Rortuna's Six Core Data Protection Principles
Privacy is not merely a formality for us — it is part of how rortuna conducts business every day.
All data transmitted between your device and the rortuna servers is protected with 256-bit SSL encryption. Sensitive information such as passwords and payment details is never stored in plain text.
Rortuna has never and will never sell, rent, or trade users' personal data to any third party for marketing or commercial purposes. Your information belongs to you.
You have the right to access, correct, delete, or transfer your personal data at any time. Requests are processed within 14 business days through rortuna's customer support channels.
Rortuna's Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We operate within the relevant legal framework and continually update our practices in line with changes in the law.
User data is stored on servers protected by multi-layered access controls, industry-grade firewalls, and regular security audits. Access to personal data is granted only to staff who genuinely need it.
You may opt out of receiving marketing communications from rortuna at any time via your account settings or by contacting our support team. Your preference will take effect within 48 hours.
1. Introduction and Scope of This Privacy Policy
This Privacy Policy ("Policy") describes how rortuna.com ("rortuna", "we") collects, uses, discloses, and protects your personal information when you use our website, mobile app, or any related services we provide.
We are committed to respecting your privacy at every stage — from your first account registration to every transaction you make with rortuna. This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised privacy principles.
By registering an account or using rortuna's services, you agree to the collection and use of your information as described in this Policy. If you do not agree, please stop using our platform and contact us to close your account.
2. Types of Personal Data We Collect
Rortuna collects various types of information depending on how you interact with our platform. The table below provides a clear overview of the data categories we collect:
2.1 Data You Provide Voluntarily
Most of the data we collect is information you provide directly — such as when registering an account, completing your profile, submitting KYC documents, or communicating with our support team. You have full control over this information.
2.2 Data Collected Automatically
When you use the rortuna platform, certain information is automatically collected by our systems for security and service improvement purposes. This includes IP address, device information, session data, and usage patterns. This data is used to detect suspicious activity and protect your account.
3. How We Use Your Personal Data
Rortuna uses your personal data only for legitimate purposes that have been disclosed to you. The primary purposes of data use include:
- Account management — to create, verify, and manage your rortuna account including the KYC process required by law
- Transaction processing — to process your deposits and withdrawals securely and efficiently through your chosen payment channels
- Service delivery — to provide access to all features and games on the rortuna platform
- Security & fraud prevention — to identify and prevent fraud, money laundering, or unauthorized access to your account
- Service communications — to send important notifications related to your account, transactions, or policy changes
- Marketing (with consent) — to send promotional information, bonuses, and special offers if you have opted in to receive them
- Legal compliance — to fulfil legal obligations, court orders, or regulatory authority requirements
- Platform improvements — to analyze usage patterns and improve the overall user experience
4. Sharing Data with Third Parties
Rortuna does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in the course of platform operations, we may share certain data with the following categories of third parties:
4.1 Trusted Service Providers
We work with carefully selected third-party companies to provide specific services such as payment processing, gaming software providers, analytics platforms, and cloud computing services. All such providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.
4.2 Legal and Regulatory Requirements
Rortuna may disclose user data to law enforcement, regulatory bodies, or courts when required by Malaysian law or a valid court order. We will notify users of any such disclosure where permitted by law.
4.3 Platform and User Protection
In situations involving a serious security threat, suspected fraud, or illegal activity on the rortuna platform, we may share necessary information with relevant law enforcement agencies or cybersecurity authorities.
5. Data Security and Protection
Rortuna invests heavily in security infrastructure to keep your data safe at all times. The security measures we employ cover multiple layers of protection:
All communications between your browser or app and the rortuna servers are encrypted using the latest TLS 1.3 protocol.
Multi-layered firewall system, intrusion detection (IDS), and real-time 24/7 threat monitoring.
Only authorised staff with legitimate business needs may access users' personal data.
Internal and external security audits are conducted regularly to identify and address vulnerabilities.
While we take all reasonable steps to protect your data, no security system is entirely perfect. You also play a role in keeping your account secure — use a strong password, do not share your login credentials, and enable two-factor authentication (2FA) in your rortuna account settings.
6. Cookies and Tracking Technologies
Rortuna uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and maintain session security. Cookies are small text files stored on your device when you visit our website.
You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect certain features on the rortuna platform, such as staying logged in or saving your preferences.
7. Your Rights as a User
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles we follow, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you in a readable format.
Request that we correct any inaccurate or outdated personal data associated with your account.
Request the deletion of your personal data in certain circumstances — subject to applicable legal retention obligations.
Object to the processing of your data for direct marketing purposes at any time without providing justification.
Receive your data in a structured, machine-readable format for transfer to another service provider.
Request that we restrict the processing of your data in certain situations while a dispute or review is ongoing.
8. Data Retention Period
Rortuna retains your personal data for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable law. General data retention period guidelines are as follows:
- Active account data — retained for the duration your account is active and for 5 years after account closure for compliance purposes
- Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's tax and anti-money laundering legal requirements
- KYC records and identity documents — retained for 5 years after the business relationship ends
- Log and security data — retained for 2 years for security incident investigation purposes
- Support communication records — retained for 3 years for service quality and dispute resolution purposes
Once the retention period expires, your data will be securely deleted or anonymized in accordance with established data deletion procedures.
9. Protection of Children and Young Users
The rortuna platform is not intended for individuals under the age of 18. We do not knowingly collect or process the personal data of children or minors. Every account registration requires age verification, and we conduct KYC checks to confirm user identity.
If you are a parent or guardian who becomes aware that your minor child has registered an account on rortuna, please contact us immediately. We will take prompt action to close the account and delete all associated data at no charge or penalty.
10. Changes to This Privacy Policy
Rortuna reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable law, or new technological developments. When significant changes are made, we will:
- Publishing the updated version on rortuna.com with the new effective date clearly stated
- Sending notifications to registered users via email or in-platform alerts at least 14 days before changes take effect
- Seeking renewed consent in situations where changes involve new processing purposes that require user consent
Continued use of the rortuna platform after a Privacy Policy update takes effect will be considered acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account before the effective date by contacting our team.
11. Contact rortuna's Privacy Officer
If you have any questions, concerns, or complaints regarding how rortuna handles your personal data, you may reach our Data Privacy Officer through the following channels:
Join Rortuna with Complete Confidence
Your data is protected with the highest level of encryption and we never sell your information. Register a rortuna account today and enjoy a safe, responsible betting experience.