SECURE RS20 uses 256-bit SSL encryption to protect all personal data of Malaysian players PRIVACY RS20 never sells or shares your data with third parties without your consent TRUSTED Over 500,000 Malaysian players trust RS20 to keep their information safe FAST RS20 winnings withdrawals are processed securely in under 5 minutes BONUS Register with RS20 today and enjoy a welcome bonus of up to RM500 for new members RS20 Malaysia's online casino platform that puts your data security first, every time SECURE RS20 uses 256-bit SSL encryption to protect all personal data of Malaysian players PRIVACY RS20 never sells or shares your data with third parties without your consent TRUSTED Over 500,000 Malaysian players trust RS20 to keep their information safe FAST RS20 winnings withdrawals are processed securely in under 5 minutes BONUS Register with RS20 today and enjoy a welcome bonus of up to RM500 for new members RS20 Malaysia's online casino platform that puts your data security first, every time
🔒 RS20 OFFICIAL PRIVACY POLICY

Privacy Policy RS20 – Our Commitment to Protecting the Personal Data of Malaysian Players

RS20 takes our responsibility to protect every member's privacy and data security seriously. This document transparently explains how we collect, use, store, and protect your personal information when you use the RS20 platform.

🛡️ The Six Core Pillars of RS20's Privacy Policy

These are the data protection principles RS20 upholds for every Malaysian member

256-Bit SSL Encryption

All data transmitted between your device and RS20's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading financial institutions such as Maybank and CIMB. This means your personal information and payment details cannot be intercepted by unauthorised parties while in transit.

No Data Sales to Third Parties

RS20 has never sold, lent, or shared members' personal information with any third party for marketing or commercial purposes without their explicit consent. Your data is not a tradeable commodity — it is a trust that RS20 holds with the utmost responsibility.

Restricted & Controlled Data Access

Only RS20 staff who require access to member data for operational purposes are permitted to view that information, and only to the extent necessary for their role. All access to the RS20 member database is logged and periodically audited to ensure no internal misuse occurs.

Your Data, Your Control

RS20 believes that you as a member have rights over your own personal data. You may request to view the data we hold, request a correction if there are any errors, request deletion of your data in certain circumstances, and withdraw your marketing consent at any time. RS20's support team will assist you in exercising these rights.

Malaysian Legal Compliance

The RS20 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and other relevant regulations. RS20 continuously monitors developments in Malaysia's data protection legal landscape and updates our policy as needed to ensure ongoing and comprehensive compliance.

Ongoing Review & Improvement

The RS20 Privacy Policy is not a static document written once and left unchanged. We review and update it regularly to reflect developments in industry practices, security technology, and legal requirements. Whenever significant changes are made, RS20 will notify members via in-platform notifications or their registered email address.

256-bit
SSL Encryption
500K+
Member Data Protected
0
Data Breaches on Record
24/7
Security Monitoring
Last Updated: 1 January 2026
RS20's Privacy Commitment to Malaysian Players

This Privacy Policy document sets out RS20's data protection practices in a clear and straightforward manner. We've written this policy in plain language because we believe every Malaysian player has the right to fully understand how their data is managed — not just sign a document they don't understand. If any section is unclear, RS20's support team is ready to help.

1. Introduction – Who Is RS20 and Why Your Privacy Matters

RS20 is an online casino platform operating for the Malaysian market, offering a wide range of entertainment games including slots such as Dragon Hatch, Caishen Wins, and Rome Golden Age, number games such as Lucky Keno, card games such as Joker Poker, and live casino games with live dealers including Live Craps and Live Big Small. We have been in operation since 2018 and have served over 500,000 members across Malaysia.

In operating the RS20 platform, we necessarily collect and process certain personal information about our members. This Privacy Policy sets out in detail what data we collect, why we need it, how we use it, who may access it, and what rights you have in relation to that data.

RS20 acts as the "data controller" for all personal information collected through our platform. This means we are fully responsible for ensuring your data is collected, used, and protected in accordance with applicable data protection laws in Malaysia, most notably the Personal Data Protection Act 2010 (PDPA).

