RM89 Privacy Policy – Personal Data Protection for Malaysian Members

Introduction & Privacy Policy Scope

RM89 is an online entertainment platform operating in Malaysia, offering a wide range of games including slots, live baccarat, Sports Betting, e-sports, and lottery to Malaysian members aged 18 and above. In operating this platform, RM89 collecting and processing members' personal data to ensure the platform operates smoothly, securely, and efficiently.

This Privacy Policy explains in detail the types of personal data we collect from you, the purposes for which it is collected, how we store and protect it, who we may share it with, and your rights over your personal data under Malaysian law.

This policy applies to all RM89 platform users — including unregistered visitors, registered members, and former members whose data remains in RM89's systems. It covers use of the platform through the official RM89 website and any other official RM89 communication channels.

Personal Information We Collect

RM89 only collects information that is necessary for legitimate platform operations. We do not collect excessive or irrelevant data beyond the scope of the services we offer. The types of data we collect can be broken down into several categories:

2.1 Information You Provide Directly

This is information you provide directly when registering for or using the RM89 platform:

• Identity Information: Full name as per MyKad, identity card number (for age verification), and date of birth.
• Contact Information: An active Malaysian phone number and a valid email address.
• Account Security Information: Encrypted passwords, security questions (if selected), and two-factor authentication details.
• Payment Information: eWallet account numbers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) or bank account details (for withdrawals via FPX Maybank2u / CIMB Clicks). We do not store credit or debit card numbers.
• Verification Documents: A copy of your MyKad or passport submitted during the KYC (Know Your Customer) process, where required.

2.2 Automatically Collected Information

When you use the RM89 platform, our systems automatically collect certain technical information:

• Device Information: Device type, phone model, operating system, and web browser version.
• Connection Information: IP address, internet service provider (ISP) name, and country and city based on IP location.
• Usage Data: Pages visited, games played, bets placed, session duration, login frequency.
• Transaction Data: A complete record of all deposits, withdrawals, bets, winnings, and losses in your RM89 account.
• Cookie Data: Preference data, session data, and device identifiers stored through cookies and similar technologies.

2.3 Information from Third-Party Sources

In certain cases, RM89 may receive information about you from authorised sources:

• Third-party identity verification service providers we engage for KYC purposes.
• Payment service providers such as Touch 'n Go, GrabPay, and DuitNow, to verify transaction status.
• Recognised gambling exclusion bodies, to verify whether you are currently under an active self-exclusion period.

How We Use Your Personal Data

RM89 uses members' personal data only for legitimate purposes directly related to the operation of the platform. We do not use your data in ways you would not reasonably expect, or in any manner that conflicts with your interests. The following are the primary purposes for which your personal data is used:

3.1 Operations & Account Management

• Creating and managing your RM89 account, including the login and identity verification process.
• Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX.
• Processing winning withdrawals to your eWallet or Malaysian bank account.
• Automatically crediting bonuses, promotions, and game winnings to your account.
• Providing complete account statements and full transaction history for your reference.

3.2 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and violations of our terms of use.
• Detecting multiple account ownership through IP address analysis, device fingerprinting, and transaction pattern monitoring.
• Verifying that all financial transactions are carried out by the legitimate account holder.
• Meeting anti-money laundering (AML) compliance obligations in accordance with Malaysian law.

3.3 Responsible Gaming

Your gaming activity data is used to monitor playing patterns and identify signs of potential gambling-related issues. If the RM89 system detects concerning patterns — such as a sudden increase in bet sizes, unusually high play frequency, or persistent loss patterns — RM89 may proactively reach out to offer information on the responsible gaming tools available.

3.4 Communication and Customer Support

• Sending important account notifications such as deposit confirmations, withdrawals, and security updates.
• Providing customer support via live chat, email, and other official RM89 communication channels.
• Sending information about relevant promotions and bonuses (with your consent).
• Notifying you of important changes to the platform, terms of use, or privacy policy.

3.5 Platform Improvement

Non-identifiable usage data (anonymised) is used to analyse platform performance, understand usage patterns, and make data-driven decisions to improve the RM89 user experience. This includes analysis of the most popular games among Malaysian players, peak usage times, and technical issues that need to be resolved.

