2rio Privacy Policy – How We Protect the Personal Data of Every Member on Malaysia's Online Casino Platform

1Information We Collect at 2rio

When you register and use the 2rio, we may collect several categories of information to enable us to provide services that are safe, fair and compliant with legal requirements. The following are the types of information we collect:

A. Information You Provide Directly

• Registration Details: Full name, date of birth, Malaysian phone number, email address and the password you created when registering your account 2rio.
• Identity Verification Information: A copy of your MyKad or passport submitted for age and identity verification purposes, particularly during your first withdrawal or when requested by the team 2rio for security purposes.
• Financial Information: Details of the payment methods you use for deposits and withdrawals – this includes your Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay account information, or your FPX banking account number at Maybank2u, CIMB Clicks, or other Malaysian local banks. 2rio does not directly store credit card numbers or full banking details – all transactions are processed through secure, certified payment gateways.
• Support Information: The content of correspondence, live chat messages and any other information you provide when contacting the support team 2rio.

B. Automatically Collected Information

• Device Log Data: Your IP address, browser type, operating system, device model, and other technical information automatically transmitted by your device when you browse or use the platform 2rio.
• Gaming Activity Data: Records of games played, session times and durations, bet amounts, wins and losses – all of which are retained for security purposes, dispute resolution, and responsible gaming monitoring.
• Cookie Data: Information stored by cookies and similar tracking technologies on your device when you use the website 2rio. Further information about cookies can be found in Section 5 of this document.

2How 2rio Uses Your Data

The personal information we collect from you is used for specific and legitimate purposes. 2rio does not use your data for any purposes beyond the scope stated in this policy without first obtaining your consent.

• Service Provision: To enable you to register, log in, make deposits and withdrawals in MYR (RM), and access all games and features available on the platform 2rio including slots, live casino and e-sports.
• Identity Verification & Security: To verify your age and identity in compliance with our 18+ policy 2rio, as well as to verify ownership of payment methods for financial transaction security purposes.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX online banking, and to process your winnings withdrawals in MYR.
• Customer Support: To address enquiries, complaints or disputes you raise with our support team 2rio available 24 hours a day in Bahasa Melayu.
• Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multiple account usage and any other form of platform abuse 2rio.
• Platform Communications: To send important notifications regarding your account, updates to our terms and conditions, promotional information (subject to your marketing communication preferences), and responsible gaming reminders.
• Platform Improvements: To analyse aggregated, anonymised usage patterns for the purpose of improving user experience, technical performance, and the platform's game library 2rio.
• Legal Compliance: To fulfil our obligations under applicable Malaysian law, including the Personal Data Protection Act 2010 and any directives issued by the relevant authorities.

3Information Sharing by 2rio

2rio does not sell, rent, or disclose your personal information to third parties for marketing purposes. However, in limited and specific circumstances, 2rio may need to share your information with certain parties as outlined below:

• Trusted Service Providers: We share only the necessary information with the third-party service providers we engage to operate 2rio – such as payment gateway providers to process your MYR transactions, cloud computing service providers that securely store our data, and game providers that supply slots and live casino on our platform. All these providers are bound by strict confidentiality agreements and may only use your data for purposes we specify.
• Legal Requirements: 2rio may be required to disclose certain information when mandated by Malaysian law, a court order or the directive of a competent authority. In such circumstances, we will disclose only the minimum information necessary.
• Fraud Prevention: In cases where we have strong grounds to believe that fraud, money laundering, or other illegal activity has occurred, 2rio reserves the right to share relevant information with the appropriate authorities or regulatory bodies.
• Business Transfer: Should 2rio involved in any merger, acquisition or asset sale, user data may be transferred to the new entity. Members will be notified in advance of any such transfer and your rights over your data will remain fully protected.

4Data Security at 2rio

The security of your personal data is the absolute top priority for the technology team at 2rio. We continuously invest in the latest security infrastructure to ensure your information is always protected against unauthorised access, alteration, disclosure, or destruction.

The key security measures we implement at 2rio including:

• 256-bit SSL Encryption: All communications between your browser or app and our servers 2rio is encrypted using SSL/TLS protocols with 256-bit encryption keys – the same security technology used by Malaysia's leading banks to protect their customers' online banking.
• Stored Data Encryption: Sensitive data stored in the 2rio – including passwords (stored as irreversible one-way hashes), payment information, and identity verification documents – are encrypted using the highest industry-standard encryption protocols.
• Strict Access Controls: Access to members' personal data 2rio is restricted to staff who genuinely require such access to carry out their duties. All internal access is logged and continuously monitored.
• Security Imaging: Servers and infrastructure 2rio monitored 24 hours a day, 7 days a week by automated intrusion detection systems capable of identifying and blocking cyber attacks before they can successfully compromise our members' data.
• Regular Security Audits: 2rio conducts regular security audits by independent cybersecurity experts to identify and address any potential vulnerabilities in our systems.
• Two-Factor Authentication (2FA): 2rio offers 2FA to all members as an additional layer of security to protect your account from unauthorised access, even in the event your password is compromised.

