🔒 RFT88 – Your personal data is fully protected in accordance with Malaysia's PDPA 2010. ⚽ Malaysia Super League – JDT vs Selangor FC  |  3 – 1 (FT) 🛡️ Encryption SSL 256-bit protecting every transaction and account data you have at RFT88! 💰 RFT88 Mega Jackpot has now reached RM 10,950,000 – growing every minute! 🏸 Badminton – Lee Zii Jia vs Viktor Axelsen  |  Final LIVE now 🎰 More 500,000 Malaysian members have trusted RFT88 since 2018! 🎮 E-Sports MLBB – MY Esports vs SG Esports  |  Starting in 1h 45m
OFFICIAL RFT88 DOCUMENT

RFT88 Privacy Policy – Robust Personal Data Protection for Malaysian Players

RFT88 takes the privacy and data security of every member on our platform seriously. This Privacy Policy clearly and transparently explains how we collect, use, store and protect your personal information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. Your trust is the foundation of everything we do at RFT88.

Updated: 1 January 2026  |  Version 3.1
RFT88 Privacy Commitment Summary
Data protected under PDPA 2010 Malaysia
Encryption SSL 256-bit for all data
Data never sold to third parties
Right to Access, Correct & Delete Data
Two-factor authentication (2FA) available
24/7 privacy support in Bahasa Melayu
No third-party marketing cookies without consent
SSL 256
Data Encryption Standards
PDPA
MY Legal Compliance
0
Data Sold to Third Parties
24/7
Privacy Enquiry Support
RFT88's Six Pillars of Privacy Protection for Malaysian Players
A genuine commitment to keeping your personal data safe and fully respected at all times
Banking-Grade 256-Bit SSL Encryption

All data transmitted between your device and RFT88's servers is protected using 256-bit SSL encryption — the same level of security used by Malaysia's leading online banking platforms, such as Maybank2u and CIMB Clicks. This means every login credential, payment detail, and piece of personal data is fully encrypted in transit, making it virtually impossible for any unauthorised party to intercept or read.

Full Compliance with Malaysia's PDPA 2010

RFT88 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means the collection, processing, and storage of your personal data is carried out in accordance with strict local legal requirements. You have the legal right to know what data we hold, to request corrections, and under certain circumstances, to request the deletion of your data from our systems.

Your Data Is Never Sold or Shared for Marketing

RFT88 gives its firm commitment that your personal data — including your name, phone number, email, banking details, and gameplay records — will never be sold, rented, or shared with any third party for marketing, advertising, or any other commercial purpose without your prior written consent. This is a fundamental principle we uphold without compromise under any circumstances.

Two-Factor Authentication (2FA) for Account Protection

RFT88 provides free two-factor authentication (2FA) for all members. Once enabled, every login attempt to your account requires an additional verification code sent to your registered phone number. This means that even if your password is compromised, your account remains secure and cannot be accessed without the 2FA code sent exclusively to your phone.

Secure Servers with 24/7 Monitoring

RFT88 member data is stored on servers protected by multi-layered firewalls and intrusion detection systems (IDS) operating around the clock. RFT88's dedicated cybersecurity team monitors our infrastructure at all times to detect and neutralise any security threats before they can affect your data.

Clear Player Rights That Are Easy to Exercise

RFT88 recognises and respects players' rights regarding their personal data in accordance with Malaysia's PDPA 2010. You have the right to request a copy of the data we hold, request corrections to inaccurate data, object to the processing of your data under certain circumstances, and request deletion of your data upon account closure. All such requests can be submitted to our support team with ease.

What Data Does RFT88 Collect from You?
Transparency is one of our core values — here are the categories of data we collect and why we collect them
👤 MANDATORY
Personal Identity Data
  • Full name as per identity card
  • An active Malaysian phone number
  • Email address
  • Identity card (IC) number for verification
  • Date of birth (for 18+ age verification)

This data is collected at registration to verify your identity and ensure that only eligible individuals access the RFT88 platform.

