Official Privacy Document

Privacy Policy RTF8 Malaysia

At RTF8, your privacy is not merely a legal obligation — it is our sincere commitment. This document clearly explains how we collect, use, store, and protect your personal information as a trusted player.

Updated: January 2026 256-bit SSL Encryption PDPA Compliance
Data Protection Commitment
Your data is not sold to third parties
End-to-end encryption for all transactions
You may request data deletion at any time
Data storage on secure, monitored servers
Compliant with the Personal Data Protection Act (PDPA)

Six Pillars RTF8 Privacy Protection

RTF8 has built a robust data protection system to ensure every piece of your personal information remains fully secure.

High-Level Encryption

All data transmitted between your device and RTF8's servers is protected with 256-bit SSL encryption — the same standard used by major banking institutions in Malaysia.

No Data Sales

RTF8 never sells, rents, or commercializes your personal data to advertisers or data brokers. Your information is used solely for platform operations.

Secure KYC Verification

Your identity verification (KYC) process is handled through an integrated, encrypted system. Uploaded documents are accessible only to authorized KYC staff.

Full Account Control

You have full control over your data. Through your account settings, you can update your information, manage communication preferences, and request data deletion at any time.

Secure & Monitored Servers

Your data is stored in high-grade data centers with round-the-clock security monitoring, automated backup systems, and strict physical access controls to ensure operational continuity.

Malaysia PDPA Compliance

RTF8 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection and usage processes adhere to applicable legal provisions.

1 Introduction & Scope of This Policy

This Privacy Policy is issued by RTF8 (rtf8.app), an online gaming platform serving players in Malaysia and the Southeast Asia region. This document explains in detail how we collect, process, store, and protect your personal data when you use our services.

When you register an account, make a deposit, play games, contact customer support, or simply browse rtf8.app, you provide or generate certain data that we handle with full responsibility. This policy explains your rights and how we fulfill those responsibilities.

RTF8 acts as the Data Controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are fully responsible for how your data is processed within our platform.

Important Note: By continuing to use the RTF8 platform after changes to this policy take effect, you are deemed to have accepted the updated terms. Please review this page periodically.

2 Types of Personal Data We Collect

RTF8 only collects data that is strictly necessary to operate the platform, comply with the law, and deliver the best experience to you. The following are the categories of data we collect:

Registration & Identity Data
  • Full name as shown on your identity document.
  • Date of birth for minimum age verification (18 years and above).
  • Email address and mobile phone number.
  • Passwords stored in an irreversible hashed format.
  • Country and region of residence.
Identity Verification Data (KYC)
  • A copy of your identity document (MyKad) or passport.
  • Bank statement or utility bill for address verification.
  • A selfie or facial photo for specific verification requirements.
Financial & Transaction Data
  • Bank account number or e-wallet information (stored in masked format).
  • Records of all deposits, withdrawals, and wagering.
  • Complete transaction history for AML compliance requirements.
Technical & Usage Data
  • IP address and approximate location based on IP.
  • Device type, operating system, and browser version.
  • Login session data including time and duration.
  • Pages visited and games played.
Data Category Example Legal Basis
Identity Name, date of birth, IC Contract & KYC
Financial Bank account number, transaction records AML Compliance
Technical IP address, device type Legitimate interest
Communications Email, support chat logs Contract & Consent
Marketing Promotional preferences Voluntary Consent

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. RTF8 does not process your data beyond what is necessary for the following purposes:

Account Operations & Services
  • Create and manage your player account.
  • Process deposits, withdrawals, and wagering efficiently.
  • Provide responsive and effective customer support.
  • Send important account notifications such as transaction confirmations.
Security & Legal Compliance
  • Verify your identity to meet KYC and AML requirements.
  • Detect and prevent fraud, money laundering, and suspicious activity.
  • Comply with instructions from relevant authorities and enforcement bodies.
  • Maintain complete audit records for regulatory purposes.
Platform Improvements & Marketing
  • Analyse usage patterns to improve your gaming experience.
  • Send relevant promotional offers and bonuses (subject to your consent).
  • Personalise content and game recommendations based on your gaming history.

You may opt out of all marketing communications at any time via your account settings or by contacting the RTF8 support team. Opting out of marketing communications will not affect your account operations.

4 Data Sharing & Disclosure

RTF8 does not sell or rent your personal data to any third party for commercial purposes. However, there are certain situations where we may need to share your information with trusted parties:

Third-Party Service Providers

We share only the necessary data with service providers that help operate the rtf8 platform, including:

  • Payment Gateway Providers — to securely process your deposit and withdrawal transactions.
  • KYC Service Providers — to automatically verify your identity and documents.
  • Game Providers — session information required to operate live casino and slot games.
  • Cloud Service Providers — for secure data storage and computing.

All these third-party providers are bound by strict data confidentiality agreements and are only permitted to use your data for the agreed purposes.

Legal Requirements & Authorities

RTF8 will disclose your data to authorities when required by law, court order, or regulatory directive. This includes investigations related to financial fraud, money laundering, or cybercrime.

