RR24 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by RR24 ("rr24", "we", "us", "the Operator") and applies to all personal data processed in connection with your use of the rr24 website located at rr24.cam and all associated services, games, features, and content (collectively, "the Platform").

rr24 is committed to protecting the privacy and personal data of all individuals who interact with the Platform, including registered players, visitors, and any individuals whose data we process in the course of providing our services. This Policy describes our data processing practices in transparent and accessible language.

By accessing the Platform, creating an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices as described herein, you should discontinue use of the Platform and contact us to close your account.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Data Controller" means rr24, the entity that determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means any third party that processes personal data on behalf of rr24 pursuant to a written data processing agreement.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed, including registered players and website visitors.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Sensitive Data" means special categories of personal data including national identity documents, financial account details, and identity verification documents.
• "Cookies" means small data files stored on a user's device that help rr24 recognise returning visitors and maintain session state.
• "KYC" means Know Your Customer — the identity verification process required for regulatory and anti-fraud compliance.

3 Personal Data We Collect

rr24 collects personal data that is necessary to provide the Platform's services, comply with legal obligations, and maintain platform integrity. We do not collect data beyond what is reasonably required for these purposes. The categories of personal data we collect include:

3.1 Registration & Identity Data

3.2 Financial & Transaction Data

3.3 Account Activity & Gaming Data

3.4 Technical & Device Data

3.5 Communications Data

Records of communications between you and the rr24 support team, including live chat transcripts, email correspondence, and formal complaints, are retained for quality assurance and dispute resolution purposes.

4 How We Collect Your Data

rr24 collects personal data through the following primary channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through browser cookies, log files, and session tracking technologies.
• Third-party sources: Identity verification data obtained from KYC service providers; fraud and sanctions screening data from compliance databases; payment confirmation data from payment processors including DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, and Boost.
• Publicly available sources: Where permitted, publicly available information may be cross-referenced to verify registration details or investigate suspected fraud.

5 Purposes of Data Processing

rr24 processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and administering your rr24 player account, including processing deposits and withdrawals.
• Identity verification (KYC): Verifying your identity and age (minimum 21 years) to comply with regulatory requirements and prevent underage gambling and fraud.
• Transaction processing: Processing payments via Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank, and managing cryptocurrency transactions.
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable regulatory obligations.
• Responsible gambling: Monitoring account activity to identify patterns that may indicate problem gambling behaviour and enabling responsible gambling tools including self-exclusion and deposit limits.
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance.
• Fraud prevention and security: Detecting and preventing unauthorised account access, fraud, collusion, bonus abuse, and other prohibited activities.
• Platform improvement: Analysing anonymised usage data to improve the Platform's performance, game offering, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and VIP programme updates — subject to your communication preferences.

6 Legal Basis for Processing

rr24 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and rr24, including account management, payment processing, and provision of gaming services.
• Legal obligation: Processing required for compliance with applicable laws, including KYC, AML, CTF, and age verification obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and internal analytics, where our legitimate interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where we have obtained your explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Third-Party Data Sharing

rr24 does not sell, rent, or trade your personal data. We share personal data with third parties only to the extent necessary to operate the Platform and meet our legal obligations. Third-party recipients of your data may include:

• Payment service providers: Malaysian e-wallet and banking partners (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank) and cryptocurrency network processors — for transaction facilitation only.
• KYC and identity verification providers: Third-party services that verify the authenticity of identity documents and conduct sanctions and politically exposed person (PEP) screenings.
• Fraud prevention and security providers: Services that assist in detecting fraudulent accounts, bonus abuse, and suspicious transaction patterns.
• Cloud infrastructure and hosting providers: Providers that host rr24's servers and databases under strict data processing agreements and security obligations.
• Legal and regulatory authorities: Where required by court order, government directive, or applicable law, personal data may be disclosed to law enforcement, financial intelligence units, or regulatory bodies without prior notice to the Data Subject.

