Rm68 Privacy Policy – We Protect Your Data

Rm68 values the privacy of every user who trusts our platform. We recognize that personal information is a trust you place in us, and we take full responsibility for ensuring that data is handled with care, security, and in accordance with applicable legal provisions.

This Privacy Policy is drafted to comply with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and international standards on data protection. It explains the types of data we collect, how we use it, who may access it, and what rights you hold as the data owner.

If you have any questions about how we manage your data, the rm68 privacy team can be reached via live chat or the support email listed at the end of this document.

Rm68 only collects data that is strictly necessary to provide you with a safe, seamless, and high-quality service. The following are the categories of data we collect:

Your personal data is collected through the following methods when you interact with the rm68 platform:

• Account Registration: When you register a rm68 account, you provide basic information such as your name, email, phone number, and password.
• Identity Verification (KYC): To meet legal compliance requirements, you are required to upload a valid copy of your identification document during the identity verification process.
• Financial Transactions: Data related to deposits and withdrawals is collected automatically whenever you carry out any financial transaction on the platform.
• Platform Usage: Our system automatically logs activity records, including login times, games played, wagering amounts, and game outcomes.
• Communications with Support: Any conversations via live chat or email with our support team will be stored for reference and service improvement purposes.
• Cookies and Tracking Technology: The rm68 platform uses cookies and similar technologies to collect session data and user preferences. Further details are explained in Section 7.

Rm68 uses your personal data solely for legitimate and necessary purposes to enable us to deliver the best possible service. The purposes for data usage are as follows:

• Account Management: Creating, verifying, and managing your user account, including processing registration applications and identity verification.
• Transaction Processing: Processing deposits and withdrawals quickly and securely to the payment method registered in your name.
• Security and Fraud Prevention: Detecting and preventing unauthorized access, fraudulent activity, money laundering, and any misuse of the platform.
• Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and reporting requirements to the relevant authorities in accordance with Malaysian law.
• Product Improvement: Analyzing usage patterns to improve platform performance, introduce new features, and personalize the user experience.
• Service Communications: Sending important notices regarding your account, terms updates, security information, and transaction confirmations.
• Marketing (with consent): Sending promotional information, bonuses, and special offers to users who have consented to receive marketing communications.
• Customer Support: Resolving inquiries, complaints, and support requests more efficiently based on records of previous interactions.

Rm68 will not use your data for any purpose other than those stated above without first obtaining your renewed consent.

Rm68 never sells, rents, or trades your personal data to any third party for marketing or commercial purposes. Your data is only shared under the following limited circumstances:

• Payment Service Providers: Minimum required transaction data is shared with registered banks, e-wallet providers, and payment processors to facilitate your deposits and withdrawals.
• Game Service Providers: Game session data is shared with game software providers integrated with the rm68 platform solely for the purpose of delivering the gaming experience.
• Authorities and Regulatory Bodies: rm68 will disclose required data to legal authorities, courts, or regulatory bodies when required to do so by applicable law or a valid court order.
• Affiliated Companies: Data may be shared within the rm68 group of companies for internal management, audit, and corporate compliance purposes, subject to equivalent protections.
• Technical Service Providers: The hosting, cybersecurity, and analytics providers we use may process your technical data, subject to strict data protection agreements.

Every third party that receives your data is required to comply with the data protection standards set by rm68 and applicable Malaysian law.

Protecting your personal data from unauthorized access, breaches, or misuse is one of rm68's top priorities. We implement multiple layers of technical and organizational safeguards to ensure your data remains secure at all times.

• 256-bit SSL Encryption: All data transmitted between your device and rm68's servers is protected with banking-grade SSL encryption, ensuring no third party can intercept or read your data in transit.
• Stored Data Encryption: Sensitive data such as passwords and financial information is stored in encrypted form using internationally recognised encryption algorithms.
• Strict Access Controls: Only rm68 staff with specific authorisation may access users' personal data, and every access is logged for audit purposes.
• 24/7 Security Monitoring: rm68's automated monitoring system is active around the clock to detect any suspicious activity or intrusion attempts.
• Regular Security Testing: The rm68 platform undergoes regular penetration testing and security audits conducted by independent security experts.
• Two-Factor Authentication: Users are encouraged to enable two-factor authentication (2FA) for an added layer of security on their accounts.

The rm68 platform uses cookies and similar tracking technologies to improve user experience, maintain session security, and analyze platform usage. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session management, security, and basic preferences. They cannot be disabled as they are critical to platform operation.
• Performance Cookies: Used to analyse how users interact with the platform — most frequently visited pages, response times, and navigation patterns — for improvement purposes.
• Functional Cookies: Storing user preferences such as language settings, time zone, and display options to deliver a more personalized experience.
• Session Cookies: Temporary cookies that are automatically deleted when you close your browser. They are used to maintain session continuity while you are active on the platform.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality and security of the rm68 platform for you.

As an rm68 user and owner of your personal data, you have the following rights guaranteed under Malaysia's Personal Data Protection Act 2010:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If the data we hold is inaccurate or outdated, you have the right to request a correction within a reasonable timeframe.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data, subject to legal compliance requirements and mandatory minimum retention periods.
• Right to Restriction of Processing: You may request that we restrict how your data is processed in certain situations, such as while a dispute over data accuracy is being investigated.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time.
• Right to Complain: If you believe your privacy rights have been violated, you have the right to lodge a complaint with rm68 or directly with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the rm68 privacy team via live chat. We will process your request within 14 working days and inform you of the action taken.

Rm68 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for the lifetime of your active account on the rm68 platform.
• Financial Transaction Records: Retained for a minimum of 7 years after a transaction is made, in compliance with Malaysia's accounting and AML legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account termination or the date the document was last updated.
• Security and Activity Logs: Retained for 2 years for security investigation and audit purposes.
• Support Communication Records: Retained for 3 years for reference and service improvement purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the designated retention period has ended, data that is no longer required will be securely deleted or anonymized so it can no longer be linked back to you.

The rm68 platform may contain links or integrations with third-party services such as game providers, payment processors, and customer support service providers. It is important that you understand the following:

• The rm68 Privacy Policy applies only to platforms and services operated directly by rm68.
• When you interact with third-party services linked to our platform, the respective privacy policies of those third parties will apply.
• Rm68 is not responsible for the privacy practices or content of third-party websites or services, even if they are accessible through our platform.
• We encourage you to read and understand the privacy policy of every third-party service you use.

Rm68 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legislative changes, or platform service expansions.

When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying clear change notices on the rm68 platform
• Sending email notices to registered users for material changes

Continued use of the rm68 platform after any changes to the Privacy Policy take effect constitutes your acceptance of and agreement to the latest version of the policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us via:

• Live Chat: Available 24/7 directly on the rm68 platform — the fastest way to get a response
• Privacy Email: [email protected] (display text only)
• FAQ: Visit FAQ page for answers to frequently asked questions related to privacy

The rm68 privacy team will process each request within 14 business days. For complex requests or those requiring additional identity verification, processing may take longer and we will keep you informed of the latest updates.