Data Sharing with Third Parties

RM89 does not sell or trade members' personal data. However, in the course of operating our platform, there are certain situations where we need to share your data with carefully selected third parties:

4.1 Payment Service Providers

Transaction information is shared with your chosen payment service provider — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and Malaysian banking institutions via FPX (Maybank2u, CIMB Clicks) — solely for the purpose of processing your deposits and withdrawals. These payment providers maintain their own privacy policies and are responsible for data protection within their own systems.

4.2 Game Providers

Game data is shared with RM89's game providers — such as Pragmatic Play, PG Soft, and Evolution Gaming — solely for the purposes of running game sessions, verifying results, and processing winnings. These providers are licensed companies with strict data protection obligations under the regulations of their respective gambling authorities.

4.3 Legal Requirements & Authorities

RM89 may be required to disclose members' personal data to the relevant authorities when mandated by Malaysian law, including:

• The Financial Intelligence Unit (FIU) under Bank Negara Malaysia for cases involving suspected money laundering.
• The Royal Malaysia Police (PDRM) or other enforcement agencies upon receipt of a valid court order.
• Relevant regulatory bodies during official investigations.

In all such cases, RM89 will disclose only the minimum data necessary to satisfy the relevant legal requirement.

4.4 Technical Service Providers

RM89 works with a number of third-party technical service providers who act as data processors on our behalf — including cloud computing providers, fraud detection systems, and customer support platforms. All such providers are bound by strict data protection agreements and are only permitted to use your data in accordance with RM89's instructions.

Data Security

RM89 continuously invests in security infrastructure to ensure members' personal data is protected to the highest practicable standard. The security measures we have implemented include:

5.1 Technical Security

• 256-bit SSL Encryption: All communications between your device and RM89's servers are secured with 256-bit SSL encryption via the latest TLS protocol.
• Data-at-Rest Encryption: Sensitive data stored in RM89's databases — including passwords and payment information — is encrypted using robust encryption algorithms.
• Two-Factor Authentication (2FA): RM89 members can enable 2FA in their account settings for an added layer of protection during login.
• Real-Time Monitoring: RM89's automated monitoring system tracks account activity in real time and will temporarily lock an account if suspicious activity is detected.
• Regular Penetration Testing: RM89 conducts regular security assessments (penetration testing) through independent third parties to identify and address any security vulnerabilities.

5.2 Internal Access Controls

Internal access to members' personal data at RM89 is strictly limited on a need-to-know basis. All access to member data is logged in audited records that are actively monitored. RM89 staff with access to sensitive data are required to sign confidentiality agreements and undergo background checks.

5.3 Security Incident Response

While RM89 takes all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a data breach that may affect your personal data, RM89 is committed to:

• Notifying affected members within a reasonable timeframe once a breach has been detected.
• Describing the types of data that may be affected and the protective steps you can take.
• Reporting incidents to the relevant authorities in accordance with Malaysian legal requirements.

Cookies & Tracking Technologies

The RM89 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small data files stored on your device by your web browser when you visit the RM89 platform.

6.1 Types of Cookies Used by RM89

• Essential Cookies (Required): These cookies are essential for core platform functions such as login session management, account security, and transaction processing. The RM89 platform cannot operate properly without them and they cannot be disabled.
• Performance Cookies (Optional): These cookies collect information about how you use the RM89 platform — such as the most frequently visited pages and any error messages encountered — to help us improve platform performance. All such information is aggregated and cannot be used to identify any individual.
• Functional Cookies (Optional): These cookies allow the RM89 platform to remember your preferences — such as your chosen language, display settings, and login details (if you select "Remember Me") — so we can deliver a more personalised and seamless experience.
• Analytics Cookies (Optional): We use anonymised analytics data to understand platform usage patterns and make data-driven improvements. This includes analysis of popular games, peak usage times, and technical issues that need to be addressed.

6.2 Managing Your Cookies

You can manage your RM89 cookie settings in several ways:

• Through the cookie settings panel available on your first visit to the RM89 platform, or via the settings icon at the bottom of the website.
• Through your web browser settings — all major browsers (Chrome, Firefox, Safari, Edge) allow you to delete or block cookies from specific websites.

