rm88 Privacy Policy

rm88 ("we", "us", "our") operates the online casino and sports betting platform accessible at rm88.vu (the "Platform"). We are committed to protecting the privacy and personal data of every player and visitor who interacts with the rm88 Platform.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject. This Policy applies to all individuals who access or use the rm88 Platform, including registered Members, prospective players, and general visitors from across Malaysia — whether you're based in Kuala Lumpur, Penang, Johor Bahru, Kota Kinabalu, or anywhere else in the country.

This Privacy Policy is to be read alongside rm88's Terms & Conditions, which govern your overall use of the Platform and are incorporated herein by reference.

rm88 collects the following categories of personal data:

2.1 Identity Data — Full name, date of birth, national identification number (e.g., MyKad number or passport number), nationality, and copies of identity documents submitted for KYC verification purposes.

2.2 Contact Data — Email address, Malaysian mobile phone number, and residential address. This information is provided by you during registration and may be updated from your Account settings.

2.3 Financial Data — Payment method details (e.g., bank account numbers, Touch n Go eWallet identifiers, Boost wallet details, GrabPay accounts), transaction records including deposits and withdrawals, and account balance history. rm88 does not store full payment card numbers where card payment methods are used — tokenisation is applied.

2.4 Account Activity Data — Login timestamps, session durations, games played, wagers placed, bet outcomes, bonus redemptions, and promotional participation records.

2.5 Technical Data — IP address, device type and operating system, browser type and version, screen resolution, referral URL, and geolocation data (country/city level) derived from your IP address.

2.6 Communications Data — Records of communications between you and rm88's customer support team, including live chat transcripts and email correspondence.

2.7 Responsible Gaming Data — Records of any responsible gaming tools activated on your Account, including deposit limits, cooling-off periods, and self-exclusion requests.

rm88 collects personal data through the following means:

• Direct provision: Information you submit during registration, KYC verification, deposit or withdrawal requests, contact form submissions, or live chat interactions.
• Automated technical collection: Data collected automatically when you access the Platform, including cookies, session tracking, device fingerprinting, and server log files. See Section 8 (Cookies & Tracking) for further detail.
• Third-party payment processors: Transaction confirmation data received from payment partners including Touch n Go eWallet, Boost, GrabPay, and Malaysian banking institutions when you make a deposit or withdrawal.
• Identity verification providers: Results of identity and document verification checks conducted as part of the KYC process, where such checks are performed using a third-party verification service.
• Fraud prevention and compliance services: Risk scores, device intelligence data, and sanction screening results from third-party compliance service providers used to fulfil rm88's regulatory obligations.

rm88 processes personal data for the following purposes:

• Account creation and management: To register your rm88 Account, authenticate your identity at login, and manage your ongoing Account relationship.
• KYC and age verification: To verify that you meet the minimum age requirement of 21 years, confirm your identity, and comply with anti-money laundering (AML) obligations.
• Payment processing: To process deposits and withdrawals via your chosen payment methods, reconcile transactions, and investigate payment disputes.
• Service delivery: To provide access to the rm88 casino, slots, sportsbook, and all associated features of the Platform.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, administer self-exclusion and limit tools, and comply with responsible gaming regulatory requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct.
• Customer support: To respond to your queries, resolve complaints, and maintain records of support interactions.
• Regulatory compliance: To fulfil obligations under the rm88 gaming licence, including record-keeping, transaction reporting, and cooperation with regulatory authorities.
• Marketing communications: To send you promotional offers and platform updates via your registered email or mobile number, where you have provided consent or where legitimate interest applies. You may opt out of marketing communications at any time from your Account settings.
• Platform analytics and improvement: To analyse aggregate usage patterns, improve Platform performance, and develop new features. Analytics data used for these purposes is anonymised or pseudonymised wherever possible.

rm88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Account agreement and provide the services you have requested (e.g., account management, payment processing, game access).
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML, KYC, and gaming licence conditions.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where rm88's legitimate interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

rm88 does not sell your personal data. We may share personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: Malaysian e-wallet operators (Touch n Go, Boost, GrabPay), banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processing services — solely for the purpose of processing your financial transactions.
• Identity and compliance service providers: Third-party KYC verification, fraud detection, and AML screening services engaged by rm88 to fulfil regulatory obligations.
• Technology infrastructure providers: Cloud hosting and content delivery network (CDN) providers that process data on rm88's behalf under data processing agreements containing appropriate safeguards.
• Gaming software providers: Game studios and live casino platform providers whose software powers the rm88 casino — limited data sharing is necessary to enable game functionality and resolve technical disputes.
• Regulatory and law enforcement authorities: Where rm88 is legally required or permitted to disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies.
• Professional advisers: Lawyers, auditors, and insurers where disclosure is necessary for the provision of professional services to rm88.