💳 MANDATORY
Financial & Payment Data
  • Malaysian bank account number
  • Bank name (Maybank, CIMB, Public Bank, etc.)
  • E-wallet account name (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow)
  • Deposit and withdrawal transaction records

Financial data is collected to process deposits and withdrawals and to comply with Anti-Money Laundering (AML) requirements as prescribed by Malaysian law.

🎮 AUTOMATIC
Gaming Activity Data
  • Gaming session and wagering records
  • Win and loss history
  • Most frequently played games
  • Play-time habits
  • Bonus and promotion usage statistics

Gaming data is used to uphold game integrity, identify potential problem gambling behaviour, and provide relevant game recommendations.

📱 AUTOMATIC
Technical & Device Data
  • Your device's IP address
  • Web browser type and version
  • Device type (mobile phone, tablet, computer)
  • Operating system (Android, iOS, Windows)
  • Session timestamps and login activity logs

Technical data is used for security purposes, to detect suspicious login attempts, and to ensure the RFT88 platform performs optimally on your device.

🍪 OPTIONAL
Cookie Data & User Preferences
  • Session cookies to maintain login status
  • Language preference and display settings cookies
  • Website usage analytics data
  • Marketing communication preferences (opt-in only)

RFT88 only uses cookies that are necessary for the platform's core functionality. Marketing and third-party cookies are only activated with your explicit consent through the cookie preference settings.

📞 SITUATION
Support Communication Data
  • Live chat conversation records with the support team
  • Emails sent to [email protected]
  • Records of complaints and their resolutions
  • Feedback and reviews you have submitted

Communications data is retained to ensure continuity of customer support, to train our team, and to resolve any disputes that may arise in the future.

Important: This Privacy Policy outlines RFT88's commitment to protecting and respecting your privacy as a user of our platform. By registering an account or using any RFT88 service, you agree to the collection and use of information as described in this document. Please read it carefully and contact us if you have any questions or concerns regarding your privacy.

1 Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published and managed by RFT88, an online entertainment platform that has been operating in Malaysia since 2018. This document explains how RFT88 collects, uses, stores, protects and, in certain circumstances, discloses personal information you provide while using our platform.

This Privacy Policy applies to:

  • All members registered with RFT88, whether active or inactive;
  • All visitors to the RFT88 website who browse our content, even without registering an account;
  • Any individual who contacts the RFT88 support team via email, live chat or any other communication channel.

RFT88 recognises that privacy is a fundamental right of every individual, and we are committed to managing your data with responsibility, transparency, and uncompromising integrity. This policy is provided in Bahasa Melayu to ensure all Malaysian players can fully understand their rights and the protections they enjoy as RFT88 members.

By using the RFT88 platform, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the RFT88 platform and contact us to close your account if necessary.

2 Information We Collect

RFT88 only collects data that is genuinely necessary to provide the services you use. We do not collect excessive or irrelevant data beyond what is required for the operation of our platform.

2.1 Information You Provide Directly

This is data you provide directly when registering an account, completing your profile, making a deposit or withdrawal, or contacting our support team:

  • Full name as stated on your Malaysian identity card (MyKad) or passport;
  • An active Malaysian mobile number for SMS verification and communications;
  • A valid and active email address;
  • Passwords (stored in encrypted format — RFT88 does not store passwords in plain text);
  • Bank account or e-wallet details for deposits and withdrawals via local Malaysian payment methods such as DuitNow, Touch 'n Go eWallet, FPX (Maybank2u, CIMB Clicks, Public Bank, RHB), GrabPay, Boost, or ShopeePay;
  • Additional identity information requested during the KYC (Know Your Customer) verification process, where required.
2.2 Automatically Collected Information

When you use the RFT88 platform, our systems automatically record certain technical information for security and service optimisation purposes:

  • Your device's IP address;
  • Web browser type, version, and language settings;
  • Device operating system;
  • Login session time and duration;
  • Gaming activity and betting records;
  • Platform cookies data (as described in Section 8).