📌 Important Note from RS20: By registering an RS20 account and using our platform, you grant RS20 consent to collect and process your personal data in the manner described in this Privacy Policy. You may withdraw this consent at any time by contacting us, though this may mean you are no longer able to use some or all of RS20's services.

2. Personal Data RS20 Collects from Members

2.1 Data You Provide Directly

When you register an RS20 account or use our services, you directly provide us with the following information:

  • Identity information: Full name as shown on MyKad, Malaysian identity card number (MyKad) or passport, date of birth, and gender.
  • Contact information: An active Malaysian mobile number, email address, and current residential address.
  • Account information: Your chosen username, password (stored as an encrypted hash — we do not store your password in plain text), and security questions if applicable.
  • Financial information: Details of the payment methods used, such as your Touch 'n Go eWallet phone number, GrabPay ID, bank account number for FPX, or other digital payment details required to process deposits and withdrawals at RS20.
  • Verification documents: A copy of your MyKad or passport, proof of address such as a Tenaga Nasional Berhad (TNB) utility bill or water bill, and a bank statement during the KYC (Know Your Customer) process.

2.2 Automatically Collected Data

When you use the RS20 platform, our systems automatically record the following technical information for operational and security purposes:

  • Device & connection data: Your device's IP address, device type (Android phone, iPhone, or computer), operating system, browser type, and screen resolution.
  • Activity data: Login dates and times, games played, session duration, total bets placed, and game outcomes.
  • Transaction data: A complete record of all deposits, withdrawals, and credit transfers in your RS20 account, including the payment method, amount, date, and status of each transaction.
  • Cookie data: Information stored via cookies and similar tracking technologies to personalise your experience and remember your preferences on the RS20 platform.
👤
Identity
Name, MyKad, date of birth, gender
📱
Contact
Phone no., email, address
💳
Finance
TnG, GrabPay, DuitNow, FPX
🎮
Gaming Activity
Game records, bets, sessions
📊
Transactions
Deposits, withdrawals, history
💻
Technical
IP, device, browser, OS

3. How RS20 Uses Your Personal Data

RS20 uses members' personal data only for legitimate and necessary purposes. The following are the primary purposes for which data is used at RS20:

  • Account management: To create and manage your RS20 account, verify your identity during login, and safeguard your account against unauthorised access.
  • Payment processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX online banking, as well as to process winnings withdrawals to your bank account or digital wallet.
  • KYC Verification: To meet anti-money laundering (AML) requirements and customer identity verification obligations as required by law. RS20 uses this data to confirm that you are a legitimate individual who meets the eligibility criteria to play on our platform.
  • Service delivery: To provide access to all RS20 games, process bets and winnings, award bonuses and promotions you are eligible for, and deliver relevant customer support.
  • Security & fraud prevention: To identify and prevent fraudulent activity, money laundering, bonus abuse, multiple account registrations, and any activity that could harm the RS20 platform or its members.
  • Service communications: To send important emails or notifications related to your account, such as deposit confirmations, withdrawal confirmations, policy updates, and critical security information.
  • Marketing (with consent): If you have consented to receive marketing communications, RS20 may send you information about promotions, new bonuses, the latest games, and exclusive offers relevant to your interests on our platform.
  • Platform improvements: To analyse how members use the RS20 platform on an aggregate and anonymised basis, for the purposes of improving the user experience, optimising platform performance, and designing better new features.

💡 RS20's Commitment: We will not use your personal data for any purpose beyond those stated above without first obtaining your specific consent. If you receive marketing communications from RS20 and no longer wish to do so, you can unsubscribe via the link included in every email or by contacting the RS20 support team.

