Ricobet is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, who we may share it with, and the rights you hold over your own data. We take these obligations seriously.
The four core principles that govern how Ricobet handles your personal data
Personal data is collected only to the extent necessary to operate your account, process transactions, comply with licensing obligations, and prevent fraud.
Ricobet does not sell, rent, or trade your personal information to any third-party marketing organisations. Your data is used for platform operations only.
You can request access to your data, correct inaccuracies, request deletion, object to processing, and withdraw consent at any time, subject to legal limitations.
256-bit SSL encryption, secure server infrastructure, and role-based access controls are applied to all personal data held by Ricobet. Data access is logged and audited.
Ricobet (hereinafter "we", "us", "our", or "the Platform") operates the online casino and sports betting services accessible at ricobet.cam. We are committed to protecting the privacy and personal data of all individuals who register as players, visit our website, or interact with our services, including those accessing the Platform from Malaysia and other jurisdictions.
This Privacy Policy ("Policy") sets out, in clear and accessible language, the categories of personal data we collect, the lawful bases on which we process that data, the purposes for which it is used, how long it is retained, your rights as a data subject, and the security measures we apply to protect it. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.
By registering an account with Ricobet, making a deposit, or otherwise using any part of our Platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. Where processing is based on consent, you may withdraw that consent at any time as described in Section 10.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, alteration, and deletion. |
| "Data Controller" | Ricobet — the entity that determines the purposes and means of processing Personal Data collected via the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of Ricobet, such as payment processors, identity verification services, and cloud hosting providers. |
| "Data Subject" | The individual to whom Personal Data relates — i.e., you, the Player or visitor. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose. |
| "Cookies" | Small text files stored on your device by a web browser, used to retain session information, preferences, and analytics data. |
Ricobet collects Personal Data across several categories, depending on how you interact with the Platform:
Full legal name, date of birth, nationality, residential address, email address, and mobile phone number — collected when you register an Account. This data is required for KYC (Know Your Customer) compliance and age verification purposes.
A copy of your Malaysian Identity Card (MyKad), passport, or other government-issued identification; proof of residential address (e.g., utility bill, bank statement); and where required, evidence of the source of funds used for deposits. These are collected as part of our mandatory KYC process before withdrawal processing is authorised.
Details of deposits and withdrawals including payment method (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank), transaction amounts in MYR, transaction timestamps, and bank account or e-wallet identifiers. This data is required for payment processing and anti-money laundering compliance.
Records of all games played, bets placed (including sports betting on EPL, Liga Super Malaysia, UFC, and other markets), wager amounts, outcomes, bonus usage, and session durations. This data is required for account management, dispute resolution, and responsible gambling monitoring.
IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session identifiers. Collected automatically when you access the Platform.
Records of your correspondence with Ricobet's support team, including live chat transcripts, email messages, and any supporting documentation submitted in connection with a query or dispute.
Deposit limit settings, loss limit configurations, self-exclusion requests, session duration limits, and any responsible gambling assessments conducted at your request or as part of our duty-of-care obligations.
Personal Data is collected through the following channels:
We process your Personal Data only where we have a lawful basis to do so. The table below summarises the primary purposes for which we process data and the applicable legal basis in each case:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (your account agreement with Ricobet) |
| Processing deposits and withdrawals in MYR | Performance of a contract; legal obligation (AML compliance) |
| Identity verification (KYC) | Legal obligation (licensing requirements); legitimate interests |
| Age verification (21+ enforcement) | Legal obligation; legitimate interests (protecting minors) |
| Fraud prevention and AML screening | Legal obligation; legitimate interests |
| Responsible gambling monitoring and intervention | Legal obligation; legitimate interests (duty of care) |
| Customer support and dispute resolution | Performance of a contract; legitimate interests |
| Platform security and abuse prevention | Legitimate interests |
| Statistical analysis and platform improvement | Legitimate interests (using anonymised or aggregated data) |
| Promotional communications and personalised offers | Consent (you may opt out at any time) |
Ricobet does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the circumstances described below:
Necessary transaction data is shared with payment service providers — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and card networks — to facilitate deposits and withdrawals. These providers process data under their own privacy policies and applicable financial regulations.
Identity documents and verification data may be processed by third-party KYC service providers engaged by Ricobet to assist with document authentication, age verification, and fraud detection. These providers operate under contractual data processing agreements with Ricobet.
Ricobet may disclose Personal Data to licensing authorities, law enforcement agencies, or other competent legal bodies where required by applicable law, court order, or regulatory instruction. We will notify you of any such disclosure to the extent permitted by law.
The Platform's infrastructure relies on third-party cloud hosting and technology providers. These providers may process Personal Data as part of their service delivery and are contractually bound to appropriate data security standards.
Where a Player requests self-exclusion, limited data may be shared with responsible gambling third-party registries where applicable under our licensing framework, to assist in preventing excluded players from registering at other licensed operators.
In the event of a merger, acquisition, or sale of all or substantially all of Ricobet's assets, Personal Data held by the Platform may be transferred to the successor entity. Players will be notified of any such transfer and will have the opportunity to exercise their data rights prior to the effective transfer date.
Ricobet retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods generally apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after closure |
| KYC verification documents | Duration of account plus 5 years after closure (or as required by licensing) |
| Financial transaction records | 5 years from the date of each transaction |
| Gaming activity logs | 3 years from the date of each session |
| Support communications | 3 years from the date of each interaction |
| Technical / access logs | 12 months on a rolling basis |
| Self-exclusion records | Duration of exclusion plus 7 years |
Where retention beyond the above periods is required for legitimate legal proceedings, regulatory investigation, or enforcement purposes, data may be retained for the duration of those proceedings plus a reasonable additional period. Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised.