RFT88 does not collect sensitive information such as biometric data, health information, or religious beliefs, except where specifically required by applicable Malaysian law and with clear prior notice to you.

3 How RFT88 Uses Your Data

RFT88 uses collected personal data solely for the following purposes, and for no other purpose without prior notice or your consent:

  • Account Management: To create, manage and maintain your RFT88 account, including identity verification and age verification processes (18 years and above);
  • Financial Transaction Processing: To process deposits you make via DuitNow, Touch 'n Go eWallet, FPX, GrabPay, Boost, or ShopeePay, and to manage withdrawals to the Malaysian bank account or e-wallet you have registered;
  • Gaming Service Provision: To allow you to access and play all games on the RFT88 platform, including video slots, Live Casino, and video poker;
  • Platform Security: To detect and prevent fraud, the use of automated bots, player collusion, money laundering, and any activity that violates Terms & Conditions RFT88;
  • Service Communications: To send you important account-related notifications such as deposit confirmations, withdrawal status updates, security alerts, and policy changes that affect you;
  • Responsible Gaming: To monitor your gaming patterns and identify signs of potential problem gambling, and where necessary, reach out to you with appropriate support information;
  • Legal Compliance: To meet Malaysian legal compliance requirements, including the PDPA 2010 and applicable Anti-Money Laundering (AML) regulations;
  • Service Improvement: To analyse aggregated platform usage patterns (without identifying individual users) for the purpose of improving the user experience and enhancing RFT88 platform features.

4 Data Sharing & Disclosure to Third Parties

RFT88 firmly upholds the principle that your data belongs to you. We do not sell, rent or disclose your personal data to third parties for commercial or marketing purposes without your explicit consent.

However, under the following limited circumstances, RFT88 may share the minimum necessary data with the parties specified:

  • Payment Service Providers: Transaction data required is shared with your chosen payment gateway provider (e.g. the FPX infrastructure, DuitNow payment gateway, or e-wallet platform) solely for the purpose of processing your financial transactions. These providers are bound by strict confidentiality agreements with RFT88;
  • Malaysian Authorities: If ordered by a court, law enforcement body, or a legitimate Malaysian regulatory authority, RFT88 is required to disclose the necessary data in accordance with the order or request received. RFT88 will endeavour to notify you of any such disclosure where permitted by law;
  • Technical Service Providers: Cloud infrastructure and server hosting companies that store RFT88 data may have technical access to that data. However, these providers are bound by strict data protection agreements and may only process data strictly in accordance with RFT88's instructions;
  • Fraud Investigator: In cases involving suspected fraud or criminal activity, relevant information may be shared with our internal security investigation team or the appropriate authorities for the purposes of investigation and law enforcement.

Our Guarantee: RFT88 has never sold, and will never sell, members' personal data to marketing companies, digital advertisers, or any commercial entity for targeted advertising or commercial profiling. This is an absolute commitment we will not compromise for financial gain.

5 Data Security Measures Implemented by RFT88

RFT88 makes serious investments in security infrastructure to ensure your personal data is always protected against unauthorised access, loss, destruction, or accidental disclosure. The following are the key security layers we have implemented:

1
SSL 256-bit Encryption for All Communications

Every bit of data transmitted between your web browser and RFT88's servers is encrypted using TLS 1.3 protocol with a 256-bit encryption key. This covers login credentials, financial details, game data, and all customer support communications.

2
Encryption of Static Data in the Database

Data stored in RFT88's databases is also encrypted using robust encryption algorithms. Your password is stored using a one-way hashing function with a salt — meaning that even if RFT88's servers were accessed without authorisation, your password cannot be read in its original form.

3
Firewall & Intrusion Detection System

The RFT88 platform is protected by multi-layered firewalls and an Intrusion Detection and Prevention System (IDS/IPS) that monitors all inbound and outbound network traffic in real time to detect and block any unauthorised access attempts.

