SSL 256-BIT UPDATED JAN 2026 PDPA COMPLIANT

Ruto77 Privacy Policy – How We Protect Personal Data of Malaysia Users

Ruto77 takes your data privacy seriously. This policy clearly explains what data we collect, how it is used, and your rights as the owner of that data.

Effective Date: 1 January 2026  |  Version: 2.5  |  This policy applies to all ruto77 platform users.

1Introduction – ruto77's Commitment to Your Privacy

At ruto77, we understand that your personal information is a trust you place in us. This Privacy Policy is written to ensure you fully understand how we manage that data — not merely to meet legal requirements, but because we genuinely value the trust you have given us.

This policy applies to all users who access the ruto77 website, use the ruto77 mobile app, or interact with any service offered by our platform. By registering an account or continuing to use the platform, you agree to the practices outlined in this Privacy Policy.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We also keep this policy up to date whenever there are changes in applicable practices or legal requirements.

If there are any material changes to this Privacy Policy, we will notify you via an in-platform notification or an email to the address you registered with.

2Types of Personal Data We Collect

Ruto77 only collects data that is strictly necessary to provide a quality, secure, and legally compliant service. Below are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, identification card number, date of birth KYC verification, fraud prevention
Contact Data Email address, phone number Communications, account verification
Financial Data Bank account number, bank name, transaction history Deposits, withdrawals, AML compliance
Technical Data IP address, browser type, device, OS Security, fraud detection
Usage Data Games played, session duration, wagering records Platform improvements, responsible gaming
Location Data Country, time zone (general) Regional compliance, localisation

Sensitive Data

Ruto77 does not collect sensitive data such as medical information, religious beliefs, or political views. Identity verification documents (MyKad, passport) are collected solely for KYC purposes and stored in a secure, fully encrypted environment.

ruto77 does not sell, rent, or trade your personal data to third parties for marketing purposes. This is our promise to every member.

3How We Use Your Personal Data

All data we collect is used for clear and lawful purposes. Here are the primary ways we use your personal data:

  • Service Provision: Processing account registration, deposits, withdrawals, and wagering transactions securely and accurately.
  • Identity Verification (KYC): Verifying member identities in accordance with anti-money laundering (AML) and counter-terrorism financing (CFT) legal requirements.
  • Account Security: Detecting and preventing unauthorised access, fraud, and suspicious activity on your account.
  • Communications: Sending important notifications relating to your account, transactions, platform updates, and promotional information (where you have consented to receive them).
  • Platform Improvements: Analysing aggregate usage patterns to improve the design, performance, and user experience of the ruto77 platform.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to members who may need support.
  • Legal Compliance: Fulfilling reporting obligations to relevant authorities when required by law.

Ruto77 never uses your personal data for purposes beyond those stated without first obtaining your additional consent.

4Third-Party Data Sharing & Disclosure

Ruto77 understands that your trust depends on how we handle data disclosure. We only share your personal data under the following circumstances:

Trusted Service Providers

We share necessary data with service providers who help us operate the platform — such as payment gateway providers, game providers, and customer support platforms. All these providers are bound by strict data protection agreements and are not permitted to use your data for their own purposes.

Legal Requirements

Where we are required by law, court order, or a competent authority to disclose certain information, we will do so. ruto77 will endeavour to notify you of any such disclosure where permitted by law.

Business Transfer

In the event of any acquisition, merger, or sale of company assets, user data may be transferred as part of those assets. You will be notified before your data becomes subject to a different privacy policy.

ruto77 never shares your account data, passwords, or financial information with any third party without a clear legal basis. Be cautious of emails or calls claiming to be from ruto77 that request sensitive information.

5Data Security Measures We Use

Your data security is a core technical priority at ruto77. We continually invest in security infrastructure to ensure your data remains protected at all times:

  • Data Encryption in Transit: All communication between your browser or app and the ruto77 servers is protected with TLS 1.3 encryption (SSL 256-bit). This means your data cannot be intercepted while in transit.
  • Stored Data Encryption: Sensitive data such as financial information and KYC documents are stored in fully encrypted databases.
  • Internal Access Control: Only authorised ruto77 staff with a legitimate business need may access user data. All access is logged and audited on a regular basis.
  • Two-Factor Authentication (2FA): 2FA is available and encouraged for all members to add an extra layer of protection to your ruto77 account.
  • 24/7 Threat Monitoring: ruto77's security monitoring system operates around the clock to detect and respond to any cyber threats.
  • Regular Penetration Testing: ruto77 conducts regular security testing by independent third parties to identify and patch any security vulnerabilities.
While we take all reasonable security measures, no system can be guaranteed 100% secure. We encourage you to also protect your account by using a strong password and never sharing your login credentials with anyone.

