Ruto77 Privacy Policy — Malaysia Player Personal Data Protection

1 Introduction

Welcome to the ruto77 Privacy Policy. This document outlines our commitment to protecting your personal data and explains the privacy practices we apply across every aspect of platform operations.

Ruto77 is an online gaming platform operating under a valid licence. In delivering our services, we need to collect and process certain personal data to ensure a safe, smooth, and responsible gaming experience for every player.

This policy applies to all users who access the ruto77.pro website, the ruto77 mobile app, and all services we offer. By using our platform, you acknowledge that you have read and understood this Privacy Policy.

2 Data We Collect

Ruto77 collects your personal data through several means — directly from you during registration and platform use, automatically through tracking technologies, and in some cases from trusted third-party sources.

2.1 Data You Provide Directly

• Account registration information — full name, email address, phone number, and date of birth.
• KYC identity verification documents — copy of national ID, passport, or other relevant documents.
• Financial information — bank account number, bank name, and deposit and withdrawal transaction records.
• Communications with our support team — Live Chat conversation records, email, and Telegram.
• Feedback, surveys, and reviews you voluntarily provide.

2.2 Data Collected Automatically

• Technical data — IP address, device type, operating system, and web browser version.
• Session data — login time, session duration, pages visited, and actions taken.
• Gaming data — wagering history, game results, account balance, and usage patterns.
• Cookie data and similar tracking technologies — to enhance user experience and platform security.

3 How We Use Your Data

The personal data we collect is used for specific and legitimate purposes. ruto77 will not use your data for any other purpose without obtaining your consent first.

• Account Management — creating, verifying, and maintaining your player account.
• Transaction Processing — processing deposits, withdrawals, and all financial transactions securely.
• KYC Verification — fulfilling identity verification obligations as required by law.
• Fraud Prevention — detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Customer Support — providing technical support and resolving your complaints efficiently.
• Platform Improvements — analysing usage patterns to improve features, performance, and the user experience.
• Service Communications — sending important notifications relating to your account, transactions, and security.
• Marketing (where permitted) — sending promotional information and exclusive offers only if you have given your consent.

4 Legal Basis for Data Processing

Ruto77 only processes your personal data on valid legal bases as provided under Malaysia's Personal Data Protection Act (PDPA) 2010:

• Consent — you have given explicit consent for data processing for specific purposes such as marketing communications.
• Contract Performance — processing is required to fulfil the service contract between you and ruto77.
• Legal Obligations — processing is required to comply with legal requirements such as KYC and AML.
• Legitimate Interests — processing is required for the legitimate interests of ruto77, such as fraud prevention and platform security.

5 Data Sharing with Third Parties

Ruto77 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, we need to share data with certain partners to deliver our services:

• Payment Providers — banks, digital wallets, and payment processors used to handle your financial transactions.
• Game Providers — gaming software companies that provide game content on the ruto77 platform.
• KYC Services — third-party identity verification providers that assist us in verifying your information.
• Cloud Infrastructure — server and cloud computing service providers that store your data securely.
• Authorities — law enforcement agencies or regulatory bodies when required by law.

6 Cookies and Tracking Technologies

Ruto77 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how players use our platform.

Types of Cookies We Use

• Essential Cookies — required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance Cookies — collecting anonymous information about how you use the platform to help us improve our services.
• Functional Cookies — remembering your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Marketing Cookies — used only with your consent to display relevant promotional content.

7 Data Retention Period

Ruto77 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data — retained for as long as your account is active and for a period following account closure as required by law.
• Financial Transaction Records — retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
• KYC Documents — retained for a minimum of 5 years after the business relationship ends, in accordance with AML regulations.
• Communication Logs — customer support records are retained for 2 years for quality assurance and dispute resolution purposes.
• Marketing Data — retained until you withdraw your consent or request deletion.

When data is no longer needed, it will be securely deleted or anonymised so it can no longer be associated with you.

8 Data Security

Ruto77 invests seriously in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• End-to-end encryption for all data transmissions using SSL 256-bit and TLS 1.3.
• Role-based access control (RBAC) — only authorised staff may access personal data.
• Internal and external security audits conducted regularly by independent security firms.
• 24/7 threat monitoring using advanced intrusion detection systems (IDS).
• Mandatory data security awareness training for all ruto77 staff.
• A comprehensive incident response plan to address any data breach swiftly.

9 International Data Transfers

In some cases, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs primarily when we use cloud computing services or international technology providers.

When international data transfers occur, ruto77 ensures that protection equivalent to Malaysia's PDPA is applied through:

• Contractually binding standard data transfer agreements with service providers.
• Selection of technology partners holding internationally recognised data security certifications.
• Periodic assessments of data protection standards in recipient countries.

10 Children's Privacy

Ruto77 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

11 How to Exercise Your Rights

To exercise any of your data protection rights as outlined in this Privacy Policy, you may contact us through the following channels:

• Submit a written request to [email protected] stating the type of right you wish to exercise.
• Contact our customer support team via Live Chat on the ruto77 platform.
• Submit a request via the official ruto77 Telegram or WhatsApp.

Ruto77 will process your request within 30 working days. In complex cases, this period may be extended up to 60 days with written notice to you. We may need to verify your identity before processing certain requests to ensure the security of your data.

12 Privacy Policy Amendments

Ruto77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, industry practices, or how we handle data. Any changes will be posted on this page with a new updated date.

For significant changes that affect your rights, ruto77 will send a notification to the email address registered with your account at least 14 days before the changes take effect. Your continued use of our platform after that date will be considered your acceptance of those changes.

13 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the ruto77 platform — response time under 1 minute.
• Telegram & WhatsApp: Via the official ruto77 account — response within 5 minutes.