4
Two-Factor Authentication (2FA) for Player Accounts

The 2FA feature is available to all RFT88 members at no charge. Once enabled, logging in to your account will require an OTP code sent to your Malaysian mobile number, adding a significant layer of protection even if your password is compromised.

5
24/7 Continuous Security Monitoring

RFT88's internal cybersecurity team monitors all systems and security logs around the clock. Any anomalies or suspicious activity are promptly identified and acted upon in accordance with established incident response protocols.

6
Regular Security Audits by Independent Third Parties

RFT88 conducts periodic security audits carried out by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited. The findings are used to continuously strengthen the platform's overall security posture.

6 Data Retention Period

RFT88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law.

  • Active Account Data: For as long as your account remains active and throughout any post-closure retention period required by law;
  • Financial Transaction Records: A minimum of 7 years from the date of transaction, in accordance with financial reporting and AML compliance requirements under Malaysian law;
  • Support Communication Records: 3 years after the communication session ends, for the purpose of resolving any disputes that may arise;
  • Gaming Data: 5 years after a gaming session, for audit and game integrity purposes;
  • Technical Data (IP & Session Logs): 12 months, for security and fraud detection purposes;
  • After Account Closure: When an account is closed at your request, RFT88 will delete personal data that is no longer required within 30 days, except for data that must be retained under applicable legal requirements.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding personal data that RFT88 holds about you. All requests relating to these rights may be submitted to us via email at [email protected] or through the live chat on our platform.

8 Use of Cookies & Tracking Technologies

RFT88 uses cookies (small text files stored on your device) to enhance your experience on our platform. Below are the types of cookies we use:

  • Session Cookies: Required to maintain your login session while you are active on the platform. These cookies are deleted automatically when you close your browser. The RFT88 platform cannot function without this type of cookie enabled;
  • Preference Cookies: Saving your preferences such as your chosen language (Bahasa Melayu) and display settings so you do not have to reconfigure them each time you log in;
  • Security Cookies: Used to help detect and prevent fraudulent activity, including unauthorised login attempts and automated bot usage;
  • Analytics Cookies: Collects aggregated information (with no individual identification) on how players use the RFT88 platform. This information is used solely to improve the functionality and user experience of our platform;
  • Third-Party Cookies: RFT88 does not use third-party advertising cookies. Any third-party cookies that may be present on the platform are solely related to technical functions (e.g. payment gateways) and are not used for advertising purposes.

You can manage and delete cookies through your web browser settings. However, blocking certain cookies may affect the functionality of the RFT88 platform. For more information on managing cookies, please refer to your web browser's help documentation.

9 Children's Privacy

The RFT88 platform is strictly for individuals aged 18 and above. RFT88 does not knowingly collect or retain personal data from individuals under the age of 18.

If you have reason to believe that someone under the age of 18 has registered an RFT88 account using false information, please contact us immediately at [email protected]. We will investigate and close any account found to belong to a minor, and will delete all related personal data from our systems within a reasonable timeframe.

Parents and guardians are advised to monitor their children's online activities and ensure they do not access online entertainment platforms restricted to adults only, such as RFT88.

10 Links to External Websites

The RFT88 platform may contain links to third-party websites or services, including payment gateway providers such as Bank Negara Malaysia's FPX system or local e-wallet platforms. RFT88's Privacy Policy does not apply to those third-party websites or services.

RFT88 is not responsible for the privacy practices or content of any third-party websites that you may access via links on our platform. We recommend that you read the privacy policy of each third-party website you visit before providing any personal information to them.