4. Sharing Data with Third Parties

RS20 does not sell or rent your personal data to any third party. However, there are limited circumstances in which RS20 may need to share your information with certain parties:

  • Payment service providers: RS20 shares the necessary transaction information with payment providers such as Touch 'n Go, GrabPay, FPX banking institutions, DuitNow, Boost, and ShopeePay for the purpose of processing your deposits and withdrawals. Only the minimum information required for processing purposes is shared.
  • Technology service providers: RS20 uses services from selected technology providers for server hosting, cybersecurity, analytics, and operational support. All such providers are bound by strict data protection agreements with RS20 and are not permitted to use your data for any other purpose.
  • Game software providers: Game information required for technical operations may be shared with game software providers that supply game titles to RS20, strictly for technical purposes and the resolution of game disputes.
  • Legal authorities: RS20 will disclose members' personal information to the relevant authorities when required by Malaysian law, a court order, or in the course of assisting a legitimate criminal investigation. RS20 will endeavour to inform you of any such disclosure unless prohibited by law.
  • Business transfers: In the event of a merger, acquisition, or sale of RS20's assets, member data may be transferred to the new entity. RS20 will ensure that the new entity agrees to honour this Privacy Policy before any data transfer takes place, and you will be notified in advance.

5. RS20's Data Security Measures

RS20 invests heavily in security infrastructure to ensure every member's personal data is protected to the highest industry standards. The following are the security layers we have put in place:

256-bit SSL/TLS Encryption
All communications between your device and the RS20 platform are secured with 256-bit SSL/TLS encryption — making it virtually impossible for any third party to intercept your data in transit.
Secure & Encrypted Servers
RS20 member data is stored on servers housed in high-grade data centres with strict physical and digital access controls, and is encrypted at rest.
Internal Access Controls
A role-based access control (RBAC) system ensures that only RS20 staff who require access to specific data are able to view the relevant information.
24/7 Security Monitoring
RS20's automated monitoring system operates around the clock to detect any suspicious activity or unauthorised attempts to access member data.
Independent Security Audit
RS20 undergoes regular security audits conducted by independent cybersecurity firms to ensure our data protection systems consistently meet or exceed current industry standards.
Two-Factor Authentication (2FA)
RS20 offers two-factor authentication for member accounts, adding an extra layer of security that requires an OTP code via SMS in addition to the standard password.

While RS20 takes all reasonable steps to protect your data, no security system in the world is 100% impenetrable. You also play an important role in keeping your RS20 account secure — use a strong, unique password, never share your login credentials, and report to RS20 immediately if you suspect your account has been accessed without authorisation.

6. Cookies and Tracking Technologies on the RS20 Platform

The RS20 platform uses cookies and similar tracking technologies to enhance your gaming experience and ensure the platform functions correctly. Here are the types of cookies RS20 uses:

  • Essential session cookies: These cookies are essential for the basic operation of the RS20 platform. They keep you logged in during your gaming session, save your betting cart contents, and ensure security features function correctly. Disabling this type of cookie will affect the functionality of the RS20 platform.
  • Preference cookies: These cookies remember your preferences and settings on the RS20 platform — such as your preferred language, favourite games, and display settings. This allows RS20 to deliver a more personalised experience each time you log in.
  • Analytics cookies: RS20 uses analytics cookies to understand how members interact with our platform. This data is collected on an aggregate and anonymised basis, and is used to improve platform design, optimise performance, and identify areas for enhancement.
  • Security cookies: These cookies help RS20 identify and prevent fraudulent activity and unauthorised use by recording information such as login patterns and account activity that may indicate the presence of bots or malicious actors.

You can manage cookies through your internet browser settings. Most modern browsers — including Chrome, Safari, Firefox, and Edge — allow you to view, delete, and block cookies. Please note, however, that disabling certain cookies may affect the functionality of the RS20 platform and your overall gaming experience.

7. Your Rights Regarding Personal Data at RS20

As an RS20 member and as a Malaysian citizen or resident, you have certain rights regarding your personal data that RS20 is obligated to respect and fulfil:

1
Right to Access Your Data

You have the right to request a copy of the personal data RS20 holds about you. We will provide this information in a clear, easy-to-understand format within 30 days of receiving your request.

2
Right to Rectify Data

If you find that any information RS20 holds about you is inaccurate or out of date, you have the right to request a correction. We encourage you to keep your RS20 profile information up to date at all times.

3
Right to Erasure

In certain circumstances, you have the right to request that RS20 delete your personal data. This right is subject to RS20's obligation to retain certain data for legal, security, or dispute resolution purposes.

