Rdr1 Privacy Policy – Personal Data Protection for Malaysian Casino Players

1Introduction – rdr1's Privacy Commitment

Rdr1 ("we", "our platform") is an online casino platform operating for users in Malaysia. We take the privacy and security of every member's personal information extremely seriously. This Privacy Policy is provided to offer full transparency about our data handling practices.

As a platform operating in Malaysia, rdr1 is subject to the Personal Data Protection Act 2010 (PDPA) and is fully committed to complying with all provisions of that legislation. We believe trust is the foundation of our relationship with every member — and that trust begins with transparency about how we handle your information.

This Privacy Policy explains the types of data we collect, why we need it, who can access it, how long we retain it, and your rights in relation to that data. If you have any questions after reading this document, rdr1's Bahasa Malaysia-speaking support team is available to assist you at any time.

2Types of Personal Data Collected by rdr1

Rdr1 collects various types of personal information from our members to ensure the platform operates safely, fairly and efficiently. The following are the categories of data we collect:

A. Identity & Account Information

• Full name as shown on your Malaysian identity card (MyKad) or passport
• Date of birth (for minimum age verification — 18+)
• National identification number (MyKad) or passport number
• Registered email address
• Malaysian mobile number
• Malaysian residential address

B. Financial & Transaction Information

• Details of payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX)
• Records of all deposits and withdrawals in MYR (RM)
• Full transaction history within your rdr1 account
• Current account balance

C. Gaming Activity Data

• Game history of titles played on rdr1 (Keno, Crash X, Crystal Caverns, etc.)
• Bet values, winnings, and session records
• Responsible gambling control limits you have set
• Date, time, and duration of each gaming session

D. Technical & Device Data

• IP address and approximate geographical location
• Device type, operating system, and web browser used
• Cookie data and related tracking technologies
• Platform access and activity logs

3How rdr1 Uses Your Personal Data

Rdr1 uses members' personal data only for legitimate and necessary purposes in operating the platform. Below is our data usage table:

Rdr1 will not use your personal data for any purpose other than those listed above without first obtaining your explicit consent. Should we intend to use your data for a new purpose, you will be informed and given the opportunity to provide or withhold consent before such use begins.

4Data Sharing with Third Parties

Rdr1 does not sell, rent, or disclose members' personal information to third parties for marketing purposes. However, in the course of normal platform operations, rdr1 may share data with the following parties under limited and controlled circumstances:

• Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) require minimal transaction information to process your deposits and withdrawals in Malaysian Ringgit (MYR). All these providers are bound by strict confidentiality agreements.
• Gaming Providers: Our gaming software providers receive only the minimum technical data necessary for game operation — they do not receive your personally identifiable information.
• Identity Verification Services: For KYC (Know Your Customer) purposes, rdr1 may engage third-party verification services that hold the relevant security certifications and are bound by strict data protection agreements.
• Relevant Authorities: rdr1 will disclose member information to Malaysian authorities (e.g. police, courts, MACC) where lawfully required under Malaysian law or by court order. In such cases, rdr1 will notify the relevant member unless prohibited from doing so by law.

All third parties with whom rdr1 shares data are required to comply with data protection standards equivalent to Malaysia's PDPA and are not permitted to use that data for any purpose other than what is specified in the agreement with rdr1.

5rdr1 Data Security Measures

Rdr1 implements a range of technical and organisational security measures to protect members' personal data from unauthorised access, modification, disclosure, or destruction:

• 256-bit SSL Encryption: All communications between your browser and rdr1's servers are encrypted using 256-bit TLS/SSL protocol, making interception by unauthorised parties virtually impossible.
• Encryption of Sensitive Data in Databases: Sensitive personal information such as identification numbers and passwords is stored in encrypted or hashed form — even if the database is accessed without authorisation, the information cannot be read.
• Multi-Level Access Control: Only rdr1 staff with a legitimate business need are permitted to access member data, and all such access is logged and continuously monitored.
• Two-Factor Authentication (2FA): rdr1's internal systems containing member data are protected by two-factor authentication to prevent unauthorised access even in the event that a staff member's password is compromised.
• 24/7 Security Monitoring: rdr1's cybersecurity team monitors our systems around the clock to detect and respond to any security threats promptly.
• Regular Penetration Testing: rdr1 conducts regular penetration testing by independent security experts to identify and address system vulnerabilities before they can be exploited.

While rdr1 takes all reasonable steps to protect your data, no security system can guarantee 100% protection against all cyber threats. In the event of any security incident involving your data, rdr1 is committed to notifying you within the timeframe required by Malaysian law.

6Cookies & Tracking Technologies

The rdr1 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:

• Essential Cookies: Required for core rdr1 platform functions such as login, session security, and navigation. These cookies cannot be disabled as they are essential to the security of your account.
• Performance Cookies: Collects anonymous data on how members use the rdr1 platform — including the most visited pages, time spent, and issues encountered. This data helps us continuously improve the overall user experience.
• Functional Cookies: Saves your preferences such as language (Bahasa Melayu), your last selected bet value, and other display settings so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Helps rdr1 understand overall platform usage patterns to make better development decisions. All analytics data is aggregated and does not identify any individual.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the rdr1 platform and your gaming experience. To learn more about managing cookies on your device, refer to the help guide of your browser.

