Privacy Policy

RedStag Privacy Policy – Malaysia Member Personal Data Protection

Your privacy is our priority. Learn how redstag collects, uses, and protects your personal information to the highest security standards.

Effective: 1 January 2026 Updated: 1 June 2026 Malaysia PDPA Compliance
Our Privacy Commitment

How RedStag Protects Your Data

Six core privacy protection principles we practise every day to ensure the security of every member's personal information.

256-bit SSL Encryption

All data transmitted between your device and redstag's servers is protected using 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.

PDPA 2010 Compliance

All data collection and processing practices at redstag fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary law governing data privacy in the country.

No Data Sales

Redstag has never sold, rented, or shared member personal data with third parties for commercial marketing purposes. Your data remains yours — it is not a business asset of ours.

Secure Data Storage

Member personal data is stored on servers protected by multi-layered firewalls, strict access controls, and round-the-clock security monitoring — with encrypted backups stored at separate locations.

Access & Control Rights

You have the full right to access, correct, or request deletion of your personal data. All requests are processed by the RedStag privacy team within the timeframes prescribed by law.

Communication Controls

You can choose the types of communications you wish to receive from RedStag — promotions, security updates, or platform news — and unsubscribe at any time directly from your account settings.

Updated: 1 June 2026 Malaysia PDPA Bahasa Malaysia

1Introduction

Redstag values the privacy of every member who entrusts their personal information to our platform. This Privacy Policy explains in detail how we collect, store, use, and protect your personal data when you use the redstag website and mobile app.

This document is written in plain language so that every member — regardless of technical background — can understand their rights and how their data is managed. We believe transparency is the cornerstone of trust, and trust is the foundation of our relationship with you.

Scope of This Policy: This Privacy Policy applies to all users of the RedStag platform, including website visitors, registered members, and former members whose data we retain in accordance with legal obligations. It should be read together with Terms and Conditions redstag.

By registering an account or continuing to use the RedStag platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2Information We Collect

Redstag collects several categories of personal information to enable the platform to operate securely and comply with legal requirements. The following are the types of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, date of birth, identification card number, passport KYC verification, fraud prevention
Contact Data Email address, phone number, residential address Account communications, customer support
Financial Data Bank account details, e-wallet, transaction records Deposit and withdrawal processing
Technical Data IP address, device type, browser, OS Account security, fraud detection
Usage Data Game history, wagering activity, login activity Service improvement, responsible gaming
Communication Data Live chat support records, emails to our team Complaint resolution, support improvement
Data Minimisation Principle: redstag only collects data that is strictly necessary for the stated purposes. We do not collect sensitive personal data such as medical data, political views, or biometric information unless required by law.

3How We Use Your Data

Every piece of information collected is used for specific and legitimate purposes. redstag uses your personal data to:

  • Account Management: Create, verify, and maintain your member account securely.
  • Transaction Processing: Process deposits, withdrawals, and bonus payments accurately and efficiently.
  • Identity Verification (KYC): Fulfill legal obligations to verify member identity in order to prevent fraud and money laundering.
  • Platform Security: Detect and prevent unauthorized access, fraudulent activity, and cybersecurity threats.
  • Customer Support: Provide accurate and personalized assistance when you contact our support team.
  • Legal Compliance: Meet reporting obligations to relevant regulatory bodies and authorities.
  • Service Improvements: Analyze platform usage patterns in aggregate to improve the user experience.
  • Marketing Communications: Send promotional information and special offers — only to members who have given consent to receive them.

Redstag will not use your personal data for any purpose not stated in this policy without first obtaining your consent.

4Legal Basis for Data Processing

Every data processing activity at redstag is supported by a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases include:

  • Contract Performance: Data processing required to fulfill our responsibilities to you as a platform member, including payment processing and account management.
  • Legal Obligations: Data processed to fulfil legal requirements such as KYC, AML (Anti-Money Laundering), and reporting to regulatory bodies.
  • Legitimate Interests: Processing for fraud prevention, platform security, and service improvement purposes that do not compromise your privacy rights.
  • Consent: For marketing communications and use of data beyond the scope of the main contract — you may withdraw this consent at any time.

5Data Sharing with Third Parties

Redstag does not sell or rent your personal data to any party for commercial purposes. However, there are certain situations where we need to share data with trusted parties:

  • Payment Processors: Payment service providers such as FPX, DuitNow, and e-wallet operators need to receive the data required to process your transactions.
  • KYC Providers: Registered and trusted third-party identity verification platforms are used to verify the documents you submit.
  • Legal Authority: redstag will disclose data to regulatory bodies or law enforcement agencies when required by a court order or applicable law.
  • Technology Partners: Technical service providers such as cloud hosting, analytics, and cybersecurity vendors bound by strict confidentiality agreements with RedStag.
Our Commitment: All third parties that receive redstag member data are contractually bound to protect that data in accordance with privacy standards equal to or higher than our own. We conduct regular security reviews of all third-party service providers.

