Privacy Policy 2002r – Our Commitment to Protecting Malaysian Players' Data & Privacy

1 Introduction — Who We Are and Why Privacy Matters

This Privacy Policy ("Policy") is published by 2002r ("Platform", "we", "us") and describes in detail how we collect, use, store, protect, and manage your personal information when you use our online casino platform at 2002r.

We understand that your trust in us depends not only on the quality of our games and the speed of our payouts, but also on your confidence that your personal information is in the right hands. That is why 2002r continuously invests in data security infrastructure and ensures that all staff involved in data processing are thoroughly trained on their privacy responsibilities.

This policy applies to all users of the platform 2002r – whether you access us via desktop, mobile browser, or the app 2002r for Android and iOS. All data processing is carried out in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing personal data protection in our country.

2 Types of Personal Data We Collect

2002r collects your personal data from a variety of sources. Below are the categories of data we collect and how they are obtained:

A. Data You Provide Directly:

• Registration Information: Full name (as per MyKad/passport), active Malaysian phone number, email address, date of birth, and account password.
• Identity Verification Documents (KYC): A valid copy of your MyKad or passport, proof of address documents (where required), and an identity verification selfie.
• Financial Information: Details of the payment methods you use — including the account holder name for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or your FPX account number (Maybank2u / CIMB Clicks). We do not store your digital wallet PIN or password.
• Communications: Live Chat conversation records, emails, and any communications you initiate with our support team.

B. Automatically Collected Data:

• Platform Usage Data: Games played (slots, live casino, EPL sports betting, Malaysia Super League, e-sports, etc.), session duration, total wagers, wins and losses.
• Technical Data: IP address, browser type, device operating system, device model, and access log data.
• Location Data: Approximate location based on IP address for jurisdiction verification and security purposes.
• Cookies & Session Data: Information collected through cookies and similar tracking technologies to enhance your user experience.

3 How 2002r Uses Your Personal Data

The personal data we collect is used exclusively for the following purposes:

We will not use your personal data for any purpose beyond those stated above without first obtaining your fresh consent. If you previously agreed to receive marketing communications from us but have since changed your mind, you may withdraw that consent at any time through your account settings or by contacting our support team.

4 Legal Basis for Data Processing

2002r processes your personal data on lawful legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). The bases we rely on are:

• Consent: For marketing and promotional communications, we process your data on the basis of the explicit consent you provided during registration. You have the right to withdraw this consent at any time.
• Contract Performance: For account management, payment processing, and the provision of gaming services — data processing is necessary to fulfil the service contract between you and 2002r.
• Legitimate Interest: For platform security, fraud prevention, product improvement, and business risk management — data processing is necessary for our legitimate interests, which do not override your fundamental rights and interests.
• Legal Obligation Compliance: For KYC/AML (Anti-Money Laundering) requirements, reporting to authorities, and fulfilment of other regulatory obligations — data processing is mandated by applicable Malaysian law.

5 Data Sharing with Third Parties

2002r does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are specific circumstances where we may need to share your data with selected third parties, solely for the purposes of operating our services:

• Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers (including Maybank2u and CIMB Clicks) are required to receive the information necessary to process your deposits and withdrawals. All of these providers are bound by strict confidentiality agreements.
• Game Providers: Game providers whose slots and live casino titles are available on 2002r may receive the minimum technical data required for game functionality. No personally identifiable information is shared unless necessary.
• KYC Service Providers: For identity verification, we use certified third-party KYC service providers who are bound by strict data processing agreements.
• Malaysian Authorities: We will disclose personal data to the Royal Malaysia Police, Bank Negara Malaysia, courts, or other regulatory authorities where required by court order or applicable law.
• Professional Advisors: Lawyers, accountants, or consultants appointed by 2002r may need to access certain data as part of their services, subject to strict professional confidentiality obligations.

