ratumacau | Privacy Policy – How We Protect Your Data

1

Introduction & Scope of Privacy Policy

Welcome to RatuMacau's Privacy Policy page. This document outlines the privacy practices of the RatuMacau platform (ratumacau.biz) regarding the collection, use, disclosure, and protection of personal information belonging to our users in Malaysia.

RatuMacau is an online entertainment and gaming platform operating in Malaysia, offering a wide range of services including slots, live casino, blackjack, progressive jackpots, e-sports, and Sports Betting. To deliver these services, we collect certain information from our users to ensure a safe, personalised, and high-quality experience.

This Privacy Policy applies to all users of the RatuMacau platform, including casual visitors, registered members, and former members. It covers all ways in which you interact with us — whether through the website, mobile app (if available), email, live chat, or any other communication channel we provide.

We encourage you to read this Privacy Policy together with our Terms & Conditions and Responsible Gambling Policy to fully understand your rights and responsibilities as a RatuMacau member.

2

Types of Information We Collect

RatuMacau collects several categories of information from our users for the purposes described in this policy. We only collect information that is necessary and relevant to providing our services.

Personal Identity Information

Full name, date of birth, national identity card number (MyKad), passport number (if applicable), residential address, Malaysian mobile number, and email address.

Financial & Payment Information

Payment account details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) used for deposits and withdrawals in MYR. Bank account numbers and bank names where applicable.

Gaming Activity Data

Betting history, games played, session duration, total deposits and withdrawals, wins and losses, and gameplay patterns for responsible gaming purposes.

Technical & Device Data

IP address, device type, operating system, web browser used, screen resolution, access time and date, and technical log data for security and troubleshooting purposes.

Communication Data

Email correspondence records, live chat transcripts, customer support call recordings (where applicable and notified), and any feedback you have provided to us.

Location Data

General location information based on IP address, used for geographic area verification and regulatory compliance purposes. We do not collect precise GPS location without your explicit consent.

Note: RatuMacau never store your full credit card number, PIN, or payment password. All financial transactions are handled by secure, Malaysia-registered payment providers.

3

How We Use Your Information

RatuMacau uses the information collected for legitimate and necessary purposes in order to operate our services effectively. Below is a detailed explanation of each intended use:

Purpose of Use	Data Type Used	Legal Basis
Account management & identity verification	Identity information, KYC documents	Contract performance
Deposit & withdrawal processing (MYR)	Financial data, payment details	Contract performance
Gaming & betting services	Activity data, technical data	Contract performance
Fraud prevention & anti-money laundering	All data categories	Legal obligation
24/7 customer support	Identity, communications, activity	Legitimate interest
Personalised promotions & offers	Gaming activity, preferences	Consent
Responsible gambling compliance	Activity data, betting patterns	Legal obligation
Platform improvement & analytics	Technical & usage data	Legitimate interest

We will not use your personal information for any purpose not stated in this policy without first obtaining your consent. If you no longer wish to receive marketing communications from RatuMacau, you may unsubscribe at any time via the "unsubscribe" link in our emails or by contacting our customer support.

4

Information Sharing & Disclosure

RatuMacau values the trust you place in us by sharing your personal information. We does not sell, rent, or trade your personal information to any third party for their marketing purposes.

However, in the course of operating the platform, we may share your information with the following parties under limited and controlled circumstances:

Payment service providers: Information required to process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks). These providers are bound by strict confidentiality agreements.
Licensed game providers: The minimum technical data required to operate slots, Live Casino, e-sports, and Sports Betting within the RatuMacau platform.
Identity verification service (KYC): Identity information for the purposes of age and identity verification in compliance with regulatory requirements.
Malaysian statutory authorities: Where required by Malaysian law, court order, or official investigation by a competent authority.
Professional advisors: Lawyers, accountants, or auditors in limited contexts and subject to professional confidentiality obligations.

All third parties who receive RatuMacau user information are bound by strict data processing agreements and are required to meet the same or higher data protection standards that we uphold.

5

Data Security Measures

RatuMacau continuously invests in the latest security technologies to protect our members' personal and financial information. We adopt a multi-layered security approach encompassing technical, organisational, and procedural safeguards.

