Privacy Policy rr95 —
Our Commitment to Protecting Your Data

1. Introduction

This Privacy Policy describes the personal data protection practices of rr95 ("Platform", "we", "rr95") regarding information we collect from members ("you") when you use the platform, website, mobile app, and all services provided by rr95.

Rr95 operates under strict data protection principles. We are committed to keeping your privacy intact and handling your information responsibly. By registering for or using the rr95 platform, you agree to the data collection and usage practices described here.

This Privacy Policy should be read together with Terms and Conditions rr95. If there is any conflict between the two documents regarding privacy matters, this Privacy Policy shall prevail.

2. Personal Data We Collect

Rr95 collects various types of personal data depending on the nature of your interaction with our platform. The data we collect can be grouped into the following categories:

2.1 Registration & Identity Information

• Full name as per valid identification document
• Date of birth and gender
• Email address and mobile phone number
• Username and password (stored in encrypted hash format)
• Residential address or mailing address

2.2 Identity Verification Information (KYC)

• Copy of national ID, passport, or other valid identity document
• Proof of address such as a utility bill or bank statement
• Facial photo or selfie for identity verification purposes
• Employment information if required by compliance obligations

2.3 Financial & Transaction Information

• Bank account details (account number, bank name)
• E-wallet information (Touch 'n Go, Boost, and others)
• Deposit, withdrawal, and transaction history within the platform
• Source of funds for AML (Anti-Money Laundering) compliance purposes

2.4 Usage & Technical Data

• IP address and device information (device type, operating system, web browser)
• Game activity logs, including betting records and wins
• Login session data and general geographic location
• Cookie data and other tracking technologies (see Section 6)

Data Category	Primary Purpose	Required?
Registration Information	Creating and managing your account	Yes
KYC Information	Identity verification & legal compliance	Yes
Financial Information	Processing deposits & withdrawals	Yes
Usage Data	Security, analytics & platform improvement	Automatic

3. How We Use Your Data

Rr95 uses your personal data solely for legitimate purposes related to the delivery of platform services. The primary purposes for which your data is used are as follows:

• Account management: Creating, verifying, and managing your account on the rr95 platform.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Identity verification: Carrying out KYC and AML procedures as required by compliance obligations.
• Platform security: Detecting and preventing fraud, unauthorised access, and suspicious activity.
• Customer support: Enabling the rr95 support team to assist you effectively whenever you need help.
• Service improvement: Analysing usage patterns to improve the overall platform experience.
• Communication: Sending important notifications related to your account, security, promotions (with your consent), and platform updates.
• Legal compliance: Fulfilling legal obligations, regulations, and directives from the relevant authorities.

4. Legal Basis for Data Processing

Rr95 processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection regulations. These grounds are:

• Contract performance: Processing required to provide the rr95 platform services to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML and KYC requirements.
• Legitimate interest: Processing required for security purposes, fraud prevention, and service improvement.
• Permission: Processing for marketing or preferred communication purposes, based on the consent you have provided.

5. Data Sharing with Third Parties

Rr95 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are specific situations where rr95 may need to share your data with trusted parties:

• Payment providers: Transaction information is shared with the relevant payment processors and banks solely for the purpose of processing your deposits and withdrawals.
• Technology service provider: Technical partners who assist us in operating the platform, server infrastructure, and support services — bound by strict confidentiality agreements.
• Legal authority: rr95 will disclose required information to authorities if ordered by a court or competent law enforcement body.
• Identity verification provider: KYC information is shared with approved third-party identity verification service providers to ensure the accuracy and security of the KYC process.

All third parties who receive your personal data from rr95 are subject to legally binding data protection agreements and are required to safeguard your data to a standard at least equivalent to rr95's own.

6. Cookies & Tracking Technologies

Rr95 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device by your web browser when you browse the rr95 platform.

The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled.
• Preference cookies: Saving your settings and preferences such as language and display layout for a better experience.
• Analytics cookies: Helping us understand how players interact with the platform so we can make continuous improvements.
• Security cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the rr95 platform.

7. Data Security

Rr95 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, disclosure, or alteration:

• 256-bit SSL encryption: All data transmitted between your device and rr95 servers is protected with state-of-the-art 256-bit SSL encryption.
• Layered access controls: Only authorised personnel may access your personal data, and only to the extent necessary to perform their duties.
• 24/7 security monitoring: Our security systems continuously monitor for unusual activity to detect and respond to threats quickly.
• Regular security audits: rr95 conducts regular security audits to ensure data protection measures remain current and effective.
• Two-factor authentication: rr95 supports two-factor authentication (2FA) for an additional layer of protection on your account.

8. Data Retention Period

Rr95 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. General retention period guidelines are as follows:

• Active account data: Retained for the entire duration your account is active with rr95.
• Data after account closure: Certain information, particularly financial records and KYC data, is retained for a minimum of five (5) to seven (7) years after account closure in accordance with applicable AML and tax legal requirements.
• Security log: Retained for 12 months for security incident investigation purposes if required.
• Marketing data: Retained until you withdraw your consent or request deletion.

When your data is no longer needed, rr95 will securely delete it using methods that ensure it cannot be recovered.

9. Your Rights Regarding Personal Data

As an rr95 member who has entrusted us with your data, you have the following rights, which you may exercise at any time by contacting our team:

To exercise any of the above rights, please contact the rr95 privacy team via live chat or email at [email protected]. We will respond to your request within 30 business days. In complex cases, this period may be extended to 60 days with prior notice to you.

10. Cross-Border Data Transfers

In certain circumstances, your personal data may be stored or processed outside Malaysia, for example on cloud servers located in other regions. rr95 ensures that any such data transfers are carried out with adequate safeguards, including the use of approved standard contractual clauses or equivalent protection mechanisms.

Rr95 only uses cloud service and infrastructure providers that comply with internationally recognised data security standards, including ISO/IEC 27001 and SOC 2 Type II.

11. Children's Privacy

The rr95 platform is strictly for individuals aged 18 and above. rr95 does not intentionally collect or store any personal data from minors. If we discover that personal data of a minor has been collected inadvertently, we will delete it immediately and close the relevant account.

12. Amendments to the Privacy Policy

Rr95 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business circumstances. Where material amendments are made, we will notify you via an in-platform notification or your registered email at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this document will be updated whenever changes are made. Your continued use of the rr95 platform after an amendment takes effect constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns or complaints regarding how rr95 handles your personal data, or if you wish to exercise your rights as stated in Section 9, please contact us via:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the chat icon in the bottom corner of the rr95 platform

The rr95 privacy team is ready to assist you and will take every enquiry or complaint received seriously. We are committed to resolving any privacy issues fairly and transparently within a reasonable timeframe.