rally918 Privacy Policy

1. Who We Are

rally918 ("we", "us", "our") operates the online gaming platform accessible at rally918.club, offering live dealer casino games, slot games, sportsbook betting, and online poker services to members globally, with a primary focus on the Malaysian market. For the purposes of this Privacy Policy, rally918 is the data controller responsible for the personal data of its registered members and website visitors.

This Privacy Policy applies to all personal data collected and processed through the rally918 platform, including data collected via the website, account registration and login processes, customer support interactions, payment transactions, and marketing communications where applicable.

By registering an account with rally918 or using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data We Collect

rally918 collects the following categories of personal data:

rally918 does not collect sensitive personal data categories (e.g., racial or ethnic origin, political opinions, health data, biometric data) unless specifically required for identity verification purposes under applicable regulatory obligations.

3. How We Use Your Data

rally918 uses collected personal data for the following purposes:

• Account management: Creating, maintaining, and administering your rally918 account, including processing registrations, login authentication, and account verification;
• Service provision: Operating and delivering the gaming services you access on the rally918 platform, including processing wagers, settling bets, and managing your account balance in MYR;
• Payment processing: Facilitating deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and bank transfer; verifying payment method ownership;
• Identity verification (KYC): Verifying your identity and age (21+) as required by our responsible gaming obligations and anti-money laundering compliance;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct on the platform;
• Regulatory compliance: Meeting our obligations under applicable gaming licensing conditions, anti-money laundering laws, and data protection requirements;
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance via live chat and email;
• Platform improvement: Analysing usage patterns and technical performance data to improve rally918's platform, products, and user experience;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have provided consent or where legitimate interest applies. You may opt out of marketing communications at any time via your account settings.

4. Legal Basis for Processing

rally918 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and rally918 — including account creation, game access, payment processing, and customer support;
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and gaming licensing conditions;
• Legitimate interests: Processing necessary for rally918's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your explicit consent, including marketing communications and certain optional data collection. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Sharing & Disclosure

5.1 rally918 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.

5.2 rally918 may share your personal data with the following categories of third parties where necessary to provide our Services or meet legal obligations:

• Payment service providers: Including e-wallet operators (Touch 'n Go, Boost) and banking partners (Maybank, CIMB, Public Bank) for the purpose of processing deposits and withdrawals;
• Identity verification services: Third-party KYC and age verification providers used to verify member identities in compliance with responsible gaming requirements;
• Fraud prevention and security services: Third-party risk management and anti-fraud platforms that assist rally918 in identifying and preventing prohibited conduct;
• Gaming software providers: Platform technology and game content providers whose software underlies the rally918 gaming products. These providers receive only the technical data necessary to operate their respective games and platforms;
• Regulatory and legal authorities: Where required by applicable law, court order, or regulatory instruction, rally918 may disclose member data to government authorities, gaming regulators, or law enforcement agencies;
• Professional advisers: Legal, financial, and compliance advisers engaged by rally918 under obligations of professional confidentiality.

5.3 All third parties with whom rally918 shares personal data are required to maintain appropriate security standards and to use the data only for the specified purpose.

6. Cookies & Tracking Technologies

6.1 rally918 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you access rally918.

6.2 rally918 uses the following categories of cookies:

• Essential cookies: Required for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and responsible gaming limit configurations;
• Analytics cookies: Collect anonymised usage data to help rally918 understand how members use the Platform and identify areas for improvement;
• Security cookies: Used for fraud detection and to identify suspicious login patterns or unusual account activity.

6.3 You may configure your browser settings to refuse non-essential cookies. Note that disabling essential cookies may affect the functionality of the rally918 platform, including the ability to log in and access game content.

7. Data Retention

7.1 rally918 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements.

7.2 Specifically:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping obligations;
• Customer support communications are retained for a minimum of two (2) years from the date of the interaction;
• Technical and usage logs are retained for up to twelve (12) months for security and fraud prevention purposes;
• Marketing preference records are retained for the duration of active membership and for one (1) year following account closure.

7.3 Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with rally918's data management procedures.

8. Data Security

8.1 rally918 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL / TLS 1.3 encryption on all data transmissions between your device and rally918 servers;
• Bcrypt hashing with salting for all stored account passwords — rally918 never stores plain-text passwords;
• Two-factor authentication (2FA) available to all members via account security settings;
• Access controls limiting internal data access to authorised rally918 personnel on a need-to-know basis;
• Regular security audits and penetration testing of rally918 platform infrastructure;
• Anomaly detection systems monitoring for unusual login patterns and account activity.

8.2 While rally918 takes data security seriously, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying rally918 immediately if you suspect unauthorised access to your account.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by rally918:

• Right of access: You may request a copy of the personal data rally918 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to restrict processing: You may request that rally918 restrict the processing of your data in certain circumstances;
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact rally918's support team via the 24/7 live chat or the email address provided on the Platform. rally918 will respond to data rights requests within 30 days. Where a request is complex or numerous, this period may be extended by a further 60 days with notice to you.

10. Children & Minors

10.1 rally918 is strictly an adult platform accessible only to individuals aged 21 and above. rally918 does not knowingly collect or process personal data from individuals under the age of 21.

10.2 If rally918 becomes aware that personal data has been collected from an individual under 21, the relevant account will be immediately closed, all associated data will be deleted, and any funds deposited will be returned to the payment source.

10.3 Adult account holders are responsible for ensuring that minors do not access the rally918 platform using their account credentials or devices with active rally918 sessions.

11. International Data Transfers

11.1 As an internationally operating platform, rally918 may transfer your personal data to countries outside your country of residence, including countries where data protection laws may differ from those in Malaysia.

11.2 Where data is transferred internationally, rally918 takes appropriate steps to ensure that your data receives an adequate level of protection, including through the use of contractual safeguards with data processors and vendors.

11.3 By using the rally918 platform, you consent to the transfer, storage, and processing of your personal data in countries outside Malaysia where necessary for the provision of our Services.

12. Third-Party Links

12.1 The rally918 platform may contain references to third-party services, including game software providers. These third parties operate their own privacy policies, and rally918 accepts no responsibility or liability for the data practices of any third party.

12.2 This Privacy Policy applies exclusively to data collected and processed by rally918 through the rally918.club platform.

13. Changes to This Privacy Policy

13.1 rally918 reserves the right to update or amend this Privacy Policy at any time. The effective date of the current version is displayed at the top of this page.

13.2 Where changes are material, rally918 will notify members via the Platform's notification system or by email to the registered address on file. Continued use of the Platform following notification of changes constitutes acceptance of the updated Privacy Policy.

13.3 If you do not agree with any change to this Privacy Policy, you should cease using the Platform and close your account.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or rally918's data practices, please contact us:

• Live Chat: 24/7 live support chat available via the rally918 platform
• Email: [email protected] (plain text — not a clickable link)

rally918 will acknowledge privacy-related queries within 3 business days and provide a substantive response within 30 days of receipt.