rm88 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how rm88, operating through the website https://rm88.bid ("Platform", "we", "us", "our"), collects, processes, uses, stores, and protects the personal data of individuals ("you", "User", "Player") who access, register on, or interact with the rm88 Platform.

This Policy applies to all personal data collected via the rm88 website, mobile browser interface, customer support channels, and any other touchpoints through which rm88 interacts with users. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with the rm88 Terms & Conditions, which govern your use of the Platform as a whole.

2. Data Controller

rm88 acts as the data controller in respect of personal data collected through the Platform. As data controller, rm88 determines the purposes and means of processing your personal data. For all data-related enquiries, including requests to exercise your data subject rights, please contact us at support@rm88.bid.

3. Personal Data We Collect

rm88 collects the following categories of personal data:

3.1 Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (e.g., MyKad number, passport number) collected during account registration and KYC verification.

3.2 Contact Data: Email address, mobile phone number, and residential address. These are used for account communication, verification, and regulatory correspondence.

3.3 Financial Data: Payment method details, transaction history, deposit and withdrawal records, and account balance information. rm88 does not store full card numbers; payment processing is handled by licensed third-party payment processors.

3.4 Technical Data: IP address, browser type and version, operating system, device identifiers, time zone, session timestamps, and login history. This data is collected automatically when you access the Platform.

3.5 Usage Data: Information about your interactions with the Platform, including games played, bets placed, bonus usage, pages visited, and features accessed.

3.6 Communications Data: The content of communications you send to rm88 via email or support channels, including support ticket history and any documents you submit.

3.7 Responsible Gaming Data: Deposit limit settings, self-exclusion status, session time preferences, and any responsible gaming elections you make on your account.

4. How We Collect Your Data

rm88 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you access the Platform.
• Third-party sources: Identity verification data from licensed KYC/AML service providers; fraud detection data from risk management partners; payment data from licensed payment processors.

5. Legal Basis for Processing

rm88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, operate your player account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing required to comply with AML regulations, KYC obligations, gaming licence conditions, tax reporting requirements, and other applicable legal duties.
• Legitimate interests: Processing for fraud prevention, platform security, product improvement, and responsible gaming purposes, where such interests are not overridden by your rights.
• Consent: Marketing communications and optional data collection where your consent is explicitly obtained. You may withdraw consent at any time by contacting support.

6. How We Use Your Data

rm88 uses your personal data for the following purposes:

• To create, verify, maintain, and manage your rm88 player account.
• To process deposits, withdrawals, and in-game transactions accurately and securely.
• To comply with KYC, AML, and responsible gaming obligations under our operating licence.
• To detect, prevent, and investigate fraud, money laundering, underage gambling, and prohibited conduct.
• To provide customer support and respond to your queries and complaints.
• To personalise your experience on the Platform, including game recommendations and relevant promotions.
• To send you transactional communications such as deposit confirmations, withdrawal status updates, and security alerts.
• To send you marketing communications about rm88 promotions and bonuses, where you have consented to receive these.
• To analyse Platform usage and improve our products, services, and user experience.
• To enforce our Terms & Conditions and other applicable policies.

7. Disclosure of Your Data

rm88 does not sell your personal data. We may share your data with the following categories of recipients:

7.1 Service Providers: Licensed third-party vendors who process data on rm88's behalf, including KYC/identity verification providers, payment processors, fraud detection services, and customer support platform providers. These providers are contractually bound to process data only as instructed by rm88 and in accordance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory requirement, rm88 may disclose your data to gaming regulators, financial intelligence units, law enforcement agencies, or other competent authorities.

7.3 Business Transfers: In the event of a merger, acquisition, or sale of all or part of rm88's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7.4 Professional Advisers: Lawyers, auditors, and insurers where necessary for the conduct of rm88's business, under applicable confidentiality obligations.

8. International Data Transfers

rm88 may transfer your personal data to service providers located in jurisdictions outside Malaysia. Where such transfers occur, rm88 ensures that appropriate safeguards are in place — such as standard contractual clauses or adequacy decisions — to protect your data to a standard equivalent to that required under applicable Malaysian and international data protection law.

9. Data Retention

rm88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by AML and gaming regulatory obligations.
• Transaction data: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Retained for the period required by applicable AML regulations, typically five (5) years from the end of the business relationship.
• Support communications: Retained for up to three (3) years from the date of the last communication.
• Technical and usage data: Retained for up to two (2) years from collection, unless required for ongoing investigation or regulatory purposes.

Where data is no longer required and no legal basis for retention exists, rm88 will securely delete or anonymise it.

10. Cookies and Tracking Technologies

rm88 uses cookies and similar technologies on the Platform to:

• Maintain your login session and account preferences.
• Measure Platform traffic and analyse user behaviour to improve the service.
• Detect fraud and enforce security measures.
• Remember responsible gaming settings applied to your account.

rm88 does not use third-party advertising cookies to track you across external websites for targeted advertising purposes. You may manage cookie preferences through your browser settings; however, disabling essential cookies may affect the functionality of your rm88 account.

11. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by rm88:

• Right of access: To request a copy of the personal data rm88 holds about you.
• Right of rectification: To request correction of inaccurate or incomplete personal data.
• Right of erasure: To request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing: To request that rm88 limits the way your data is used in certain circumstances.
• Right to data portability: To receive a copy of data you have provided to rm88 in a structured, machine-readable format.
• Right to object: To object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: To withdraw consent where processing is based on your consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact rm88 at support@rm88.bid. We will respond within 30 days of receiving a valid request. We may need to verify your identity before processing your request.

12. Children and Minors

The rm88 Platform is strictly intended for users aged 21 years and above. rm88 does not knowingly collect personal data from individuals under the age of 21. If rm88 becomes aware that it has inadvertently collected data from an underage individual, that account will be closed immediately and the data deleted, subject to any mandatory regulatory retention obligations. If you believe a minor has registered on rm88, please contact our support team immediately.

13. Security Measures

rm88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include 128-bit SSL encryption for all data transmitted to and from the Platform, hashed and salted password storage (rm88 does not store plain-text passwords), access controls limiting staff access to personal data on a need-to-know basis, regular security assessments and penetration testing, and secure data centre infrastructure for server-side data storage.

While rm88 takes data security seriously, no system is entirely immune to risk. In the event of a security incident affecting your data, rm88 will notify you and relevant authorities as required by applicable law.

14. Third-Party Links

The rm88 Platform may contain links to third-party websites or services (for example, payment processors accessed via redirect during deposit). rm88 is not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party services you access in connection with your use of rm88.

15. Changes to This Policy

rm88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email notification or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform after notification of changes constitutes your acceptance of the revised Policy.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by rm88, please contact our Data Protection team:

Email: support@rm88.bid (plain text — not a clickable link)

Our support team is available 24/7. Data subject requests will be acknowledged within 5 business days and resolved within 30 calendar days from the date of receipt of a valid, verified request.