Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by ratu123 ("ratu123", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://ratu123.cam and its associated subdomains and mobile interfaces. This Policy applies to all users of the ratu123 platform, including registered players, prospective players who browse the website, and all visitors regardless of their registration status.

ratu123 takes your privacy seriously. We recognise that when you entrust us with your personal information — whether to register an account, process a payment, or receive customer support — you are placing real trust in us. This Policy sets out clearly and honestly what data we collect, why we collect it, how we use it, who we share it with, and how long we keep it.

By registering an account with ratu123, accessing our platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. This Policy should be read alongside our Terms & Conditions, which together govern your overall relationship with ratu123.

2. Definitions

For the purposes of this Policy, the following definitions shall apply:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes name, identification number, contact details, IP address, device identifiers, and financial account information.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — ratu123, which determines the purposes and means by which personal data is processed.
• "Data Processor" — a third party that processes personal data on behalf of ratu123, under ratu123's instruction and subject to contractual data protection obligations.
• "Cookies" — small text files placed on a user's device by a website for purposes including session management, analytics, and personalisation.
• "KYC" — Know Your Customer; the identity and age verification process required for compliance with anti-money laundering and responsible gambling obligations.
• "Platform" — the ratu123 website, mobile interface, and all associated services at https://ratu123.cam.

3. Data We Collect

When you create a ratu123 account, we collect the personal data necessary to establish and manage your account. This includes:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify that you are aged 21 or above);
• Residential address;
• Email address;
• Malaysian mobile phone number;
• Username and encrypted password.

To comply with our Know Your Customer obligations and to enforce our minimum age requirement of 21 years, we collect copies of identity documents including Malaysian Identity Card (MyKad), passport, or other government-issued photographic identification. We may also request proof of residential address (such as a recent utility bill or bank statement) and proof of payment method ownership.

When you make a deposit or request a withdrawal, we collect financial data necessary to process the transaction. This includes your payment method details (e.g., DuitNow account reference, FPX bank account details, Touch 'n Go eWallet account identifier, Boost or GrabPay account reference, cryptocurrency wallet address). ratu123 does not store full credit or debit card numbers. All financial transaction data is handled via encrypted, PCI-compliant payment processing infrastructure.

When you visit the ratu123 platform, we automatically collect certain technical information, including: IP address; device type, operating system, and browser version; session identifiers and login timestamps; page views, navigation paths, and feature usage data; and geolocation data at the city or region level (e.g., Kuala Lumpur, Petaling Jaya, Penang) derived from your IP address.

We maintain records of all gaming and betting activity associated with your account, including wager amounts, game types, results, win/loss data, session durations, and bonus usage. This data is used for account management, responsible gambling monitoring, dispute resolution, and regulatory compliance purposes.

When you contact our support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution of any queries or complaints. This data is used to improve service quality and to maintain accurate records for dispute resolution purposes.

4. How We Collect Data

ratu123 collects personal data through the following channels and mechanisms:

5. Data Processing & Purpose

ratu123 processes your personal data only for defined, legitimate purposes. The following table sets out the principal purposes for which we process personal data:

ratu123 will not use your personal data for any purpose not described in this Policy without first obtaining your explicit consent, except where we are required to do so by applicable law or by a competent regulatory authority.

6. Legal Basis for Processing

ratu123 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing your registration data, KYC information, and financial data is necessary to perform the contract between ratu123 and you (the ratu123 Terms & Conditions). Without this processing, we cannot provide you with an account or process your transactions.
• Legal Obligation: ratu123 is required to collect and retain certain personal data to comply with its anti-money laundering (AML) obligations, KYC requirements under its operating licence, and applicable data protection and financial crime prevention laws.
• Legitimate Interests: ratu123 processes technical data, gaming history, and security-related data for fraud prevention, platform security, and responsible gambling monitoring purposes — activities that are in the legitimate interests of ratu123 and its player community.
• Consent: Where ratu123 sends you marketing communications or uses non-essential cookies, we rely on your explicit, informed consent. You may withdraw consent for marketing communications or non-essential cookies at any time.

7. Data Sharing & Disclosure

ratu123 does not sell, rent, or trade your personal data to any third party for commercial purposes. This is an absolute commitment — not subject to carve-outs, opt-outs, or future policy revisions without your explicit, separate consent.

ratu123 may share your personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include:

• Payment processors — including DuitNow, FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong), Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency payment gateways — solely for transaction processing purposes;
• KYC and identity verification providers — to verify player age and identity in compliance with our operating licence requirements;
• Fraud prevention and security vendors — to detect and prevent fraudulent activity, account takeover attempts, and money laundering;
• Technology infrastructure providers — including cloud hosting, content delivery, and database service providers who process platform data in a secure, contractually controlled environment;
• Customer support platform providers — who host and deliver our live chat and email support infrastructure.

