RM88 Privacy Policy – Personal Data Protection for Malaysian Players

1 Data We Collect

When you interact with the rm88 platform – whether during account registration, making a deposit, playing games, or contacting customer support – rm88 may collect several categories of personal data. Below is a detailed breakdown of the types of data we collect and how we obtain them:

1.1 Data You Provide Directly

• Identity information – full name, MyKad or passport number, date of birth, gender and nationality. This information is required for identity verification (KYC) to ensure only players aged 18 and above may register, and to prevent fraud.
• Contact information – Malaysian phone number, email address and residential address. This data is used for account communications, OTP verification and important notices related to the rm88 platform.
• Financial information – details relating to the payment methods you use, including your Touch 'n Go eWallet account name, GrabPay, Boost, ShopeePay, DuitNow phone number, or FPX bank account details (Maybank2u, CIMB Clicks). rm88 does not store debit or credit card numbers directly – all payment processing is handled by licensed third-party payment processors.
• Verification documents – copies of your MyKad, bank statements, or proof of address that we may request during the identity verification process or prior to processing large withdrawals.

1.2 Automatically Collected Data

• Platform usage data – games you have played, session duration, bet amounts, wins and losses, transaction history, and other account activity.
• Technical data – IP address, device type (Android or iOS), phone model, operating system, browser type and version, screen resolution, and other technical information that helps rm88 optimise the platform for your device.
• Approximate location data – rm88 may determine your approximate location based on your IP address for security purposes, such as detecting login attempts from unfamiliar locations.
• Cookie & Tracking Data – information collected through cookies, web pixels and other tracking technologies, as described further in Section 5 of this document.

2 How We Use Your Data

Rm88 uses the personal data collected for legitimate purposes that are necessary to operate our online casino platform properly. We do not use your data for unrelated purposes without first obtaining your consent. Below is an explanation of how we use this data:

2.1 Account Management & Services

• Registering and maintaining your rm88 account, including processing your registration, verifying your identity, and keeping accurate account records.
• Processing deposits and withdrawals via your chosen payment method — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX.
• Allowing you to access and play all games available on the rm88 platform, including slots, live baccarat, blackjack, roulette and poker.
• Managing bonuses and promotions, including verifying eligibility requirements and preventing promotion abuse.

2.2 Security & Fraud Prevention

• Detecting and preventing fraud, money laundering, multiple account ownership, and other unlawful activity on the rm88 platform.
• Monitoring suspicious activity patterns, including login attempts from unusual locations or devices.
• Complying with legal requirements related to anti-money laundering (AML) and customer identity verification (KYC).

2.3 Platform Improvement & Communications

• Analysing usage patterns to improve the performance, design and content of the rm88 platform so it better meets the needs of Malaysian players.
• Sending important account-related communications such as transaction confirmations, security notices, and updates to rm88's terms or policies.
• With your consent, we may send you information about rm88 promotions, bonuses, and the latest offers via email or SMS. You can unsubscribe from these marketing communications at any time.
• Providing effective customer support when you reach out to the rm88 support team.

3 Data Sharing with Third Parties

Rm88 does not sell, rent or share your personal data with third parties for their own advertising or marketing purposes. However, there are limited situations where rm88 may need to share certain information with carefully selected third parties, strictly for the operational purposes of the rm88 platform:

• Payment processors – rm88 shares the necessary transaction information with licensed payment processors such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX service providers to ensure your deposits and withdrawals are processed securely and accurately.
• Game software providers – limited account information may be shared with our game providers (such as Pragmatic Play, Evolution Gaming) to enable you to access their games through the rm88 platform. These providers are bound by their own privacy policies and data security agreements.
• Technical service providers – rm88 works with carefully selected third-party service providers for server infrastructure, cybersecurity, analytics and technical support. These providers are granted access only to the data necessary to perform their services on behalf of rm88 and are strictly prohibited from using that data for any other purpose.
• Legal authorities – rm88 will disclose personal data to government authorities, law enforcement, or regulatory bodies when required by applicable Malaysian law, or when there is reasonable cause to believe that such disclosure is necessary to prevent crime or protect public safety.

In all cases of data sharing with third parties, rm88 ensures that appropriate data protection agreements are in place so that your data is handled to the same high standards of security and confidentiality that rm88 itself upholds.

4 Security & Data Storage

Rm88 continuously invests in robust security infrastructure to ensure every member's personal data is protected against both external and internal threats. Data protection is not an optional feature for rm88 – it is the foundation of trust we build with every Malaysian player who joins our platform.

4.1 Technical Security Measures

• 256-bit SSL Encryption – all communications between your browser or app and rm88's servers are encrypted using TLS 1.3 with 256-bit encryption keys. This means that even if transmitted data is intercepted, it cannot be read without the correct key.
• Stored data encryption – sensitive data stored in the rm88 database, including financial information and identity verification documents, is re-encrypted before being saved. Even if rm88 servers were accessed without authorisation, this data cannot be read without the decryption key.
• Two-factor authentication (2FA) – rm88 offers and actively encourages the use of 2FA for all member accounts. This means that even if your password is compromised, an unauthorised party still cannot log in without the OTP code sent to your phone number.
• 24/7 Security Monitoring – rm88's information security team continuously monitors platform activity to detect and respond to security threats promptly.
• Regular security testing – rm88 conducts regular penetration testing and security audits carried out by independent security experts to identify and address vulnerabilities before they can be exploited.

4.2 Data Retention Period

Rm88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Active account data is retained for as long as your account remains active with rm88.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial record-keeping.
• Log and security activity data is typically retained for 12 months for security investigation purposes.
• After an account is closed, rm88 may retain the minimum data necessary to comply with legal obligations, resolve any outstanding disputes, or prevent fraud (for example, self-exclusion records).

5 Cookies & Tracking Technologies

The rm88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain account security, and understand how players use our platform. Below is an overview of the types of cookies we use:

You can manage or delete cookies at any time through your web browser settings. Please note, however, that removing or blocking essential cookies may affect your ability to log in and use certain features of the rm88 platform properly.

6 Your Personal Data Rights

As an rm88 member who is a Malaysian citizen or resident, you have certain rights over your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles adopted by rm88. The following are your key rights:

To exercise any of the rights above, please contact the rm88 customer support team via email at support@rm88.in or via live chat, available 24/7 on the rm88 platform. rm88 will verify your identity before processing any data-related requests to ensure that only you or an authorised representative can access or modify your personal data.

7 Amendments & Contact Us

7.1 Privacy Policy Amendments

Rm88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data collection practices, current legal requirements or new technological developments. Any material changes to this Privacy Policy will be communicated to members via an in-platform notice or an email to your registered address.

The latest version of the Privacy Policy will always be published on this page along with the most recent update date. Your continued use of the rm88 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

7.2 Contact the RM88 Privacy Officer

If you have any questions, concerns, or complaints regarding how rm88 handles your personal data, or if you wish to exercise any of the privacy rights outlined in Section 6, please contact us through the following channels:

• Email: support@rm88.in – please include "Privacy Enquiry" in the subject line of your email.
• Live Chat: available 24 hours a day, 7 days a week, directly within the rm88 platform.
• Response time: rm88 aims to respond to all privacy-related enquiries within 3 business days.

Rm88 takes all privacy-related complaints seriously. If you are not satisfied with how rm88 has handled your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.