rm888 Privacy Policy

Introduction

This Privacy Policy sets out the framework under which rm888 ("we", "us", or "rm888") processes personal data belonging to users and registered members of the rm888 website. It applies to all information collected through account registration, login activity, deposits and withdrawals, game and betting activity, customer support interactions, promotional participation, and general use of the rm888 platform.

By registering an account, depositing funds, or otherwise using rm888, you acknowledge that you have read this Privacy Policy and understand how your personal data will be used. If you do not agree, you should not register or continue using rm888. This policy should be read alongside the rm888 Terms & Conditions and Responsible Gambling information, which together form the complete agreement between you and rm888.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings specified:

• "Personal Data" means any information that identifies or can reasonably identify an individual, directly or in combination with other data.
• "Processing" means any operation applied to personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Member" or "you" means a person who accesses or registers with rm888.
• "Account" means the personal profile created by an eligible individual on the rm888 platform.
• "Third Party" means a natural person, company, or organisation other than you or rm888 that receives or processes personal data in connection with rm888 services.
• "MYR" means Malaysian Ringgit, the currency in which rm888 transacts with Malaysian members.

Data Controller

rm888 acts as the data controller in respect of personal data collected from members through the rm888 platform. As data controller, rm888 determines the purposes and means of processing personal data, and is responsible for ensuring that processing takes place in a lawful, fair, and transparent manner.

Questions, requests, and complaints relating to personal data may be directed to rm888 using the contact details in Section 14 of this document.

Personal Data We Collect

rm888 may collect and process the following categories of personal data:

4.1 Identity and Contact Information

• Full legal name, date of birth, and gender.
• Residential address, city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam), state, and postcode.
• Email address and mobile phone number.
• Government-issued identification documents where required for identity verification.

4.2 Financial and Payment Information

• Payment method identifiers (e.g., bank account references, e-wallet identifiers) used for MYR deposits or withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong Bank.
• Transaction history including amounts, dates, methods, and status.
• Source-of-funds documentation where requested for compliance purposes.

4.3 Account and Activity Data

• Username, encrypted password, account preferences, and login history.
• Game activity, betting history, wager amounts, and session logs.
• Promotional participation, bonus use, and reward history.
• Responsible gambling settings including deposit limits, session controls, and self-exclusion records.

4.4 Technical and Device Data

• IP address, device type, operating system, browser type and version, and unique device identifiers.
• Pages accessed, session duration, clickstream data, and feature usage patterns.
• Time zone and regional settings.

4.5 Communications Data

• Customer support correspondence, live chat transcripts, and complaint records.
• Survey responses, feedback submissions, and promotional communication preferences.

How We Collect Personal Data

rm888 collects personal data through the following channels:

• Direct provision: Information you enter during registration, account updates, deposits, withdrawals, support interactions, and verification submissions.
• Automated collection: Technical and device data collected automatically when you access rm888 through cookies, server logs, and similar tracking technologies (see Section 8).
• Third-party providers: Identity verification agencies, payment processors, fraud-prevention services, and game-content providers may supply information in connection with services provided to rm888.
• Public sources: Publicly available records may be consulted where relevant to account security or compliance checks.

Purposes and Legal Bases for Processing

The table below summarises the principal purposes for which rm888 processes personal data, together with the corresponding legal basis for each purpose.

Data Sharing and Disclosure

rm888 does not sell personal data. We do not share personal data with third parties for their own marketing purposes. Personal data may be disclosed to the following categories of third party strictly where necessary for the stated purpose:

• Payment processors and financial institutions: To facilitate MYR transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or other enabled methods.
• Identity and age verification providers: To confirm that a member meets the 21+ eligibility requirement and to carry out required due-diligence checks.
• Game and software providers: To enable access to casino games, live dealer tables, sports betting, and related features. Game providers receive only the data required to deliver the relevant service.
• Fraud prevention and security services: To detect misuse, duplicate accounts, payment fraud, and abnormal access patterns.
• Legal and regulatory authorities: Where disclosure is required or permitted by applicable law, court order, regulatory requirement, or to protect the rights, property, or safety of rm888 or others.
• Professional advisers: Lawyers, auditors, and consultants bound by confidentiality obligations, where reasonably necessary.

