.
• A clear, tested data incident response procedure is in place and can be activated promptly in the event of any security breach.

6 Cookies & Tracking Technologies

Rwbola uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: These cookies are required for core platform functions such as login sessions and security. Without them, the platform cannot operate correctly and cannot be disabled.
• Preference Cookies: These cookies store your preferences — such as your chosen language and display settings — to make your experience more comfortable on future visits.
• Analytics Cookies: We use analytics cookies to understand how players interact with our platform — the most visited pages, time spent on the platform, and navigation patterns. This data helps us improve the platform.
• Marketing Cookies: If you have consented to receive marketing communications, these cookies help us display promotions relevant to your interests.

Managing Your Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect platform functionality. Most modern browsers allow you to selectively accept or reject cookies by category.

7 Your Rights Under PDPA

As a data subject under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data held by rwbola:

To submit any request relating to your rights, contact our Data Protection Officer by email at the address stated in Section 11. We will process your request within 21 business days. In complex cases, this period may be extended to up to 60 days with notice to you.

8 Data Retention & Deletion

Rwbola retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by applicable Malaysian law.

Typical Retention Period

• Active Account Data: Retained for the duration your account remains active and in use on the rwbola platform.
• Financial Transaction Data: Deposit and withdrawal transaction records are retained for a minimum of 7 years in accordance with Malaysian financial and tax regulatory requirements.
• KYC Data: Identity verification documents are retained for a minimum of 5 years after account closure, in compliance with anti-money laundering legal requirements.
• Technical Log Data: Access logs and security logs are retained for 12 months for fraud detection and security audit purposes.
• Inactive Account: Accounts that have been inactive for more than 2 years may be subject to closure and data archiving procedures in accordance with our policy.

Upon expiry of the retention period, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

9 Links & Third-Party Services

The rwbola platform may contain links to third-party websites or services such as game providers or payment providers. This Privacy Policy applies to the rwbola platform only.

When you access third-party websites or services via links on our platform, you are subject to their own privacy policies. rwbola is not responsible for the privacy practices or content of those third-party sites. We encourage you to read the privacy policy of every website you visit.

Game providers integrated with the rwbola platform have been reviewed and confirmed to meet reasonable data security and privacy standards before any partnership is finalised.

10 Privacy Policy Amendments

Rwbola reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technologies we use. The "Last updated" date at the top of this document will be revised whenever an amendment is made.

For material amendments that affect how we use your data, we will provide reasonable notice via email to your registered address or through a prominent notice on the platform before the amendments take effect. Continued use of the platform after the amendment effective date constitutes your acceptance of the updated terms.

We encourage you to review this page periodically to stay informed about how we protect your information.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the rwbola Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the platform
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible under PDPA 2010.