All third-party Data Processors engaged by rr24 are required to process personal data only in accordance with rr24's instructions and applicable data protection law, and are contractually prohibited from using your data for their own commercial purposes.

8 International Data Transfers

rr24 may transfer your personal data to service providers located outside Malaysia where such transfers are necessary for the provision of Platform services. Where personal data is transferred internationally, rr24 ensures that appropriate safeguards are in place, including contractual protections equivalent to those provided under applicable data protection law.

Where practicable, rr24 prefers to engage service providers located in Malaysia or in jurisdictions with equivalent data protection standards. Players may contact us to request information about the specific safeguards applicable to cross-border transfers of their data.

9 Cookies & Tracking Technologies

rr24 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you access rr24.cam. The types of cookies we use are:

• Essential cookies: Required for the Platform to function correctly, including session management, authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Enable personalised features such as remembering your preferred language, game lobby layout, and notification settings.
• Analytics cookies: Collect anonymised data about how users navigate the Platform, which pages they visit most, and how they interact with features. This data is used exclusively for internal Platform improvement and is not shared with third-party advertisers.

rr24 does not use third-party advertising or social media tracking cookies. You may control cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in or using core Platform features.

10 Data Retention

rr24 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and legitimate operational needs. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to meet AML and regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC documents: Retained for the duration of your account plus five (5) years following account closure.
• Support communications: Retained for up to three (3) years following the resolution of the relevant matter.
• Technical and device data: Retained for up to twelve (12) months for security and fraud prevention purposes, after which it is anonymised or deleted.
• Marketing preferences: Retained until you withdraw your consent, at which point marketing communications cease immediately.

11 Your Data Protection Rights

As a Data Subject, you hold the following rights in respect of your personal data processed by rr24. These rights may be subject to limitations where overriding legal obligations apply.

To exercise any of these rights, please contact rr24 at [email protected]. We will respond to all rights requests within 30 calendar days. Where a request is particularly complex, we may extend this period by a further 30 days and will notify you accordingly.

rr24 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

12 Data Security

rr24 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• End-to-end 256-bit SSL/TLS encryption for all data transmitted to and from the Platform.
• Encrypted storage of sensitive personal and financial data on access-controlled servers.
• Role-based access controls ensuring that staff members can only access personal data necessary for their specific function.
• Regular penetration testing and vulnerability assessments by independent third-party security firms.
• Multi-factor authentication (MFA) requirements for internal systems access.
• Security awareness training for all staff who handle personal data.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rr24 will notify affected individuals without undue delay in accordance with applicable data protection law.

Players are reminded to use a strong, unique password for their rr24 account and to enable two-factor authentication (2FA) from their account security settings. rr24 support staff will never request your password via any channel.

13 Minors & Age Restriction

The rr24 Platform is strictly intended for use by individuals aged 21 years and above. rr24 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the account registration and KYC process.

If rr24 discovers or reasonably suspects that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all data will be quarantined, and the matter will be investigated in accordance with our safeguarding procedures. Verified underage accounts will be permanently closed and personal data will be deleted as soon as legally permissible.

14 Amendments to This Policy

rr24 may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. The date of the most recent revision is indicated at the top of this document.

Where changes are material — for example, where we introduce a new purpose for processing or share data with a new category of recipient — rr24 will provide advance notice to registered players via the Platform or by email. Your continued use of the Platform following any such notice constitutes acceptance of the revised Policy.

We recommend reviewing this Policy periodically to stay informed of how rr24 protects your personal data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the rr24 Data Protection team through any of the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 through the rr24 Platform interface
• Subject Line: Please use "Privacy Request" or "Data Rights Request" for faster routing
• Response Time: All privacy-related requests acknowledged within 48 hours; substantive responses within 30 calendar days

For responsible gambling concerns, account self-exclusion, or deposit limit requests, please also refer to our Responsible Gambling page or contact support directly with the subject "Responsible Gambling Request".

This Privacy Policy was last reviewed and updated on 1 January 2026. rr24 reserves the right to update this Policy at any time in accordance with Section 14. 🔞 For players aged 21 and above only.