rr24 Privacy Policy

1. About This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by rr24 in connection with the operation of the online gaming platform accessible at rr24.org (the "Platform"). It applies to all registered users, visitors to the Platform, and any other individuals whose personal data rr24 processes in connection with the provision of its services.

This Policy should be read alongside rr24's Terms & Conditions and Responsible Gaming Policy. By registering an account on rr24 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy.

rr24 is committed to handling personal data with transparency, integrity, and in compliance with applicable international data protection standards. The Platform is primarily designed for Malaysian users, and rr24 takes its obligations under Malaysian data protection legislation seriously, including the principles set out in the Personal Data Protection Act 2010 (PDPA) where applicable.

2. Data Controller

rr24 is the data controller responsible for the personal data collected through the Platform. As data controller, rr24 determines the purposes and means by which personal data is processed. All queries regarding rr24's data practices should be directed to the rr24 support team via the 24/7 live chat service available on the Platform, or by email at:

[email protected]

(Plain text only — not a clickable link. This address is for data privacy enquiries; it does not constitute a formal legal notice address.)

3. Personal Data We Collect

3.1 Data You Provide Directly

rr24 collects personal data that you provide when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or otherwise interact with the Platform. This includes:

• Full legal name and date of birth;
• Email address and, where provided, telephone number;
• Residential address;
• Government-issued identification documents (MyKad, passport, or equivalent) submitted for KYC verification;
• Payment method details, including bank account numbers, eWallet identifiers (Touch 'n Go, Boost), and transaction references;
• Correspondence and support chat transcripts.

3.2 Data Collected Automatically

When you access the Platform, rr24 automatically collects certain technical and usage data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Pages visited, game sessions played, bet history, and session duration;
• Cookie identifiers and similar tracking technologies (see Section 9);
• Login timestamps and access logs.

3.3 Data from Third Parties

rr24 may receive personal data from third parties in certain circumstances, including from payment processors confirming transaction outcomes, from identity verification service providers during KYC processing, and from fraud prevention agencies.

4. How rr24 Uses Your Personal Data

rr24 processes personal data for the following purposes:

• Account Administration: Creating and managing your rr24 account, verifying your identity, and maintaining accurate account records;
• Payment Processing: Processing deposits and withdrawals in MYR via FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and bank transfer;
• Regulatory Compliance: Meeting obligations under international gaming licensing conditions, including anti-money laundering (AML) checks, know-your-customer (KYC) verification, and responsible gaming monitoring;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraud, cheating, unauthorised account access, and other prohibited activities;
• Customer Support: Responding to your queries, complaints, and support requests;
• Platform Improvement: Analysing usage patterns to improve the Platform's performance, game selection, and user experience;
• Marketing Communications: Sending you promotional offers, bonus notifications, and updates about rr24 products and services, where you have not opted out;
• Responsible Gaming: Monitoring for signs of problem gambling behaviour and applying protective measures where appropriate.

5. Legal Basis for Processing

rr24 processes personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between rr24 and you as a registered user, including account management and payment processing;
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations and gaming licensing requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, and business analytics where these interests are not overridden by your rights;
• Consent: Where rr24 relies on your consent, such as for marketing communications, you may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing of Personal Data

rr24 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. rr24 may share your personal data with the following categories of recipients only where necessary:

• Payment Processors: Banks, FPX gateway providers, and eWallet operators (Touch 'n Go, Boost) for the purpose of processing your financial transactions;
• KYC & Identity Verification Providers: Third-party services engaged to verify the authenticity of identification documents submitted during account registration;
• Fraud Prevention Agencies: Services used to detect and prevent fraudulent activity, money laundering, and other financial crime;
• Technology Service Providers: Hosting, infrastructure, analytics, and customer support platform providers engaged under strict data processing agreements that prohibit use of your data beyond the specified service scope;
• Regulatory Authorities: Law enforcement agencies, gaming regulators, tax authorities, and other government bodies where rr24 is legally required to disclose information;
• Business Successors: In the event of a merger, acquisition, or business restructuring, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7. International Data Transfers

As an internationally operated platform, rr24 may transfer personal data to countries outside Malaysia for processing and storage. Where such transfers occur, rr24 implements appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that afforded under applicable data protection law, including through data processing agreements with contractual clauses that mandate adequate protection standards.

