RR88 Privacy Policy — Protection of Our Members' Personal Data

Welcome to the rr88 Privacy Policy page. We, rr88, are an online casino platform operating in Malaysia and are fully committed to protecting the privacy of every member who uses our services. This policy explains in detail how we manage your personal information — from initial collection through to final deletion.

This Privacy Policy applies to all users of the official RR88 website at rr88.ng, the RR88 mobile app, and all related services we offer. By registering an account or continuing to use our platform, you consent to the processing of your personal data as described in this document.

We have prepared this document in English to ensure clarity for all our members in Malaysia. Should there be any questions, our support team is available to assist you via Live Chat or email at any time.

To provide you with a secure, responsible, and high-quality service, rr88 collects several categories of personal information. Below is a detailed breakdown of the data we collect and the reasons for collecting it:

We only collect data that is genuinely necessary for the stated purposes. This "data minimization" principle is central to our privacy approach — we do not collect irrelevant information or data beyond our operational needs.

The personal data we collect is used solely for the purposes stated and confirmed by you at registration. RR88 uses your information for the following primary purposes:

• Account Management — creates, verifies, and maintains your member account securely, including the identity verification (KYC) process required by regulators.
• Transaction Processing — processes deposits, withdrawals, and all financial transactions promptly and accurately to your preferred payment method.
• Security and Fraud Prevention — continuously monitors account activity to detect suspicious patterns, unauthorized access attempts, and fraudulent activity.
• Legal Compliance — fulfils legal obligations under PDPA 2010, the Anti-Money Laundering Act 2001 (AMLA), and other relevant regulations.
• Service Communications — sends important notifications about your account, policy changes, promotions you are eligible for, and relevant platform updates.
• Responsible Gaming — monitors gaming patterns to identify signs of problem gambling and provide appropriate support when needed.
• Platform Improvements — analyses aggregate usage data (without identifying individuals) to improve the user experience and optimize platform performance.

Rr88 does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. However, there are limited situations where we may need to share your information with the following parties, solely for legitimate operational purposes:

• Payment Service Providers — the minimum data required to process your financial transactions is shared with licensed payment providers such as banks, e-wallet operators, and crypto processors. They are bound by strict confidentiality obligations.
• Game Software Providers — basic account information may be shared with third-party game providers integrated within the rr88 platform for technical purposes only.
• Legal Authorities — rr88 will disclose requested information to the relevant authorities when required by Malaysian law or a valid court order.
• Anti-Fraud Agency — in cases of confirmed fraud or money laundering activity, relevant information may be shared with the appropriate financial crime prevention agencies.
• Technical Service Providers — cloud infrastructure and cybersecurity service providers that help us operate the platform may process your data as part of their technical duties, subject to strict data processing agreements.

All third parties that receive rr88 members' personal data are required to comply with data security standards equal to or exceeding those of rr88, and are prohibited from using that data for any purpose other than what has been agreed upon.

Rr88 uses cookies and similar tracking technologies to enhance your browsing experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login, session management, and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — collects information about how you use our platform (such as most frequently visited pages) to help us improve the overall user experience.
• Functional Cookies — remembers your preferences and settings such as preferred language, currency, and display settings to provide a more personalized experience.
• Analytics Cookies — used to understand aggregate traffic patterns and user behaviour to help us make data-driven decisions about platform development.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of certain parts of our platform. For the best experience, we recommend allowing cookies while using RR88.

The security of your personal data is RR88's top priority. We continuously invest in the latest security infrastructure to ensure your information is protected against unauthorized access, data breaches, and other cyber threats.

The following are the security protection layers we have implemented:

• 256-bit SSL Encryption for all communications between your device and our servers, ensuring data in transit cannot be read by unauthorized parties.
• Two-Factor Authentication (2FA) available for all member accounts as an additional security layer during login and fund withdrawals.
• 24/7 security monitoring by a dedicated cybersecurity team that monitors our systems in real time to detect and respond to any threats promptly.
• Regular security audits by independent third parties to thoroughly assess and improve our platform's security posture.
• Role-based access control (RBAC) that ensures every rr88 staff member can only access data relevant to their specific job responsibilities.
• Encryption of data at rest for all sensitive data stored in our databases, including financial details and identity documents.

Rr88 does not retain your personal data longer than necessary for the stated purposes, or longer than required by Malaysian law. Our data retention policy is as follows:

• Active account data — retained for the duration your account remains active on the rr88 platform, plus the mandatory retention period following account closure.
• Financial transaction records — retained for a minimum of 7 years from the transaction date, as required by Malaysian financial and tax laws.
• Identity verification documents (KYC) — retained for a minimum of 5 years after account closure, in line with the requirements of the Anti-Money Laundering Act.
• Customer support communication logs — retained for 2 years for reference and service improvement purposes.
• Analytics data and cookies — session data is disposed of once the session ends; aggregate analytics data is retained for no more than 24 months.

Once the relevant retention period has expired, your data will be permanently deleted from our systems using secure deletion methods that comply with industry standards, ensuring the data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy principles, you have several important rights regarding your personal data that we hold. RR88 respects and facilitates the exercise of all the following rights:

As an online platform operating globally, some of your personal data may be processed or stored on servers located outside Malaysia. This includes transfers to our cloud infrastructure providers and international technology partners.

In every case of international data transfer, RR88 ensures that:

• Data is only transferred to countries or entities that maintain adequate data protection standards, equivalent to Malaysia's PDPA.
• Legally binding data transfer agreements are established with all international data recipients.
• End-to-end encryption is maintained when transferring data across international borders.
• Access to transferred data is restricted to authorized personnel only at the receiving location.

Rr88 continuously monitors our international data transfers to ensure ongoing compliance with applicable legal requirements. If you have concerns about the transfer of your data outside Malaysia, please contact us for more information.

Rr88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or improvements to how we operate the platform. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

When we make significant changes to this Privacy Policy, we will notify you via one or more of the following methods:

• Email notifications sent to the address registered to your account
• A clear notice displayed on the platform's home page or login page
• In-app notifications on the rr88 mobile app when you open the app

Your continued use of the rr88 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request data deletion before the effective date of those changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how RR88 handles your personal data, our team is ready to listen and assist you.

• Live Chat 24/7 — the fastest way to get an immediate response from our support team
• Email — [email protected] (response within 1–2 business days)
• Help Page — visit the FAQ us for answers to the most frequently asked questions

For formal complaints regarding personal data protection that cannot be resolved internally, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia (JPDP), which is the authority responsible for enforcing PDPA in Malaysia.