RatuMacau Privacy Policy – Personal Data Protection for Malaysian Members

1Introduction and Scope of This Privacy Policy

Ratumacau ("we", "platform") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy explains how ratumacau collects, uses, discloses, and protects your personal information when you access or use the ratumacau website, mobile app, and all related services.

This Policy applies to all registered members, website visitors, and anyone who interacts with the ratumacau platform. By registering an account or using any ratumacau service, you acknowledge that you have read and understood this Privacy Policy.

2Types of Personal Data We Collect

Ratumacau collects your personal data through several channels – directly from you, automatically through your use of the platform, and from legitimate third-party sources. The categories of data we collect are as follows:

3How Ratumacau Uses Your Personal Data

We use the personal data we collect for the following purposes, all within the context of delivering the best online betting and entertainment experience for Malaysian members:

• Account Management: Creating and managing your ratumacau account, including identity verification and the KYC (Know Your Customer) process.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX and withdrawals to your bank account or eWallet.
• Platform Services: Operating and improving all ratumacau services, including Sports Betting, Live Casino, jackpot, and Virtual Sports.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Legal Compliance: Meeting legal obligations and reporting requirements to the relevant authorities.
• Service Communications: Sending important information relating to your account, transactions, and policy updates.
• Marketing (with consent): Sending promotional information, bonuses, and ratumacau offers – only where you have given your consent.
• Product Improvement: Analysing usage patterns to improve the user experience on the ratumacau platform.

4Legal Basis for Data Processing

Ratumacau processes your personal data on lawful bases recognised under the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Contract Performance: Processing necessary to fulfil the service contract between ratumacau and members (account, deposits, withdrawals).
• Legitimate Interests: Processing for the purposes of security, fraud prevention, and product improvement, in the legitimate interests of ratumacau and its members.
• Legal Compliance: Processing required to fulfil applicable legal obligations.
• Consent: For marketing communications, we rely on your explicit consent, which may be withdrawn at any time.

5Data Sharing with Third Parties

Ratumacau does not sell member personal data. However, in the course of operating the platform, we may share data with trusted third parties in the following categories:

• Payment Service Providers: Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX banks to process financial transactions.
• Game Providers: Evolution Gaming, Pragmatic Play, SA Gaming, and other Live Casino providers that supply games on the ratumacau platform.
• Technical Service Providers: Companies that assist us in operating the platform, including cloud computing and cybersecurity services.
• Legal Authorities: When required by law or a valid court order.

All third-party service providers we engage are bound by data protection agreements requiring them to handle your data with a level of protection equal to or greater than ratumacau's standards.

6Cookies and Tracking Technologies

Ratumacau uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use the ratumacau platform to help us improve performance and the overall user experience.
• Functionality Cookies: Remembering your preferences such as language, self-set betting limits, and account settings for a more convenient experience.
• Analytics Cookies: Helping us understand aggregate platform usage patterns for product improvement purposes.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of specific features on the ratumacau platform.

7Ratumacau Data Security Measures

Ratumacau takes data security seriously. The technical and organisational measures we have implemented include:

• 256-bit SSL encryption for all data transmitted between users and ratumacau's servers.
• Encryption of sensitive data stored in our database, including passwords hashed using the bcrypt algorithm.
• Role-based access control – only authorised staff may access members' personal data, strictly in accordance with their job responsibilities.
• Round-the-clock security monitoring with intrusion detection systems and automated alerts.
• Regular security audits conducted by independent third parties to identify and address potential vulnerabilities.
• Data security awareness training for all ratumacau staff who handle member data.
• A comprehensive incident response plan to manage any data security breaches swiftly and effectively.

8Data Retention Period

Ratumacau retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. The following are our general data retention guidelines:

• Active Account Data: For the duration your account remains active, plus any additional period required by law.
• Financial Transaction Records: Minimum 7 years from the transaction date, in line with Malaysian tax and financial legal requirements.
• Identity Verification (KYC) Data: Minimum 5 years after account closure or the date of the last transaction.
• Support Communication Logs: 2 years after case resolution.
• Technical Data & Server Logs: 90 days unless required for an ongoing security investigation.

When data is no longer needed, ratumacau will securely delete or anonymise it using approved procedures.

9Your Rights Under the PDPA

As a ratumacau member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the ratumacau data protection team by email at privacy@ratumacau.ws or via live chat within your account. We will process your request within 30 business days.

10Cross-Border Data Transfers

In the course of operating the ratumacau platform, some of your personal data may be processed or stored outside Malaysia – in particular by international game service providers such as Evolution Gaming and Pragmatic Play, which operate across Europe and Asia.

Where such data transfers occur, ratumacau ensures adequate protection through:

• Data transfer agreements stipulating protection obligations equivalent to or exceeding those of the Malaysia PDPA.
• Share only the minimum data necessary for the stated service purpose.
• Ensuring that data recipients outside Malaysia adhere to internationally accepted security standards.

11Children's Privacy

Ratumacau services are exclusively for individuals aged 18 and above. We do not knowingly collect or process the personal data of individuals under the age of 18.

Should ratumacau discover that personal data belonging to a minor has been collected without proper age verification, we will take immediate steps to delete that data and close the associated account. Parents or guardians who find that their child has a ratumacau account are encouraged to contact us promptly at privacy@ratumacau.ws.

12Amendments to This Privacy Policy

Ratumacau reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements. When we make material changes, we will:

• Displaying an updated "Last Updated" date at the top of this page.
• Notifying members via email or in-account notifications of any significant changes.
• For significant changes, re-obtaining member consent where required.

We encourage you to review this Privacy Policy periodically. Your continued use of the ratumacau platform after any amendments are published will be considered acceptance of the updated policy.

13Contact the Ratumacau Data Protection Officer

If you have any questions, concerns, or complaints regarding how ratumacau handles your personal data, please contact our Data Protection Officer (DPO):

• Email: privacy@ratumacau.ws – Response within 2 business days.
• Live Chat: Available 24/7 within the ratumacau platform – select the "Privacy & Data" category.
• WhatsApp/Telegram: Details are available after logging in to your ratumacau account.

For more information about our services, you may also visit the FAQ or the About Us ratumacau.