However, it is important to understand that no security system can be guaranteed 100% foolproof. As such, 2rio encourages all members to take their own precautions as well, such as using a strong and unique password, not sharing your login credentials with anyone, and promptly reporting any suspicious account activity to our support team.

5Cookies & Tracking Technologies at 2rio

Platform 2rio uses cookies and similar tracking technologies to enhance your user experience, secure your login sessions, and analyse how users interact with our platform for the purposes of continuous improvement.

Types of Cookies Used by 2rio:

You can manage cookie settings through your browser preferences. However, blocking essential cookies may affect the functionality of the platform 2rio and may prevent you from logging in or accessing certain games. We recommend allowing at least the essential cookies for a seamless gaming experience at 2rio.

6Your Rights as a 2rio Member

As a user of the 2rio and individuals protected under Malaysia's Personal Data Protection Act 2010, you have important rights regarding your personal data, all of which we fully respect:

• Right of Access: You have the right to request a copy of all personal data we hold about you. This request can be submitted by email to [email protected] and will be processed within 14 business days.
• Right to Rectification: If you find that your personal information stored at 2rio is inaccurate or outdated, you have the right to request that we correct such information at no charge.
• Right to Erasure: In certain situations, you have the right to request that we delete your personal data from our systems 2rio. This request is subject to our obligation to retain certain records for legal compliance, dispute resolution or fraud prevention purposes.
• Right to Object to Processing: You have the right to object to the processing of your personal data for specific purposes, such as marketing communications. To opt out of receiving marketing communications from 2rio, you may use the unsubscribe link in any of our promotional emails or contact our support team.
• Right to Data Portability: Under certain circumstances, you have the right to receive your personal data in a portable, machine-readable format, allowing you to transfer it to another service provider should you choose to do so.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

7Data Retention & Deletion at 2rio

2rio retains your personal data only for as long as necessary to fulfil the purposes set out in this policy or as required by applicable Malaysian law.

In general, the data retention principle 2rio are as follows:

• Active Account Data: Your account information is retained for as long as your account is 2rio your account is active and for an additional period following account closure as required by applicable law.
• Financial Transaction Records: All MYR deposit and withdrawal transaction records are retained for a minimum of seven years in accordance with Malaysian financial and accounting legal requirements. These records are necessary for audit purposes, tax compliance and the resolution of any disputes that may arise.
• Identity Verification Documents: Copies of your MyKad or other identity verification documents that you submit are retained for the period prescribed by applicable anti-money laundering legal requirements.
• Gameplay Activity Logs: Game session records and betting history at 2rio retained for five years for the purposes of dispute resolution, auditing, and responsible gambling monitoring.
• Customer Support Logs: Customer support communication records are retained for three years to ensure we have sufficient context to handle any recurring enquiries.

Once the applicable retention period has expired, 2rio will securely delete or anonymise that data using industry-recognised methods to ensure it cannot be recovered or accessed by any party.

8Children's Data Protection at 2rio

Platform 2rio is strictly for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. Protecting young people from inappropriate content and activities is one of our most serious social responsibilities.

• Age Verification: 2rio implements age verification measures during the registration process and upon the first withdrawal request to ensure that only individuals aged 18 and above are able to use our platform.
• Action Upon Detection: Should 2rio finds that we have inadvertently received data from a minor, we will immediately take steps to delete that information and close the account in question without delay.
• Parental Responsibility: We encourage parents and guardians to monitor the online activities of children in their care. If you discover that your child has registered or attempted to use the 2rio, please contact us immediately at [email protected] so that the appropriate action can be taken.

92rio Privacy Policy Amendments

2rio reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, relevant legal developments in Malaysia, or changes to the services we offer our users.

When significant changes are made to this Privacy Policy, 2rio will notify you via:

• A prominent notice on the platform's homepage 2rio or when you log in for the first time after the amendments take effect
• Notification emails to the registered email address on your account 2rio yours
• Updates the "Last Updated" date displayed at the top of this page

We encourage you to review this Privacy Policy page periodically to ensure you are always up to date on how we handle your personal data. Your continued use of the 2rio following the publication of any amendments shall constitute your acceptance of the updated policy.

10Contact 2rio About Your Data Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 2rio, our Malay-speaking team is available to assist you at any time.

• Privacy Email: [email protected] (include "Data Privacy" in your email subject line)
• Live Chat: Credited directly to your account 2rio yours – click the chat icon at the bottom corner of your screen when you are logged in
• Response Time: Privacy enquiries submitted by email will be responded to within 3 business days. Enquiries via live chat are typically answered in under 5 minutes.

We value every piece of feedback and every enquiry you send us, as they help us better protect your privacy. Your trust is the most valuable asset to 2rio, and we are committed to continually earning that trust through transparent and responsible actions and practices.