Privacy Policy

This Privacy Policy ("Policy") issued by Redplay2u ("we", "us", "our", "the Company") and applies to all personal data collected from users ("you", "User "Player", "Member") through the website located at https://redplay2u.cam and all associated digital services, mobile interfaces, and features provided thereunder.

Redplay2u is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection laws and internationally recognised best practices. This Policy explains in plain terms what personal data we collect, the purposes for which it is processed, how long we retain it, who we share it with, and what rights you have regarding your data.

By registering an account on Redplay2u, making a deposit, or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to arrange account closure.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, financial information, and device identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means Redplay2u, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of Redplay2u under a contractual obligation and under our instructions.
• "KYC Data" means identity and address verification documentation collected as part of the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" means small text files placed on your device by the Platform to remember your preferences, maintain session state, and collect analytics data.
• "Sensitive Personal Data" means categories of personal data that warrant heightened protection, including government identification numbers, financial account details, and payment method information.

Redplay2u collects personal data from you in three primary ways: data you provide directly, data collected automatically when you use the Platform, and data obtained from third parties in connection with identity verification and payment processing.

3.1 Data You Provide Directly

• Full legal name and date of birth (required for account registration and age verification)
• Email address and Malaysian mobile phone number
• Preferred username and account password (stored in hashed, encrypted format)
• Malaysian payment method details — including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account information (Maybank, CIMB, Public Bank, Hong Leong, RHB), and DuitNow/FPX reference numbers
• KYC documentation: Malaysian identity card (MyKad/NRIC), Passport or Driver's Licence, proof of address (utility bill or bank statement dated within 3 months), and verification selfie
• Communication records: messages sent to our support team via live chat or email

3.2 Data Collected Automatically

• IP address, geolocation data (country and city level), and ISP information
• Device type, operating system, browser type and version
• Session timestamps, pages visited, game and betting activity logs
• Deposit and withdrawal transaction records
• Cookie and tracking technology data (see Section 7)

3.3 Data from Third Parties

• Identity verification outcomes from KYC/AML service providers
• Payment confirmation and fraud risk signals from payment gateway providers
• Geolocation and jurisdiction compliance checks from third-party IP intelligence services

We process your personal data for the following specific purposes:

Redplay2u processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing necessary to register your account, execute deposits and withdrawals, and deliver the gaming services you have requested from us.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and any regulatory reporting obligations imposed by the jurisdiction in which we are licensed.
• Legitimate Interest: Processing carried out for the purposes of fraud prevention, platform security, customer support quality, responsible gambling monitoring, and analytical improvement of the Platform — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent to send promotional emails or SMS communications about bonuses, promotions, or new features. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

Redplay2u does not sell, rent, or trade your personal data to any third party. We may share personal data in the following limited circumstances only:

• Payment Service Providers: To process deposits and withdrawals via your chosen Malaysian payment method (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong). These providers are data processors acting under contractual obligations and are prohibited from using your data for any other purpose.
• KYC / Identity Verification Providers: To verify your identity and age in compliance with applicable regulatory requirements. These providers process identification documents solely for verification purposes.
• Fraud Detection and AML Providers: To screen transactions and account activity for indicators of fraud, money laundering, or other financial crime. These providers are bound by confidentiality and data processing agreements.
• Game Software Providers: Certain game studios or content providers may receive limited gameplay data (such as session identifiers and bet amounts) for the purpose of game performance and jackpot management. No personally identifiable information beyond session tokens is shared for this purpose.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory direction, we may disclose your personal data to law enforcement authorities, courts, or regulators. We will notify you of any such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of Redplay2u's business, personal data held by the Company may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

The Redplay2u platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your browser when you visit our site.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that detect fraudulent activity. These cannot be disabled without affecting the Platform's core functionality.
• Functional Cookies: Remember your language preferences, display settings, and other personalisation choices to enhance your experience on subsequent visits.
• Analytics Cookies:

7.2 Managing Cookies

You may disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and placing bets. Most modern browsers provide cookie management settings under their Privacy or Security menus.

Redplay2u does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies from external ad networks.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active Account, and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, or longer if required by the applicable licensing authority.
• Transaction records (deposits and withdrawals): Retained for a minimum of five (5) years from the date of the transaction for AML compliance and dispute resolution purposes.
• Customer support communications: Retained for three (3) years following the closure of the support ticket, or longer if the communication relates to an unresolved dispute.
• Analytics and session data: Retained in anonymised or aggregated form indefinitely; individually identifiable session data is deleted after twenty-four (24) months.
• Marketing communications preferences: Retained until you withdraw consent or request deletion of your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

Redplay2u implements a comprehensive set of technical and organisational measures to protect personal data from unauthorised access, loss, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data fields (including passwords and payment details) at rest using industry-standard algorithms
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a demonstrated need-to-know
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists
• Comprehensive server and network security monitoring with automated threat detection and incident response protocols
• Strict data processing agreements with all third-party service providers who handle personal data on our behalf

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable data breach notification requirements.

Subject to applicable law and any overiding legal obligations on our part, you have the following rights in relation to your personal data held by Redplay2u:

To exercise any of the above rights, please contact our Data Privacy team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. For complex or high-volume requests, we may extend this period by a further 30 days with notification to you.

The Redplay2u platform is strictly intended for users aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.

All new account registrations are subject to KYC age verification. Where we have reason to believe that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account. Any funds deposited will be returned via the original payment method after deduction of any costs incurred.

If you are a parent or guardian and believe that your minor child has created an account on Redplay2u, please contact our support team immediately so that we can investigate and take appropriate action.

In order to provide the Platform, Redplay2u may transfer personal data to countries or jurisdictions outside Malaysia where our servers, data centres, or third-party service providers are located. Such countries may have data protection laws that differ from those in Malaysia.

Where personal data is transferred outside Malaysia, we ensure that adequate safeguards are in place, including:

• Contractual clauses requiring the recipient to process personal data to a standard equivalent to that required under this Policy
• Working with third-party providers who maintain appropriate certifications and security frameworks (such as ISO 27001 or SOC 2)
• Transfering only the minimum personal data necessary for the specific processing purpose

By using the Platform, you consent to any such cross-border transfers carried out in accordance with this Policy.

Redplay2u reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or operational requirements. When material changes are made, we will provide reasonable advance notice by:

• Posting a prominent notice on the Platform's homepage or login page;
• Sending an email notification to your registered email address; and/or
• Updating the "Last Updated" date displayed at the top of this Policy.

Your continued use of the Platform after any revised Privacy Policy has come into effect constitutes your acceptance of the updated terms. We recommend that you review this Policy periodically to stay informed of how we handle your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of the data rights described in Section 10, please contact our Data Privacy team through the following channels: