Privacy Policy

1. Who We Are

This Privacy Policy is issued by the operator of the rwbola platform, accessible at rwbola.co (referred to in this document as "rwbola", "we", "us", or "our"). rwbola operates under an international gaming authority licence and is committed to handling all personal data in a lawful, transparent, and secure manner.

This Policy applies to all personal data collected through your use of the rwbola website, account, and associated services. By registering an account or using the rwbola platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform.

2. Data We Collect

rwbola collects personal data in the following categories:

2.1 Registration & Identity Data. When you register a rwbola account, we collect your full name, date of birth, residential address, email address, and mobile telephone number. These are required to create and administer your account.

2.2 Identity Verification (KYC) Data. To satisfy obligations under our operating licence and applicable anti-money-laundering regulations, we collect copies of government-issued identification documents (Malaysian MyKad or passport) and, where required, proof of address and source-of-funds documentation.

2.3 Financial Data. We collect information about your payment methods as necessary to process deposits and withdrawals. This includes e-wallet identifiers (Touch n Go eWallet, Boost) and bank account details (Maybank, CIMB, Public Bank) where used. We do not store full card numbers or banking credentials — financial transactions are processed through encrypted payment gateways.

2.4 Transaction & Gameplay Data. We maintain records of all deposits, withdrawals, bets, game results, and account activity. These records are required for the accurate settlement of wagers, for compliance with our Licence obligations, and for responsible gaming monitoring.

2.5 Technical & Usage Data. We automatically collect device information, IP addresses, browser type, operating system, session timestamps, pages visited, and navigation patterns when you use the Platform. This data is used to operate, secure, and improve the Platform.

2.6 Communications Data. We retain records of communications between you and the rwbola support team, including live chat transcripts, emails, and any written correspondence.

3. How We Use Your Data

rwbola processes your personal data for the following purposes:

• Creating, verifying, and administering your rwbola account
• Processing deposits and withdrawals in Malaysian Ringgit (MYR)
• Settling bets and game outcomes accurately
• Verifying your identity and age (21+ requirement) in compliance with our Licence
• Detecting and preventing fraud, money laundering, and other prohibited activities
• Monitoring for problem gambling indicators and applying responsible gaming interventions
• Providing customer support and resolving disputes
• Sending account-related communications (transaction confirmations, security alerts, policy updates)
• Sending promotional and marketing communications where you have consented to receive them
• Complying with legal, regulatory, and licensing obligations
• Analysing platform usage to improve the service

4. Legal Basis for Processing

rwbola processes your personal data on the following legal grounds:

4.1 Contractual Necessity. Processing is necessary for the performance of the contract between you and rwbola (your account agreement and Terms & Conditions). This covers account creation, payment processing, bet settlement, and customer support.

4.2 Legal Obligation. Processing is required to comply with applicable laws and with the conditions of our international gaming authority licence. This covers identity verification (KYC), anti-money-laundering checks, age verification, and record-keeping obligations.

4.3 Legitimate Interests. Processing is carried out for rwbola's legitimate interests in operating a secure, compliant, and commercially viable platform. This includes fraud detection, security monitoring, platform analytics, and responsible gaming oversight, where those interests are not overridden by your rights and interests.

4.4 Consent. Where we send marketing communications, we do so only where you have provided explicit consent at the time of registration or subsequently opted in. You may withdraw marketing consent at any time by contacting support.

5. Disclosure to Third Parties

rwbola does not sell your personal data to any third party. We may share your data in the following limited circumstances:

• Payment processors and e-wallet providers — to facilitate deposits and withdrawals. Only data necessary for each specific transaction is shared.
• Identity verification and KYC service providers — to verify the authenticity of identity documents and conduct AML screening.
• Game software providers — limited session and wallet-balance data is shared with licensed game studios to facilitate gameplay. No personally identifiable information beyond what is operationally required is shared.
• IT infrastructure and hosting providers — who process data on our behalf under strict data processing agreements.
• Regulatory authorities and law enforcement — where we are legally required to disclose information, for example in response to a court order, regulatory request, or anti-money-laundering investigation.
• Professional advisers — including lawyers, auditors, and insurers, where necessary and under obligations of confidentiality.