All third-party data processors are engaged under contractual terms that require them to process personal data solely for specified purposes, maintain appropriate technical and organisational security measures, and not sub-process data without ratu123's prior written authorisation.

ratu123 may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where required by applicable law, court order, or regulatory directive — including in connection with anti-money laundering investigations or where the disclosure is necessary to protect the rights, property, or safety of ratu123, its players, or the public.

In the event of a merger, acquisition, restructuring, or sale of all or part of ratu123's business, personal data held by ratu123 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

8. Data Retention

ratu123 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or licensing conditions. The following retention guidelines apply:

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with any identifiable individual. Where anonymisation is used, the anonymised data may be retained indefinitely for statistical and platform improvement purposes.

9. Cookies & Tracking Technologies

ratu123 uses the following categories of cookies and tracking technologies on the Platform:

• Strictly Necessary Cookies: Essential to the operation of the Platform, including session management, authentication, security functions, and load balancing. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Enable the Platform to remember your preferences and settings, such as language preferences, display settings, and previous login details. Disabling these cookies may reduce the quality of your user experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate and interact with the Platform. This data informs our product development decisions and helps us improve the platform experience. Analytics processing is conducted on anonymised or pseudonymised data only.
• Marketing Cookies: Used to deliver relevant promotional communications to players who have consented to receive marketing. Marketing cookies are set only upon your explicit consent and may be withdrawn at any time.

You may manage your cookie preferences at any time via your browser settings. Most modern browsers allow you to block, delete, or restrict the use of cookies. Please note that disabling strictly necessary cookies will affect core Platform functionality. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

10. Data Security

ratu123 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and ratu123 servers;
• Encryption of personal data at rest using industry-standard encryption protocols;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for all internal system access;
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified third-party security professionals;
• Comprehensive data breach response procedures, including regulatory notification protocols.

Notwithstanding the security measures described above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. ratu123 cannot provide an absolute guarantee against all security threats; however, we apply best-practice standards and continuously review our security posture to minimise risk.

11. Your Rights

Subject to applicable law and any overriding legal obligations (including AML and KYC data retention requirements), you have the following rights in relation to your personal data held by ratu123:

• Right of Access: You have the right to request a copy of the personal data ratu123 holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data held by ratu123 about you.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to ratu123's legal obligations to retain certain data for specified minimum periods (see Section 8).
• Right to Restriction of Processing: You have the right to request that ratu123 restricts the processing of your personal data in certain defined circumstances — for example, where you contest the accuracy of the data or where the processing is unlawful.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though ratu123 may override this objection where it has compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact ratu123 at [email protected]. We will respond to all data rights requests within 30 days of receipt, subject to verification of your identity. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

12. International Data Transfers

ratu123's servers and those of some of our third-party data processors may be located in jurisdictions outside Malaysia. When your personal data is transferred outside Malaysia, ratu123 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy, including through the use of contractual clauses that impose data protection obligations on the recipient entity.

By registering an account and using the ratu123 Platform, you acknowledge and consent to the international transfer of your personal data as described in this Policy.

13. Minors & Age Verification

The ratu123 Platform is strictly restricted to individuals aged 21 years and above. ratu123 does not knowingly collect personal data from individuals below the age of 21. All registration applications are subject to age verification, and KYC documentation confirming date of birth is required before any withdrawal will be processed.

If ratu123 becomes aware that personal data has been collected from an individual below the age of 21 — whether through a fraudulent registration or otherwise — the relevant Account will be immediately suspended, all data associated with it will be reviewed, and any winnings generated during the underage period will be forfeited. Affected data will be handled in accordance with applicable legal requirements.

If you believe that a minor may have registered an account on ratu123 using false information, please notify us immediately at [email protected]. We take all such reports seriously and will investigate promptly.

14. Policy Amendments

ratu123 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or prominent in-Platform notice at least 14 days before the amended Policy takes effect, where practicable. The "Effective Date" at the top of this Policy will be updated to reflect the date of the most recent revision.

Your continued use of the ratu123 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you object to any changes to this Policy, you should cease using the Platform and request account closure in accordance with the process described in our Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or to your personal data held by ratu123, please contact our Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the live chat interface on the ratu123 Platform.
• Subject Line for Data Requests: Please include "Privacy / Data Request" in your email subject line so that our team can route your query to the appropriate team member promptly.
• Response Time: ratu123 will acknowledge all privacy-related queries within 24 hours and provide a substantive response within 30 days of receipt.

For concerns related to responsible gambling and self-exclusion tools, please also refer to our Responsible Gambling page, which contains additional contact details and support resources for Malaysian players.