7Payment Data Security at rdr1

Rdr1 recognises that financial data is among the most sensitive information and requires the highest level of protection. Here is how we handle our members' payment data:

All financial transactions on rdr1 are processed through secure, certified payment gateways. The payment methods we support — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u and CIMB Clicks — are all licensed and regulated financial service providers in Malaysia.

Rdr1 does not store credit or debit card details directly in our systems. All payment processing takes place through the secure infrastructure of payment gateway providers that hold internationally recognised security certifications. rdr1 only receives transaction status confirmations (successful/failed) and transaction reference information — not your sensitive financial details.

Rdr1 members' funds are held in segregated accounts, separate from the company's operational funds — ensuring your money is always available and accessible for withdrawal at any time, independent of rdr1's operational financial position.

8Your Rights as an rdr1 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal information held by rdr1:

To exercise any of the above rights, please contact the rdr1 support team at [email protected] specifying the right you wish to exercise and your account details for identity verification purposes. rdr1 is committed to responding to all data rights requests within the timeframes stipulated by Malaysia's PDPA.

Please note that in certain cases, rdr1 may be required to retain some of your data even after a deletion request — particularly financial records that Malaysian law mandates be kept for a specified period. In such cases, rdr1 will inform you of the reason and the applicable retention period.

9Data Retention Period

Rdr1 retains members' personal data only for as long as necessary to fulfil the original purpose of collection or to comply with legal requirements. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for the duration of your active membership with rdr1 and until the account is officially closed.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with the requirements of the Malaysian Companies Act and applicable tax laws.
• Closed Account Data: Retained for 5 years following account closure for audit, fraud prevention, and legal compliance purposes.
• System Logs & Technical Data: Retained for 12 months for security and system debugging purposes.
• Support Communication Records: Retained for 3 years for reference and service quality assurance.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. rdr1's data deletion procedures ensure that deleted data cannot be recovered.

10Data Breach Response Procedure

Rdr1 has a comprehensive security incident response procedure to address any potential data breaches. In the event of a data breach involving our members' personal information, rdr1 is committed to:

• Identifying and containing the breach as swiftly as possible upon discovery.
• Assessing the scope and impact of the breach on affected member data.
• Directly notifying affected members within a reasonable timeframe via their registered email, detailing the type of data involved, the potential impact, and the steps taken or recommended to protect themselves.
• Reporting breaches to Malaysia's Department of Personal Data Protection (JPDP) or relevant authorities in accordance with Malaysia's PDPA requirements.
• Taking remedial and preventive measures to ensure the same incident does not recur.

If you suspect that your rdr1 account data has been compromised or accessed without authorisation, please contact the rdr1 support team at [email protected] immediately so that we can take the appropriate protective measures.

11Child Privacy & Protection of Minors

Rdr1 is deeply committed to the protection of young people. The rdr1 platform is intended exclusively for individuals aged 18 years of age and above only, and we do not knowingly collect any personal information from minors or individuals below that age.

All prospective members are required to confirm that they are at least 18 years of age upon registration. rdr1 reserves the right to request age verification documents (such as a copy of a MyKad or Malaysian passport) at any time to verify a member's age.

Should rdr1 discover that we have collected personal information from an individual under the age of 18 — whether through registration using false information or by any other means — we will immediately close the account in question and delete all information related to that individual from our systems.

12Amendments to the rdr1 Privacy Policy

Rdr1 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, relevant Malaysian legislation, or platform operations. We are committed to providing clear notice whenever material amendments are made.

For significant amendments or changes that materially affect how we use your data, rdr1 will:

• Sending a notification to your registered email address at least 14 days before the amendment takes effect.
• Displaying a clear notice on the rdr1 platform regarding upcoming changes before they take effect.
• Updating the "Last Updated" date at the top of this page to reflect the date of the latest amendment.

If you do not agree with any amendments to this Privacy Policy, you have the right to close your rdr1 account before the changes take effect. Continued use of the rdr1 platform after the effective date of any amendment will be considered your acceptance of the revised Privacy Policy.

The latest version of rdr1's Privacy Policy is always accessible on this page. We encourage you to check this page periodically, especially before using any new features on the rdr1 platform.

13Contact rdr1 – Privacy-Related Enquiries

If you have any questions, concerns, or complaints regarding the rdr1 Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Email (Privacy Enquiries): [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the rdr1 platform
• Response Time: Privacy emails are typically answered within 48 business hours

For data rights requests (access, correction, deletion), please clearly state the right you wish to exercise, your rdr1 account information (for identity verification purposes only), and a description of your request. rdr1 will not charge any fee to process a valid data rights request.

If you are dissatisfied with rdr1's response to your privacy concern, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the country's PDPA regulatory authority.

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia. It forms part of your overall agreement with rdr1, together with Terms & Conditions and Responsible Gaming Guide us.