Personal Data Protection

Rr888 Privacy Policy — Malaysia Member Personal Data Protection

Rr888 is committed to protecting the privacy and security of your personal data. This document clearly explains how we collect, use, store and safeguard your information as a member of our platform.

Updated: 1 January 2026  |  Version 3.1
256-bit SSL Encryption
Data Not Sold
Secure Servers
Privacy First
Data Access Right

How rr888 Protecting Your Data

Your privacy is not merely a legal obligation for us — it is a moral responsibility we take seriously every day.

End-to-End Data Encryption

All data transmitted between your device and rr888's servers is protected by 256-bit SSL encryption — the same highest-grade security standard used by major banking institutions in Malaysia. Your data is safe in transit and at rest.

Secure Data Storage

Your personal information is stored in high-grade data centres with strict access controls. Only authorised personnel may access user data, and every access is logged in our internal audit system for regular review.

Multi-Layer Access Control

The rr888 platform uses two-factor authentication (2FA) to protect your account from unauthorised access. Our system also monitors suspicious login patterns and will automatically lock an account if unusual activity is detected.

No Data Sharing Without Consent

Rr888 will not sell, rent or disclose your personal information to third parties for marketing purposes without first obtaining your explicit consent. Your privacy belongs to you — not to us as a business asset.

Malaysia PDPA Compliance

All data collection and processing operations at rr888 comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure every aspect of your data handling meets or exceeds the required legal standards.

Right to Review & Amend Data

You have the right to access, correct, or request deletion of your personal data that we hold at any time. Such requests will be processed within 14 business days by our customer support team.

1 Introduction

Rr888 ("we", "Platform" or "Company") takes your privacy very seriously. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you use the rr888 platform at rr888.ml, including the mobile app and all related services we provide.

By registering an account or using any rr888 services, you agree to the data collection and usage practices described in this Privacy Policy. This policy should be read together with Terms and Conditions rr888 in effect at the same time.

This Privacy Policy applies to all registered members and visitors of the rr888 platform, regardless of the device used to access it — whether via a personal computer, smartphone, or tablet.

Rr888 operates as a responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure all data processing is carried out lawfully, fairly and transparently in accordance with the applicable legal requirements in Malaysia.

2 Personal Data We Collect

Rr888 collects various types of information depending on how you interact with our platform. Below are the categories of data we collect and the purposes for collecting them:

Data Category Examples Primary Purpose
Identity Full name, date of birth, MyKad/passport number Account Verification & KYC
Relationship Email address, mobile phone number Communication & Support
Finance Bank account number, transaction records Payment Processing
Technical IP address, device type, web browser Security & improvements
Usage Game records, betting history, login activity Compliance & Analytics
Cookies Language preferences, login sessions User Experience

We only collect data that is strictly necessary for the stated purposes. rr888 does not collect special categories of sensitive data such as health information, religious beliefs, or political affiliations unless explicitly required for legal compliance.

3 How We Use Your Data

The personal data we collect is used for legitimate and transparent purposes. We will not use your data beyond the scope stated here without obtaining your consent first:

  • Account Management — Creating, managing and maintaining your account so it functions correctly and securely
  • Identity Verification (KYC) — Verifying your identity to comply with anti-money laundering (AML) requirements
  • Transaction Processing — Processing your deposits, withdrawals and all financial transactions quickly and securely
  • Customer Support — Helping you resolve any issues or enquiries related to your account and games
  • Platform Security — Detecting and preventing fraud, hacking and suspicious activity
  • Legal Compliance — Meeting obligations under PDPA, AML laws and other regulatory requirements
  • Service Communications — Sending important notifications regarding your account, transactions and policy changes
  • Platform Improvements — Analysing usage patterns to enhance your gaming experience

For marketing communications and promotional offers, we will only send you messages if you have agreed to receive them during registration or through your account settings. You may withdraw that consent at any time.

4 Data Sharing & Disclosure

Rr888 does not sell your personal data to any third party. However, in certain limited situations, we may share your information with the following parties for legitimate purposes:

  • Payment Providers — Banks, e-wallet companies and payment processors required to handle your transactions securely
  • KYC Service Providers — Third-party identity verification companies that assist us in processing your KYC documents
  • Game Providers — Third-party game providers supplying slot, live casino and sports betting content within the rr888 ecosystem
  • Cloud & IT Services — Technology infrastructure providers that help us maintain a stable and secure platform
  • Legal Authorities — Government agencies, regulatory bodies or law enforcement authorities when we are required to do so under Malaysian law

All third parties we work with are required to sign strict data protection agreements and are only permitted to process your data for the specific purposes agreed upon with rr888.