6 Data Security Measures We Practise

2002r implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All communications between your device and the 2002r are secured with 256-bit TLS/SSL protocols. You can verify this by checking the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive data stored in our databases — including KYC information and financial details — is encrypted using the internationally recognised AES-256 standard.
• Role-Based Access Control: Only staff from 2002r with a legitimate operational need may access members' personal data, and only to the extent required for their specific duties.
• Two-Factor Authentication (2FA): All staff access to systems containing member data requires two-factor authentication as an additional security layer.
• Regular Security Audits: 2002r undergoes regular security audits and penetration testing conducted by independent cybersecurity firms to identify and address any potential vulnerabilities.
• 24/7 Activity Monitoring: Our automated monitoring system runs around the clock to detect suspicious access patterns and respond swiftly to potential security threats.

While we take all reasonable steps to protect your data, it is important to note that no security system is completely infallible. You also play a vital role in keeping your account safe — use a strong password, never share it with anyone, and notify us immediately if you suspect any unauthorised access to your account.

7 How Long We Retain Your Data

2002r retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law:

• Active Account Data: For as long as your account remains active at 2002r and for a minimum period of 7 years after account closure — in compliance with Malaysia's anti-money laundering legal requirements.
• Financial Transaction Records: A minimum of 7 years from the date of transaction, in accordance with Malaysian tax and financial legal requirements.
• KYC Documents: A minimum of 5 years after the business relationship ends, in accordance with Malaysia's AMLA (Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act) requirements.
• Support Communication Records: 3 years from the date of last interaction for the purposes of dispute resolution and service improvement.
• Marketing Data (with consent): Until you withdraw your consent or request deletion — whichever comes first.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. The deletion process uses recognised methods to ensure that data cannot be recovered by any party.

8 Cookies & Tracking Technologies

2002r uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as login authentication, session security, and language preferences. Without them, the platform will not function properly.
• Performance & Analytics Cookies: These cookies help us understand how players interact with the platform – which pages are visited most frequently, which games are popular, and which areas need improvement. This data is collected in aggregate and does not identify you personally.
• Functional Cookies: These cookies save your preferences — such as display language and display settings — to provide a more personalised experience when you return to the platform.
• Marketing Cookies (with consent): With your consent, these cookies help us display more relevant promotions and offers based on your activity and interests on the platform.

You can manage and delete cookies through your browser settings at any time. However, disabling essential cookies may affect platform functionality. For more information on how to manage cookies, refer to the help documentation of your web browser.

9 Your Rights as a Data Subject under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 2002r:

To submit any request relating to the rights outlined above, please contact our Data Protection Officer by email at [email protected] or via the in-platform 24/7 Live Chat. All requests will be acknowledged within 3 business days and resolved within the timeframe stipulated by Malaysia's PDPA.

10 Special Protection – Children's Data

Platform 2002r is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that we have inadvertently collected personal data from anyone under the age of 18, we will take immediate action to delete that data and close the account in question. Parents or guardians who suspect their child has registered at 2002r are urged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

11 Amendments to This Privacy Policy

2002r reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, updated legal requirements, or developments in the services we offer. All amendments will be published on this page along with the most recent update date.

For significant amendments that affect how we use your data, we will notify you via your registered email or through an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about your continued use of the platform.

Platform usage 2002r continued after the amendment's effective date will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, please stop using the platform and contact us to close your account.

12 Contact Our Data Protection Officer

2002r has appointed a Data Protection Officer who is responsible for ensuring our compliance with Malaysia's PDPA and for handling all privacy and data-related enquiries and complaints.

• Privacy Email: [email protected] – for all privacy-related enquiries and data rights requests
• General Support Email: [email protected] – for general account-related assistance
• Live Chat 24/7: In-platform – the fastest way to get immediate assistance in Bahasa Malaysia
• Frequently Asked Questions: Review FAQ page for quick answers to frequently asked questions

Every privacy enquiry will be acknowledged within 3 business days and handled professionally by our trained team. If you are not satisfied with how we have managed your privacy enquiry or complaint, you also have the right to lodge a complaint with the Department of Personal Data Protection under the Ministry of Communications Malaysia.