ry36 Privacy Policy

This Privacy Policy ("Policy") describes how ry36 ("ry36", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals who access or use the ry36 Platform, including the website at ry36.club, all associated sub-pages, mobile interfaces, gaming services, and customer support channels (collectively, the "Platform").

ry36 is committed to protecting the privacy and security of every player. We process personal data only for lawful, specified purposes and in accordance with the data protection obligations applicable under our international gaming licence. By registering an account or continuing to use the ry36 Platform, you acknowledge that you have read and understood this Policy.

ry36 collects personal data in the following categories, depending on your interaction with the Platform:

2.1 Registration & Identity Data. When you create a ry36 account, we collect: full name, date of birth, Malaysian Identity Card (MyKad) number or passport number, residential address, email address, and mobile phone number. This information is required to open an account and is subject to identity verification procedures.

2.2 KYC & Verification Documents. To comply with our licensing obligations and anti-money laundering requirements, we may request and retain copies of: government-issued identity documents, proof of address (such as a utility bill or bank statement), and source of funds documentation. These documents are processed solely for compliance purposes.

2.3 Financial Data. We collect transaction data related to your use of the Platform, including: deposit and withdrawal amounts, payment method details (e-wallet identifiers, bank account references), transaction timestamps, and betting history. We do not store full card numbers or banking credentials directly — payment processing is handled by certified third-party payment processors.

2.4 Usage & Technical Data. When you access the ry36 Platform, we automatically collect: IP address, device type and operating system, browser type and version, session duration, pages visited, game activity logs, and clickstream data. This data is used for security monitoring, fraud prevention, and Platform improvement.

2.5 Communications Data. When you contact ry36 support via live chat, email, or WhatsApp, we retain records of those communications, including the content of messages and any attachments provided, for quality assurance, training, and dispute resolution purposes.

2.6 Responsible Gaming Data. Where you use ry36's responsible gaming tools — such as deposit limits, self-exclusion, or cooling-off requests — we maintain records of those elections to enforce your preferences consistently across the Platform.

ry36 uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your ry36 account, verifying your identity, and administering your player profile
• Service delivery: Enabling access to casino games, live dealer tables, sports betting, and all other Platform features
• Payments: Processing deposits and withdrawals via your selected payment methods, including Touch n Go eWallet, Boost, Maybank2u FPX, CIMB Clicks, and Public Bank
• Legal compliance: Meeting our obligations under international anti-money laundering (AML) laws, licensing conditions, and data protection regulations
• Fraud prevention & security: Monitoring transactions and account activity to detect and prevent fraudulent, abusive, or criminal use of the Platform
• Responsible gaming: Administering deposit limits, self-exclusion periods, cooling-off requests, and age verification controls
• Customer support: Responding to enquiries, processing complaints, and resolving disputes
• Platform improvement: Analysing aggregate usage data to improve game selection, user experience, and technical performance
• Marketing: Where you have provided consent, sending promotional communications about ry36 offers, new games, and platform updates. You may withdraw marketing consent at any time via your account settings or by contacting support

ry36 processes personal data on the following legal bases:

• Contractual necessity: Processing required to operate your account and deliver the services you have requested
• Legal obligation: Processing required to comply with AML regulations, licensing conditions, and lawful orders from regulatory or law enforcement authorities
• Legitimate interests: Processing carried out for fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your privacy rights
• Consent: Processing for direct marketing communications, where your explicit consent has been obtained and can be withdrawn at any time

ry36 does not sell your personal data to third parties for commercial marketing purposes. We may share your data with the following categories of recipients:

5.1 Service Providers. We engage licensed third-party providers for payment processing, KYC and identity verification, fraud detection, IT infrastructure, and customer support tools. These providers are contractually bound to process data only on ry36's instructions and to maintain appropriate security standards.

5.2 Gaming Content Providers. Game software providers may receive limited technical data (such as session identifiers) required to deliver and record game outcomes. They are not provided with personally identifiable information for their own marketing purposes.

5.3 Regulatory & Law Enforcement Authorities. We will disclose personal data to regulatory bodies, gaming authorities, law enforcement agencies, and courts where required by applicable law or a valid legal order. We will notify you of such disclosures where legally permitted to do so.

5.4 Corporate Transactions. In the event of a merger, acquisition, or sale of substantially all of ry36's assets, personal data held by ry36 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

The ry36 Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your login session, remember your preferences, and analyse usage patterns.

6.1 Essential Cookies. These are required for the Platform to function and cannot be disabled. They include session management cookies, security tokens, and login state cookies.

6.2 Analytics Cookies. We use analytics tools to measure page views, session durations, and feature engagement across the Platform. This data is collected in aggregate and is used solely to improve Platform performance and user experience.

6.3 Preference Cookies. These store your language, display preferences, and game history to personalise your ry36 experience across sessions.

You may manage cookie preferences through your browser settings. Disabling essential cookies may impair core Platform functionality, including the ability to log in to your ry36 account.

ry36 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and to comply with applicable legal and regulatory obligations. Specific retention periods include:

• Account data and KYC documents: Retained for a minimum of five (5) years following account closure, as required under applicable AML regulations
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction
• Support and communication records: Retained for three (3) years following the closure of the relevant enquiry or dispute
• Self-exclusion records: Retained indefinitely to ensure that self-exclusion elections can be honoured if a former player attempts to re-register
• Marketing consent records: Retained for three (3) years from the date consent was provided or last confirmed

Upon expiry of applicable retention periods, data is securely deleted or anonymised in accordance with ry36's internal data destruction procedures.

ry36 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all Platform pages, login sessions, and financial transactions
• Encrypted storage of sensitive personal and financial data at rest
• Access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security assessments and penetration testing of Platform infrastructure
• Two-factor authentication available for all player accounts
• Continuous monitoring of account and transaction activity for anomalous patterns

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ry36 will notify affected individuals and applicable regulatory authorities in accordance with applicable legal requirements.

Subject to applicable law, you have the following rights with respect to your personal data held by ry36:

• Right of access: You may request a copy of the personal data ry36 holds about you
• Right to rectification: You may request correction of inaccurate or incomplete personal data
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations
• Right to restriction: You may request that we restrict processing of your data in certain circumstances
• Right to data portability: You may request that we provide your personal data in a commonly used, machine-readable format
• Right to object: You may object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact ry36 support at [email protected]. We will respond within 30 days. Note that certain rights may be limited where processing is required for compliance with legal obligations.

The ry36 Platform is strictly intended for individuals aged 21 years and above. ry36 does not knowingly collect personal data from individuals below this age. If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor may have accessed the ry36 Platform or provided personal data to us, please contact our support team immediately at [email protected].

ry36 operates internationally and may transfer personal data to servers and service providers located outside Malaysia. Where such transfers occur, ry36 ensures that appropriate safeguards are in place to protect your data, including contractual obligations on data processors equivalent to those required under applicable data protection law.

By using the ry36 Platform, you acknowledge that your personal data may be processed outside Malaysia in the manner described in this Policy.

ry36 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent notice on the Platform. The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy.

For any queries, access requests, or complaints regarding this Privacy Policy or ry36's handling of your personal data, please contact our Data Protection team via:

Email: [email protected]
Live Chat: Available 24/7 from the Platform

ry36 will acknowledge data-related requests within 5 business days and will aim to resolve them within 30 calendar days. If you are not satisfied with our response to a privacy complaint, you may escalate your concern to the relevant data protection supervisory authority in your jurisdiction.