rwbola is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights available to you as a Malaysian player under the Personal Data Protection Act 2010 (PDPA) and other applicable frameworks.
Last updated: 1 January 2026
Our data practices align with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards applicable to online gaming operations.
rwbola does not sell, rent, or trade your personal data to any third party for their own marketing purposes under any circumstances.
All data in transit and at rest is protected using industry-standard AES-256 encryption. Your financial and personal information is never transmitted in plain text.
You have the right to access, correct, and in certain circumstances request deletion of your personal data held by rwbola, subject to applicable legal obligations.
We do not retain personal data longer than necessary. Data retention periods are defined by legal obligation and purpose, not indefinite accumulation.
Any material changes to this Privacy Policy will be communicated to registered players via email notification prior to taking effect.
This Privacy Policy ("Policy") is issued by rwbola ("Company", "we", "us", "our") and applies to all personal data collected through the rwbola online gaming and sports betting platform accessible at rwbola.cam, including any associated mobile applications, customer support channels, and marketing communications (collectively, the "Platform").
rwbola operates as a data controller in respect of the personal data of its registered players and website visitors. We take our obligations as a data controller seriously and are committed to processing personal data in a fair, transparent, and lawful manner in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA") and other applicable data protection frameworks.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. Together, these documents form the complete framework governing your use of the rwbola Platform and our corresponding obligations to you.
By registering an account, using the rwbola Platform, or providing us with personal data through any channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.
In this Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or is reasonably capable of identifying an individual, directly or indirectly, including name, identification number, contact details, financial data, and device identifiers. |
| "Data Controller" | rwbola, as the entity that determines the purposes and means by which personal data is processed. |
| "Data Processor" | A third-party service provider that processes personal data on behalf of rwbola under a data processing agreement. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion. |
| "PDPA" | The Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions. |
| "Sensitive Personal Data" | A subset of personal data that warrants heightened protection, including financial account details, government-issued identification numbers, and any data concerning health or gambling behaviour. |
| "Cookies" | Small data files stored on a user's device by a web browser, used to retain information across sessions and support Platform functionality. |
rwbola collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically through your use of the Platform; and in certain cases from third-party sources for verification and compliance purposes. The categories of personal data we collect include:
rwbola processes personal data only where a lawful basis for such processing exists. Depending on the specific processing activity, we rely on one or more of the following lawful bases:
| Lawful Basis | Application at rwbola |
|---|---|
| Contractual Necessity | Processing required to perform our obligations under the Terms & Conditions — including account creation, payment processing, bet settlement, and withdrawal processing. |
| Legal Obligation | Processing required to comply with applicable laws — including KYC verification, anti-money laundering (AML) obligations, age verification, and record-keeping requirements. |
| Legitimate Interest | Processing necessary for our legitimate business interests — including fraud detection, Platform security, responsible gambling monitoring, and service improvement analytics — where such interests are not overridden by your privacy rights. |
| Consent | Processing for which you have provided explicit consent — including direct marketing communications and the use of non-essential cookies. You may withdraw your consent at any time. |
Where we rely on consent as our lawful basis, withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, contact us at [email protected] or update your account preferences.
rwbola processes your personal data for the following specific purposes:
rwbola does not sell, rent, or otherwise transfer your personal data to third parties for their own independent commercial purposes. We may, however, share your personal data with the following categories of recipients where necessary and proportionate:
We share transactional data with payment processors and financial institutions necessary to facilitate deposits and withdrawals. This includes Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), interbank network operators (DuitNow, FPX), and direct banking partners (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank). These parties act as independent data controllers for their own payment processing activities.
We work with third-party technology vendors who provide cloud hosting, database management, cybersecurity services, and software infrastructure. These vendors operate as data processors under contractual data processing agreements that mandate appropriate technical and organisational security measures.
We engage specialist KYC and AML compliance providers to perform identity verification, document authentication, and sanctions screening as required by applicable regulatory obligations.
We will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. We will, where legally permitted, notify you of such disclosure.
In the event that you request a self-exclusion or where we are required to report problem gambling indicators under applicable responsible gambling frameworks, relevant data may be shared with designated responsible gambling authorities or registries.
We will never share your personal data with third parties for their own marketing purposes. Any third party processing data on our behalf is contractually bound to process that data solely in accordance with our instructions and to maintain appropriate security standards.
rwbola retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 7 years post-closure | AML / regulatory obligation |
| Financial Transaction Records | 7 years from transaction date | Tax and AML compliance |
| KYC Documents | 5 years post-account closure | AML regulatory requirement |
| Betting & Gaming History | 5 years from transaction date | Dispute resolution and regulatory audit |
| Support Communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing Consent Records | Duration of consent plus 3 years | Legal compliance (consent records) |
| Technical / Device Logs | Up to 12 months from collection | Security and fraud detection |
| Self-Exclusion Records | Minimum 5 years from exclusion date | Responsible gambling obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained for analytical purposes in a form that does not identify any individual.
rwbola implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:
While rwbola implements robust security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been compromised, contact our support team immediately at [email protected].
rwbola uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:
Required for core Platform functionality including session management, login state, and security token validation. These cookies cannot be disabled without impairing Platform functionality. No consent is required for strictly necessary cookies.