256-bit SSL Encryption: All data transmitted between your device and RatuMacau's servers is protected by 256-bit SSL/TLS encryption — the same security standard used by Malaysia's leading banks.
Data-at-rest encryption: Sensitive information stored in our databases is encrypted using industry-recognised cryptographic algorithms.
Strict access controls: Only authorised personnel with a legitimate business need may access members' personal information, and all access is logged for audit purposes.
Two-factor authentication (2FA): Our internal systems use multi-factor authentication to prevent unauthorised access by third parties.
24/7 security monitoring: Our cybersecurity team continuously monitors our systems to detect and respond to any threats or suspicious activity.
Regular security testing: We conduct regular penetration testing and security audits by independent third parties to identify and remediate any vulnerabilities.
Incident response plan: RatuMacau has clear procedures in place to respond to any data breach, including notifying affected users within the timeframe required by Malaysia's PDPA.

Shared Responsibility: While RatuMacau takes all reasonable steps to protect your data, online security is a shared responsibility. Please use a strong and unique password, never share your login credentials, and always log out when using a public device.

6

Cookies & Tracking Technologies

RatuMacau uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and maintain platform security. The following are the types of cookies we use:

Essential Cookies (Required): Required for core platform functions such as login, session security, and transaction processing. These cookies cannot be disabled as the platform will not function without them.
Performance & Analytics Cookies: Collects information on how users interact with our platform — including most-visited pages, time spent, and navigation paths. This data helps us continuously improve the overall user experience.
Functional Cookies: Saves your preferences such as language, theme, and display settings to make your experience more personalised and convenient when you return to the platform.
Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect your account from security threats.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the RatuMacau platform. We recommend keeping essential cookies enabled for the best experience.

7

Data Retention & Deletion

RatuMacau retains your personal information only for as long as necessary for the purposes described in this policy or as required by Malaysian law. Retention periods vary depending on the type of data and applicable compliance requirements.

Active account data: Retained for as long as your account remains active on the RatuMacau platform.
Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's Income Tax Act requirements and AML (Anti-Money Laundering) compliance.
KYC (Identity Verification) Data: Retained for a minimum of 5 years following account closure, in accordance with legal requirements.
Support communication records: Retained for 2 years for dispute resolution and service improvement purposes.
Analytics cookie data: Typically expires within 12 months of collection.

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked back to your identity.

8

User Rights Under PDPA

As a RatuMacau user who is a Malaysian citizen or resident, you have specific rights under the Personal Data Protection Act 2010 (PDPA). We fully respect these rights and will respond to your requests within a reasonable timeframe.

Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a readable format within 21 days of receiving your request.

Right to Rectification

If you find that any information we hold about you is inaccurate or out of date, you have the right to request a correction. You may also update certain details directly through your RatuMacau account settings.

Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal information. Please note that this right may be limited where we have a legal obligation to retain the data, such as financial records.

Right to Object

You have the right to object to the use of your information for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format, and to transfer it to another data controller where technically feasible.

Right to Restrict Processing

You have the right to request that we restrict the processing of your data in certain circumstances – for example, while you are disputing the accuracy of your data or while a processing-related dispute is being resolved.

To exercise any of the above rights, please contact us at support@ratumacau.biz with the email subject "PDPA Privacy Rights Request". We will verify your identity before processing the request to ensure your security.

9

Child Data Protection

The RatuMacau platform is intended exclusively for adults aged 18 and above. We not intentionally collect or process any personal information from children or minors under the age of 18.

If you are a parent or guardian and believe that your underage child has used the RatuMacau platform or provided us with their personal information, please contact us immediately at support@ratumacau.biz. We will take immediate action to investigate the matter and delete any relevant data.

RatuMacau employs multiple verification measures — including date of birth verification and identity document checks — to prevent underage individuals from accessing the platform. We take our responsibility to protect young people seriously.

10

Amendments to the Privacy Policy

RatuMacau reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We are committed to notifying you of any material changes through the following means:

An email notification will be sent to your registered address at least 14 days before any changes take effect.
A clear notification banner on the RatuMacau platform's main page.
In-platform notifications for members who are logged in.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. Your continued use of the RatuMacau platform after any changes take effect will be considered your acceptance of the revised policy. We encourage you to review this page periodically.

11

Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how RatuMacau handles your personal data, please do not hesitate to reach out to us through any of the following channels:

Privacy Email: support@ratumacau.biz (Please use the subject line: "Privacy Policy Enquiry")
Live Chat: Available 24/7 on the RatuMacau platform in Bahasa Malaysia and English
Response time: We are committed to responding to all privacy enquiries within 48 business hours

Our Commitment: Your privacy is not merely a legal obligation to RatuMacau — it is a core value. Every member has the right to know how their data is used and the right to control their personal information. We are always here to help and answer any questions you may have.

Privacy Policy RatuMacau – Protecting Malaysian Users' Data Is Our Top Priority