1Introduction
Rr33 is an online gaming platform operating under a recognized license and is committed to protecting the privacy of every member who uses our services. This Privacy Policy explains in detail how rr33 collects, processes, stores, and protects your personal data when you use our website, mobile app, and all services provided under the rr33 brand.
By registering an account and using the RR33 platform, you are deemed to have read and agreed to this Privacy Policy in full. If you do not agree with any part of this policy, we recommend that you discontinue use of the platform.
This policy is formulated in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international data protection standards. We continually review and update this policy from time to time to ensure it remains relevant, accurate and compliant with the latest legislation.
This Privacy Policy applies to all RR33 members, including website visitors, registered users, and active members using any RR33 services.
2Personal Data We Collect
Rr33 collects only the personal data strictly necessary for platform operations, identity verification, payment processing, and legal compliance. The following are the categories of data we collect:
Personal Identification Data:
- Full name as stated on your official identification document (MyKad or passport)
- Date of birth and gender
- Identity Card number (MyKad) or passport number
- Active mobile phone number registered in your name
- A valid and active email address
- Current residential address
Financial Data:
- Bank account number and bank name
- Digital wallet information (such as TNG eWallet, Boost, GrabPay)
- Deposit and withdrawal transaction records
- Betting history and gaming activity
Technical & Usage Data:
- IP address and approximate location data based on IP
- Device type, operating system and browser version used
- Session logs, login and logout times, and in-platform activity
- Cookie data and Device ID
- RR33 mobile app performance data
Note: rr33 does not directly store credit card or debit card information. All card transactions are processed through third-party payment gateways that comply with PCI-DSS security standards.
The following table summarises the data categories, collection purposes and retention periods:
| Data Category |
Primary Purpose |
Retention Period |
| Identification Data |
Account registration, KYC verification |
5 years after account closure |
| Financial Data |
Transaction processing, financial audits |
7 years (legal requirement) |
| Technical Data |
Security, fraud detection |
2 years |
| Cookie Data |
User experience, analytics |
Up to 12 months |
| Communication Logs |
Customer support, complaint resolution |
3 years |
3How We Use Your Data
Rr33 uses collected personal data solely for legitimate and transparent purposes. We do not use your data for any purpose outside the scope stated below without obtaining your consent beforehand.
- Account management: Creating, managing and maintaining your member account, including the login process, identity verification and password management.
- Transaction processing: Processing deposits, withdrawals and all financial transactions securely and accurately using supported payment methods.
- Fraud detection: Monitoring account activity to detect any signs of fraud, money laundering or platform abuse.
- Legal compliance: Fulfilling KYC (Know Your Customer), AML (Anti-Money Laundering) and reporting obligations to the relevant authorities in accordance with Malaysian law.
- Service communications: Sending important notifications related to your account, transactions, security updates and changes to the terms of service.
- Marketing and promotions: Sending promotional offers, bonuses and the latest platform updates — only to members who have consented to receive marketing communications.
- Platform improvements: Analysing usage patterns on an aggregated and anonymised basis to improve user experience, platform functionality and technical performance.
- Customer support: Resolving enquiries, complaints and support requests submitted by members through rr33's official support channels.
Marketing Consent: You may opt out of receiving marketing communications at any time by contacting our support team. Unsubscribing will not affect the receipt of important communications related to your account.
4Data Sharing and Disclosure
Rr33 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited situations where rr33 may need to share your data with trusted parties for legitimate purposes:
- Payment service providers: Payment gateways such as FPX, DuitNow, and digital wallet processors need to receive the necessary transaction information to process your deposits and withdrawals.
- Identity verification service: Authorised third-party KYC providers may receive a portion of your identification information for verification purposes as required by law.
- Authorities and regulators: rr33 is required to disclose information requested by government authorities, law enforcement agencies, or tribunals with valid jurisdiction.
- Technology providers: Cloud infrastructure, cybersecurity and analytics service providers that assist in the platform's technical operations, subject to strict confidentiality agreements.
- Business transfers: In the event of a company merger, acquisition, or asset sale, member data may be transferred to the successor entity provided that the same standard of data protection is maintained.
All third parties who receive rr33 member data are bound by strict data processing agreements and are required to comply with the security and privacy standards set by rr33.
5Cookies and Tracking Technologies
Rr33 uses cookies and similar tracking technologies to enhance the user experience and understand how members interact with our platform. The following are the types of cookies used:
- Essential Cookies: These cookies are required for the platform's core functions such as login sessions, security and navigation. Without them, the platform cannot operate properly. This type of cookie cannot be disabled.
- Performance Cookies: Used to collect data on how members use the platform — pages visited, time spent, and any technical errors encountered — for the purpose of continuous improvement.
- Functional Cookies: Enabling the platform to remember your preferences such as language, display settings and login information for a more convenient experience.
- Analytics Cookies: rr33 uses analytics tools to understand usage patterns on an aggregate basis. This data is analyzed anonymously and cannot be used to identify any individual.
You may manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the RR33 platform. For mobile browsers, cookie settings can be managed through your browser or device settings menu.
