Last Updated: 1 January 2026
Privacy & Data Protection for rm888 Malaysia Players

Rm888 Privacy Policy – Malaysian Players' Data Protection

Rm888 takes your privacy seriously. Every piece of personal information you share with us — from your name to your payment details — is protected to the highest security standards. This document transparently explains what we collect, why we need it, how we store it, and your rights as an rm888 player in Malaysia.

256-bit SSL Your Data Is Never Sold Confidential & Secure Player Rights Guaranteed Malaysian Standards
Contents of This Document
1Personal Data Collected
2Purpose of Data Use
3Data Sharing & Disclosure
4Data Security & Storage
5Your Privacy Rights
6Cookies & Tracking Technologies

Rm888's Six Privacy Commitments

The core principles guiding how rm888 manages the personal data of Malaysian players

High-Grade Encryption

All data transmitted between your device and rm888's servers is protected by 256-bit SSL/TLS encryption – the same standard used by Malaysia's leading financial institutions such as Maybank and CIMB. Sensitive information such as passwords is stored in hashed form and cannot be decrypted.

Your Data Is Not Sold

Rm888 has never and will never sell, rent, or trade players' personal data to third parties for marketing or advertising purposes. Your information belongs to you – rm888 uses it solely for the purposes clearly stated in this privacy policy and nothing beyond that.

Control Is in Your Hands

Rm888 players have full control over their personal data. You can access, update, or request deletion of your data at any time through your account settings or by contacting our support team. Withdrawing consent for marketing communications can also be done in just a few clicks.

Minimum Data Collection

Rm888 collects only the data that is genuinely necessary to operate the platform — nothing more, nothing less. This data minimisation principle ensures we do not retain unnecessary information about you, reducing the risk of data exposure in any unforeseen circumstances.

Full Transparency

Rm888 is committed to being transparent about how your data is used. This privacy policy is written in plain, easy-to-understand language – not confusing legal jargon. We want you to genuinely understand what you are agreeing to when you use the rm888 platform.

Legal Compliance

Rm888 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. Your data is processed on a lawful legal basis and for legitimate purposes. We also adhere to the requirements set by our gambling licensing regulatory authorities.

Introduction – rm888's Privacy Commitment

This Privacy Policy explains how rm888 ("We", "Platform") collects, uses, stores and protects your personal data ("You", "Player") when you register for or use the rm888 platform in Malaysia. This document has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. By using the rm888 platform, you agree to the terms set out in this Privacy Policy. Please read it carefully before registering.

1Types of Personal Data Collected

1.1 Personal Identification Data

Rm888 collects basic identification information required to set up and manage your account:

  • Full name as stated on your identification card or passport
  • Date of birth for age verification (18 and above)
  • Malaysian identity card number (MyKad) or passport number
  • Current residential address in Malaysia
  • An active Malaysian mobile number
  • A valid email address

1.2 Financial & Payment Data

To process deposits and withdrawals, rm888 may retain the following information:

Financial Data TypePurposeRetention Period
E-wallet account holder name (TnG, GrabPay, etc.)Payment identity verificationFor the duration of the active account
Bank account number (for withdrawals)Withdrawal processingFor the duration of the active account
Deposit & withdrawal transaction history recordsAudit & legal compliance7 years (legal requirement)
Total transactions & payment methods usedFraud prevention & anti-money laundering7 years (legal requirement)
rm888 does not store credit or debit card information directly. All payments are processed through payment gateways that comply with PCI-DSS standards.

1.3 Platform Activity Data

Rm888 automatically records technical data and activity when you use the platform:

  • IP address of the device used to log in
  • Device type, operating system, and web browser
  • Login and logout history, including dates and times
  • Records of games played and bets placed
  • History of promotions and bonuses claimed
  • Communication logs with the rm888 support team

2How rm888 Collects Your Data

Your personal data is collected through several different channels as you interact with the rm888 platform:

1
Registration Form & Account Profile

Basic data is collected when you complete the rm888 registration form – including your name, phone number, email address, and date of birth. Any subsequent updates to your account profile will also record those data changes.

