Privacy Policy RM99 – Our Commitment to Protecting Your Personal Data

1Personal Information We Collect

Rm99 collects various types of personal information from you when you register, use the platform or contact our support team. The information collected includes:

We do not collect sensitive personal information such as biometric data, medical records, or religious beliefs unless required by law.

2How We Collect Your Data

Rm99 collects personal information through various transparent and lawful channels:

• Account Registration: Information you provide when completing the registration form on rm99, including your name, email and phone number.
• KYC Process: Identity verification documents such as a copy of your national ID or passport submitted during the Know Your Customer process.
• Financial Transactions: Payment information collected when you make a deposit or withdrawal via FPX, DuitNow, TNG eWallet or GrabPay.
• Platform Usage: Data collected automatically via cookies, server logs, and similar tracking technologies while you browse rm99.
• Support Communications: Information you share when contacting the rm99 customer support team via Live Chat or email.
• Authorised Third Parties: Information we receive from payment providers, identity verification vendors or legally authorised authorities.

3Purpose of Use of Your Personal Information

Rm99 uses your personal information only for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

• Account Management: Create, verify and manage your member account on the rm99 platform.
• Transaction Processing: Process deposits, withdrawals and other financial transactions securely and promptly.
• Legal Compliance: Fulfils legal obligations including KYC requirements, anti-money laundering (AML) compliance and reporting to regulatory bodies.
• Service Improvements: Analyse usage patterns to improve your gaming experience, platform performance and the relevance of promotions offered to you.
• Service Communications: Send important notifications related to your account, transactions, promotions and rm99 policy updates.
• Fraud Prevention: Detect, investigate and prevent fraudulent activity, hacking and platform abuse.
• Customer Support: Helps resolve enquiries, complaints and technical issues you report to our team.

4Sharing Information With Third Parties

Rm99 will not sell or rent your personal information to third parties. However, we may share your data in limited circumstances as follows:

• Trusted Service Providers: Companies that assist us in delivering our services, such as payment processors, game software providers and IT infrastructure providers. All such third parties are bound by strict confidentiality agreements.
• Legal Requirement: When required by a court order, regulatory body, or law enforcement agency with jurisdiction under Malaysian law.
• Fraud Prevention: Information that must be shared with identity verification agencies or industry bodies to prevent fraud and money laundering.
• Business Transfers: If rm99 is involved in a merger, acquisition or asset sale, user data may be transferred as part of that transaction, subject to notice being given to you.

5Cookies & Tracking Technologies

The rm99 platform uses cookies and similar tracking technologies to enhance your user experience. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous data on how you use the rm99 platform to help us identify technical issues and improve site speed.
• Functional Cookies: Remember your preferences such as account settings, favourite game selections and display language so you do not need to reset them each time you log in.
• Analytics Cookies: Helps us understand aggregate user behaviour to improve content, promotions and the rm99 platform design.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the rm99 platform.

6Data Security Measures

Rm99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• Data in transit is encrypted using TLS 1.3 and 256-bit SSL protocols.
• Stored data is encrypted using the AES-256 standard.
• Role-based access control (RBAC) to limit staff access to only the data they need.
• Round-the-clock security monitoring and intrusion detection by the rm99 integrated security team.
• Regular security audits by independent parties to identify and address any system vulnerabilities.
• Mandatory privacy compliance training for all rm99 staff who handle personal data.
• A clear incident response procedure to ensure you are promptly notified in the event of a data breach involving your information.

7Your Rights Regarding Personal Data

As an rm99 member, you have the following rights regarding your personal information, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, please contact the rm99 privacy team via email at [email protected] (text display only). We will process your request within 14 business days.

8Data Retention Period

Rm99 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law:

• Active Account Data: Retained for the entire duration your account remains active on the rm99 platform.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian financial and taxation legal requirements.
• KYC Records: Retained for a minimum of 5 years after account closure in accordance with AML requirements.
• Platform Activity Logs: Retained for 2 years for security and dispute resolution purposes.
• Support Communication Data: Retained for 3 years for reference and service improvement purposes.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised in accordance with established procedures.

9International Data Transfers

In certain situations, your personal information may be transferred to servers or processing facilities located outside Malaysia, specifically for backup storage, payment processing, or email delivery purposes.

In all cases of international data transfers, rm99 ensures:

• The recipient country provides a level of data protection adequate or equivalent to Malaysia's PDPA.
• A legally binding data transfer agreement is established with the receiving party.
• Appropriate technical safeguards are applied during all data transfer processes.
• You will be notified of any significant changes to our international data transfer practices.

10Contact the rm99 Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how rm99 handles your personal data, you may contact us through the following channels:

• Privacy Email: [email protected] (text display only)
• Live Chat Support: Available 24/7 on the rm99 platform
• General Email: [email protected] (text display only)

Rm99 is committed to responding to all privacy-related enquiries within 14 business days from the date of receipt. For more urgent matters, please contact us via Live Chat for a faster response.