All third parties with whom we share data are subject to contractual obligations that prohibit them from using that data for any purpose beyond the specific service they are providing to rwbola.

6. International Transfers

As an internationally licensed platform, some of the third-party service providers used by rwbola are located outside Malaysia. Where personal data is transferred to countries that may not provide the same level of data protection as Malaysia, rwbola ensures that appropriate safeguards are in place — including contractual clauses that bind the receiving party to data protection standards equivalent to those applicable under our operating licence. By using the rwbola platform, you acknowledge that your data may be processed in such jurisdictions for the operational purposes described in this Policy.

7. Data Retention

rwbola retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements imposed by our operating licence or applicable law.

Account data and KYC documentation are retained for a minimum of five years following account closure, as required under standard anti-money-laundering record-keeping obligations. Transaction and gameplay records are retained for the same minimum period. Technical and usage data is retained for up to 24 months for analytical and security purposes. Marketing consent records are retained for the duration of your account and for a reasonable period thereafter.

Following the applicable retention period, data is securely deleted or anonymised.

8. Cookies & Tracking Technologies

The rwbola platform uses cookies and similar tracking technologies to operate essential platform functions and to improve user experience. The categories of cookies used are:

• Strictly necessary cookies — required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies — used to remember your preferences, such as language settings and game lobby layout choices.
• Performance and analytics cookies — used to collect aggregate data about how members use the Platform, enabling us to identify and fix performance issues and improve navigation.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. rwbola does not use advertising or third-party retargeting cookies.

9. Your Rights

Subject to applicable law and the conditions of our operating licence, you have the following rights in relation to your personal data held by rwbola:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
• Right to restriction — you may request that we restrict processing of your data while a complaint or rectification request is being resolved.
• Right to data portability — where processing is based on your consent or on a contract, you may request that we provide your data in a structured, machine-readable format.
• Right to object — you may object to processing based on our legitimate interests, including the use of your data for marketing purposes.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact rwbola support. We will respond to substantive requests within 30 days. In some cases, we may need to verify your identity before actioning a request. Certain rights may be limited where data is required to be retained under our operating licence or applicable law.

10. Security Measures

rwbola implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption across all Platform connections
• Two-factor authentication (2FA) on all member accounts
• Encrypted storage of passwords — plain-text passwords are never stored
• Automated login anomaly detection and account lockout on repeated failed attempts
• Login alerts on unrecognised device or location access
• Segregated access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing

No method of transmission over the internet or method of electronic storage is 100% secure. While rwbola takes all reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by our licence obligations.

11. Minors

The rwbola Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect or process personal data belonging to persons under the age of 21. If we become aware that personal data of an individual under 21 has been collected, that account will be immediately suspended and all associated personal data will be securely deleted, subject to any mandatory record-keeping obligations under our operating licence. If you believe that a minor has registered an account on the Platform, please contact our support team immediately.

12. Changes to This Policy

rwbola reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how we process your personal data or your rights in relation to it — will be communicated to you via your registered email address with at least 7 days' advance notice before the changes take effect. Non-material updates (such as formatting changes or clarifications that do not affect processing) may be made without advance notice, and the updated date at the top of this Policy will be revised accordingly. Your continued use of the Platform after the effective date of any change constitutes your acknowledgement of the updated Policy.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a complaint about how rwbola has handled your personal data, please contact our support team via 24/7 live chat (accessible after logging in at /rwbola-login) or by email at: [email protected]

Email addresses on this page are displayed as plain text only and are not clickable links. We will acknowledge privacy-related requests within 5 business days and provide a substantive response within 30 days.

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority applicable under the laws of your jurisdiction, or to the dispute resolution body specified under our international gaming authority licence.