6Cookies & Tracking Technologies

The ruto77 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

Essential Cookies Functional Cookies Analytics Cookies Security Cookies
  • Essential Cookies: Required for core platform functions such as login session verification, CSRF security, and language preferences. These cookies cannot be disabled.
  • Functional Cookies: Saving your preferences such as preferred currency, language, and display settings to provide a more personalised experience on future visits.
  • Analytics Cookies: Helping us understand how users interact with the platform — which pages are visited most, session duration, and so on. This data is collected in aggregate and is not used to identify individuals.
  • Security Cookies: Used to detect suspicious activity, verify the devices used, and prevent cyberattacks such as cross-site request forgery (CSRF).

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the ruto77 platform.

7Data Retention Period

Ruto77 does not retain your personal data longer than necessary. Retention periods depend on the type of data and the applicable legal requirements:

  • Active Account Data: Retained for as long as your account is active and for 5 years after account closure, in accordance with AML/CFT legal requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia financial regulations.
  • KYC Documents: Retained for the duration of the active account period and 5 years after closure for audit and legal compliance purposes.
  • Technical & Security Logs: Retained for 90 days for security investigation purposes, unless a longer period is required for active investigations.
  • Communication Data: Support chat records are kept for 2 years for service quality reference.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

8Your Rights as a Data Owner

As a ruto77 member and owner of your personal data, you hold certain rights protected under Malaysia's data protection laws. We are committed to respecting these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request a prompt correction.

Right to Erasure

In certain circumstances, you may request that your data be deleted (subject to legal requirements).

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict how we process your data.

To exercise any of the above rights, please contact the ruto77 support team via the in-platform live chat. We will process your request within 14 business days.

9Know Your Customer (KYC) Process

The Know Your Customer (KYC) process is a mandatory requirement that ruto77 enforces to comply with Malaysia's anti-money laundering (AML) and counter-terrorism financing (CFT) laws. This is more than just a procedure — it is a critical step to protect both you and the platform from misuse.

Documents Required for KYC

  • Identity Document: A copy of your MyKad (front and back) or a valid passport.
  • Proof of Address: Bank statement or utility bill dated within the last 3 months showing your current name and address.
  • Bank Account Verification: Bank statement or screenshot showing the account holder's name and account number for withdrawal purposes.

How KYC Documents Are Protected

All documents uploaded for KYC are stored in an encrypted server environment with the highest security standards. Access to these documents is restricted to authorized personnel only, and every access is logged for audit purposes. Documents are not shared with third parties except as required by law.

The ruto77 KYC process is typically completed within 24 business hours. Your first withdrawal will be processed as soon as KYC verification is successfully completed.

10How to Contact Us About Privacy

If you have any questions, concerns, or wish to exercise any of your privacy rights, the ruto77 team is ready to help. Here's how to reach us:

Live Chat
24/7 on platform
Privacy Email

We aim to respond to all privacy-related enquiries within 3 business days. For more complex data rights requests, processing may take up to 14 business days as required by law.

If you are not satisfied with how we handle your privacy complaint, you have the right to file a complaint with Malaysia's Personal Data Protection Department (PDPD).

The Privacy Practices at ruto77 We're Proud Of

This is more than a written policy — it is a daily practice we uphold to protect every member's data.

End-to-End Encryption

Every bit of data moving between your device and the ruto77 servers is encrypted using TLS 1.3. This means that even if someone attempts to intercept it, they will only see meaningless data.

Data Minimisation Principle

Ruto77 only collects data that is strictly necessary to deliver our services. We do not collect data just to have it — every data point has a clear and lawful purpose.

Integrated & Secure KYC

The ruto77 KYC process is designed to be fast and secure. Your verification documents are stored in a fully encrypted environment and are only accessible by authorised personnel.

No Data Selling

Ruto77 never sells, rents, or trades member personal data to advertisers or third parties. Your data belongs to you — not to us as a business asset.

Clear Retention Policy

We maintain a clear data retention schedule and adhere to it strictly. Data that is no longer needed is securely deleted in accordance with established procedures.

Regular Security Audits

Ruto77's security infrastructure is regularly assessed by independent third parties. Any vulnerabilities discovered are remediated promptly before they can be exploited.

Policies & Related Information

Your data is safe with ruto77.

Create your account today and enjoy a gaming experience protected by industry-grade security — your privacy is always our priority.

Bahasa Melayu