Privacy Policy
This notice explains how RIPVault (“we”) collects and uses your personal data when you use https://rip-vault.com and our related channels. This notice is also available in Bahasa Malaysia; both versions say the same thing.
1. What we collect
| Account | Username, email address and/or mobile number, Google or Telegram account identifier, referral code, date you confirmed you are 18+. |
|---|---|
| Identity verification | Your MyKad images (front and back) or passport image, the name, ID number and date of birth on it, a selfie, your verified mobile number, and your bank account name and number. Collected only when you request a withdrawal or shipment. |
| Shipping | Recipient name, phone number and delivery address. |
| Transactions | Top-ups, pack openings, sell-backs, withdrawals, refunds, shipments, Battle and Party rooms, and the fairness seeds attached to each pull. |
| Technical | IP address, device and browser type, a device identifier, log-in times and activity logs; browser storage for your theme and session. |
| Support | Messages you send us and our replies. |
2. Why we use it
- to run your account, process payments, sell-backs, withdrawals and shipments;
- to verify your identity and age, prevent fraud, duplicate accounts, collusion and money laundering, and meet legal obligations;
- to send you codes, receipts, shipping updates and important notices about your account; and, if you agree, news and promotions (you can opt out any time);
- to keep the Service secure and improve it;
- to resolve disputes and enforce our Terms.
Where we rely on your consent (for example marketing), you may withdraw it at any time. Providing identity and payment data is necessary for withdrawals and shipping; without it we cannot provide those services.
3. Who we share it with
We share personal data only as needed with: our SMS and email delivery providers (to send you codes and notices); payment providers and banks (to process top-ups, refunds and payouts); courier companies (to deliver your cards); our cloud hosting and database providers (who store data on our behalf); professional advisers; and regulators, law-enforcement or courts where the law requires. Some providers may process data outside Malaysia; we require them to protect it to a standard comparable to the PDPA. We do not sell your personal data.
4. How we protect it
- Identity documents are encrypted (AES-256) before they are stored and are decrypted only for the staff member reviewing your verification.
- Your full IC number is never written to our activity logs; only a one-way fingerprint is kept to detect duplicate accounts.
- Access to personal data is limited to staff who need it, protected by two-factor authentication, and every administrative action is recorded in a tamper-evident log.
- All traffic is encrypted in transit (HTTPS).
5. How long we keep it
We keep your data for as long as your account is open and afterwards for as long as needed to meet legal, accounting and anti-money-laundering requirements (generally up to seven years for transaction and identity records), to resolve disputes and to enforce our Terms. Data we no longer need is deleted or anonymised.
6. Your rights
Under the PDPA you may ask to access or correct the personal data we hold about you, limit how we process it, or withdraw consent where processing is based on consent. Write to [email protected] from the email on your account (or message @ripvaultmy from your linked Telegram). We may need to verify your identity and may charge the fee permitted by law for access requests. Some data must be kept even after a request because the law requires it.
7. Cookies and browser storage
We use a session cookie to keep you logged in and browser storage for preferences such as light/dark theme. Our growth pages may use advertising measurement tools (for example the Meta Pixel) to see which campaigns bring visitors; you can block these with your browser settings. We do not use third-party cookies to track you across other websites.
8. Children
RIPVault is for adults 18 and over. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it and close the account.
9. Changes
We will post updates here and, for material changes, notify you in the app or by email. The effective date above shows the current version.
10. Contact
Data protection enquiries: [email protected]