This Privacy Policy explains how ritz99 collects, processes, stores, and protects the personal data of players and visitors to the ritz99.win platform. We take data privacy seriously and are committed to handling your information responsibly and in accordance with applicable data protection principles.
ritz99 ("ritz99", "we", "us", "our") operates the online casino and sportsbook platform accessible at ritz99.win (the "Platform"). This Privacy Policy sets out how ritz99 collects, processes, uses, discloses, and protects personal data provided by or collected from individuals ("you", "your", "the Player") who register an account, access the Platform, or otherwise interact with ritz99's services.
By registering a ritz99 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the Platform.
This Policy should be read together with ritz99's Terms & Conditions, which govern the overall contractual relationship between you and ritz99.
ritz99 is the data controller in respect of personal data collected through the Platform. As data controller, ritz99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws and principles.
For all data-related inquiries — including access requests, correction requests, and complaints — you may contact the ritz99 Data Protection contact via the email address listed in the footer of the Platform or via the live chat support function. Written requests receive a substantive response within ten (10) business days of receipt.
ritz99 collects personal data through several channels, including account registration, KYC verification, payment processing, and your ongoing use of the Platform. The categories of personal data we collect include:
| Category | Examples |
|---|---|
| Identity Data | Legal full name, date of birth, nationality, MyKad or passport number, photograph (for KYC) |
| Contact Data | Email address, Malaysian phone number, correspondence address |
| Account Data | Username, encrypted password, account preferences, session history, login timestamps |
| Financial Data | Payment method details (e.g. e-wallet account references, FPX bank account identifiers), transaction amounts, deposit and withdrawal history |
| Gaming Activity Data | Game participation records, betting history, wager amounts, game results, bonus usage |
| Technical Data | IP address, browser type and version, device type, operating system, referring URL, session duration, click-path data |
| Communications Data | Records of support interactions (live chat transcripts, email correspondence), feedback submitted |
| Responsible Gaming Data | Limit settings, cool-off periods, self-exclusion elections, problem gambling self-assessment responses (where voluntarily provided) |
ritz99 does not collect or store full payment card numbers. Where card-based payments are supported, card data is processed exclusively by PCI-DSS compliant third-party payment processors and ritz99 receives only a tokenised reference. Similarly, ritz99 does not store Touch n Go eWallet or Boost account PINs or full credentials.
ritz99 uses collected personal data for the following purposes:
ritz99 processes your personal data on one or more of the following legal bases:
ritz99 does not sell your personal data to third parties. ritz99 may share personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
All third-party data processors engaged by ritz99 are bound by contractual obligations to process personal data only in accordance with ritz99's instructions and applicable data protection requirements.
The ritz99 Platform uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files placed on your device by your browser when you visit the Platform.
ritz99 uses the following categories of cookies:
You may control non-essential cookies through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect the quality of your experience. ritz99 does not use cookies to track you across third-party websites.
ritz99 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by ritz99's gaming licence obligations or applicable law. The following indicative retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (from which it is not possible to identify any individual) may be retained indefinitely for aggregate analytics purposes.
ritz99 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
No data transmission over the internet or electronic storage system is completely secure. While ritz99 takes all reasonable steps to protect your personal data, ritz99 cannot guarantee absolute security. In the event of a data security incident affecting your personal data, ritz99 will notify affected players and relevant authorities in accordance with applicable regulatory requirements.
Subject to applicable law and ritz99's legal obligations (including gaming licence record-keeping requirements which may prevent deletion of certain records), you have the following rights in relation to your personal data held by ritz99:
To exercise any of the above rights, contact ritz99 support via live chat or the email address listed in the footer of this Platform. ritz99 will respond to valid requests within thirty (30) days. ritz99 may request verification of your identity before actioning any data rights request.
The ritz99 Platform is strictly prohibited from use by persons under 21 years of age. ritz99 does not knowingly collect personal data from any individual under the age of 21. The mandatory KYC identity verification process, which must be completed prior to any withdrawal, is designed to confirm that all registered account holders meet the minimum age requirement.
If ritz99 becomes aware that personal data has been collected from an individual under the age of 21, the associated account will be suspended immediately, all balances handled in accordance with applicable law, and the personal data deleted from ritz99's systems to the extent permitted by regulatory record-keeping obligations.
If you have reason to believe that a person under 21 has registered a ritz99 account, please contact ritz99 support immediately with the relevant details.
ritz99 reserves the right to update or revise this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this document. Material changes to this Policy will be communicated to registered players by email or by a prominent notice on the Platform prior to the change taking effect.
Your continued use of the ritz99 Platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any revision, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or ritz99's handling of your personal data, please contact the ritz99 support team via:
ritz99 aims to respond to all privacy-related inquiries and data rights requests within ten (10) business days. If you are dissatisfied with ritz99's response to a privacy complaint, you may be entitled to lodge a complaint with the relevant data protection authority in your jurisdiction. Malaysian players may refer to the Personal Data Protection Department (PDPD) under the Ministry of Digital for guidance on data protection rights under Malaysia's Personal Data Protection Act 2010 (PDPA).
Six commitments ritz99 makes to every player on data privacy and security.
Every connection between your device and ritz99 — including the ritz99 login page, deposit forms, and game sessions — is encrypted with 256-bit SSL. Your credentials and financial data are never transmitted in plain text.
ritz99 enforces identity verification and a minimum age of 21 years on all accounts. KYC is mandatory before any withdrawal is processed. Identity documents are handled by accredited verification partners under strict data processing agreements.
ritz99 does not sell, rent, or trade your personal data to third parties for marketing or any other commercial purpose. Data is shared only with service providers who are contractually bound to use it solely for delivering ritz99 services to you.
Every deposit, withdrawal, and bet at ritz99 is logged and accessible to you from your account dashboard for the full retention period. You own the history of your activity and can request a full data export at any time.
ritz99 does not store full payment credentials for Touch n Go eWallet, Boost, GrabPay, or FPX bank transfers. Payment processing is handled by PCI-compliant third-party processors. ritz99 receives only a tokenised transaction reference — never your account credentials.
ritz99 respects your rights under applicable data protection law — access, rectification, erasure, portability, and objection rights are all honoured. Submit a data request via live chat or email and receive a substantive response within 10 business days.
Trusted by Malaysian players across KL, Penang, Johor Bahru, and beyond — ritz99 protects your data and your experience.
21+ only. Gambling involves risk. Please play responsibly.