Clause 1
Introduction
This Privacy Policy ("Policy") is issued by rans88 ("rans88", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://rans88.click ("Platform"). This Policy applies to all personal data collected from users ("User", "Player", "you") who access or interact with the Platform, whether through a desktop browser, mobile device or any other channel.
rans88 is committed to protecting the privacy and personal data of all Platform users in a manner consistent with internationally recognised data protection principles. By creating an account, making a deposit or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read, understood and accepted the practices described herein.
If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to arrange closure of your account.
Scope: This Policy covers personal data collected through the rans88 Platform only. It does not apply to third-party websites or services that may be linked from the Platform, including payment processors, game studios or external identity verification providers. Those parties maintain their own privacy policies, which you should review independently.
Clause 2
Definitions
The following definitions apply throughout this Policy:
- "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either alone or in combination with other data.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration and deletion.
- "Data Controller" means rans88, which determines the purposes and means of processing Personal Data obtained through the Platform.
- "Data Processor" means a third party that processes Personal Data on behalf of rans88 and in accordance with our written instructions.
- "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
- "KYC Data" means identity and verification documents submitted by a Player as part of the Know Your Customer verification process.
- "Cookies" means small text files placed on a User's device by the Platform for the purposes described in Clause 7.
- "Sensitive Data" means categories of data warranting heightened protection, including identity document numbers, financial account details and data related to health or self-exclusion status.
Clause 3
Data We Collect
rans88 collects personal data through several channels depending on the nature of your interaction with the Platform. The categories of data collected are described in the table below.
| Data Category |
Examples |
How Collected |
| Registration data |
Full name, date of birth, email address, residential address, username |
Provided directly during account creation |
| KYC documents |
Malaysian IC / driver's licence / passport, proof of address, selfie photograph |
Submitted through the secure verification portal |
| Financial data |
Payment method type (Maybank2u, DuitNow, Touch 'n Go eWallet, FPX etc.), transaction amounts in MYR, deposit and withdrawal history |
Generated automatically on each transaction |
| Technical data |
IP address, device type, operating system, browser type, session duration |
Collected automatically via server logs and cookies |
| Behavioural data |
Pages visited, games played, bet amounts and frequencies, session timestamps |
Collected automatically during platform use |
| Communication data |
Support ticket content, email correspondence, live-chat transcripts |
Collected when you contact rans88 support |
| Responsible gambling data |
Deposit limits set, self-exclusion status, cooling-off period requests |
Recorded when you use account safety tools |
We do not knowingly collect full payment card numbers or bank account credentials. Sensitive financial authentication is handled directly by the relevant payment provider (such as Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Boost or GrabPay) under their own security frameworks.
Clause 4
Purposes of Processing
rans88 processes Personal Data for the following defined purposes:
- Account creation and management: To register your account, maintain accurate records and provide access to Platform features.
- Identity and age verification (KYC): To confirm that you are at least 21 years of age and are the legitimate owner of any payment methods associated with your account.
- Payment processing: To receive deposits and process withdrawal requests in MYR via your selected payment method.
- Fraud prevention and security: To detect and investigate suspicious activity, prevent multi-accounting, monitor for unusual betting patterns and protect the integrity of the Platform.
- Responsible gambling compliance: To honour deposit limits, self-exclusion requests and cooling-off periods; to monitor for indicators of problematic play; and to fulfil obligations under applicable responsible gambling frameworks.
- Customer support: To respond to enquiries, resolve complaints and manage support tickets.
- Platform improvement: To analyse aggregated, anonymised usage data and improve the technical performance, layout and content of the Platform.
- Legal and regulatory compliance: To retain records as required by applicable anti-money laundering, gaming and data protection regulations and to respond to lawful requests from competent authorities.
- Marketing communications: Where you have provided explicit consent, to send promotional offers, bonus notifications and updates relevant to your activity on rans88. You may opt out of marketing communications at any time.
Clause 5
Legal Basis for Processing
Each processing activity conducted by rans88 is supported by at least one of the following legal bases:
- Contractual necessity: Processing required to provide you with the Platform services you have requested, including account management, payment processing and KYC verification.
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering checks, age verification and data retention mandates.
- Legitimate interests: Processing carried out for rans88's legitimate business interests — including fraud prevention, Platform security and service improvement — provided that such interests are not overridden by your rights and freedoms.
- Consent: Processing based on your explicit, freely given agreement — specifically in relation to marketing communications. Consent may be withdrawn at any time by contacting rans88 support or using the unsubscribe mechanism in any promotional communication.
Your right to withdraw consent: Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. It also does not affect processing conducted on a different legal basis, such as contractual necessity or legal obligation.
Clause 6
Sharing Your Data
rans88 does not sell, rent or trade your Personal Data to third parties for their own independent marketing or commercial purposes. We may share your data with the following categories of recipient, to the extent strictly necessary for the stated purpose:
6.1 Payment service providers
Transaction data is shared with the relevant payment processors — including FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost and GrabPay — to facilitate deposits and withdrawals in MYR. Each provider processes data under its own privacy policies and security frameworks.
6.2 Identity verification providers
KYC documents may be processed by third-party identity verification services engaged by rans88. These providers act as Data Processors operating under contractual data protection obligations consistent with this Policy.
6.3 Technology and hosting providers
Technical infrastructure, cloud hosting and analytics services may be provided by third-party vendors who process data solely in accordance with rans88's instructions and applicable data protection obligations.
6.4 Game content providers
Certain gameplay data — such as session duration, game played and bet size — may be shared with licensed game studios to support technical game delivery. No directly identifying data is shared beyond what is operationally required.
