Privacy Policy

1. Who We Are

1.1 rr24 ("we", "us", "our") operates the online gaming and sports betting platform accessible at rr24.app. rr24 is the data controller responsible for the personal data of its Members and website visitors.

1.2 rr24 is designed and operated specifically for English-speaking Malaysian players. All platform communications, including this Privacy Policy, are provided in English as the primary language.

1.3 For all data protection enquiries, please contact our Data Protection contact via the support channels listed in Section 14 of this Policy.

2. Data We Collect

rr24 collects the following categories of personal data in connection with account registration and platform use:

2.1 rr24 does not collect special categories of sensitive personal data (such as health, biometric, or political data) except where strictly required for responsible gaming compliance obligations, such as self-exclusion management.

3. How We Collect Your Data

rr24 collects personal data through the following means:

• Direct provision: Data you provide when creating an account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated collection: Technical data collected automatically when you visit or use rr24.app, including via cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers; payment data from payment gateway partners including Touch n Go eWallet, Boost, and local bank FPX providers; fraud detection signals from compliance screening services.
• Platform activity: Gaming behaviour, betting patterns, and session data generated through your normal use of the Platform.

4. How We Use Your Data

rr24 processes your personal data for the following purposes:

• To create and manage your rr24 Account and verify your identity in accordance with KYC and AML obligations;
• To process deposits, withdrawals, and transaction records in MYR;
• To operate and deliver gaming and betting services on the Platform;
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct;
• To comply with applicable legal and regulatory requirements, including reporting obligations to licensing authorities;
• To provide customer support and respond to your enquiries;
• To send service-related communications including security alerts, account updates, and material policy changes;
• To enforce our Terms & Conditions and other platform policies;
• To administer responsible gaming tools including self-exclusion and deposit limits;
• To improve Platform functionality and user experience through aggregated, anonymised analytics;
• Where you have opted in: to send promotional communications about rr24 offers, new games, and events relevant to Malaysian players.

4.1 rr24 does not sell your personal data to third parties for their own marketing purposes.

5. Legal Basis for Processing

rr24 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered Member, including account management and payment processing.
• Legal obligation: Processing necessary to comply with applicable laws, including AML/CFT regulations, KYC requirements, and licensing conditions imposed by rr24's gaming authority.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where our legitimate interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting rr24 support.

6. Data Sharing and Disclosure

6.1 rr24 may share your personal data with the following categories of recipients where necessary for the purposes described in this Policy:

• KYC and identity verification providers: Third-party services used to verify your identity documents and age during account registration and ongoing compliance reviews.
• Payment processors: Including Touch n Go eWallet, Boost, Maybank, CIMB, and other FPX banking partners, for the purpose of processing your deposits and withdrawals.
• Game providers and platform infrastructure partners: Who provide the gaming software, live dealer studios, and server infrastructure underpinning rr24's services.
• Fraud and AML screening services: External compliance tools used to screen transactions and account activity against watchlists and risk models.
• Regulatory and law enforcement authorities: Where rr24 is required by law, court order, or gaming licence conditions to disclose data to competent authorities.
• Professional advisors: Including legal counsel, auditors, and accountants, subject to confidentiality obligations.

6.2 All third-party data processors engaged by rr24 are contractually required to process personal data only on rr24's documented instructions and to maintain appropriate security standards.

6.3 rr24 does not share your personal data with any third party for their own independent marketing or commercial purposes.

7. Cookies and Tracking Technologies

7.1 rr24.app uses cookies and similar tracking technologies to operate the Platform, remember your session, and improve your browsing experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game filters, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use rr24.app to help us improve platform performance and content. No personally identifiable information is stored in analytics cookies.
• Security Cookies: Assist in detecting fraudulent activity, unusual login patterns, and bot traffic.

7.2 You may manage cookie preferences through your browser settings. Note that disabling certain cookies may limit the functionality of the Platform.

7.3 rr24 does not use third-party advertising or retargeting cookies.

8. Data Retention

8.1 rr24 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC records: minimum five (5) years from account closure, or as required by applicable AML/CFT regulations;
• Transaction records: minimum five (5) years from the date of the transaction;
• Customer support communications: three (3) years from the date of the last interaction;
• Technical and session logs: twelve (12) months on a rolling basis.

8.2 Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity.

9. Data Security

9.1 rr24 implements technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit TLS encryption on all data transmitted between your device and rr24's servers;
• Encryption of sensitive data fields at rest in rr24's databases;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Multi-factor authentication required for administrative access to systems holding personal data.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights, rr24 will notify affected Members and the relevant supervisory authority in accordance with applicable notification obligations.

9.3 Members are responsible for maintaining the security of their own rr24 login credentials. rr24 strongly recommends enabling two-factor authentication, available from the account security settings panel.

10. Your Rights

Subject to applicable law and the conditions set out in rr24's licensing obligations, you have the following rights in relation to your personal data:

• Right of Access: Request a copy of the personal data rr24 holds about you.
• Right of Rectification: Request correction of inaccurate or incomplete personal data.
• Right of Erasure: Request deletion of your personal data, subject to our legal retention obligations and KYC compliance requirements.
• Right to Restrict Processing: Request that rr24 limits the processing of your data in certain circumstances.
• Right to Data Portability: Request your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: Object to processing based on legitimate interests, including profiling for responsible gaming purposes.
• Right to Withdraw Consent: Withdraw previously given consent for marketing communications at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact rr24 support via live chat or at [email protected]. rr24 will respond to verified requests within thirty (30) calendar days.

11. Children and Minors

11.1 rr24 is strictly an adult-only platform. Access is prohibited for persons under 21 years of age. rr24 does not knowingly collect or process personal data relating to individuals under the age of 21.

11.2 If rr24 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated Account closed. Any deposits made will be returned to the payment source used.

11.3 If you believe a minor has registered on rr24, please contact our support team immediately at [email protected].

12. Cross-Border Data Transfers

12.1 rr24 operates infrastructure and engages service providers that may process personal data outside of Malaysia. Where data is transferred internationally, rr24 takes steps to ensure that appropriate safeguards are in place, including data processing agreements with service providers that incorporate applicable data protection standards.

12.2 By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside of Malaysia where rr24's infrastructure partners operate.

13. Changes to This Policy

13.1 rr24 may update this Privacy Policy from time to time to reflect changes in applicable law, our data practices, or platform functionality. The "Last Updated" date at the top of this document will be revised accordingly.

13.2 Material changes to this Privacy Policy will be communicated to registered Members via email notification or a prominent notice on the Platform. Continued use of rr24 following notification of a material change constitutes acceptance of the revised Policy.

14. Contact and Complaints

14.1 For any queries, requests, or complaints regarding this Privacy Policy or rr24's data practices, please contact our support team:

• Live chat: Available 24/7 on rr24.app
• Email: [email protected]

14.2 rr24 will acknowledge all data protection queries within five (5) business days and provide a substantive response within thirty (30) calendar days of receiving a verified request.

14.3 If you are not satisfied with rr24's response, you may lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.