Rm89 Privacy Policy – Malaysia Player Personal Data Protection

1 Introduction and Scope of This Policy

This Privacy Policy is issued by rm89 ("we", "Platform") and applies to all users who access or use the rm89 platform via the website, mobile app, or any related digital channel. We understand that privacy is a fundamental right, and we take this responsibility seriously.

This document describes the types of personal data we collect, the purposes for collecting it, how we protect it, who we share it with, and what your rights are as the data owner. This policy should be read together with Terms and Conditions rm89 for a comprehensive overview of the agreement between you and our platform.

Rm89 complies with Malaysia's Personal Data Protection Act 2010 (PDPA), and we continually work to keep our privacy practices aligned with the latest legal and technological developments.

2 Personal Data We Collect

When you register and use the rm89 platform, we collect several categories of personal data to ensure a safe, seamless gaming experience that meets regulatory requirements. The types of data we collect are as follows:

• Identity Information: Full name, date of birth, national ID or passport number, gender, and nationality.
• Contact Information: Email address, phone number, and current residential address.
• Financial Information: Bank account details, account number, bank name, and records of deposit and withdrawal transactions.
• Technical Information: IP address, browser type, device type, operating system, and access log data.
• Game Activity Data: Your wagering records, game history, wins and losses, and game preferences.
• KYC Documents: Copies of your national ID, bank statements, or proof of address documents uploaded during the identity verification process.

We only collect data that is strictly necessary for the stated purposes. This data minimisation principle ensures your privacy is not compromised beyond what is required.

3 Purpose of Data Collection and Use

Every piece of data we collect has a clear and lawful purpose. rm89 uses your personal data for the following purposes:

For marketing purposes, we will only send you promotional communications if you have given consent during registration or later through your account settings. You may withdraw this consent at any time.

4 Data Sharing with Third Parties

Rm89 does not sell your personal data to any party. However, to enable the platform to operate smoothly and securely, we may share certain data with the following categories of parties, and only to the extent necessary:

• Payment Service Providers: Banks, digital wallet providers, and approved payment gateways for processing your deposits and withdrawals.
• KYC Service Providers: Third-party identity verification companies that help us meet regulatory requirements.
• Technology Infrastructure Providers: Cloud computing and hosting companies that store and process data on our behalf under strict data protection agreements.
• Authorities and Regulatory Bodies: When required by law or by a directive from a competent authority in Malaysia.

All third parties we engage are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for specified purposes and may not use it for any other reason.

5 Data Retention Period

Rm89 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. Generally:

• Active account data is retained for as long as your account remains active.
• Upon account closure, identity and transaction data are retained for a minimum of 5 years in accordance with anti-money laundering (AML) legal requirements.
• Technical and access log data is retained for 12 months.
• Customer support communication records are retained for 3 years.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

6 Data Security and Protection Measures

Rm89 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data communications between the platform and users.
• Encryption of sensitive data in databases using industry-leading algorithms.
• Strict role-based access control (RBAC) for internal staff.
• Real-time system monitoring and intrusion detection.
• Regular independent security penetration testing.
• Automatic data backups with tested disaster recovery procedures.
• Cybersecurity awareness training for all rm89 staff.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

7 Use of Cookies and Tracking Technologies

Rm89 uses cookies and similar tracking technologies to enhance the user experience and understand platform usage patterns. There are three categories of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference Cookies: Remember your preferences such as language, display settings, and game preferences for a better experience.
• Analytics Cookies: Collect anonymous information about how you use our platform to help us improve our services.

You can manage and delete cookies through your internet browser settings. Please note that disabling essential cookies may affect the functionality of the rm89 platform.

8 Your Rights Under the PDPA

As an rm89 user and data subject under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the rm89 support team via live chat on the platform. We will process valid requests within 21 business days. Where a request requires additional time, we will notify you within that period.

9 Children's Privacy

The rm89 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that we have collected personal data from an underage individual without valid parental consent verification, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered an account on rm89, please contact us immediately so we can take the appropriate action.

10 Privacy Policy Amendments

Rm89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. When significant amendments are made, we will notify you via an in-platform notification or to the email address registered to your account.

The "Updated" date at the top of this document reflects when the last amendment was made. Your continued use of the rm89 platform after any amendment takes effect constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

If you disagree with any amendments made, you have the right to close your account and request data deletion in accordance with the procedures set out in section 8 of this policy.

Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist. We take every privacy inquiry seriously and will respond within a reasonable timeframe.

Rm89 has appointed a Data Protection Officer responsible for ensuring our compliance with the PDPA and internal privacy policies. For high-level enquiries regarding data processing or to file a formal complaint, you may reach our support team via 24/7 live chat on the platform.

We also encourage you to visit the Responsible Gaming us for more information on how rm89 prioritises player wellbeing, or refer to Frequently Asked Questions (FAQ) us for answers to common questions about privacy and account security.