Privacy Policy

This Privacy Policy ("Policy") is published by rm888a ("the Platform", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://rm888a.cam. This Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or collected about individuals ("Member", "User", "you") who register an account, access, or interact with the Platform in any capacity.

rm888a is committed to handling personal data responsibly and in full accordance with applicable data protection principles. We process personal information only where we have a lawful basis to do so, and we implement appropriate technical and organisational measures to safeguard that information against unauthorised access, loss, or misuse.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

The following terms have the meanings ascribed to them below throughout this Policy:

rm888a collects personal data through several channels. The categories of data we collect and the circumstances in which they arise are described below:

3.1 Registration Data

When you create an rm888a account, we collect the information you provide in the registration form, including:

• Full legal name
• Date of birth (to verify you meet the 21+ minimum age requirement)
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam)
• Email address
• Mobile phone number
• Preferred username and encrypted account password

3.2 Identity Verification (KYC) Data

Prior to processing any withdrawal or at our discretion during account review, we may require you to submit identity verification documents, including:

• A copy of a government-issued photo identification document (e.g., Malaysian National Identity Card / MyKad, passport, or driving licence)
• Proof of residential address (e.g., a recent utility bill or bank statement)
• Proof of payment method ownership (e.g., a screenshot of your Touch 'n Go eWallet account, Boost profile, or bank statement)

3.3 Financial and Transaction Data

When you make deposits or withdrawals, we collect transaction data including the payment method used (e.g., DuitNow, FPX, Maybank2u, CIMB Clicks, GrabPay), transaction amounts in MYR, transaction reference numbers, and timestamps. We do not store full payment card numbers or full bank account numbers on our servers.

3.4 Gameplay and Activity Data

We collect records of your gambling activity on the Platform, including games played, wagers placed, game outcomes, bonus usage, session duration, and account login history. This data is used for account management, responsible gambling monitoring, and fraud prevention.

3.5 Technical and Device Data

We automatically collect certain technical information when you access the Platform, including:

• IP address and approximate geolocation
• Browser type and version
• Operating system and device type
• Pages visited, click paths, and session duration
• Cookie identifiers and session tokens

3.6 Communications Data

When you contact our customer support team via live chat or email at [email protected], we retain records of those communications, including the content of your messages, timestamps, and the outcome of any support interactions, to maintain service quality and comply with our record-keeping obligations.

rm888a processes personal data only where we have a valid lawful basis. The primary legal bases on which we rely are as follows:

rm888a uses personal data collected from Members for the following purposes:

• Account Management: Creating, maintaining, and administering your rm888a member account, including processing deposits and withdrawals in Malaysian Ringgit (MYR).
• Identity Verification: Verifying your age (21+) and identity in compliance with KYC obligations and to prevent the use of the Platform by ineligible individuals.
• Transaction Processing: Facilitating deposits via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency wallets.
• Customer Support: Responding to queries, complaints, and support requests submitted via live chat or email.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, prohibited conduct, and unauthorised account access.
• Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling behaviour and enforcing self-exclusion and deposit limit requests.
• Legal Compliance: Meeting our obligations under applicable laws and cooperating with regulatory authorities and law enforcement agencies where required.
• Service Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.
• Marketing Communications (Consent Only): Sending you promotional offers, bonus notifications, and Platform updates where you have opted in to receive such communications. You may unsubscribe at any time.

rm888a does not sell, rent, or trade your personal data to third-party marketers or unrelated commercial entities under any circumstances. We may share personal data with third parties only in the following limited circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data with payment processors and financial institutions, including those operating Malaysian payment rails such as FPX, DuitNow, and e-wallet providers. These providers are contractually bound to process your data securely and only for the purpose of completing the relevant transaction.

6.2 Identity Verification Partners

We may use third-party KYC verification service providers to validate identity documents and cross-reference information against applicable watchlists or sanctions databases. These providers operate under strict data processing agreements.

6.3 Technology and Infrastructure Providers

Our Platform is supported by licensed technology partners including game studios, hosting providers, and customer support software vendors. These parties have access to personal data only to the extent necessary to perform their contracted services and are prohibited from using it for any other purpose.

6.4 Legal and Regulatory Disclosure

We may disclose personal data to governmental authorities, regulators, law enforcement agencies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to protect the safety, rights, or property of rm888a or its members.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of rm888a's business operations, personal data held by rm888a may be transferred to the acquiring entity, subject to equivalent privacy protections. Members will be notified in advance of any such transfer where practicable.

rm888a uses cookies and similar session technologies to deliver a functional, secure, and personalised experience on the Platform. The categories of cookies we use are described below:

rm888a does not use third-party advertising cookies or cross-site behavioural tracking technologies. You may disable cookies through your browser settings; however, disabling essential cookies will impair Platform functionality and may prevent you from logging in or placing wagers.

rm888a retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Registration Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by law.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction.
• Customer Support Communications: Retained for three (3) years from the date of last contact.
• Gameplay and Activity Logs: Retained for two (2) years from the date of recording, unless required for ongoing investigations.
• Technical and Device Data: Retained for up to thirteen (13) months from the date of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

rm888a implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the Platform is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. We never store passwords in plain text.
• Access Controls: Access to personal data within rm888a's systems is restricted to authorised personnel on a strictly need-to-know basis. All internal data access is logged and audited.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts for an additional layer of security against unauthorised access.
• Regular Security Reviews: Our systems undergo periodic security assessments, including penetration testing and vulnerability scanning.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, rm888a will notify affected members and relevant authorities within the timeframes required by applicable data protection law.

As a data subject, you hold the following rights in respect of your personal data held by rm888a. You may exercise any of these rights by contacting our support team via live chat or by emailing [email protected] (plain text — not a clickable link):

rm888a will respond to all valid data subject requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days, of which we will notify you in writing. We may need to verify your identity before processing a request.

rm888a does not knowingly collect or process personal data from individuals under the age of 21. The Platform is strictly intended for adults aged 21 and above. Age verification is conducted during account registration and as part of the KYC process.

If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to suspend the relevant account, delete the data, and return any deposited funds in accordance with applicable legal requirements.

rm888a operates as a global platform and certain personal data may be transferred to, stored in, or processed by service providers located outside Malaysia. Where such transfers occur, rm888a ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring recipient parties to adhere to equivalent data protection standards.
• Transfers only to jurisdictions that provide an adequate level of data protection as assessed by relevant authorities.
• Regular review of third-party data processors to ensure ongoing compliance with our data protection standards.

By using the Platform and providing your personal data, you acknowledge that your information may be transferred internationally in the circumstances described above.

rm888a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. The effective date of the most recent revision is displayed prominently at the top of this page.

When material changes are made to this Policy, we will notify registered Members by email or by posting a prominent notice on the Platform at least 7 days prior to the changes taking effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how rm888a protects your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by rm888a, please contact our Data Protection team through the following channels. All contact details are provided as plain text only.

For matters relating to responsible gambling or account self-exclusion, please visit our Responsible Gambling page. For general account terms and conditions, please refer to the Terms & Conditions page.