Data Protection

Privacy Policy RM99 — Our Commitment to Protecting Your Personal Data

RM99 takes your privacy very seriously. This document clearly and transparently explains how we collect, use, store, and protect your personal information as a member of our online entertainment platform.

Updated: January 2026  |  Version: 2.4  |  Malaysia PDPA

Rm99's Six Privacy Guarantees to Malaysian Players

Before reading the full policy, here are rm99's key commitments to safeguarding your personal data privacy and security.

Full 256-bit SSL Encryption

All data transmitted between your device and rm99's servers is protected by 256-bit SSL encryption. This means no third party can intercept or read your information during data transfer.

No Sale of Data to Third Parties

RM99 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you, and we respect the trust you place in us.

Secure & Controlled Data Storage

All rm99 member personal data is stored on servers protected by layered access controls, continuous monitoring, and regular backups. Access to your data is granted only to staff who genuinely require it.

Full Control in Your Hands

You have the right to access, correct, download, or request the deletion of your personal data from rm99's systems at any time. We process your requests within the timeframe stipulated by law.

Malaysia PDPA Compliance

The rm99 Privacy Policy is designed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We continually ensure that our data handling practices meet or exceed all applicable legal requirements.

Immediate Data Breach Notification

In the event of any security breach affecting your personal information, rm99 is committed to notifying you and the relevant authorities within the timeframe required by law.

1. Introduction

RM99 ("we", "the rm99 platform") is fully committed to protecting the privacy and security of the personal information of every member and visitor to rm99.ceo. This Privacy Policy transparently describes our practices for collecting, processing, storing, and protecting your personal data.

This document is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. By using the rm99 platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read in conjunction with Terms and Conditions rm99. In the event of any conflict between the two documents, this Privacy Policy shall prevail for matters relating to data protection.

2. Personal Data We Collect

RM99 only collects personal data that is strictly necessary to provide our services. The following are the categories of data we collect:

Identity Data

  • Full name
  • Date of birth
  • IC / Passport number
  • Selfie photo (for KYC)

Contact Data

  • Email Address
  • Phone number
  • Residential Address
  • Communication preferences

Financial Data

  • Bank account information
  • Deposit & withdrawal records
  • Transaction history
  • Preferred payment method

Usage Data

  • Game history
  • Betting records
  • Gaming preferences
  • Gaming session duration

Technical Data

  • IP Address
  • Web browser type
  • Device type
  • System access logs

Communication Data

  • Support chat records
  • Feedback & Complaints
  • Email us
  • Survey responses
RM99 does not collect sensitive category data such as health information, political views, religious beliefs, or sexual orientation unless you voluntarily disclose it in communications with us.

3. How We Use Your Personal Data

Personal data collected by rm99 is used solely for legitimate and relevant purposes, including:

3.1 Account Management and Services

  • Creating and managing your rm99 account
  • Processing deposits and withdrawals in MYR
  • Verifying your identity through an integrated KYC process
  • Providing 24/7 customer support
  • Sending transaction and security notifications

3.2 Security and Compliance

  • Detecting and preventing fraud, money laundering, and abuse
  • Complying with legal obligations and anti-money laundering (AML) compliance requirements
  • Verifying age eligibility to ensure only players aged 18 and above can access the platform
  • Protecting the security of the platform and all its users

3.3 Service Improvement

  • Analysing usage patterns to enhance the player experience
  • Personalising game recommendations based on your preferences
  • Conducting market research and data analysis for business purposes

3.4 Marketing (Subject to Consent)

With your consent, we may use your data to send you information about relevant rm99 promotions, bonuses, and special offers. You may withdraw this marketing consent at any time through your account settings.

4. Legal Basis for Data Processing

RM99 processes your personal data on lawful legal bases under Malaysia's PDPA:

  • Contract: Processing required to fulfil the service agreement between you and rm99, including account management and payment processing.
  • Legal Obligation: Processing required to comply with applicable Malaysian laws, including AML/KYC requirements.
  • Legitimate Interests: Processing for security, fraud prevention, and service improvement purposes that are in the legitimate interests of rm99 and its users.
  • Consent: For direct marketing activities and certain data processing that requires your explicit consent.

5. Data Sharing with Third Parties

RM99 does not sell or trade your personal data. We may share your data only in the following limited and lawful circumstances:

5.1 Service Providers

We use trusted third-party service providers to support the operation of the rm99 platform — including payment processors, KYC verification providers, cloud service providers, and game suppliers. All third parties are bound by strict data protection agreements and may only use your data for specified purposes.

5.2 Authorities

RM99 will disclose personal data to government authorities, law enforcement, or regulatory bodies when required by Malaysian law or by a valid court order.

RM99 does not share your personal data with marketing companies, data brokers, or any third party for third-party advertising purposes without your explicit consent.