Business Transfers

In the event of a merger, acquisition, or sale of RTF8 business assets, user data may be transferred as part of those business assets. You will be notified in advance in such situations.

5 Data Security & Protection Measures

Protecting your data is rtf8's top priority. We implement multiple layers of technical and organisational security to ensure your data is safe from unauthorised access, loss, or destruction.

Technical Security Measures
  • 256-bit SSL/TLS encryption for all data communication between your browser and our servers.
  • Passwords are stored using an irreversible hashing algorithm.
  • Two-Factor Authentication (2FA) is required for account access and sensitive actions.
  • 24/7 continuous security monitoring with automated intrusion detection systems.
  • Network segmentation and layered firewalls to protect our database from external threats.
  • Regular penetration testing by independent security experts.
Organisational Security Measures
  • Access to players' personal data is restricted to authorized personnel on a need-to-know basis only (principle of least privilege).
  • All staff who handle user data undergo regular privacy and security training.
  • A clear and structured security incident response procedure.
  • Regular internal audits to ensure compliance with privacy policy.

While RTF8 takes all reasonable steps to protect your data, no system in the world is truly 100% secure. You also play an important role by keeping your password confidential and enabling 2FA on your account.

6 Cookies, Tracking Technology & Analytics

RTF8 uses cookies and similar tracking technologies to enhance platform functionality, analyze usage patterns, and personalize your experience. Cookies are small text files stored on your device when you visit our website.

Types of Cookies Used
  • Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Performance Cookies: Collect information on how you use the platform to help us make improvements. Data is collected anonymously.
  • Functional Cookies: Save your preferences such as language, currency, and display settings for a more personalised experience.
  • Marketing Cookies: Used to display relevant promotions. You may decline these cookies without affecting your access to the platform.
Manage Cookie Preferences

You can control and delete cookies through your browser settings. Please note that disabling essential cookies may affect the performance of the RTF8 platform. For guidance on managing cookies in popular browsers, please refer to your browser's documentation.

7 Your Rights as a Data Subject

As an RTF8 player and data subject under Malaysia's PDPA, you have certain rights regarding your personal information. RTF8 fully respects and facilitates the exercise of these rights.

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests are processed within 14 business days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request an immediate correction through your account settings or customer support.

Right to Erasure

You may request deletion of your personal data, subject to our record-keeping obligations under applicable law.

Right to Object

You may object to the processing of your data for marketing purposes at any time without any penalty or impact on your account.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, contact our data protection team at [email protected] with the email subject "Personal Data Rights Request". We will respond within 14 business days.

8 Data Retention & Deletion Period

RTF8 does not retain your personal data longer than necessary. Retention periods are determined based on the purpose of data collection and applicable legal requirements.

Data Retention Period Guidelines
  • Active account data: Retained for the duration your account is active at RTF8 and up to 7 years after account closure for audit and compliance requirements.
  • Financial transaction records: Retained for a minimum of 7 years in line with anti-money laundering legal requirements.
  • Support communication logs: Retained for 3 years for dispute resolution purposes.
  • KYC data and identification documents: Retained for 7 years after account closure or last legal compliance requirement.
  • Technical data and system logs: Retained for 12 months for security and troubleshooting purposes.
  • Marketing data: Deleted within 30 days of consent withdrawal.

When the retention period expires or upon a valid deletion request, your data will be permanently deleted or anonymised from our systems within 30 business days.

9 Child Protection & Age Restrictions

RTF8 is a gaming platform exclusively dedicated to individuals aged 18 years and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we detect or are notified that personal data of a minor has been collected without our knowledge, the account in question will be suspended immediately and all related data will be deleted as soon as possible following an initial investigation.

If you suspect a minor is using the rtf8 platform, please report it to us immediately via our support email. rtf8 takes child protection seriously and will act promptly.

10 Changes to This Privacy Policy

RTF8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business practices, technology, legal requirements, or regulatory guidance.

Whenever significant changes are made to this Privacy Policy, we will notify you via:

  • In-platform notifications on rtf8 when you log in.
  • Email notification to the address registered to your account.
  • Updates the "Last Updated" date shown at the top of this page.

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the rtf8 platform after any policy changes take effect will be considered acceptance of the updated terms.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the rtf8 data protection team is ready to assist you.

Contact Channels
  • Privacy Email: [email protected] — use the subject "Data Privacy Inquiry"
  • Live Chat : Available 24/7 via the chat icon at the bottom corner of the RTF8 platform.
  • Response Time: We are committed to responding to all privacy inquiries within 14 business days.

For requests involving personal data rights such as access, correction, or deletion, please include your RTF8 account number and a copy of your identity document to expedite the verification process.

Play Safe & With Full Confidence

RTF8 is more than just a gaming platform — we are your trusted partner. With enterprise-grade data protection, secure transactions, and 24/7 customer support, your gaming experience is in safe hands.

SSL
256-bit Encryption
24/7
Customer Support
PDPA
Full Compliance
18+
Age Limit Monitored
Bahasa Melayu