6Data Security

Redstag continuously invests in the latest security infrastructure to ensure your personal data is always protected. Key security measures we implement include:

  • End-to-End Encryption: All communications between you and redstag's servers use TLS 1.3 protocol with AES-256 encryption.
  • Layered Access Control: Only authorised personnel may access member personal data, and every access is recorded in an audit log stored securely.
  • 24/7 Monitoring: An automated threat detection system continuously monitors platform activity and will immediately alert us if any suspicious activity is detected.
  • Regular Security Testing: redstag conducts regular penetration testing and security audits by independent security experts.
  • Secure Password Management: Member passwords are stored in an irreversible hashed format using the bcrypt algorithm. RedStag never stores passwords in plain text.
Data Breach Notification: In the event of any data breach affecting your personal information, redstag will notify you within the timeframe required by Malaysian law, along with the remedial steps taken.

7Data Retention Period

Redstag retains your personal data only for as long as necessary for the stated purposes or as required by law. The following are our data retention guidelines:

  • Active Account Data: Retained for the duration your account is active, plus any additional period required to resolve outstanding matters.
  • Financial Transaction Data: Retained for a minimum of 7 years after the transaction date in accordance with Malaysian financial and tax legal requirements.
  • KYC Documents: Retained for a minimum of 5 years after account closure in accordance with applicable AML/CTF requirements.
  • Communication Logs: Customer support records and important communications are retained for 3 years for dispute resolution purposes.
  • Marketing Data: Deleted within 30 days after you withdraw consent to receive marketing communications.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8Your Rights Under PDPA

As a redstag member in Malaysia, you have the following rights under the Personal Data Protection Act 2010:

Right of Access

Request a copy of the personal data we hold about you in a readable format.

Right to Rectification

Request correction of inaccurate or incomplete data held in our records.

Right to Erasure

Request the deletion of your personal data when it is no longer required, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes or certain legitimate interests.

Data Portability Right

Receive your data in a structured, machine-readable format for transfer to another platform.

Right to Restrict Processing

Request that we restrict the processing of your data under certain circumstances while a dispute is being resolved.

To exercise any of the above rights, please contact the redstag privacy team by email at [email protected]. We will process your request within 21 working days after receiving a complete request.

9Cookies & Tracking Technologies

Redstag uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The types of cookies we use:

  • Essential Cookies: Required for the platform to function — including login session verification and security settings. These cookies cannot be disabled.
  • Functional Cookies: Save your preferences such as language, display settings, and game preferences for ease of use.
  • Analytics Cookies: Collect information about how you use the platform in aggregate and anonymously for service improvement purposes.
  • Security Cookies: Help us detect suspicious activity, unauthorized login attempts, and other security threats.
Cookie Controls: You can manage cookie settings through your internet browser. Please note that disabling essential cookies may affect the functionality of the RedStag platform.

10Cross-Border Data Transfers

In the course of platform operations, some of your personal data may be processed outside Malaysia by our technical service providers. RedStag ensures that all international data transfers are safeguarded by:

  • A data processing agreement that mandates protection standards equivalent to Malaysia's PDPA.
  • Use of recognized standard contractual clauses to protect transferred data.
  • Selection of technology partners operating in jurisdictions with robust and recognized privacy laws.

Redstag will not transfer your personal data to countries that do not have an adequate level of data protection without appropriate additional safeguards.

11Children's Privacy

The redstag Platform is intended exclusively for individuals aged 18 years and above. RedStag does not intentionally collect personal data from minors.

Age Warning: If we determine that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who find that their child has registered a redstag account are requested to contact us immediately.

12Privacy Policy Amendments

Redstag reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. When material changes occur, we will:

  • Displaying a clear notice on the platform homepage for at least 14 days before the changes take effect.
  • Send notifications via the RedStag mobile app to all active members.
  • Send an email to a member's registered address for significant changes to how their data is used.

Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy. The "Last Updated" date at the top of this document indicates when the policy was last reviewed.

13Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the redstag Data Protection Officer (DPO) through the following channels:

Privacy Email: [email protected]
Live Chat: Available 24/7 via the redstag platform
Response Time: Within 5 working days for general enquiries; 21 working days for formal data rights requests.

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your personal data has not been handled in accordance with PDPA 2010. However, we encourage you to contact us first so we can resolve any issues directly and promptly.

Trusted Platform

Play with Confidence at RedStag

Your data is protected. Your game is secure. Register today and join over 500,000 Malaysian members enjoying an online gaming experience with guaranteed privacy and security.

256-bit SSL Encryption  |  Malaysia PDPA

Bahasa Melayu