Privacy Policy r24 — Your Personal Data Protection

1 Information We Collect

When you use the r24 platform, we collect several categories of information to ensure your gaming experience runs smoothly, securely, and in compliance with applicable legal requirements. This information is collected transparently and only covers data that is genuinely necessary.

Information you provide directly:

• Full name, date of birth, and identification number during the account registration process.
• Email address and mobile number for communication and account verification.
• Financial information such as bank account numbers or e-wallet details for processing deposits and withdrawals.
• Identity verification documents (such as national ID or passport) submitted during the KYC process.
• Any information you provide when interacting with our customer support team.

Automatically collected information:

• IP address, web browser type, operating system, and device information used to access the platform.
• Log data including access times and dates, pages visited, and session duration.
• General geolocation information based on your IP address.
• Data related to gaming activity, including bets, wins, losses, and transaction history.
• Cookie information and similar tracking technologies (see Section 6 for further details).

2 How We Use Your Information

The information we collect is used for clear, lawful purposes and does not exceed what is stated. The following are the primary ways r24 uses your personal data:

R24 uses your gaming activity data to monitor signs of problem gambling as part of our commitment to Responsible Gaming. This monitoring is in place to protect you, not to restrict your use of the platform.

3 Legal Basis for Data Processing

R24 processes your personal data on a solid legal basis. Every data processing activity we carry out is supported by at least one of the following grounds:

• Contract fulfilment: Processing required to fulfil the agreement between you and r24, including platform service provision, transaction processing, and account management.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) procedures and identity verification (KYC).
• Legitimate interest: Processing for platform security, fraud prevention, and service quality improvement purposes, where r24's interests do not override your fundamental rights.
• Consent: Processing for direct marketing, promotional notifications, and other preferred communications for which you have given specific consent. You may withdraw this consent at any time.

4 Information Sharing with Third Parties

R24 respects your privacy and does not sell your personal data to any party. However, in the course of operating a secure and compliant platform, there are certain situations where we may need to share your information with the following parties:

• Payment service providers: To securely process your deposits and withdrawals. All payment providers working with r24 are bound by strict data protection agreements.
• Identity verification service providers: Third parties that assist r24 in carrying out KYC procedures and document verification securely and accurately.
• Gaming platform providers: Game developers providing game content on the r24 platform may receive non-personally identifiable statistical game data.
• Authorities and regulatory bodies: r24 will disclose information when required by law, court order, or direction from a legitimate authority.
• Anti-fraud partners: To detect and prevent fraud, money laundering, and other illegal activities that could harm platform users.

5 Data Security & Protection

R24 continuously invests in high-grade cybersecurity infrastructure to ensure your personal data is always protected against threats. Our security approach is comprehensive and encompasses multiple layers of protection:

• Encryption of data in transit: All communications between your browser and r24's servers are secured using TLS 1.3 protocol with 256-bit SSL encryption, making transmitted data unreadable to any unauthorised party.
• Encryption of stored data: Sensitive data, including financial information and identity verification documents, is stored in encrypted form within protected databases.
• Tiered access control: Only r24 staff who have been granted specific authorisation and need to access data to carry out their official duties are permitted to do so.
• Real-time security monitoring: Our automated monitoring system detects and alerts on any suspicious activity or intrusion attempts at all times.
• Regular security audits: r24 conducts regular security assessments and penetration testing with the assistance of independent security experts.
• Incident response plan: r24 has clear procedures in place to handle any data security breach, including notifying affected users within the required timeframe.

While r24 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. We encourage you to also take security precautions on your end, such as using a strong and unique password and enabling two-factor authentication (2FA).

6 Cookies and Tracking Technologies

R24 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure proper functionality, and understand how users interact with our services.

Types of cookies we use:

• Essential cookies: These cookies are required for the platform's core functions, such as maintaining your login session and ensuring security features work correctly. They cannot be disabled.
• Performance cookies: Helps us understand how users engage with the platform — which pages are visited most, time spent, and any errors encountered — so we can improve overall performance.
• Functional cookies: Storing your preferences such as language selection and display settings to streamline your experience on future visits.
• Analytics cookies: Used to collect aggregated data on platform usage for the purpose of product and service improvement. This data is processed anonymously.

7 Data Retention Period

R24 retains your personal data for as long as your account is active or as needed to provide services to you. Retention periods are also determined by applicable legal and regulatory requirements.

• Active account data: Retained for the lifetime of your account and for the period prescribed by law after the account is closed.
• Financial transaction records: Retained for a minimum of 7 years in accordance with financial regulatory requirements and anti-money laundering obligations.
• KYC documents: Retained for the duration of the active account and for a minimum of 5 years after account closure for legal compliance purposes.
• Customer support communication logs: Retained for 3 years for reference purposes and to resolve any disputes that may arise.
• Analytics cookie data: Typically no longer than 13 months from the date of collection.

Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity.

8 Your Rights as a User

As an r24 user, you have strong rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the r24 customer support team via the live chat available 24/7 within the platform. We will process your request within a reasonable timeframe not exceeding 30 business days.

9 Cross-Border Data Transfer

In operating a global platform, your personal data may be transferred to and processed outside Malaysia, particularly by service providers located in other countries. r24 ensures that any such data transfers are carried out with adequate safeguards in place.

The steps we take to protect your data during cross-border transfers include:

• Only transferring data to countries or organisations that maintain equivalent or higher data protection standards.
• Using standard data transfer agreements that bind all data recipients to strict protection obligations.
• Conducting impact assessments prior to any new data transfer involving third countries.

10 Children's Privacy

The r24 platform is strictly for individuals aged 18 and above. r24 does not intentionally collect, store, or process any personal data from individuals under the age of 18.

If we discover that we have inadvertently collected information from someone under the age of 18, we will immediately take steps to delete that information and close the account in question. If you believe a minor has registered on the r24 platform, please contact our customer support immediately.

11 Changes to the Privacy Policy

R24 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other relevant reasons. The "Last Updated" date at the top of this page will always be updated to reflect the latest version.

For changes that are material and significant, r24 will notify you through:

• A clear notice on the platform's home page or during login.
• Email to the address registered to your account.
• In-app notifications on the r24 mobile app if you are using the app.

Your continued use of the r24 platform after any changes are published will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

12 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how r24 handles your personal data, our support team is always ready to assist you.

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex cases such as data access or deletion requests, the response period may take up to 30 business days.

For more information about your rights or how we handle your data, you may also refer to our FAQ us or read our Terms and Conditions r24 platform.