2
KYC Verification Process

When you submit identity verification documents — such as a copy of your MyKad or a selfie holding your identification — rm888 securely collects and stores copies of those documents for identity verification and anti-money laundering compliance purposes.

3
Deposit & Withdrawal Transactions

Every time you make a deposit via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, ShopeePay, Maybank2u, or CIMB Clicks, or submit a withdrawal request, the transaction details are automatically recorded in the rm888 system.

4
Gaming & Betting Activity

The rm888 platform automatically records all gaming activity — slots played, blackjack tables joined, badminton or football bets placed, lottery tickets purchased, and so on. This data is used to resolve disputes, detect fraud, and improve the overall platform experience.

5
Cookies & Browser Technologies

Rm888 uses cookies and similar browser tracking technologies to identify your login session, store user preferences, and understand how players use the platform. Further details are provided in Section 8 of this document.

6
Customer Support Communications

Every interaction you have with rm888's support team via live chat, email, or Telegram — including the content of your conversations and any information you share — is recorded for quality control, training, and issue resolution purposes.

3Purpose of Personal Data Use

Rm888 uses your personal data only for the following legitimate and necessary purposes. We do not use your data for any other purpose without your consent:

Purpose of UseLegal Basis
Setting up and managing your rm888 accountContract fulfilment
Processing deposits and withdrawals securelyContract fulfilment
Verifying your identity (KYC) to prevent fraudLegal obligation
Complying with anti-money laundering (AML) requirementsLegal obligation
Providing effective customer supportRm888's legitimate interests
Sending important account-related notificationsContract fulfilment
Sending marketing communications (with your consent)Consent
Detecting and preventing fraudulent or abusive activityRm888's legitimate interests
Improving the platform and user experienceRm888's legitimate interests
Complying with regulatory authority directivesLegal obligation
rm888 never uses your personal data to sell to third-party advertisers or to build profiles for behavioural manipulation purposes. Your data is used solely to serve you better.

4Data Sharing & Disclosure to Third Parties

4.1 rm888 Data Sharing Principles

Rm888 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, rm888 may need to share your data with the following categories of third parties, strictly within narrow and necessary limits:

  • Payment Providers: Payment gateways such as Touch 'n Go, GrabPay, DuitNow and FPX receive the transaction data necessary to process your payments. These providers are governed by their own privacy policies and industry security standards.
  • Game Providers: Companies such as Evolution Gaming, Pragmatic Play and Ezugi receive only the minimum technical data required to deliver live casino and slots games. This does not include your full financial information.
  • Identity Verification Services: Third-party KYC service providers assist rm888 in verifying player identity documents. These providers are bound by strict data processing agreements with rm888.
  • Technical Infrastructure: Cloud and hosting service providers that store rm888's data. These providers operate under strict confidentiality agreements and are granted access only to the data necessary to deliver technical services.

4.2 Legally Required Disclosures

Rm888 may be required to disclose your personal data to Malaysian government authorities or law enforcement when mandated by valid law, court order, or official request from a competent authority. In such cases, rm888 will disclose only the minimum data necessary and will inform you of the disclosure where permitted by law.

rm888's Guarantee: Before sharing data with any third party, rm888 ensures that the party maintains an equivalent or higher level of data protection through legally binding data processing agreements.

5Data Security – How rm888 Protects Your Information

Rm888 makes serious investments in cybersecurity infrastructure to ensure your personal and financial data remains protected at all times. The following are the key security measures we have in place:

rm888 System Security Levels
Data Encryption in Transit
256-bit SSL
Stored Data Encryption
AES-256
Two-Factor Authentication (2FA)
Available
Real-Time Threat Monitoring
24/7
Independent Security Audit
Bi-annually
Penetration Testing
Annually

Rm888 segregates data storage according to sensitivity level – the most sensitive data, such as KYC documents and financial information, is held in more restricted environments with stricter access controls. Only staff who require access to specific data to carry out their duties are granted permission, and all access is logged and audited on a regular basis.

While rm888 takes all reasonable precautions, no security system is completely impenetrable. In the event of a data breach affecting your personal data, rm888 is committed to notifying you promptly and taking appropriate remedial action.