11 Data Breach Response Procedure

While RFT88 implements robust security measures, no security system can be guaranteed 100% secure. In the event of a data breach affecting your personal information, RFT88 is committed to:

  • Identifying the breach promptly through our continuous security monitoring system;
  • Assessing the scope and impact breaches affecting member data within 48 hours of detection;
  • Notifying affected members via email and in-platform notifications within a reasonable time after confirmation, including details on the type of data involved, the risks posed, and the steps you should take to protect yourself;
  • Reporting to the authorities relevant in Malaysia in accordance with applicable legal requirements;
  • Taking immediate remedial action to stop the breach and prevent similar incidents from occurring in the future;
  • Providing additional support to affected members, including guidance on protective steps they can take such as changing their password and enabling 2FA.

12 Changes to This Privacy Policy

RFT88 reserves the right to update or amend this Privacy Policy from time to time, to reflect changes in our privacy practices, new legal requirements, or platform improvements. Every update will be clearly indicated by a new "Last Updated" date at the top of this document.

When material changes are made to this Privacy Policy, RFT88 will notify you via:

  • In-platform notifications on RFT88 when you log in;
  • Email to the address registered on your account;
  • Announcement banner on the RFT88 main website homepage.

Your continued use of the RFT88 platform after any Privacy Policy changes take effect constitutes your acceptance of and agreement to the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

13 Contact Us for Privacy Enquiries

If you have any questions, requests, or concerns regarding this Privacy Policy or how RFT88 manages your personal data, please contact us through the following channels:

  • Privacy Email: [email protected] (please state "Data Privacy Enquiry" in the email subject line)
  • Live Chat: Available on the RFT88 platform, 24 hours a day, 7 days a week
  • Language of Service: Bahasa Melayu and English
  • Response Time: Under 3 minutes via live chat; up to 24 hours via email for general enquiries; up to 30 days for formal requests relating to PDPA rights

For formal requests relating to your rights under Malaysia's PDPA 2010 (such as data access, correction or deletion requests), please submit a written request to our email along with a copy of your identification document for identity verification purposes. RFT88 is committed to responding to all such requests within 30 business days as required by law.

Effective Date: This Privacy Policy is effective from 1 January 2026 (Version 3.1) and supersedes all previous versions. By using the RFT88 platform after this date, you agree to all terms set out in this Privacy Policy.

Your Personal Data Rights at RFT88
Under Malaysia's PDPA 2010, you have the following rights, which RFT88 fully recognises and respects
Right of Access

You have the right to request a copy of all personal data RFT88 holds about you. Your request will be processed within 30 business days, and the data will be delivered in a readable format to the email address registered on your account.

Right to Data Correction

If you find that the personal data we hold is inaccurate, outdated, or incomplete, you have the right to request a correction. Updates relating to account security (such as your phone number) may require an additional identity verification process.

Right to Data Erasure

Upon account closure, you may request the deletion of your personal data. RFT88 will delete data that is no longer required within 30 days, except for data that must be retained under Malaysian law, such as financial transaction records, which are kept for 7 years.

Right to Object to Processing

Under certain circumstances, you have the right to object to RFT88's processing of your personal data, particularly for direct marketing purposes. If you no longer wish to receive promotional communications from RFT88, you may opt out at any time through your account settings.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format. RFT88 provides an account data export feature in a standard format, allowing you to take your data with you should you need a personal record.

Right to Restrict Processing

In certain circumstances — such as when you dispute the accuracy of your data or object to its processing — you may request that RFT88 restrict the processing of your data while your request is being investigated and handled in accordance with established procedures.

To exercise any of the above rights, please contact us at [email protected] by stating the right you wish to exercise and including a copy of your identification document for verification. RFT88 will process your request within 30 business days in accordance with the requirements of Malaysia's PDPA 2010.

RFT88's Privacy Commitment to Malaysian Players – A Summary
Four core commitments that ensure your data remains secure and respected at RFT88
Your Data Is Never Sold or Rented

RFT88 does not sell, rent, or disclose your personal data to any marketing companies or advertisers for commercial purposes. This is an absolute commitment with no exceptions — one we have upheld with full integrity since day one of our operations.