Please note that disabling essential cookies will prevent core RM89 platform functions from working, and you may be unable to log in or complete transactions correctly.

Your Rights Over Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding the personal data held by RM89. We are committed to respecting and facilitating the exercise of these rights:

7.1 Right to Access Data

You have the right to request a copy of the personal data we hold about you. Requests can be made via live chat or by emailing support@rm89.my. RM89 will process your request within 21 business days. A valid first-time request is free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.

7.2 Right to Correct Data

If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Some information can be updated directly through your RM89 account settings. For changes to details that cannot be self-updated (such as your full name or IC number), please contact the RM89 support team with appropriate supporting documents.

7.3 Right to Withdraw Consent

For data processed on the basis of your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal. You may withdraw your marketing consent via your RM89 account settings or by contacting our support team.

7.4 Right to Object to Processing

In certain circumstances, you have the right to object to the way RM89 processes your data, particularly if you believe that processing is causing you undue harm or distress. Each objection will be assessed on its own merits and RM89 will provide a written response.

7.5 Right to Request Erasure

In certain circumstances, you may request the deletion of your personal data. However, this right is limited when:

• We are still under a legal obligation to retain that data (e.g., financial records for 7 years under Malaysian law).
• The data is required to resolve an ongoing dispute.
• The data is required to comply with a court order or regulatory requirement.

To submit any request relating to your rights, please contact RM89's Data Protection Officer by email at privacy@rm89.my.

Data Retention & Deletion

RM89 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by law. Retention periods vary depending on the type of data and the context in which it was collected, as set out in the table in Section 2.

8.1 Active Account Data

For as long as your RM89 account remains active, we will retain all data necessary to provide our services to you. Data will be updated whenever you submit new information or when our system detects a relevant change.

8.2 Data After Account Closure

When your RM89 account is closed — whether at your request or by RM89 — we will delete or anonymise data that is no longer required within a reasonable timeframe. However, certain data will be retained for periods prescribed by law:

• Financial and transaction records: 7 years (Malaysian legal requirement).
• Identity verification documents (KYC): 5 years after account closure.
• Security and account activity logs: retained for 3 years for fraud investigation purposes where necessary.

8.3 Deletion After Retention Period

Once the specified retention period has ended, RM89 will securely delete or anonymise the data using methods that ensure it cannot be recovered. Data deletion is carried out on a regular schedule set by the RM89 technology team.

Children's Privacy

The RM89 platform is a service intended exclusively for individuals aged 18 and above. RM89 does not knowingly collect or process personal data of children or minors.

If RM89 discovers that personal data belonging to an individual under the age of 18 has been collected through deception or without the knowledge of a parent or guardian, we will take the following steps immediately:

• Suspending the account in question immediately while an investigation is conducted.
• Deleting all personal data belonging to the individual concerned from RM89's systems.
• Returning any valid real-money balance to the payment method used for the original deposit.
• Reporting the incident to the relevant authorities where required.

Parents or guardians who believe their child may have registered an RM89 account without their knowledge are encouraged to contact the RM89 support team immediately via live chat or email at support@rm89.my.

Contact Us & Policy Updates

If you have any questions, concerns, or complaints regarding RM89's Privacy Policy or how we handle your personal data, there are several ways to get in touch with us:

10.1 Communication Channels

• Live Chat: RM89's support team is available 24/7 via the platform's live chat. This is the fastest way to get an immediate response.
• General Support Email: support@rm89.my — for general enquiries about your account and services.
• Privacy Email: privacy@rm89.my — dedicated to enquiries, requests, and complaints related to privacy and data protection.

10.2 Updates to This Privacy Policy

RM89 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform developments. When significant changes are made, RM89 will:

• Updating the "Last Updated" date at the top of this page.
• Displaying an in-platform notification upon your next login.
• Sending an email to the member's registered address when a change is significant and affects your privacy rights.

We encourage you to review this Privacy Policy page periodically to stay informed about how RM89 protects your information. Your continued use of the RM89 platform after any policy changes take effect will be considered acceptance of the updated terms.