4
Right to Withdraw Consent

You may withdraw your consent for RS20 to process your data at any time, particularly for marketing purposes. Withdrawing your consent does not affect the validity of any processing that took place prior to the withdrawal.

5
Right to Object to Processing

You have the right to object to RS20 processing your data for certain purposes, in particular for direct marketing. RS20 will cease processing your data for those purposes upon receiving a valid objection from you.

6
Data Portability

In certain circumstances, you have the right to receive the personal data you have provided to RS20 in a structured, machine-readable format, for the purpose of transferring it to another service provider should you choose to do so.

To exercise any of the above rights, please contact the RS20 support team via live chat on the platform or by emailing [email protected]. RS20 will respond to your request within 14 business days and aim to resolve it within 30 days.

8. RS20 Data Retention & Deletion

RS20 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. The following are general guidelines for data retention periods at RS20:

  • Active account data: For as long as your RS20 account remains active, we retain all data necessary to manage your account and provide our services to you.
  • Financial transaction data: Transaction records — including deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay, as well as withdrawals — are retained for a minimum of 7 years in accordance with Malaysian financial and anti-money laundering legal requirements.
  • KYC verification data: Identity verification documents such as MyKad copies and proof of address are retained for the period required by law, typically 5 to 7 years following account closure.
  • Gaming activity data: Gaming records and betting history are retained for a minimum of 5 years for dispute resolution and legal compliance purposes.
  • Following account closure: When your RS20 account is closed, we will delete or anonymise personal data that is no longer required for legitimate legal or business purposes within a reasonable timeframe.

9. Changes to the RS20 Privacy Policy

RS20 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, updates to relevant Malaysian laws and regulations, or improvements in how we manage the RS20 platform. The "Last Updated" date at the top of this page will always indicate when this Privacy Policy was last reviewed.

When significant changes are made to this Privacy Policy, RS20 will endeavour to notify you via a prominent in-platform notification, an email to your registered address, or a login pop-up asking you to review and acknowledge the changes. Your continued use of the RS20 platform following the publication of any amendments constitutes your acceptance of the revised Privacy Policy.

10. Contact RS20 About Your Data Privacy

If you have any questions, concerns, or complaints regarding how RS20 handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:

RS20 Live Chat
The fastest option — available 24/7 directly within the RS20 platform. Response times are typically under 3 minutes for all enquiries, including those related to privacy.
Privacy Email
[email protected] — for data rights requests, privacy complaints, or detailed enquiries. We will respond within 14 business days.
Frequently Asked Questions
Visit the Frequently Asked Questions RS20 for quick answers to common questions about privacy and data security.

📖 Understanding the RS20 Privacy Policy – A Plain-Language Guide for Malaysian Players

We understand that privacy policy documents often read like dry academic papers — full of legal jargon and technical phrases that confuse more than they clarify. That's why RS20 wants to take a moment to walk you through the key points of our Privacy Policy in a more natural, digestible way, like a straightforward conversation between two adults.

First, let's address the most fundamental question: why does RS20 need to collect your personal data at all? The short answer is — we cannot operate without it. Think of it like opening a savings account at a bank. The bank needs to know who you are, where you live, and how to reach you. RS20 is no different. When you register and make a deposit using Touch 'n Go eWallet or GrabPay, our system needs to know who you are in order to process transactions correctly, ensure winnings are credited to the right account, and make sure our platform is not misused for illegal activity.

Another question new Malaysian players frequently ask RS20 is: "Will RS20 sell my data to other companies?" Our answer is an unequivocal no. RS20 has never sold, lent, or shared members' personal data for third-party marketing purposes. This isn't just an empty promise — it's a principle we stand by, because we believe member trust is RS20's most valuable asset, and no amount of money can replace it. The only situations in which RS20 may share your data with another party are when it is necessary to process your payment (for example, information that must be passed to the FPX Maybank2u system to facilitate your withdrawal), or when required by Malaysian law.

