Protection of Your Personal Information at rr24

Introduction and Scope of This Policy

This Privacy Policy is an official document governing how rr24 handles the personal information of all users who register and use our platform. This policy applies to all parts of the rr24 platform, including the website, mobile application, online slot services, live casino, sports betting, fishing games, boxing betting and all customer support channels.

This policy is provided in Bahasa Melayu as the primary language for Malaysian players. Any changes to this policy will be communicated to users via a notice on the rr24 website. Continued use of the platform after any amendment means you accept the updated terms.

Information We Collect

rr24 collects several categories of information to allow the platform to operate securely and comply with international licensing requirements. The information collected includes:

• Account Registration Information: Full name, MyKad number or valid identification document, date of birth, mobile phone number, email address and hashed password.
• Payment Information: Bank account number for FPX transactions, mobile phone number linked to e-wallets (Touch 'n Go, Boost, ShopeePay, DuitNow), and crypto wallet addresses (USDT, BTC, ETH) for deposit and withdrawal transactions.
• Technical Information: IP address, web browser type, device operating system, screen resolution, login sessions and website navigation data.
• Platform Activity Information: Betting records, deposit and withdrawal transaction history, game preferences, active session duration and interactions with customer service.
• Identity Verification Information (KYC): A copy of MyKad or passport, and other supporting documents required to meet eligibility verification and licensing compliance requirements.

rr24 only collects information necessary for the stated purposes. We do not collect sensitive information such as medical records or religious information unless required by law.

Purposes for Using Information

The information collected is used solely for legitimate operational purposes. The main purposes for which rr24 uses data are as follows:

• Verifying user identity and processing account registration in accordance with international licensing requirements.
• Processing deposits and withdrawals via the payment methods provided, including FPX, e-wallets and crypto.
• Detecting and preventing fraud, money laundering, unauthorised access and suspicious activity.
• Providing 24/7 customer support via live chat and email in Bahasa Melayu and English.
• Sending account-related communications, terms updates, security alerts and relevant promotional information to users who have agreed to receive such communications.
• Continuously improving platform performance, user experience and system security.
• Complying with legal obligations and the requirements of international licensing bodies that govern rr24's operations.

Sharing Information with Third Parties

rr24 does not sell or disclose users' personal information to third parties for marketing or commercial purposes. However, there are certain circumstances where limited sharing is necessary:

• Payment Service Providers: Payment gateways and e-wallet providers receive the minimum transaction information required to process your deposits and withdrawals.
• Game Providers: Game software providers such as PG Soft, Pragmatic Play, JILI and Spribe receive the technical data required to run games securely and fairly.
• Licensing Bodies and Authorities: Certain information may be shared with international licensing bodies or relevant authorities when required by law or licensing regulations.
• Cybersecurity Companies: Security and anti-fraud solution providers that are bound by strict confidentiality agreements.

All third parties involved in processing rr24 user data are subject to data confidentiality agreements that require them to protect such information to a standard equivalent to this policy.

Cookies and Tracking Technologies

The rr24 platform uses cookies and similar tracking technologies to improve user experience and ensure session security. The types of cookies used include:

• Session Cookies: Required to maintain your login session and keep your account secure during active use. These cookies are automatically deleted when you log out.
• Preference Cookies: Store your language, region and display preferences so your experience at rr24 is more comfortable on future visits.
• Analytics Cookies: Collect anonymous statistical data on platform usage patterns to help us improve our services.
• Security Cookies: Identify and prevent suspicious activity such as multiple login attempts or unauthorised access.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and security of your account on the rr24 platform.

Data Security and Protection Measures

rr24 implements multiple layers of technical and organisational security to protect users' personal information from unauthorised access, loss, alteration or disclosure:

• Data encryption during transmission using TLS/SSL 256-bit protocol.
• User passwords are stored in hashed form using a strong algorithm — we do not store the original password.
• Multi-layer firewall systems and intrusion detection systems (IDS) that operate continuously.
• Regular security audits by both internal and external cybersecurity teams.
• Two-factor authentication (2FA) is available to improve the security of user accounts.
• Role-based access control (RBAC) for internal staff to ensure only authorised personnel can access user data.

While we implement high security standards, no system can be guaranteed 100% secure. We therefore encourage users to play their part in protecting their accounts by using strong passwords and not sharing login details.

Data Retention Period

rr24 retains users' personal information for as long as the account remains active or as long as it is needed to provide our services. Once an account is closed, certain information may be retained for a period required by international licensing requirements and financial audit obligations.

Financial transaction records and identity verification (KYC) data are retained for the minimum period required by the licensing authority and applicable anti-money laundering laws. Anonymous analytics data is retained for platform improvement purposes with no fixed time limit.

Users who wish to request deletion of their data may contact the rr24 support team via live chat or email. Requests will be processed subject to legal and licensing obligations that may require certain records to be kept.

International Data Transfers

As a platform operating under international licensing, rr24 user data may be stored and processed on servers located outside Malaysia. All international data transfers are carried out with adequate safeguards, including binding data processing agreements and compliance with international security standards.

rr24 ensures that all data storage locations meet data protection requirements that are equivalent to or exceed the standards set by our licensing authority, regardless of the physical location of those servers.