6.5 Regulatory and legal authorities
rans88 may disclose Personal Data to competent authorities, regulators, law enforcement agencies or courts where required to do so by applicable law, or where disclosure is necessary to protect the legal rights of rans88 or third parties.
Clause 7
Cookies & Tracking Technologies
rans88 uses cookies and similar tracking technologies to support the operation, security and improvement of the Platform. The following categories of cookies are used:
- Essential cookies: Required for the Platform to function, including session management, authentication tokens and security checks. These cannot be disabled without impairing Platform functionality.
- Functional cookies: Store preferences such as language settings, accepted notification status and responsible gambling tool configurations.
- Analytical cookies: Collect anonymised, aggregated data about how users navigate the Platform. This information is used to identify performance issues and improve the user experience.
- Marketing cookies: Used only where you have provided explicit consent to receive personalised content or promotional communications from rans88. These may track your interactions with specific features or offers.
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core Platform features. Where consent is required for a cookie category, rans88 will seek that consent explicitly.
Clause 8
Data Retention
rans88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory and contractual obligations. The following indicative retention periods apply:
| Data Category |
Retention Period |
Basis |
| Account registration data |
Duration of account + 5 years post-closure |
Legal obligation / AML compliance |
| KYC documents |
Duration of account + 5 years post-closure |
Regulatory requirement |
| Transaction records |
7 years from transaction date |
Financial record-keeping obligation |
| Support correspondence |
3 years from last interaction |
Legitimate interest / dispute resolution |
| Technical / log data |
13 months from collection |
Security and fraud prevention |
| Marketing consent records |
Until consent is withdrawn + 2 years |
Legal obligation to evidence consent |
Upon expiry of the applicable retention period, data will be securely deleted or permanently anonymised so that it can no longer be associated with any individual.
Clause 9
Security Measures
rans88 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:
- SSL/TLS encryption for all data transmitted between your device and the Platform.
- Encryption of sensitive data fields — including KYC document files — at rest within rans88's storage infrastructure.
- Role-based access controls limiting internal access to Personal Data to staff whose duties require it.
- Regular security assessments and penetration testing of Platform infrastructure.
- Incident response procedures designed to detect, contain and report data breaches in accordance with applicable notification requirements.
Whilst rans88 takes these measures seriously, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Players are advised to use strong, unique passwords, enable available two-factor authentication options and notify rans88 immediately if they suspect any unauthorised access to their account.
Player responsibility: You are responsible for maintaining the confidentiality of your login credentials. rans88 will never ask for your password by email, chat or telephone. Any such request should be treated as fraudulent and reported immediately.
Clause 10
Your Rights
Subject to applicable data protection law and any overriding legal obligation, you hold the following rights in respect of your Personal Data held by rans88:
A
Right of access
You may request a copy of the Personal Data rans88 holds about you and information about how it is processed.
R
Right to rectification
You may request correction of any Personal Data that is inaccurate or incomplete.
E
Right to erasure
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding retention obligations.
S
Right to restrict processing
You may request that processing of your data be restricted in certain circumstances while a dispute or accuracy query is resolved.
P
Right to portability
Where processing is based on consent or contract and is carried out by automated means, you may request your Personal Data in a structured, commonly used, machine-readable format.
O
Right to object
You may object to processing based on legitimate interests or conducted for direct marketing purposes. Where marketing is the purpose, the objection will always be honoured.
To exercise any of these rights, contact rans88 in writing at [email protected]. rans88 will acknowledge your request within a reasonable timeframe and respond substantively within 30 days, or within any shorter period required by applicable law.
Clause 11
Protection of Minors
The rans88 Platform is strictly limited to individuals aged 21 and above. rans88 does not knowingly collect Personal Data from persons under the age of 21. Where rans88 becomes aware that a minor has submitted personal information — whether during registration or at any subsequent point — the account will be closed, the data will be deleted as promptly as practicable, and any funds deposited will be handled in accordance with the applicable account closure procedure.
If you have reason to believe that a minor has registered an account on rans88, please notify us at [email protected] so that we may investigate and take appropriate action promptly.
21+ only: rans88 enforces this age requirement through both self-declaration at registration and KYC document verification. Age verification is a non-negotiable prerequisite for processing any withdrawal request.
Clause 12
International Data Transfers
rans88 operates within an international licensing context and may use service providers — including cloud hosting, KYC verification and customer support platforms — whose infrastructure is located outside Malaysia. Where Personal Data is transferred to a country or territory that does not provide an equivalent level of data protection to the laws applicable to rans88, we will implement appropriate safeguards to protect that data. Such safeguards may include contractual data processing agreements with receiving parties incorporating internationally recognised standard contractual clauses.
By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia, subject to the safeguards described in this clause.
Clause 13
Policy Amendments
rans88 may update or replace this Privacy Policy from time to time to reflect changes in applicable law, operational practices or the services offered on the Platform. Where amendments are material, rans88 will provide reasonable advance notice by posting the updated Policy on the Platform and, where practicable, notifying registered Players by email.
The date shown in the "Last reviewed" notice displayed in the page header indicates when this Policy was most recently updated. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. Players who do not accept an amended Policy should cease using the Platform and contact support to arrange account closure.
Clause 14
Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data right, or need to report a privacy concern, please contact the rans88 data team using the written correspondence details below. All privacy-related enquiries are handled in English and rans88 aims to provide a substantive response within 30 days of receipt.
Data correspondence: [email protected]
This address is for written correspondence only and is displayed as plain text. It is not a clickable link. Please include your registered username and the nature of your request in your message so that we can assist you efficiently.
For concerns related to responsible gambling tools, deposit limits or self-exclusion rather than data protection, please visit our Responsible Gambling page or contact support directly through the Platform.