Ricobet uses cookies and similar tracking technologies to operate the Platform, maintain session integrity, analyse usage patterns, and improve user experience. By continuing to use the Platform, you consent to the use of cookies as described in this section.
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. Cannot be disabled without impairing core functionality. |
| Functional Cookies | Remember your preferences, such as display settings and language preferences. These improve your experience but are not strictly necessary for operation. |
| Analytics Cookies | Collect anonymised data about how visitors navigate and use the Platform. Used to improve Platform design, performance, and content. Data is aggregated and does not identify individual users. |
| Security Cookies | Assist in fraud detection, bot identification, and preventing unauthorised Account access. These may persist beyond a single session. |
You may manage or delete cookies through your browser settings. Disabling essential cookies will impair the functionality of the Platform and may prevent you from accessing certain services, including your Account dashboard and the payment interface. Ricobet does not use third-party advertising cookies and does not serve targeted advertising based on your personal gambling activity.
Ricobet implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, and unlawful processing. These measures include:
Subject to applicable law and the specific circumstances of your request, you hold the following rights with respect to your Personal Data held by Ricobet:
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held in your Account.
Request deletion of your Personal Data where there is no longer a lawful basis for its retention, subject to our legal retention obligations.
Request that processing of your data be suspended while a query or complaint is being investigated.
Receive a copy of data you have provided to us in a structured, commonly used, machine-readable format where technically feasible.
Object to processing based on legitimate interests, including profiling and analytics, where your individual circumstances justify doing so.
Where processing is based on your consent (e.g., promotional communications), withdraw that consent at any time without affecting prior lawful processing.
Lodge a complaint with the relevant supervisory authority if you believe your data rights have been violated, after first raising the matter with Ricobet directly.
To exercise any of the above rights, please contact our Data Protection team via live chat or email at [email protected]. We will respond to rights requests within 30 calendar days of receipt. Complex or multiple requests may require an extension of up to 60 days, in which case we will notify you within the initial 30-day window.
The Ricobet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data belonging to any person under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we take all reasonable precautions to prevent underage access to the Platform.
If we become aware that Personal Data has been submitted by or on behalf of an individual under the age of 21, we will take immediate steps to delete that data and close the associated Account. Any deposits made via such an Account will be returned in full to the payment source used.
If you have reason to believe that a person under 21 has registered an Account with Ricobet, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
The Ricobet Platform may contain references to third-party services, including payment platforms operated by Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB Bank, Hong Leong Bank, DuitNow, FPX, Visa, and Mastercard. When you interact with any third-party service — including by initiating a payment transaction — you are subject to the privacy policy and terms of that third party.
Ricobet is not responsible for the privacy practices or data handling of any third-party service provider. We encourage you to review the privacy policies of all third-party services you use in connection with your Ricobet Account. Our responsibility for data processed by third parties extends only to the contractual obligations we have imposed on them as Data Processors operating on our behalf.
As an internationally licensed platform, Ricobet may transfer Personal Data to servers and service providers located in jurisdictions outside Malaysia. Where such transfers occur, Ricobet ensures that appropriate safeguards are in place to protect your data in accordance with applicable international data protection standards. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or transfers to jurisdictions that offer an adequate level of protection for personal data.
By using the Ricobet Platform, you acknowledge and consent to the potential transfer of your Personal Data to servers and data processors located outside Malaysia for the purposes described in this Policy.
Ricobet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. Material changes to this Policy will be communicated to registered Players via the email address on their Account at least 7 calendar days prior to the effective date of the change, except where immediate amendment is required by law.
The current version of this Privacy Policy is always accessible at ricobet.cam/privacy-policy. The "Last Updated" date at the top of this document reflects when the most recent revision took effect. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way Ricobet handles your Personal Data, please contact us through the following channels:
Available 24 hours a day, 7 days a week, via the Ricobet Platform dashboard. Live chat is the fastest route for general privacy queries and account-related concerns. Typical response time: under 2 minutes during peak hours.
For formal written data subject requests — including access, rectification, erasure, or portability requests — please contact us at: [email protected]. Please include your registered email address and Account username, along with a clear description of your request. We acknowledge formal requests within 5 business days and aim to provide a substantive response within 30 calendar days.
We take all privacy concerns seriously and are committed to resolving queries fairly and transparently. Where you are not satisfied with our response, you retain the right to escalate the matter to the relevant supervisory authority under applicable data protection law.
Six concrete promises Ricobet makes to every player regarding their personal data
Ricobet never sells, rents, or trades your personal information to any third-party marketing organisation. Your gaming activity, payment history, and personal details are not a product we monetise externally.
Every data transmission between your device and the Ricobet Platform is protected by bank-grade TLS/SSL encryption. Login credentials, financial data, and KYC documents are fully encrypted in transit and at rest.
You can access, correct, export, or request deletion of your personal data at any time via our support team. Requests are acknowledged within 5 business days and resolved within 30 calendar days.
We collect only the data necessary to operate your account, process transactions in MYR, comply with KYC and AML regulations, and provide responsible gambling safeguards. No unnecessary data categories are collected.
Personal data is held only as long as required — typically 3–5 years post-account closure for most categories. KYC and financial records are retained for 5 years as required under international AML standards, then securely deleted.
In the unlikely event of a data security incident affecting your personal data, Ricobet will notify affected players without undue delay and take immediate steps to contain and remediate the incident.
Our support team is available 24/7 via live chat to address any privacy-related questions before you register. We're committed to transparency about how your data is handled.