6Data Retention & Deletion

6.1 Data Retention Period

Rm888 retains your personal data only for as long as it is needed for the purpose it was collected, or as required under applicable Malaysian law:

  • Active account data: Retained for as long as your rm888 account remains active
  • Financial transaction data: Stored for 7 years after the transaction date, in accordance with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001
  • KYC Documents: Retained for the duration of the active account plus 5 years after account closure
  • Game logs: Retained for 2 years for dispute resolution
  • Support communication logs: Retained for 2 years
  • Marketing data (with consent): Until you withdraw consent

6.2 Data Deletion After Account Closure

When your rm888 account is closed at your request or by rm888, your personal data will be handled as follows: data no longer required for legal purposes will be deleted or anonymised within 90 days of account closure. Data that must be retained for legal compliance will remain stored for the period prescribed by law but will not be used for any operational or marketing purposes.

7Your Privacy Rights as an rm888 Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and rm888's privacy policy, you have the following rights regarding your personal data:

Right of Access

You may request a copy of all personal data rm888 holds about you at any time. rm888 will provide this information within 14 business days.

Right to Rectification

If the personal data rm888 holds about you is inaccurate or out of date, you may request a correction. Updates to basic information can be made directly through your account settings.

Right to Erasure

You may request the deletion of personal data that is no longer required for legal purposes. Such requests are subject to data retention obligations under Malaysian law.

Right to Object

You may object to the use of your data for direct marketing purposes at any time. Once you object, rm888 will immediately stop using your data for that purpose.

Data Portability

You may request that rm888 provide your personal data in a machine-readable format so that you can transfer it to another service provider if you wish.

Right to Restrict Processing

In certain circumstances, you may request that rm888 restrict the processing of your personal data – for example, when the accuracy of the data is in dispute or while your objection is being reviewed.

To exercise any of the privacy rights above, please contact the rm888 support team by email at support@rm888.in or via 24/7 live chat within your account. rm888 will respond within 14 business days from the date the request is received.

8Cookies & Tracking Technologies

8.1 What Are Cookies and How rm888 Uses Them

Cookies are small text files stored on your device when you browse the rm888 platform. rm888 uses several types of cookies to keep the platform running smoothly and to deliver a better experience for you:

Cookie TypePurposeCan Be Declined?
Essential CookiesMaintains login sessions, security, and core platform functionality. Without these cookies, rm888 cannot operate.No – required for the platform to function
Performance CookiesCollecting anonymous usage statistics to help us understand how players use the platform and identify technical issues.Yes – via cookie settings
Functional CookiesStoring user preferences such as language, display settings, and favourite game selections for a more personalised experience.Yes – via cookie settings
Marketing CookiesAllows rm888 to display more relevant promotions based on your gaming activity. Only active with your consent.Yes — by withdrawing consent

8.2 Managing Your Cookie Preferences

You can manage or delete cookies through your web browser settings at any time. Please note that deleting or blocking essential cookies may affect the functionality of the rm888 platform. For non-essential cookies, you can adjust your preferences through the cookie settings panel accessible at the bottom of the rm888 page. rm888 will respect your choices and will not re-enable any cookies you have declined without obtaining your fresh consent.

rm888 does not use cross-site tracking cookies to monitor your activity on other websites. Tracking by rm888 is limited solely to activity within the rm888 platform.

9Protection of Children's Data

The rm888 platform is strictly for individuals aged 18 and above. rm888 does not knowingly collect or process personal data belonging to minors. Should rm888 discover that personal data of anyone under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you believe a minor — your child or someone you know — has registered an rm888 account, please contact us immediately at support@rm888.in with the relevant supporting evidence. rm888 takes this matter very seriously and will respond within 24 hours.

rm888 uses a multi-layered age verification system that includes a date-of-birth check at registration and identity document verification (KYC) requiring a MyKad for Malaysian nationals. This is our primary line of defence against underage registration.

10Cross-Border Data Transfers

In the course of operating the rm888 platform, your personal data may be transferred to and processed on servers located outside Malaysia — particularly in connection with international game providers such as Evolution Gaming (operating from studios across multiple countries) and cloud server infrastructure.