6. Data Security

RM99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, modification, or destruction:

  • 256-bit SSL/TLS encryption for all data in transit
  • Encryption of sensitive data at rest in the database
  • Tiered access control based on the principle of least privilege
  • Continuous monitoring by an intrusion detection system (IDS)
  • Regular security audits by independent parties
  • Regular data security training for all rm99 staff
  • Tested security incident response procedures
While we implement strict security measures, no system on the internet is 100% fully secure. You are also responsible for keeping your rm99 account password and login credentials safe.

7. Data Retention Period

RM99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, subject to applicable legal requirements:

  • Active account data: Retained for as long as your account is active with rm99.
  • Post-account closure data: Retained for a minimum of 5 years in accordance with Malaysia's AML legal requirements.
  • Financial transaction records: Retained for 7 years in accordance with accounting and tax requirements.
  • Security logs: Retained for 1 year for investigation and audit purposes.
  • Marketing data: Retained until you withdraw your consent or request deletion.

Once the retention period expires or the data is no longer required, rm99 will securely delete or anonymise it.

8. Your Rights Over Personal Data

Under Malaysia's PDPA and international data protection principles, you have the following rights regarding your personal data held by rm99:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of data under certain permitted circumstances.

Right to Restriction

Request restriction of data processing under certain circumstances.

Right to Portability

Request your data in a reusable format.

Right to Object

Object to the processing of your data for direct marketing purposes.

To exercise any of the above rights, please contact the rm99 Privacy team by email at [email protected]. We will respond within 30 business days. In certain situations, we may require identity verification before processing your request.

9. Cookies and Tracking Technologies

The rm99 website uses cookies and similar tracking technologies to enhance the user experience and collect analytics information:

9.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
  • Functional Cookies: Remembering your preferences such as language, currency, and display settings.
  • Analytics Cookies: Helping us understand how players use the rm99 platform for improvement purposes.
  • Security Cookies: Helping detect suspicious activity and protect your account.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the rm99 platform.

10. Cross-Border Data Transfers

As an online platform, your personal data may be stored or processed on servers located outside Malaysia — particularly in the context of cloud service providers and international game providers that partner with rm99.

In all such cases, rm99 ensures that such data transfers are carried out with adequate safeguards and in accordance with Malaysia's PDPA requirements — including through comprehensive data transfer agreements with all recipient parties.

RM99 only partners with service providers that comply with international data protection standards equivalent to or higher than Malaysia's PDPA requirements.

11. Child Protection

The rm99 platform is exclusively for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Our KYC process is specifically designed to verify each player's age before they can make their first deposit or withdrawal.

If we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who have concerns about their child's use of the rm99 platform are advised to contact our support team immediately.

12. Amendments to the Privacy Policy

RM99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to you via in-account notifications or email at least 14 days before the changes take effect.

The "Updated" date at the top of this page reflects the date of the most recent amendment. Your continued use of the rm99 platform after any amendment takes effect will be deemed as your acceptance of the revised policy.

13. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rm99 handles your personal data, please contact us:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 within the rm99 platform
  • Response Time: Within 30 days for data rights requests; general support within 24 hours.

You also have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner if you believe that rm99 has processed your personal data in a manner that violates the PDPA.

For general enquiries about the platform, games, or your account, please visit FAQ page us or contact customer support 24/7 via live chat within the rm99 platform.

Frequently Asked Questions on Data Privacy at RM99

No, absolutely not. RM99 does not sell, rent, or trade your personal data to any third party for marketing or any other commercial purposes. Your data is only shared with service providers necessary for platform operations (such as payment processors and KYC providers) and with authorities when required by Malaysian law. All third parties we work with are bound by strict confidentiality agreements.

The security of your financial information is rm99's highest priority. All financial data is protected by 256-bit SSL encryption during transmission and encrypted again at rest in our databases. Payment transactions are processed through PCI DSS-certified payment gateways that meet the highest payment industry security standards. rm99 staff have no access to your full bank account numbers or card details.

Yes, you have the right to request deletion of your personal data. However, certain limitations apply — RM99 is required under Malaysian law to retain financial transaction records and KYC data for a minimum of 5–7 years for AML compliance purposes. Data not subject to these statutory retention obligations may be deleted upon your request. To submit a request, please email [email protected].

When you close your rm99 account, your data is not deleted immediately. This is because we are required under Malaysian law to retain certain records for a specified period — typically 5 years for account data and 7 years for financial transaction records. Once this mandatory retention period expires, rm99 will securely delete or anonymise your data. Data not subject to mandatory retention requirements will be deleted within 90 days of account closure.

Your Privacy Is Protected — Play with Confidence at RM99

With industry-grade encryption, a transparent privacy policy, and a commitment to Malaysia PDPA compliance, your personal data is always safe at rm99. Register today and enjoy a secure and enjoyable gaming experience.

Restricted to users aged 18 and above.  |  Responsible Gaming  |  Terms and Conditions

Bahasa Melayu