Your privacy is the absolute priority of ry36. This document transparently explains how we collect, use, store, and protect the personal data of every ry36 member in Malaysia.
Six core pillars that form the foundation of ry36's personal data protection policy for all members in Malaysia.
All your personal and financial information is protected by SSL 256-bit encryption — the same technology used by leading banking institutions in Malaysia and around the world.
Ry36 has never and will never sell, rent, or trade members' personal data to third parties for marketing purposes or any purpose unrelated to ry36 services.
Ry36 only collects data that is genuinely necessary to provide services, process transactions, and comply with legal requirements. No excessive data is collected without a clear reason.
You have the right to access, correct, download, or request deletion of your personal data at any time. The ry36 support team will process such requests within 7 business days.
Your data is stored on servers protected with strict access controls. Only authorised staff may access members' personal data, and all access is recorded for audit purposes.
Ry36 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection regulations to ensure your data is handled responsibly.
The handling of your personal data at ry36 is transparent, controlled, and secure from start to finish.
Data collected during registration and platform use
Data encrypted with 256-bit SSL before transmission
Stored on secure servers with strict access controls
Used solely for the stated service purposes
Data deleted upon expiry of the retention period
This Privacy Policy describes ry36's privacy practices regarding the collection, use, storage, and protection of members' personal data. By using the ry36 platform, you agree to the terms set out in this document. Please read it carefully and contact us if you have any questions.
Ry36 collects personal data from members through several different means, depending on your interaction with our platform. Our key principle is data minimisation — we only collect what is genuinely necessary to provide you with the best service.
When you register or use the ry36 platform, you may provide us with the following information:
While you are using the ry36 platform, our systems automatically collect certain technical information to ensure the service runs smoothly and securely:
Important Note: ry36 never directly collects credit or debit card information. All payments are processed through PCI-DSS certified third-party payment gateways, and ry36 does not store your card number in our systems.
The personal data we collect is used solely for purposes related to the provision and improvement of ry36 services. We do not use your data for unrelated purposes without your explicit consent.
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Member account management | Name, email, phone number | Contract execution |
| Deposit & withdrawal processing | Banking details, transaction records | Contract execution |
| Identity verification (KYC) | Identity document, date of birth | Legal obligation |
| Fraud prevention & security | IP address, login patterns | Ry36's legitimate interests |
| Customer Support | Communication history, account information | Contract execution |
| Promotional & bonus notifications | Email, phone number | Member Consent |
| Anti-money laundering compliance | Transaction records, identity information | Legal obligation |
Ry36 will not use your personal data to make automated decisions that significantly affect you without human review. Any decision involving account suspension or withdrawal rejection will be reviewed by our team before it is carried out.
Ry36 continuously invests in security infrastructure to ensure that members' personal data is always protected against unauthorised access, loss, misuse, or unlawful disclosure.
Access to members' personal data within ry36's internal systems is strictly limited to staff who require it to carry out their duties. All access is logged and audited regularly. ry36 staff are required to sign confidentiality agreements and complete rigorous data security training.
While ry36 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in your account's security — always use a strong password, do not share your login credentials, and contact us immediately if you suspect any suspicious activity.
Ry36 does not sell or disclose members' personal data to third parties for marketing purposes. However, there are certain situations where ry36 needs to share data with other parties to enable our services to function properly and to comply with legal requirements.
Ry36 works with carefully selected third-party service providers to support platform operations. These providers are only permitted to use your data for specified purposes and are bound by strict data protection agreements:
Ry36 may be required to disclose members' personal data to government authorities or regulatory bodies where mandated by law, court order, or valid legal process. This includes law enforcement agencies, financial intelligence units, and gaming regulatory bodies. ry36 will not disclose data beyond what is required by law.
The ry36 platform uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how members use our platform.
You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies may affect the functionality of the ry36 platform. Essential cookies cannot be disabled as they are required for platform security and core functionality.
As a ry36 member, you have certain rights regarding your personal data that we collect and process. ry36 fully respects these rights and will handle every request seriously and in a timely manner.
Ry36 fully respects the following rights held by every member regarding their personal data.
You have the right to request a copy of all personal data we hold about you. ry36 will provide that data in a readable format within 7 business days.
If the personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Contact ry36 support with relevant proof to update your information.
You may request deletion of your personal data when it is no longer needed, subject to any record retention obligations applicable to the ry36 platform.
For consent-based data processing (such as receiving promotional emails), you may withdraw your consent at any time without affecting core ry36 services.
You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider of your choice.
You have the right to object to the processing of your personal data for certain purposes, such as direct marketing. ry36 will cease such processing unless there are legitimate grounds that override your rights.
Ry36 does not retain your personal data for longer than is necessary for the purposes stated in this privacy policy. The retention period depends on the type of data and the purpose of processing.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | For as long as the account is active | Contract execution |
| Financial transaction records | 7 years after transaction | AML legal obligation |
| KYC Documents | 5 years after account closure | Legal obligation |
| Support communication logs | 3 years | Dispute resolution |
| Technical log data | 12 months | Security & audit |
| Marketing information | Until consent is withdrawn | Member Consent |
Upon expiry of the retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised data may be retained for analytical and statistical purposes without a time limit.
The ry36 platform is strictly for individuals aged 18 and above. ry36 does not knowingly collect any personal data from minors under the age of 18.
Should ry36 discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. If you are a parent or guardian who believes your underage child has registered on the ry36 platform, please contact our support team immediately.
Ry36 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or how we handle personal data. The date of the last update is always displayed at the top of this document.
For significant amendments — such as changes in how we use your data or new types of data being collected — ry36 will notify members via email or in-platform notification at least 14 days before the amendment takes effect. Continued use of the ry36 platform after notice has been given will be considered acceptance of the amended policy.
We encourage you to review this Privacy Policy page periodically to stay informed about how ry36 protects your personal data. Any questions may be directed to our team at any time.
If you have any questions, concerns, or wish to exercise any of your privacy rights, the ry36 data protection team is ready to assist. We are committed to providing clear and timely responses to all privacy-related enquiries.
| Contact Channels | Details | Response Time |
|---|---|---|
| Live Chat Platform | Available on the ry36 platform | Average < 5 minutes |
| Privacy Email | [email protected] | Within 7 business days |
| Official Telegram | Official ry36 channels | Average < 15 minutes |
For official requests regarding access, correction, or deletion of personal data, please contact us by email including your ry36 account number, the type of request being made, and a copy of a valid identity document for verification purposes. Our team will process your request within 7 business days and provide written feedback on the action taken.
ry36's commitment: Every privacy-related request we receive will be handled carefully, kept strictly confidential, and processed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. Your privacy is not merely a legal obligation to us — it is a trust we take seriously.