Privacy Policy rwbola — Malaysia Member Personal Data Protection

Rwbola is the data controller responsible for the personal data collected through our platform. We are fully compliant with the Personal Data Protection Act 2010 (PDPA) Malaysia and all regulations and guidelines issued under the Act.

We understand that your trust is our most valuable asset. To that end, rwbola is committed to:

• Collect only data that is strictly necessary for the stated purposes
• Using your data only for purposes that have been notified to you
• Protecting your data with technical and organisational security measures that are appropriate
• Not sold your personal data to third parties for marketing purposes
• Respecting and facilitating your rights as a data subject

Rwbola collects personal data from you through various means, including during account registration, platform usage, financial transactions, and interactions with our support team. The following are the categories of data we collect:

Rwbola does not collect sensitive data such as medical information, religious beliefs, political views, or biometric data, unless specifically required for identity verification purposes and with your explicit consent.

The personal data we collect is used for specific, legitimate purposes. The following are the primary purposes for which rwbola uses your data:

• Account Management: Creating, verifying, and managing your rwbola account, including the login process, OTP verification, and password management.
• Service Provision: Enabling you to enjoy all rwbola services, including football betting, badminton, e-sports, Live Casino, slots, lottery, and all other products on the platform.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u and CIMB Clicks, as well as withdrawal of winnings in MYR.
• Identity Verification (KYC): Ensuring compliance with legal requirements, including age verification (18+), fraud prevention, and adherence to Malaysia's anti-money laundering laws.
• Customer Support: Providing assistance and support in Bahasa Melayu, processing complaints, and responding to your enquiries.
• Platform Security: Detecting and preventing fraud, abuse, multi-account activity, and other security threats.
• Service Improvement: Analysing usage patterns in aggregate (not individually) to improve the rwbola platform experience.
• Marketing Communications: Sending information about rwbola promotions, bonuses and special offers (only with your consent, withdrawable at any time).

Rwbola never sell, rent, or trade your personal data to third parties for marketing purposes. However, in certain limited circumstances, we may share data with the following parties:

• Payment Service Providers: Malaysian e-wallet and online banking operators (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) that process your financial transactions. Such sharing is limited solely to data required for transaction processing.
• Game Providers: Third-party gaming platforms (such as Pragmatic Play, Evolution Gaming, and other providers) that supply casino games, slots, and related services. Data is shared solely for functional gaming purposes.
• Regulatory & Law Enforcement Bodies: In situations where we are required to do so by Malaysian law, court order or direction from a legitimate regulatory authority.
• Audit & Security Companies: Independent audit bodies that verify the fairness of gameplay and the security of the rwbola platform, subject to strict confidentiality agreements.

All third parties receiving data from rwbola are required to comply with data protection standards equivalent to or higher than Malaysia's PDPA.

Rwbola continuously invests in security infrastructure to keep your personal and financial data protected at all times. Our security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and rwbola's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading financial institutions.
• Stored Data Encryption: Sensitive data stored in our databases is encrypted using modern encryption algorithms. Passwords are never stored in plain text.
• Strict Access Controls: Access to member personal data is restricted to rwbola staff who require it to carry out their duties. All access is logged and monitored.
• Two-Factor Authentication (2FA): rwbola's internal administration system uses two-factor authentication to prevent unauthorised external access.
• Regular Security Audits: rwbola undergoes regular security audits by independent cybersecurity firms to identify and address any potential vulnerabilities.
• Incident Response Plan: rwbola has a detailed incident response procedure to address any data breach promptly and ensure members are notified in accordance with PDPA requirements.

The rwbola platform uses cookies and similar tracking technologies to enhance user experience, analyse traffic, and ensure the platform functions correctly.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the rwbola platform. Note: Third-party websites accessed via links within our platform have their own cookie policies, which are beyond rwbola's control.

Rwbola retains your personal data for as long as your account remains active or as long as necessary to provide services to you. Specific retention periods are as follows:

• Active Account Data: Retained for as long as your rwbola account remains active.
• Financial Transaction Data (MYR): Retained for 7 years after a transaction occurs, in line with Malaysian legal requirements relating to financial records and anti-money laundering.
• Support Communication Data: Retained for 3 years for reference and dispute resolution purposes.
• Closed Account Data: After account closure, personal data will be retained for 5 years for legal compliance purposes, then securely deleted.
• Security Logs: Retained for 12 months for security monitoring and incident investigation purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data. rwbola is committed to respecting and facilitating the exercise of these rights:

The rwbola platform is strictly 18+ and is not intended for underage users. We take the following steps to protect the privacy of children and minors:

• Rwbola applies a rigorous age verification process during registration, including validation of Malaysian MyKad numbers.
• We unintentionally collect any personal data from individuals under the age of 18.
• Should we discover that we have inadvertently collected data from an underage user, we will promptly delete that data and close the account in question.
• Parents or guardians who suspect their child is using the rwbola platform are urged to contact us immediately at privacy@rwbola.bet.

Rwbola reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material changes occur, we will:

• Update date "Last Updated" at the top of this document
• Sending notifications to registered email address our members
• Displaying a clear notice at platform homepage rwbola for at least 30 days after the changes

We encourage you to review this Privacy Policy periodically. Your continued use of the rwbola platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or wish to exercise your rights under the Malaysian PDPA regarding the personal data we hold, please contact the rwbola Data Protection Officer (DPO) through the following channels:

• DPO Email: privacy@rwbola.bet
• General Support Email: support@rwbola.bet
• Live Chat: Available 24/7 in your rwbola account in Bahasa Melayu
• Response Time: We are committed to responding to all privacy-related enquiries within 14 business days

If you are dissatisfied with rwbola's response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory authority.