At Rizzy, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights you have over your own data. Please read this document carefully before creating an account or using our platform.
This Privacy Policy ("Policy") describes how Rizzy ("Platform", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at rizzy.cam, collects, processes, stores, and protects the personal information of users ("User", "Player", "you") who register for an account or otherwise interact with the platform.
Rizzy is committed to handling personal data responsibly and in accordance with applicable data protection legislation. By registering an account, making a deposit, or continuing to use the Rizzy platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy. Where a conflict exists between this Policy and any other document, this Policy shall govern in relation to data privacy matters.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Rizzy collects Personal Data through multiple channels during your interaction with the platform. The categories of data we collect are described below.
When you create a Rizzy account, we collect the information you provide, which may include:
As part of our KYC process — required prior to withdrawal or upon regulatory request — we may collect:
We record information related to deposits and withdrawals made through payment methods including Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency (BTC/USDT). This includes transaction amounts in MYR, timestamps, payment method used, and transaction reference numbers. We do not store full bank account passwords or full card numbers.
We automatically collect data about how you interact with the platform, including:
When you contact our support team via live chat, WhatsApp, or email, we retain records of those communications — including the content, timestamps, and any attachments — for quality assurance, dispute resolution, and regulatory compliance purposes.
Rizzy processes your Personal Data on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Identity verification (KYC) | Legal obligation; legitimate interests |
| Processing deposits and withdrawals | Performance of contract |
| Fraud prevention and anti-money laundering | Legal obligation; legitimate interests |
| Platform analytics and service improvement | Legitimate interests |
| Personalised promotions and bonus offers | Consent (opt-in marketing communications) |
| Responsible gambling monitoring | Legal obligation; vital interests |
| Customer support communications | Performance of contract; legitimate interests |
Rizzy uses your Personal Data for the following purposes:
To create, manage, and maintain your Rizzy account; to process deposits and withdrawals in MYR via your selected payment methods; to authenticate your identity on login; and to communicate account-related information such as transaction confirmations and security alerts.
To fulfil our obligations under applicable gaming regulations, anti-money laundering (AML) requirements, and Know Your Customer (KYC) standards. This includes screening transactions, reporting suspicious activity where legally required, and maintaining records for the prescribed statutory retention periods.
To monitor gaming patterns that may indicate problematic behaviour; to implement and enforce self-imposed limits, cool-off periods, and self-exclusion requests; and to provide intervention or signposting to support resources where appropriate. The safety of our players is a genuine operational priority, not merely a compliance checkbox.
To analyse usage data and behavioural patterns in aggregate form in order to improve platform performance, user experience, game selection, and the relevance of promotions. This analysis does not involve selling your data to third parties.
Where you have provided explicit consent, we may send you promotional communications about bonuses, new games, and platform features. You may withdraw consent at any time by updating your notification preferences in your Account settings or by contacting our support team.
Rizzy does not share your Personal Data with third parties except in the circumstances described below:
We engage trusted third-party service providers who process data on our behalf under strict contractual obligations, including data processing agreements. These providers include KYC and identity verification services, payment processing partners (including the operators of DuitNow, FPX, Touch 'n Go eWallet, and other Malaysian payment infrastructure), cloud hosting providers, customer support software platforms, and fraud detection tools.
We may be required by law, regulation, or court order to disclose Personal Data to government authorities, law enforcement agencies, financial intelligence units, or regulatory bodies. We will only make such disclosures to the extent strictly required by applicable law and will, where legally permitted, notify you of any such disclosure.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Rizzy's assets, Personal Data held by us may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address associated with your account prior to the transfer taking effect, and your rights under this Policy will be preserved.
We may share aggregated, statistical, or anonymised data with business partners, investors, or industry bodies where such data cannot be used to identify any individual. This type of sharing is not subject to the restrictions applicable to Personal Data.
The Rizzy platform uses cookies and similar tracking technologies to support its functionality, ensure security, and deliver a personalised experience.
You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform, including the ability to maintain a logged-in session. Strictly necessary cookies cannot be disabled by browser settings as they are essential to the operation of the platform.
Rizzy retains Personal Data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.
Rizzy employs a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Subject to applicable law, you have the following rights in relation to your Personal Data held by Rizzy:
You have the right to request a copy of the Personal Data we hold about you. Requests will be fulfilled within 30 days of receipt, subject to identity verification. One copy per 12-month period is provided free of charge.
If your Personal Data is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your Account settings. For changes to identity or KYC-related data, you must contact our support team and provide relevant documentation.
You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that this right is subject to overriding legal obligations — including regulatory retention requirements — that may prevent full deletion.
You may request that Rizzy restrict the processing of your Personal Data in certain circumstances, including where you contest its accuracy or object to its processing pending resolution of that objection.
Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
You have the right to object to the processing of your Personal Data where it is carried out on the basis of legitimate interests, including for direct marketing purposes. Upon receipt of a valid objection to marketing, we will cease processing your data for that purpose immediately.
To exercise any of the rights described above, please contact our Data Privacy team via live chat or at the email address provided in Section 14. We will acknowledge all requests within 5 business days and aim to resolve them within 30 days. We may ask you to verify your identity before processing a request.
Rizzy operates internationally, and your Personal Data may be transferred to, stored in, or processed in countries other than Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your Personal Data at a standard equivalent to that described in this Policy.
Safeguards may include standard contractual clauses approved by the relevant regulatory authority, binding corporate rules, or reliance on jurisdictions that have been assessed as providing an adequate level of data protection.
The Rizzy platform is strictly for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration process and is reinforced through our KYC procedures.
If we become aware that Personal Data has been provided by or collected from a person under the age of 21, we will immediately suspend the relevant account, void any associated transactions or winnings, and delete the data from our systems without undue delay.
If you believe that a minor has provided data to or registered on the Rizzy platform, please contact our support team immediately.
Rizzy reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered Users via the email address associated with their account at least seven (7) days prior to the changes taking effect.
The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Rizzy platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must close your account prior to the effective date.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact us through the following channels:
When contacting us about a data privacy matter, please clearly state the nature of your request, the email address associated with your account, and any relevant Account ID or reference number to allow us to locate your records promptly.
Six concrete ways Rizzy treats your personal information with the respect it deserves.
All data transmitted between your device and Rizzy is protected by bank-grade SSL/TLS encryption. Sensitive data stored on our servers is encrypted at rest.
Your Personal Data is never sold, rented, or traded to advertisers, data brokers, or third-party marketing companies — under any circumstances.
Access, rectify, delete, or export your data at any time. We respond to all data rights requests within 5 business days and resolve them within 30.
Data processing aligned with our international gaming licence requirements, AML obligations, and KYC regulatory standards — not just box-ticking.
We don't keep your data indefinitely. Retention periods are capped by purpose and regulatory minimums, after which data is securely deleted or anonymised.
Behavioural data is used to support responsible gambling monitoring — a genuine player safety measure, not a profiling exercise for commercial gain.
Our multilingual support team is available 24/7 via live chat. You can also visit our FAQ for quick answers, or review our Terms & Conditions for the full platform ruleset.