Privacy Policy rr33 – Personal Data Protection for Malaysian Members

This Privacy Policy is issued by rr33 ("we", "platform" or "rr33") and applies to all individuals who register an account, access, or use any part of the rr33 platform at rr33.express. It describes our practices regarding the collection, use, storage, protection, and disclosure of our users' personal data.

As an online betting and casino platform operating in Malaysia and serving players from across the country — from Kuala Lumpur, Penang, Johor Bahru to Kota Kinabalu and Kuching — rr33 committed to managing our members' personal data with full integrity and in accordance with industry best practices. We also strive to comply with the relevant requirements under Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an rr33 account or continuing to use our platform after a notice of amendment, you confirm that you have read and agreed to this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

Rr33 collects various categories of personal data depending on how you interact with our platform. Below is a full overview of the data we may collect:

Rr33 does not collect sensitive personal data such as health information, religious beliefs, political views, or sexual orientation. We only collect data that is strictly necessary for the legitimate and stated purposes of operating the platform.

Rr33 uses our members' personal data only for legitimate, clearly stated purposes. We do not use your data for anything beyond what is listed below without first obtaining your additional consent.

• 1Account Management: Creating and maintaining your rr33 account, verifying your identity, processing login requests, and managing your account security including OTP verification via your Malaysian phone number.
• 2Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, crediting winnings to your account, processing withdrawals, and maintaining accurate financial records in MYR (RM).
• 3Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, account abuse, or breaches of rr33's terms. This includes monitoring for unusual betting patterns.
• 4Legal Compliance: To fulfil our obligations under applicable Malaysian laws, including the PDPA 2010 and any relevant anti-money laundering requirements.
• 5Service Improvement: Analysing aggregated, anonymised usage patterns to understand how Malaysian players use rr33 — including the most popular sports such as Super League football, badminton, and MPL esports — for product improvement purposes.
• 6Service Communications: Sending important notifications related to your account, policy updates, security information, and responses to customer support queries via email or SMS.
• 7Responsible Gaming: Monitoring activity patterns to identify players who may need responsible gambling support and activating the appropriate protection tools within your rr33 account.

rr33 does not sell, rent, or trade our members' personal data to any third party for marketing or commercial purposes. This is a core principle we never compromise on.

However, there are limited circumstances in which rr33 may need to share member personal data with certain parties. All such sharing is carried out with strict controls and safeguards:

• Payment Service Providers: Malaysian payment service providers — including e-wallet processing platforms and FPX — receive only the transaction data necessary to complete your deposits and withdrawals. This data is strictly limited to what is needed to process the transaction.
• Technology Service Providers: Companies that provide the technical infrastructure for the rr33 platform — such as cloud computing, cybersecurity, and analytics services — may have limited access to data in the course of delivering their services. All such providers are bound by strict confidentiality agreements.
• Regulatory Authorities: rr33 will disclose information to Malaysian authorities when required by a valid court order, police investigation, or other applicable legal obligation. In such cases, we will endeavour to notify you to the extent permitted by law.
• Sharing with Your Consent: In other situations where rr33 wishes to share your data with another party, we will obtain your explicit consent beforehand and clearly explain the purpose and scope of that sharing.

Rr33 implements comprehensive technical and organisational security measures to protect our members' personal data from unauthorised access, loss, destruction, or misuse. Data security is not an add-on feature at rr33 — it is fundamental to the trust you place in us.

While rr33 takes all reasonable steps to protect your data, no cybersecurity system is entirely infallible. You also play an important role in safeguarding your account by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us immediately through rr33 customer support.

Rr33 uses cookies and similar tracking technologies to enhance the user experience, understand how our platform is used, and ensure the security of your login session. Cookies are small text files stored on your device when you visit the rr33 platform.

Rr33 uses several types of cookies for different purposes:

You can manage and delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect core rr33 platform functions such as the ability to log in and place bets.

As a Malaysia-based rr33 member, you have certain rights regarding the personal data we hold about you. rr33 fully respects and upholds these rights:

Rr33 retains our members' personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable laws in Malaysia.

Rr33's data retention guidelines are as follows:

• Active Account Data: For as long as your rr33 account remains active, we will retain all information associated with your account, including registration records, verified identity information, and transaction history.
• Data After Account Closure: When an rr33 account is closed, we will retain certain records for a minimum of 5 years in accordance with applicable financial record-keeping requirements in Malaysia. This includes records of deposit and withdrawal transactions in MYR.
• Technical Log Data: Technical access logs and platform activity data are typically retained for 12 months before being automatically deleted, unless required for an ongoing security investigation.
• Communication Records: Records of customer support conversations and communications with rr33 are retained for 2 years from the date of the last communication.

Once the retention period has lapsed and there is no legal requirement to continue storing the data, rr33 will securely delete or anonymise your personal data in a manner that ensures it cannot be recovered by any party.

The rr33 platform is intended for individuals aged 18 and above only. rr33 does not knowingly collect or process personal data from individuals under the age of 18. If you believe that someone under 18 has registered an rr33 account or provided us with personal data, please contact us immediately at support@rr33.express and we will take prompt action to delete that data and close the relevant account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how rr33 handles your personal data, please do not hesitate to get in touch. The rr33 team is available to assist you in Bahasa Melayu 24 hours a day, 7 days a week.

Rr33 reserves the right to update this Privacy Policy from time to time. Any amendments will be published on this page along with the latest update date. Your continued use of the rr33 platform after any amendments are published constitutes your acceptance of those changes. The effective date of the current Privacy Policy is January 2026.