6Data Security and Technical Protection
Rr33 continuously invests in high-grade security infrastructure to protect members' personal data from unauthorized access, modification, disclosure, or destruction.
- 256-bit SSL Encryption: All communications between your device and rr33 servers are encrypted using the latest TLS/SSL protocols, making data virtually impossible to intercept in transit.
- Data-at-rest encryption: Sensitive data stored in the RR33 database — including passwords and financial information — is encrypted using industry-standard encryption algorithms.
- Layered access control: Access to sensitive member data is restricted to authorized personnel only, based on the principle of least privilege.
- Continuous monitoring: Threat detection and security monitoring systems operate 24/7 to detect and respond to any suspicious activity in real time.
- Regular penetration testing: rr33 conducts regular security testing performed by independent cybersecurity experts to identify and address any system vulnerabilities.
- Two-factor authentication (2FA): Members are encouraged to enable 2FA on their accounts as an additional layer of protection against unauthorized access.
Shared Responsibility: Your account security also depends on your own actions. Make sure you use a strong password, do not share your login credentials, and promptly report any suspicious activity to the rr33 support team.
7Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant data protection laws, you have the following rights regarding your personal data held by RR33:
Right of Access
You have the right to request a copy of the personal data RR33 holds about you at any time.
Right to Rectification
If your data is inaccurate or incomplete, you have the right to request an immediate correction or update.
Right to Erasure
You may request the deletion of your personal data, subject to legal obligations and platform operations.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes or in certain other situations.
Right to Data Portability
You may request your data in a machine-readable format for transfer to another service provider.
Right to Restrict Processing
In certain situations, you may request that RR33 restrict how your data is processed while a matter is being resolved.
To submit any request regarding your personal data rights, please contact the rr33 support team via live chat on the platform. rr33 will process your request within 30 business days.
8Data Retention and Deletion
Rr33 retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Once data is no longer needed, it will be securely deleted or anonymized using approved methods.
The data retention period is determined based on the following factors:
- Minimum requirements under Malaysian law — including PDPA, AML regulations and tax reporting obligations
- Active or inactive status of member account
- The presence of any disputes, investigations or related legal proceedings
- Legitimate and justifiable business operational requirements
In general, active member account data is retained for the duration of active membership and up to 5 to 7 years after account closure, depending on the data category as detailed in the table in section 2 of this document.
9Child Protection
The rr33 platform is strictly for individuals who aged 18 and above. RR33 does not intentionally collect, process, or store personal data of individuals under the age of 18.
If rr33 discovers that personal data of a minor has been collected without the knowledge or consent of a valid guardian, the data will be deleted immediately and the associated account will be terminated. Parents or guardians who discover their child has registered an account at rr33 are urged to contact our support team immediately so prompt action can be taken.
Warning: If you become aware or suspect that someone under the age of 18 is using the rr33 platform, please report it to our support team immediately via live chat.
10Amendments to the Privacy Policy
Rr33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in business operations, legal requirements, or current industry practices. Members will be notified of any material amendments through:
- In-platform notification on rr33 upon login
- Notification email to the member's registered email address
- Update of the "Last Updated" date displayed at the top of this page
Continued use of the rr33 platform after changes to the Privacy Policy are published will be considered acceptance of the updated terms. It is the member's responsibility to review this page periodically to stay informed of rr33's latest privacy policy.
11Contact Us About Privacy
If you have any questions, concerns or complaints regarding this Privacy Policy or how rr33 handles your personal data, we encourage you to contact us directly. Our data protection team is ready to assist you.
- Live Chat: Available 24 hours a day, 7 days a week via the rr33 platform (fastest way to get an immediate response)
- Email: [email protected] (response within 1–3 business days)
- FAQ Page: Visit FAQ page us for answers to frequently asked questions
Rr33 is committed to responding to all privacy-related inquiries seriously and within a reasonable timeframe. For formal data rights requests, please clearly state the type of request you are submitting so our team can process it more efficiently.
You may also visit the
Responsible Gaming us for more information about the account management tools and self-protection features available at rr33.
Related FAQs Privacy
No. rr33 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared in the limited situations stated in this Privacy Policy, such as payment processing requirements, KYC verification, and requests from legitimate authorities.
You may submit a data deletion request by contacting the RR33 support team via live chat or email. Please include your full name and account number to facilitate the process. Note that some data may not be fully deleted if its retention is required by Malaysian law, such as financial records which must be kept for 7 years.
When your account is closed, RR33 will retain your personal data for a period determined by law — typically between 5 and 7 years depending on the type of data. After that period, data will be securely deleted or anonymized. You may still contact us for more information about data that remains on record.
Yes. rr33 does not directly store credit card or debit card information in our systems. All card transactions are processed through third-party payment gateways that comply with PCI-DSS security standards. In addition, all data communications are encrypted using 256-bit SSL, ensuring your financial information remains secure at all times.
Yes, you have the right to request access to your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). Contact the rr33 support team with a written request and we will process it within 30 business days. A copy of your data will be sent through a secure, encrypted channel.