Rm89 Privacy Policy – Malaysian User Personal Data Protection

1Introduction

Rm89 ("we", "the Company") respects the privacy of every individual who uses our platform and services. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information you share with us when using the rm89 website, mobile app, and all related services.

By using the rm89 platform, you consent to the collection and use of your personal information in accordance with this Privacy Policy. If you do not agree, please discontinue use of our services.

This Privacy Policy is prepared in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia and applicable international data protection standards. We are committed to ensuring your personal data is handled with full responsibility and transparency.

2Personal Data We Collect

Rm89 collects various types of personal information depending on your interactions with our platform. Below is a summary of the data we collect and why:

We only collect data that is strictly necessary for the stated purposes. rm89 does not collect sensitive information such as biometric data, medical records, or political opinions unless specifically required by law.

3How We Use Your Personal Data

The personal data we collect is used exclusively for the following purposes:

• Account Management: Creating and managing your rm89 account, including registration processing and identity verification.
• Service Provision: Enabling you to access all features and services on the rm89 platform, including games, payments, and the VIP programme.
• Transaction Processing: Processing deposits, withdrawals, and other financial transactions securely and efficiently.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, and unauthorised account access.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including KYC and AML requirements.
• Service Communications: Sending important notifications related to your account, security, and policy updates.
• Platform Improvement: Analysing usage patterns to improve user experience and platform performance.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problematic gambling and offer appropriate support.

4Data Sharing and Disclosure

Rm89 does not sell or rent your personal data to any third party. However, we may share your information in the following limited circumstances:

• Integrated Service Providers: Payment processors, KYC service providers, and technology vendors that help us operate the rm89 platform. All third parties are bound by strict confidentiality agreements and are only permitted to use data for specified purposes.
• Legal Requirements: Where required by a court, regulatory body, or lawful law enforcement agency through a valid order.
• rm89 Rights Protection: To protect the legal rights, property, or safety of rm89, our users, or the public from any threat.
• Business Transfer: If rm89 is involved in a merger, acquisition, or asset sale, user data may be transferred to the acquiring party, subject to notification of affected users.

In all cases of data sharing, rm89 ensures that recipients comply with data protection standards equal to or higher than our own.

5Data Security

Rm89 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data transmitted between your device and rm89 servers.
• Encryption of data at rest for sensitive data stored in our databases.
• Role-based access control (RBAC) – only authorised personnel may access user data, and only to the extent necessary for their duties.
• Continuous security monitoring with an intrusion detection system (IDS) active 24 hours a day.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Staff training programme to ensure all rm89 employees understand and comply with data protection procedures.

6Cookies and Tracking Technologies

Rm89 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference Cookies: Saving your settings such as language preferences and display choices for a more personalised experience.
• Analytics Cookies: Helping us understand how users interact with the platform for continuous improvement. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Helping detect and prevent fraudulent activity and ensuring every session remains secure.

You can manage or disable certain cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the rm89 platform.

7Your Rights as a User

As an rm89 user and under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, contact the rm89 support team via live chat or email. We will process your request within 30 working days of the date of receipt.

8Data Retention Period

Rm89 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Active Account Data: Retained for as long as your account remains active, plus the period required to resolve any claims or legal obligations.
• Financial Transaction Data: Retained for seven (7) years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• KYC Data: Retained for the duration of the active account period plus at least five (5) years after account closure in accordance with compliance requirements.
• Security & Technical Logs: Retained for 12 months for security investigation and technical troubleshooting purposes.
• Closed Account Data: Personal data of users who have closed their accounts will be deleted or anonymized once the minimum required retention period has elapsed.

When data is no longer needed, rm89 ensures it is securely deleted or anonymized using industry-standard procedures that prevent data recovery.

9Changes to the Privacy Policy

Rm89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The procedure for notifying changes is as follows:

• Material changes will be communicated to all members via their registered email at least 14 days before taking effect.
• In-platform notifications will also be displayed to ensure you never miss important updates.
• The "Updated" date at the top of this page reflects the last time this Privacy Policy was modified.
• Continued use of the rm89 platform after changes take effect constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this page regularly to stay informed about how we protect your privacy.

10Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us via:

• Live Chat: Available 24 hours a day via the chat icon on the rm89 website or app.
• Email: [email protected] – for privacy-related enquiries and user rights requests.
• General Support Email: [email protected] – for general account and service enquiries.

The rm89 privacy team will respond within 72 hours for general enquiries and within 30 working days for formal user rights requests. All privacy-related communications are handled in strict confidence.