Your Password Is Never Stored in Readable Form

Your RFT88 account password is stored using a strong one-way hashing function — meaning even RFT88's internal team cannot read your password. If you forget your password, the only option is to reset it; you cannot ask staff to retrieve your old password.

You Have Full Control Over Your Data

RFT88 gives you genuine tools and rights to access, correct, restrict, or delete your personal data. These are not just statements on paper — they can be exercised in practice through our support team, available 24/7.

Compliance with Malaysia's PDPA 2010 Is Our Obligation

RFT88 operates within Malaysia's legal framework, including the PDPA 2010. This means you are protected not only by our commitments, but also by Malaysian law, which grants you rights that are legally enforceable should the need arise.

Frequently Asked Questions About the RFT88 Privacy Policy
Answers to the most frequently asked questions about your privacy and personal data protection

No, RFT88 does not sell, rent or share your personal data with advertising, marketing or any other commercial third parties for targeted advertising or profiling purposes. Your data is only shared in the limited circumstances outlined in this Privacy Policy — namely with payment gateway providers to process your transactions, and with Malaysian authorities if required by law. In both cases, only the minimum necessary data is shared, and recipients are bound by strict confidentiality agreements.

To request a copy of your personal data (your right of data access under PDPA 2010), send an email to [email protected] with the subject line "Personal Data Access Request". Please include your full name, registered phone number, and a copy of your Malaysian identity card (MyKad) for identity verification purposes. RFT88 will process your request and provide a copy of your data in a readable format within 30 working days from the date the request is received and your identity is verified.

Once your account is closed, RFT88 will delete personal data that is no longer required within 30 days. However, certain data must be retained in accordance with Malaysian law — for example, financial transaction records must be kept for a minimum of 7 years to meet financial reporting and AML compliance requirements. Any data retained after account closure is held solely to fulfil legal obligations and not for commercial purposes. If you would like to know exactly what data will be retained and for how long, please contact our support team before closing your account.

If you suspect that your RFT88 account has been accessed without authorisation, take the following steps immediately: First, change your account password right away using the "Forgot Password" function if you can still log in, or via email if you cannot. Second, enable Two-Factor Authentication (2FA) if you have not already done so. Third, contact the RFT88 support team via live chat or email at [email protected] and report the incident. Our security team will investigate your account activity, freeze any suspicious transactions, and help you regain full control of your account. Please report the incident as quickly as possible, as prompt action is critical in cases of unauthorised access.

Yes, you may opt out of receiving marketing communications from RFT88 at any time. This includes promotional emails, bonus notifications and SMS offers. You can manage your communication preferences through your account settings on the RFT88 platform, or by contacting our support team and indicating that you wish to opt out of marketing communications. Opt-out requests will be processed within 48 hours. Please note that even after opting out, you will still receive essential service communications such as transaction confirmations, account security notifications and policy updates that we are legally required to send you.

Yes, absolutely. All financial transaction data at RFT88 — including deposits made via DuitNow, Touch 'n Go eWallet, FPX (Maybank2u, CIMB Clicks, Public Bank), GrabPay, Boost, and ShopeePay, as well as withdrawal records — is protected by multiple layers of security. First, all data in transit is encrypted using 256-bit SSL. Second, data stored in our databases is also encrypted. Third, access to financial data is restricted to authorised personnel only, through multi-tier access controls. Fourth, all activity involving financial data is audited and logged for security purposes. We treat your financial data as one of the most sensitive categories of information we hold, and protect it to the highest security standards at our disposal.
Related Policy Pages for RFT88
Other important documents that complement this Privacy Policy for your complete understanding as an RFT88 member

Your Data Is Safe with RFT88 – Register & Play with Complete Peace of Mind!

Join over 500,000 Malaysian players who trust RFT88 for a safe, fair, and enjoyable online entertainment experience. Register for free today and deposit with ease via DuitNow, Touch 'n Go, or FPX.

Your data is protected by 256-bit SSL encryption & Malaysia's PDPA 2010. For users aged 18 and above only.

Bahasa Melayu