Privacy Policy RedStag Malaysia

1. Introduction and Policy Scope

RedStag ("us", "Platform" or "RedStag") is fully committed to protecting the privacy of every player who uses our services. This Privacy Policy has been established in accordance with responsible data protection principles and explains how your personal information is collected, used, stored, and protected throughout your interactions with our platform at redstag.pro.

This Policy applies to all users who visit our website, register an account, make a deposit, use our online gaming services, contact our support team, or interact with any part of the RedStag platform. You are advised to read this document carefully before registering or using any part of our platform.

By registering an account or continuing to use the RedStag platform, you hereby give your consent to the data collection and processing practices outlined in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for further enquiries.

2. Types of Data We Collect

To provide the best service and comply with KYC (Know Your Customer) requirements and applicable anti-money laundering laws, RedStag collects several categories of personal information from players. Below is a breakdown of the data we collect:

Data Categories	Details	Purpose
Identity Data	Full name, date of birth, identity card / passport number	Age verification and KYC
Contact Data	Email address, phone number, residential address	Account communications and verification
Financial Data	Payment method details, deposit and withdrawal records	Transaction processing and fraud prevention
Technical Data	IP address, device type, web browser, session data	Account security and fraud detection
Gaming Data	Betting history, game activity, self-limit settings	Responsible gaming and player support
Cookie Data	Session cookies, preference cookies, analytics cookies	User experience and website analytics

We only collect data that is strictly necessary for the stated purposes. Data you provide voluntarily — such as when contacting customer support — is also stored to help us deliver better and more consistent service.

3. How We Use Your Data

All data collected by RedStag is used responsibly and solely for legitimate purposes. We do not process your personal data for any purpose beyond what is stated in this policy. The primary uses of your data are as follows:

• Verify your identity and age during the registration and KYC process.
• Process deposits, withdrawals, and all financial transactions securely.
• Send important notifications related to your account, transactions, and security.
• Identify and prevent fraud, money laundering, and platform abuse.
• Comply with applicable legal obligations and regulations.
• Support the responsible gambling programme and monitor players' self-imposed limits.
• Improve the user experience based on platform usage patterns.
• Send promotional information and bonuses, only if you have consented to receive it.

4. Legal Basis for Data Processing

RedStag processes your personal data on the following valid and recognised legal bases:

• Contract performance: Processing is required to fulfil the contractual obligations between redstag and players, including account management and payment processing.
• Legal obligation: RedStag is required to comply with KYC, AML (Anti-Money Laundering), and other regulations applicable to platform operations.
• Legitimate interests: We process technical and security data to protect the integrity of the platform and the safety of all players.
• Consent: For marketing communications and the use of non-essential cookies, we only process data on the basis of consent that is freely given and may be withdrawn at any time.

5. Data Sharing with Third Parties

RedStag does not sell or disclose players' personal data to third parties for commercial purposes. However, in certain situations, we may need to share data with parties directly involved in the operation of the platform:

• Payment providers: FPX, Touch 'n Go eWallet, GrabPay, and other payment processing providers that require transaction information for verification purposes.
• Game providers: Our game software partners who operate games within the platform to ensure game integrity.
• Legal authorities: Law enforcement authorities or regulatory bodies, when required by court order or legal obligation.
• Technical service providers: Cloud computing and infrastructure companies that help operate our platform, subject to strict confidentiality agreements.

All third parties that receive player data are bound by strict data processing agreements and are not permitted to use that information for any purpose other than what is specified in those agreements.

6. Data Security and Protection

The security of your personal data is redstag's absolute priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL encryption for all data transmitted between your browser and redstag's servers.
• Encryption at rest for all stored personal and financial records.
• Two-factor authentication (2FA) to protect player account access.
• Round-the-clock 24/7 security monitoring by our in-house cybersecurity team.
• Regular penetration testing by independent third-party security experts.
• Strict internal access controls — only authorised staff may access player data.
• A clear incident response procedure in the event of any data breach.

While we take all reasonable steps to protect your data, no system can be guaranteed completely secure against all cyber threats. We encourage players to also take personal protective measures, such as using a strong password and never sharing your login credentials with anyone.

7. Use of Cookies and Tracking Technologies

RedStag uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website. There are several types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and language preferences. These cookies cannot be disabled.
• Performance cookies: Help us understand how players interact with the platform through anonymised analytics data.
• Preference cookies: Save your personal settings such as display theme, language, and game preferences.
• Marketing cookies: Used to display relevant promotions. These cookies are only activated with your consent.

You can manage your cookie preferences through your web browser settings at any time. Disabling certain cookies may affect the functionality of some areas of the platform.

8. Data Retention Period

RedStag retains players' personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. In general:

• Active account data is retained for as long as the player's account remains active and in use.
• Financial records and transaction data are retained for a minimum of seven years to comply with anti-money laundering legal requirements.
• Customer support communication logs are retained for two years for reference and service improvement purposes.
• Closed account data is retained for three years for audit purposes, after which it will be securely deleted.

9. Player Privacy Rights

As a RedStag player, you have certain rights regarding your personal data. RedStag fully respects these rights and will process every request within a reasonable timeframe. Your rights include:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any information that is inaccurate or out of date.
• Right to erasure: Under certain circumstances, you may request that we delete your personal data.
• Right to restrict processing: You can request that we restrict how we process your data.
• Right to object: You can object to the processing of your data for direct marketing purposes at any time.
• Right to data portability: You have the right to receive your data in a machine-readable format for transfer to another platform.

To exercise any of these rights, please contact our support team through the available channels. We will process your request within 30 business days and may need to verify your identity before carrying out any changes.

10. Changes to the Privacy Policy

RedStag reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. Any material changes will be communicated to players via email or a prominent notice on our website at least 14 days before the changes take effect. Continued use of the platform after such notice will be deemed acceptance of the latest version of the Privacy Policy.