If rr888 is involved in a business restructuring, merger, or acquisition, member personal data may be transferred as part of the business assets. In such circumstances, you will be notified via email and an in-platform notice before your data is transferred and the new privacy policy takes effect.

5 Data Security

Rr888 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or unintended disclosure:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
  • Data encryption at rest using AES-256 for sensitive information
  • Two-factor authentication (2FA) available for all member accounts
  • Real-time security threat monitoring 24 hours a day
  • Regular security audits conducted by our internal security team and independent external auditors
  • Role-based access control (RBAC) for staff handling user data
  • Regular data backups and tested disaster recovery procedures

While we take all reasonable precautions, no internet security system can be guaranteed 100% secure. You are also responsible for keeping your account password confidential and not sharing your login credentials with anyone.

In the event of a data breach affecting your personal information, rr888 will notify you within 72 hours of becoming aware of it, in line with industry best practices and applicable regulatory requirements.

6 Cookies & Tracking Technologies

Rr888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

The following are the types of cookies we use:

  • Essential Cookies — Required for the platform to function properly, including maintaining your login session. These cookies cannot be disabled.
  • Performance Cookies — Helping us understand how users interact with the platform so we can improve its performance and stability.
  • Functional Cookies — Saving your preferences such as language selection and display settings to provide a more personalised experience.
  • Analytics Cookies — Collecting anonymised data on platform usage for our internal analytics purposes.

You can manage or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the rr888 platform.

7 Your Rights as a Data Subject

Under Malaysia's PDPA and rr888's internal policies, you have the following rights regarding your personal data that we hold:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data held in our records.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations to retain certain records.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.

Right to Restriction of Processing

You may request that we restrict the processing of your data under certain circumstances while an investigation or review is pending.

To exercise any of the rights above, please contact the rr888 customer support team via email or live chat. We will verify your identity before processing any data-related request to ensure the security of your information.

8 Data Retention Period

Rr888 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. The general data retention guidelines are as follows:

  • Active Account Data — Retained for the duration your account remains active and in use
  • Financial Transaction Records — Retained for a minimum of 7 years after the transaction, in line with Malaysia's tax and AML legal requirements
  • KYC Documents — Retained for a minimum of 5 years after the business relationship ends
  • Support Communication Logs — Retained for 3 years for reference and service improvement
  • Inactive Account Data — Accounts inactive for more than 3 years will be archived and data deleted after the mandatory retention period

Once the retention period has expired and there is no legal requirement to retain the data, rr888 will securely and irreversibly delete or anonymise your personal data.

9 Links to Third-Party Sites

The rr888 platform contains links to third-party websites or services such as game providers and payment partners. Please note that this Privacy Policy applies solely to the rr888 platform.

Rr888 is not responsible for the privacy practices of those third-party websites. We encourage you to read the privacy policy of every third-party website you visit before providing them with any personal information.

Third-party game providers within the rr888 ecosystem maintain their own privacy policies. While we select partners who adhere to high security standards, data processing by those providers is subject to their own policies.

10 Child Protection

The rr888 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from children or minors.

Should we discover that personal data of an individual under the age of 18 has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the relevant account.

If you believe your child has provided personal information to rr888 without your consent, please contact us immediately through our customer support channels so we can take appropriate action.

11 Amendments to the Privacy Policy

Rr888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Whenever there are significant changes, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending email notifications to all registered members at least 7 days before changes take effect
  • Displaying a clear notice on the platform during your login

Continued use of the rr888 platform after any amendment takes effect indicates that you have read and agreed to the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account before those changes come into effect.

12 Contact Us

For any enquiries, complaints or requests regarding this Privacy Policy or the handling of your personal data by rr888, please contact our Data Protection Officer (DPO) through the following channels:

All privacy-related enquiries will be responded to within 5 business days. For complaints requiring further investigation, we will provide a status update within 14 business days. You may also refer to the FAQ us for answers to frequently asked questions about privacy and account security.

Rr888 is committed to resolving all privacy-related complaints fairly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

Your Privacy is Assured. Play Responsibly at rr888

Register your rr888 account today and enjoy a safe, personalised, and trusted gaming experience. Your data is protected to the highest security standards at all times.

Bahasa Melayu