On the subject of technical security — we take this seriously. The 256-bit SSL encryption referenced throughout this document is not just a technical term that sounds impressive. It means that when you type your RS20 account password or enter your payment details, that data is immediately encrypted into an unreadable code before it travels across the internet. Even if someone were to intercept that data in transit, all they would find is a meaningless jumble of random characters. This is the same security standard used by Malaysia's largest banking institutions — and RS20 applies it to protect every member, whether you play with RM10 a day or thousands of ringgit a week.

One area RS20 cares deeply about is account security from the inside out. External threats are not the only concern — sometimes the risk comes from our own habits. Every year, millions of online accounts around the world are compromised not because of sophisticated hackers, but because account holders use easily guessed passwords like "123456" or "password", or share their login details with friends or family. RS20 encourages all members to use a long, complex, and unique password for your RS20 account — and not to reuse it for other accounts. If RS20 offers two-factor authentication (2FA), we strongly recommend enabling it for an extra layer of protection.

Finally, regarding your rights as an RS20 player over your personal data — this is something we want more members to be aware of. You are not merely a passive RS20 customer; you have legal rights that you can exercise. If you want to know what data RS20 holds about you, you can request it and we are obligated to provide it. If any information is inaccurate, you can ask for it to be corrected. If you decide to close your RS20 account and want your data deleted, we will do so to the extent permitted by legal requirements. RS20 takes these rights seriously, and we have a Bahasa Malaysia-speaking support team ready to help you exercise them whenever you need.

❓ Frequently Asked Questions About RS20's Privacy Policy

Straightforward answers to the most common questions about data protection and privacy at RS20 Malaysia

No, absolutely not. RS20 has never sold, lent, or shared members' personal data with any third party for marketing or commercial purposes without your explicit prior consent. Your data is shared only in very limited circumstances — with payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX to process your transactions, or with legal authorities when required under Malaysian regulations. Member trust is the foundation of RS20's business, and we will never compromise it by selling your personal data.

RS20 uses 256-bit SSL encryption to protect all payment information transmitted through our platform. This means your payment details — whether via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, or ShopeePay — are fully encrypted in transit and cannot be read by any unauthorised third party. RS20 also does not store your payment account PIN or password; we only retain the information necessary to identify your payment method for the purpose of directing winnings withdrawals to the correct account.

Yes, you have the right to request that RS20 delete your personal data in certain circumstances. However, this right is not absolute — RS20 may need to retain certain data even after your account is closed, particularly financial transaction records (required under Malaysian anti-money laundering laws for a minimum of 7 years) and KYC verification documents. To submit a data deletion request, contact the RS20 support team via live chat or email [email protected]. We will process your request and inform you of which data can be deleted and which must be retained under applicable law, within 14 business days.

Your MyKad copy and other verification documents submitted during the RS20 KYC (Know Your Customer) process are used solely to verify your identity and confirm that you are a legitimate individual who meets our platform's eligibility requirements. These documents are stored on encrypted servers and are accessible only to RS20 staff responsible for identity verification and regulatory compliance. RS20 does not use your KYC documents for any other purpose and does not share them with third parties except where required by Malaysian law. These documents are retained for the period prescribed by law (typically 5–7 years) before being securely deleted.

RS20 uses cookies for several purposes: session cookies that keep you logged in while you play, preference cookies that remember your settings, analytics cookies that help us understand how the platform is used (aggregated data with no personal information), and security cookies that help detect suspicious activity. You can disable or delete cookies through your browser settings (Chrome, Safari, Firefox, Edge). However, disabling session cookies may prevent you from logging in or using the RS20 platform properly, as these are essential for basic platform operation. We recommend only disabling non-essential cookies if you have specific privacy concerns.
🔒 YOUR DATA IS SAFE, YOUR GAME IS FUN

Play with Peace of Mind at RS20 – Your Privacy is Always Protected

Over 500,000 Malaysian players have trusted RS20 with their personal data since 2018 — and we have never let that trust down. Create a free RS20 account today, enjoy a welcome bonus of up to RM500, and play with full confidence that your privacy is always our priority.

256-bit SSL Encryption • No Data Selling • 24/7 Bahasa Malaysia Support

Bahasa Melayu