Privacy Policy

Section 1

Introduction

This Privacy Policy ("Policy") describes how rmc88 ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("Users", "Members", "you", "your") who access or use the rmc88 website at https://rmc88.cam and any associated mobile-optimised interfaces or services (collectively, "the Platform").

rmc88 operates as an online gaming and sports betting platform serving Malaysian users and takes its obligations under applicable data protection law seriously. We process personal data only where we have a lawful basis to do so and only to the extent necessary for the purposes described in this Policy.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not use the Platform.

Your Privacy Matters: rmc88 does not sell your personal data to third parties. We do not share your data with advertisers for profiling purposes. Data shared with third parties is limited strictly to what is necessary for the performance of our services, legal compliance, and the prevention of fraud.

Section 2

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

"Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers.
"Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
"Data Controller" means rmc88, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
"Data Processor" means any third party engaged by rmc88 to process Personal Data on its behalf in accordance with rmc88's documented instructions.
"Cookies" means small text files placed on a User's device by the Platform for the purposes of session management, analytics, personalisation, and fraud prevention.
"KYC" means Know Your Customer — the identity and age verification process required to comply with anti-money laundering obligations.
"Sensitive Personal Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data, or biometric data used for unique identification, to the extent collected in connection with responsible gambling assessments.

Section 3

Data We Collect

rmc88 collects Personal Data in several ways: directly from you when you register, transact, or communicate with us; automatically as you use the Platform; and from third-party sources as part of our legal compliance obligations.

The categories of Personal Data we collect include, but are not limited to, the following:

Category	Examples	Source
Identity Data	Full legal name, date of birth, gender, national identification number (NRIC / passport number)	Provided by you during registration and KYC verification
Contact Data	Email address, mobile phone number, residential or mailing address (city, postcode, state within Malaysia)	Provided by you during registration or account updates
Financial Data	Bank account details, e-wallet identifiers (TNG eWallet, Boost, GrabPay), FPX transaction references, deposit and withdrawal history, account balance	Provided by you when making transactions; received from payment processors
Verification Documents	Copies of government-issued photo identification, proof of address documentation submitted for KYC purposes	Provided by you during the KYC verification process
Technical Data	IP address, device type, operating system, browser type, session timestamps, geolocation data (country and city level)	Collected automatically when you access the Platform
Usage Data	Games played, bet history, wagering patterns, session duration, pages visited, feature interactions	Collected automatically via Platform analytics
Communications Data	Content of live chat transcripts, support emails, dispute submissions, and feedback forms	Provided by you when contacting support
Marketing Preferences	Promotional opt-in or opt-out status, preferred communication channels, bonus claim history	Collected via account settings and inferred from usage patterns

rmc88 does not knowingly collect Sensitive Personal Data except where strictly necessary for responsible gambling monitoring or where required by applicable law. Any such collection will be subject to enhanced safeguards and will be clearly communicated at the time of collection.

Section 4

Legal Basis for Processing

rmc88 processes Personal Data only where it has a valid legal basis to do so. The legal bases on which we rely are as follows:

Performance of a Contract: Processing necessary to enter into and perform the contractual relationship created when a User registers an account and uses the Services — including account management, transaction processing, KYC verification, and customer support.
Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification duties, fraud prevention obligations, and responses to lawful requests from competent authorities.
Legitimate Interests: Processing undertaken in furtherance of rmc88's legitimate business interests, including platform security, fraud detection, responsible gambling monitoring, product improvement, and business analytics, provided such interests are not overridden by the fundamental rights and freedoms of the data subject.
Consent: Processing based on your freely given, specific, informed, and unambiguous consent, primarily in the context of direct marketing communications and non-essential cookie deployment. Consent may be withdrawn at any time without detriment to your account, except where processing on another legal basis continues to apply.

Section 5

How We Use Your Data

rmc88 uses Personal Data for the following purposes, in each case in accordance with the applicable legal basis identified in Section 4:

Account Creation and Management: To create, verify, and maintain your rmc88 Account, including the application of responsible gambling tools and account-level restrictions where appropriate.
Identity Verification (KYC): To verify your identity and age in compliance with applicable anti-money laundering obligations, with particular attention to the mandatory 21+ age requirement applicable to all Members.
Transaction Processing: To process deposits and withdrawals made via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and other supported payment methods in Malaysian Ringgit (MYR).
Service Delivery: To provide access to all gaming and betting services on the Platform, including slots, live casino, and sports betting markets such as EPL, Liga Super Malaysia, and UFC events.
Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, multi-account registration, and other forms of prohibited conduct.
Customer Support: To respond to your enquiries, investigate complaints, and resolve disputes via our 24/7 live chat and support email channels.
Legal Compliance: To fulfil our obligations under applicable law, including cooperating with regulatory investigations and responding to lawful court orders or authority requests.
Responsible Gambling: To monitor wagering patterns for signs of problem gambling behaviour, to implement requested account restrictions, and to deliver responsible gambling notifications where warranted.
Marketing Communications: To send you promotional offers, bonus notifications, and product updates where you have opted in to receive such communications. You may opt out at any time via account settings or by contacting support.
Product Improvement: To analyse aggregated usage data for the purposes of improving the Platform's performance, user experience, and product offering.