In all cases of international data transfers, rm888 ensures a level of protection equal to or greater than that provided under Malaysian law, through:

  • Legally binding data processing agreements with all third parties that receive data
  • Selecting service providers operating in countries with recognised data protection standards
  • Data encryption in transit and at rest
  • Regular audits of vendor compliance with data protection requirements

Rm888 will not transfer your personal data to countries that lack adequate data protection without first ensuring that appropriate safeguard mechanisms are in place.

11Changes to This Privacy Policy

Rm888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform technology developments. Whenever this Privacy Policy is updated, the "Last Updated" date at the top of this page will be revised to reflect the date of the most recent changes.

For material changes — that is, changes that significantly alter how we collect or use your data — rm888 will notify you through:

  • Email to the address registered to your account
  • In-account notifications on rm888 when you log in
  • Updates to this Privacy Policy page with explanatory notes on key changes

You will be notified at least 14 days before any material changes take effect. Your continued use of the rm888 platform after changes come into effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 7.

12Contact Us – rm888 Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rm888 handles your personal data, please reach out to us through the following channels:

  • Privacy Email: support@rm888.in (please mark the subject line as "Privacy Enquiry")
  • Live Chat: Available 24/7 within your rm888 account
  • Telegram: For immediate support

Rm888 is committed to responding to all privacy inquiries within 14 working days. For more complex requests, such as full data access or data deletion requests, the process may take up to 30 business days depending on the complexity of the request. rm888 will keep you informed of your request's progress throughout the process.

If you are not satisfied with how rm888 has handled your privacy request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your country.

Your privacy is not merely a legal obligation to rm888 — it is a core value we uphold. Every member of the rm888 team is trained to respect and protect player personal data in every aspect of their work.

FAQ – rm888 Privacy & Data

Quick answers to the privacy questions most commonly asked by Malaysian players

Yes. rm888 uses 256-bit SSL encryption for all communications involving financial data. rm888 does not directly store credit or debit card details — all payments made via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, ShopeePay, Maybank2u and CIMB Clicks are processed by PCI-DSS compliant payment gateways. rm888 retains only transaction records (amount, time, method) for account management and legal compliance purposes — not your full account details.

Yes, you may request the deletion of your personal data by contacting support@rm888.in. Please note, however, that some data may not be fully erasable due to legal obligations — for example, financial transaction data must be retained for 7 years under Malaysian anti-money laundering laws. Data subject to such obligations will be kept but will not be used for any marketing or operational purposes. rm888 will clearly inform you which data can be deleted and which must be retained, along with the reasons why.

No. rm888 does not access your device's camera, microphone, contacts, GPS location, or any other sensitive data without your explicit consent for a specific purpose. The only instance where camera access may be requested is during the KYC verification process, if you need to take a selfie holding your identification document — and even then, this is optional (you may upload an existing photo instead). rm888 limits its data collection strictly to activity within the platform.

KYC documents you upload to rm888 are transmitted via encrypted channels and reviewed by rm888's verification team or a purpose-built automated verification system. These documents are used solely to confirm your full name, date of birth, and nationality — the same information you provided during registration. Documents are stored in a secure environment with strict access controls and are never shared with third parties unless required by law.

You can opt out of rm888 promotional emails in three ways: click the "Unsubscribe" link found at the bottom of any rm888 marketing email; log in to your rm888 account and go to Settings > Notifications to update your communication preferences; or contact rm888 support via live chat or email at support@rm888.in. Changes will take effect within 48 hours. Please note that even after opting out of marketing emails, rm888 will continue to send important account-related communications such as security alerts and transaction confirmations.

Your Data Is Safe — Join rm888 with Confidence

Rm888 is fully committed to protecting your privacy. Create a free account today and enjoy a safe, fair, and secure gaming experience — a platform built with trust at its core.

256-bit SSL Your Data Is Never Sold 24/7 Support PDPA Compliance 18+ Only

By registering, you agree to the Terms & Conditions and Privacy Policy rm888.

Bahasa Melayu