Used to collect anonymised data about how players use the Platform — including page visit frequency, session duration, and feature engagement — to identify areas for improvement. These cookies require your consent and may be declined without affecting core Platform functionality.
Allow the Platform to remember preferences such as your preferred language, display settings, and last-used payment method to improve your experience. These require consent and may be declined.
Used to deliver promotional content relevant to your interests and to measure the effectiveness of our marketing activities. These cookies require explicit consent and may be disabled via your account settings or browser cookie controls.
You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain categories of cookies may affect the functionality and performance of the rwbola Platform.
In operating the rwbola Platform, certain personal data may be transferred to and processed in jurisdictions outside of Malaysia. This may occur where our technology infrastructure providers, game content suppliers, or compliance service providers maintain data centres or operational facilities in other countries.
Where personal data is transferred outside Malaysia, rwbola ensures that appropriate safeguards are in place to provide a level of data protection substantially equivalent to that afforded under the Malaysian PDPA. Such safeguards may include contractual clauses, binding corporate rules, or equivalent data transfer mechanisms as required by applicable law.
We do not transfer personal data to jurisdictions that we assess as lacking adequate data protection standards without implementing supplementary safeguards to address identified risks.
As a data subject under the Malaysian PDPA and applicable international data protection frameworks, you have the following rights in respect of your personal data held by rwbola. You may exercise any of these rights by contacting us at [email protected]:
You have the right to request a copy of the personal data that rwbola holds about you, together with information about how it is processed.
You have the right to request correction of any inaccurate or incomplete personal data that we hold about you, subject to verification.
In certain circumstances, you may request deletion of your personal data. This right is subject to our legal obligations which may require us to retain certain data for a defined period.
You may request that we restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to our processing activities.
You may object to processing of your personal data based on our legitimate interests, including profiling for responsible gambling monitoring. We will cease such processing unless we demonstrate compelling legitimate grounds.
Where we process your data based on consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
rwbola will respond to rights requests within 21 days of receipt. Where a request is complex or numerous, we may extend this period by a further 14 days with written notification. We will not charge a fee for processing rights requests unless the request is manifestly unfounded or excessive.
We may need to verify your identity before processing certain rights requests. This is to ensure we do not inadvertently disclose or delete personal data in response to a fraudulent or unauthorised request.
The rwbola Platform is strictly for users aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that a user is under the age of 21, their account will be immediately suspended, all bets voided, and personal data deleted subject to any overriding legal obligations.
Age verification is a mandatory component of our KYC process. All players are required to provide documentary evidence of their date of birth before their account can be fully activated and before any withdrawal can be processed. We use this data solely for age verification purposes in accordance with our legal obligations and responsible gambling commitments.
If you have reason to believe that a minor has registered on the rwbola Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.
The rwbola Platform may contain links to third-party websites, payment processors, and service providers. Once you navigate away from the rwbola Platform via such a link, this Privacy Policy no longer applies. rwbola has no control over the content, privacy practices, or data handling of third-party sites and accepts no responsibility or liability for them.
We encourage you to review the privacy policies of any third-party platform you access through a link on the rwbola Platform before providing any personal data to them.
rwbola reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where a material change is made to this Policy, we will provide advance notice to registered players via email notification and by publishing a prominent notice on the Platform.
The "Last Updated" date at the top of the Table of Contents reflects the date on which this Policy was most recently revised. We encourage you to review this Policy periodically to remain informed of how we handle your personal data. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms.
If you have any questions, concerns, or complaints regarding this Privacy Policy or rwbola's data processing activities, please contact us through the following channels. We are committed to resolving all data protection concerns in a fair and timely manner.
Email: [email protected]
For rights requests, please include "Privacy Rights Request" in your subject line and provide sufficient information to verify your identity. We will acknowledge receipt within 48 hours and provide a substantive response within 21 days.
If you believe you have identified a security vulnerability or potential data breach involving rwbola systems, please contact us immediately at [email protected] with the subject line "Security Disclosure". We take all security reports seriously and will investigate promptly.
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority. In Malaysia, the supervisory authority for PDPA matters is the Department of Personal Data Protection (JPDP), operating under the Ministry of Communications and Multimedia Malaysia.
rwbola is committed to engaging constructively with all data protection enquiries and to resolving complaints at the first point of contact wherever possible.
Our support team is available 24/7 to address any privacy, data access, or account-related concerns. You can also explore our FAQ for quick answers to common questions.
🛡️ For players aged 21 and above only. Please gamble responsibly. | Responsible Gambling Resources | Terms & Conditions