Privacy Policy r24my – How We Protect Your Personal Information

R24my operates as an online entertainment platform providing sports betting, Live Casino, slots, and bingo services to users in Malaysia. In delivering these services, we need to collect and process user personal data to ensure the platform operates safely, efficiently, and in compliance with applicable legal requirements.

This Privacy Policy clearly and transparently explains:

• Types of personal data collected by r24my from users
• The purpose and legal basis for collecting and processing that data
• Parties that may receive or access your data under certain circumstances
• The length of time your data is stored in our systems
• The rights you hold regarding your personal data and how to exercise them

R24my is committed to protecting user personal data in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and international industry best practices. We do not take this responsibility lightly — it is part of our commitment to building long-term trust with every r24my user.

R24my only collects data necessary for legitimate and stated purposes. The following are the categories of data that may be collected when you use our platform:

Data collected by r24my is used solely for legitimate purposes directly related to the provision of platform services. r24my does not sell users' personal data to any party for marketing purposes.

R24my does not sell, rent, or disclose user personal data to third parties for their own marketing purposes. However, in the course of operating the platform, r24my may share necessary data with the following parties within a limited and controlled scope:

• Payment providers: Approved financial institutions and payment processors (DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost) to securely process financial transactions
• Game software providers: Casino and sports game providers integrated with the r24my platform for technical and game auditing purposes
• Security audit services: Independent audit firms that verify the fairness of gameplay and the security of r24my systems
• Legal authorities: Government agencies or authorized law enforcement bodies when r24my is required to do so by law or court order

All third parties that receive r24my user data are bound by strict confidentiality agreements and are only permitted to use that data for the purposes specified in their agreement with r24my.

R24my continuously invests in cybersecurity infrastructure to ensure user personal data is protected at all times. The key security measures we employ include:

While r24my takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. In the event of any security incident affecting your data, r24my will notify you within a reasonable timeframe in accordance with applicable legal requirements.

R24my uses cookies and similar tracking technologies to ensure the platform functions properly and delivers a personalised experience for each user. Cookies are small text files stored on your device when you visit the website or use the app.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the r24my platform.

R24my retains user personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. The following is a general guide to data retention periods:

• Active account data: Retained for as long as your account remains active with r24my
• KYC and identity verification data: Retained for a minimum of 7 years after account closure in accordance with anti-money laundering legal requirements
• Financial transaction records: Retained for 7 years for accounting and audit purposes
• Security and access logs: Retained for 90 days to 1 year depending on log type
• Customer support communication history: Retained for 3 years for reference and service improvement purposes

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any individual.

In accordance with the Malaysia Personal Data Protection Act 2010, you as a data subject have certain rights regarding your personal data held by r24my. These rights include:

To exercise any of these rights, please contact the r24my data protection team via customer support. r24my will process your request within 30 business days. Some requests may require additional identity verification before processing to ensure the security of your data.

R24my strictly does not accept or process personal data from individuals under the age of 21. This platform is not designed for use by children or minors, and r24my takes active measures to prevent registration by those who have not reached the specified age.

If r24my determines that personal data of a minor has been collected unintentionally, we will take immediate action to delete that data and close the associated account. Parents or guardians who have concerns about their child potentially using the r24my platform are advised to contact our customer support immediately.

R24my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or changes to the services we offer.

When material amendments are made, r24my will notify active users via in-account notifications or their registered email. The "Last Updated" date at the top of this document will be revised to reflect the latest amendment date.

If you have any questions, concerns, or requests regarding this Privacy Policy or how r24my handles your personal data, do not hesitate to contact us. The r24my data protection team is ready to assist you.

R24my will respond to all privacy-related enquiries within 7 working days. For more complex inquiries or requests, response times may be longer, but we will keep you updated on the progress of your request.