Cookies and Tracking Technologies

rm888 uses cookies and similar tracking technologies to operate the platform, remember session preferences, analyse usage patterns, and support security functions. The categories of cookies used include:

• Essential cookies: Required for secure login, session management, and core site functionality. These cannot be disabled without affecting your ability to use rm888.
• Functional cookies: Store preferences such as language, display settings, and recently visited sections.
• Analytics cookies: Collect anonymised data about how members navigate rm888, which pages are visited most frequently, and where technical errors occur. This information helps improve the platform.
• Security cookies: Assist in detecting and preventing fraudulent access, account takeover attempts, and bot activity.

You may adjust browser settings to block or delete cookies, but essential cookies are required for normal account access and payment functionality. rm888 does not use cookies to serve personalised advertising on external websites.

Data Retention

rm888 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, and operational obligations. Key retention considerations include:

• Account and identity records are generally retained for the duration of the account relationship and for a further period as required to satisfy compliance, audit, or dispute-resolution obligations.
• Transaction records, including MYR deposits and withdrawals, are retained for a period consistent with applicable financial and regulatory requirements.
• Responsible gambling records, including self-exclusion and limit history, are retained to protect the interests of the member and to prevent re-registration during an active restriction.
• Customer support communications are retained for a reasonable period to support quality review and complaint resolution.
• Technical logs are retained only as long as needed for security and operational purposes.

When personal data is no longer required, rm888 will delete or anonymise it in a manner consistent with applicable data-protection standards.

Security Measures

rm888 implements technical and organisational security measures proportionate to the risk associated with the personal data we process. These include:

• 256-bit SSL/TLS encryption for all data in transit between member devices and rm888 servers.
• Encryption of sensitive data stored on rm888 infrastructure.
• Access controls limiting staff access to personal data to those with a legitimate operational need.
• Monitoring systems to detect unusual login activity, account anomalies, and suspicious transactions.
• Regular review of security practices in response to emerging threats.

While rm888 takes reasonable steps to protect personal data, no internet transmission or electronic storage method is completely immune to risk. Members are responsible for maintaining the confidentiality of their login credentials and should contact rm888 support promptly if they suspect unauthorised access to their account.

User Rights

Subject to applicable law and rm888's overriding legal obligations, eligible members may exercise the following rights in respect of their personal data:

• Right of Access: Request confirmation of whether rm888 holds personal data about you, and to receive a copy of that data together with information about how it is used.
• Right to Rectification: Request correction of inaccurate or incomplete personal data held by rm888.
• Right to Erasure: Request deletion of personal data in circumstances where it is no longer necessary for the purposes for which it was collected, and where no overriding legal obligation requires retention.
• Right to Restrict Processing: Request that rm888 limits its processing of personal data in certain defined circumstances.
• Right to Data Portability: Where applicable, receive personal data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests in certain circumstances.
• Right to Withdraw Consent: Where processing is based on consent (for example, marketing communications), withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Children and Minors

rm888 is strictly for adults aged 21 and above. rm888 does not knowingly collect personal data from anyone under the age of 21. If rm888 becomes aware that personal data has been collected from a person who was under 21 at the time of registration, the account will be suspended, relevant data handled in accordance with applicable obligations, and bets or transactions reviewed accordingly.

Parents and guardians who believe a minor has registered with rm888 should contact our support team immediately so the matter can be addressed without delay.

Changes to This Privacy Policy

rm888 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, our data-processing activities, payment-method integrations, or platform features. Material changes will be indicated by a revised review date at the top of this document. Where required, rm888 will notify members of significant changes by email or through a platform notice.

Continued use of rm888 following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with a change, you should stop using rm888 and contact support to discuss your account.

Contact Us