All third-party recipients are required to maintain the confidentiality of data received and to use it only for the specified purpose. Where third parties act as data processors on behalf of rm88, they do so under written agreements that impose appropriate technical and organisational security measures.

rm88 may transfer personal data to recipients located outside Malaysia, including to the jurisdiction in which rm88's gaming licence is held and to server infrastructure locations. Where such transfers occur, rm88 ensures that appropriate safeguards are in place — including standard contractual clauses or adequacy determinations — to protect your data to a standard equivalent to that required under applicable Malaysian data protection law.

rm88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your language or display preferences. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect anonymised data about how visitors use the Platform, including pages visited and time spent, to inform service improvements. Analytics data is processed in aggregate and is not linked to individual identifiable profiles.
• Fraud prevention cookies: Used to identify device characteristics and detect suspicious access patterns that may indicate fraudulent activity or multi-accounting.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the Platform. rm88 does not use third-party advertising cookies or behavioural tracking cookies for purposes unrelated to the Platform's own services.

rm88 retains personal data for the following periods:

• Active Account data: Retained for the duration of your Account relationship with rm88.
• Closed Account data: Following Account closure, personal data (including transaction records and KYC documents) is retained for a minimum of 5 years to satisfy anti-money laundering regulatory requirements and to defend against potential legal claims.
• Marketing consent records: Retained for the period of your consent and for up to 2 years following withdrawal of consent, for record-keeping purposes.
• Support interaction records: Retained for 3 years from the date of the interaction, or longer where the interaction relates to an ongoing dispute.

Upon expiry of applicable retention periods, personal data is securely and permanently deleted or irreversibly anonymised.

Subject to applicable law, you have the following rights in respect of your personal data held by rm88:

To exercise any of the above rights, contact rm88's support team via live chat or email at [email protected]. We will respond within 30 calendar days. Identity verification will be required before processing data subject requests to protect against unauthorised disclosure.

The rm88 Platform is strictly intended for individuals aged 21 years or older. rm88 does not knowingly collect personal data from persons under the age of 21. If rm88 discovers that it has inadvertently collected data from an underage individual, such data will be promptly deleted and the associated Account will be permanently closed.

If you believe that a person under the age of 21 has created an rm88 Account, please notify us immediately at [email protected] with the relevant details.

rm88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and rm88 servers.
• Encryption of sensitive data fields (including payment credentials) at rest.
• Role-based access controls limiting employee access to personal data to those with a demonstrated operational need.
• Regular security assessments and penetration testing of the Platform's infrastructure.
• Two-factor authentication requirements for administrative access to production systems.
• Monitoring and alerting systems for unusual access patterns or potential data exfiltration activity.

While rm88 employs industry-standard security practices, no system is immune to all threats. Players are reminded to maintain strong, unique passwords for their rm88 Accounts and to enable two-factor authentication from their Account security settings.

The rm88 Platform does not include links to third-party websites for marketing or informational purposes beyond those necessary for operational functionality. In the event that any such link exists, rm88 is not responsible for the privacy practices of third-party websites and recommends reviewing the privacy policies of any external sites you visit. This Privacy Policy applies exclusively to the rm88 Platform at rm88.vu.

rm88 reserves the right to update or amend this Privacy Policy at any time. Material changes — meaning changes that affect how we use your data in a way that is less protective of your privacy than previously described — will be notified to you via your registered email address at least 14 days before taking effect.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Continued use of the rm88 Platform after the effective date of any change constitutes your acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a privacy concern, please contact rm88 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, from within your rm88 Account after login.
• Email: [email protected] — responses within 24 hours on business days, and within 30 days for formal data rights requests.

When submitting a privacy-related request, please include your registered username or email address and a clear description of your request or concern to enable efficient handling by our team.