8. Data Retention

rr24 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and accounting obligations. Specifically:

• Account data and transaction records are retained for a minimum of five (5) years from the date of account closure, in compliance with AML record-keeping requirements;
• KYC documentation is retained for a minimum of five (5) years from the date of submission;
• Customer support communications are retained for a period of two (2) years from the date of the interaction;
• Cookie and analytics data is retained for a maximum of thirteen (13) months from collection.

At the end of the applicable retention period, personal data is securely deleted or anonymised unless its continued retention is required by law.

9. Cookies & Tracking Technologies

rr24 uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: These are required for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit.
• Analytics Cookies: rr24 uses privacy-compliant analytics tools to understand how the Platform is used, which pages are visited most frequently, and where users encounter issues. This data is aggregated and does not identify individual users.
• Functional Cookies: These remember your preferences, such as display settings and preferred language, to personalise your experience across sessions.

You may disable non-essential cookies via your browser settings. Note that disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in and place bets.

10. Marketing Communications

With your consent, rr24 may contact you via email or in-platform notifications with promotional offers, bonus alerts, free spin announcements, and news about rr24's products and services. You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email;
• Adjusting your communication preferences in the rr24 account settings panel; or
• Contacting the rr24 support team via live chat and requesting removal from marketing lists.

Opting out of marketing communications does not affect the sending of transactional communications — rr24 will continue to send you information essential to the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

11. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by rr24:

• Right of Access: You may request a copy of the personal data rr24 holds about you;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rr24's legal retention obligations;
• Right to Restrict Processing: You may request that rr24 restrict the processing of your data in certain circumstances;
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to rr24;
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes.

To exercise any of these rights, please contact rr24 support via the 24/7 live chat service. rr24 will respond to valid requests within thirty (30) days. Identity verification may be required before rr24 fulfils any data subject request.

12. Data Security

rr24 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption of all data in transit between your browser and rr24's servers;
• Encryption of sensitive data at rest, including payment method details and identification documents;
• Role-based access controls restricting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Automatic session expiry to mitigate unauthorised access on unattended devices.

In the event of a data breach that poses a risk to your rights and freedoms, rr24 will notify affected users without undue delay in accordance with applicable legal requirements.

13. Minors and Age Verification

The rr24 Platform is strictly intended for adults aged 21 and over. 21+ rr24 does not knowingly collect personal data from individuals under the age of 21. If rr24 determines that a registered user is under the minimum age, the account will be immediately suspended and any associated personal data deleted, except where retention is required for regulatory purposes. If you believe that rr24 has inadvertently collected data relating to a minor, please contact support immediately.

14. Third-Party Links

The rr24 Platform does not contain links to third-party websites for commercial or promotional purposes. Where third-party service integrations exist (such as payment gateways), those third parties operate their own privacy policies. rr24 is not responsible for the privacy practices of third-party services and encourages you to review the applicable privacy policy of any external service you interact with in connection with transactions on rr24.

15. Changes to This Privacy Policy

rr24 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The "Last Updated" date at the top of this page will be revised accordingly. Where changes are material, rr24 will take reasonable steps to notify registered users via email or an in-platform notification.

Continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should close your account and cease using the Platform.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or rr24's handling of your personal data, please contact the rr24 Data Privacy team via:

Live Chat: Available 24/7 on rr24.org — the fastest way to reach our support team.

Email: [email protected]

(Email address displayed as plain text only. rr24 will acknowledge data subject requests received by email within 5 business days.)