Section 6

Data Sharing & Disclosure

rmc88 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We share Personal Data only in the following circumstances and to the minimum extent necessary:

Payment Processors: We share transaction-related data with licensed payment service providers (including FPX operators, bank partners such as Maybank and CIMB, and e-wallet operators such as Touch 'n Go eWallet and Boost) to facilitate the processing of deposits and withdrawals.
KYC and Identity Verification Providers: We engage third-party identity verification services to conduct document authentication and age verification as part of our KYC obligations.
Game Studio Providers: Certain game usage data (session identifiers, bet amounts) may be shared with licensed game studio partners to facilitate gameplay and resolve technical disputes.
Fraud Prevention and Security Partners: We work with third-party risk management and anti-fraud service providers who process data on our behalf to detect and prevent fraudulent activity.
Legal and Regulatory Authorities: We will disclose Personal Data to competent government authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or in connection with the investigation of suspected illegal activity, including money laundering.
Professional Advisers: We may share Personal Data with lawyers, auditors, and financial advisers on a confidential basis where necessary for the conduct of legal proceedings, audits, or corporate transactions.
Business Succession: In the event of a merger, acquisition, restructuring, or sale of all or part of rmc88's business, Personal Data held by rmc88 may be transferred to the acquiring entity, subject to the same level of data protection obligations as set out in this Policy.

No Advertising Networks: rmc88 does not share your Personal Data with advertising networks, data brokers, or social media platforms for the purpose of targeting you with third-party advertisements.

Section 7

Cookies & Tracking Technologies

rmc88 uses cookies and similar tracking technologies to ensure the proper functioning of the Platform, to maintain session security, and to analyse usage patterns for the purpose of improving the Member experience. The categories of cookies we deploy are as follows:

Strictly Necessary Cookies: Essential for the operation of the Platform. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing core platform functionality. No consent is required for these cookies.
Functional Cookies: Used to remember your preferences such as language settings, preferred game categories, and responsible gambling tool configurations. These enhance the user experience but are not essential to core functionality.
Analytics Cookies: Used to collect aggregated statistical data about how Members use the Platform, including which pages are visited most frequently and how long sessions last. This data is used to improve Platform performance. Analytics cookies require your consent where non-essential.
Fraud Prevention Cookies: Used to identify patterns consistent with fraudulent activity, multi-account registration, or bot behaviour. These operate on a legitimate interests basis and cannot be disabled without impairing our security obligations.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality and performance of the Platform. For Strictly Necessary and Fraud Prevention cookies, browser-level opt-outs may not be fully effective.

Section 8

Data Retention

rmc88 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as otherwise set out in this Policy. The following general retention periods apply:

Account and Identity Data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following permanent Account closure, to satisfy anti-money laundering record-keeping obligations.
Transaction Records: Financial transaction data, including deposit and withdrawal records denominated in MYR, is retained for a minimum of seven (7) years to comply with applicable financial recordkeeping requirements.
KYC Documents: Copies of identity and address verification documents submitted during the KYC process are retained for the period required by applicable anti-money laundering regulation, generally five (5) years following the termination of the business relationship.
Communications Data: Live chat transcripts and support email correspondence are retained for a period of two (2) years from the date of the last interaction.
Usage and Analytics Data: Aggregated analytics data is retained for up to three (3) years from collection. Individual-level usage data is typically anonymised after twelve (12) months.
Marketing Preferences: Opt-in records and communication preferences are retained for the duration of the Account relationship and for two (2) years following closure, to demonstrate compliance with consent obligations.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with rmc88's internal data lifecycle management procedures.

Section 9

Security Measures

rmc88 implements appropriate technical and organisational measures designed to protect Personal Data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our security measures include:

Encryption: All data transmitted between your browser and the Platform is protected using TLS 1.2 or higher encryption. Sensitive data at rest, including financial records and KYC documents, is encrypted using industry-standard protocols.
Access Controls: Access to Personal Data is restricted on a need-to-know basis. Staff with access to Personal Data are subject to confidentiality obligations and regular security training.
Two-Factor Authentication: rmc88 offers two-factor authentication (2FA) for Member accounts and enforces 2FA for all internal staff accessing Personal Data systems.
Infrastructure Security: Our servers are hosted in secure data centre environments with physical access controls, redundant systems, and continuous availability monitoring.
Vulnerability Management: rmc88 conducts regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses in the Platform.
Incident Response: In the event of a data breach involving Personal Data, rmc88 has an incident response procedure in place. Where required by applicable law, affected Members and relevant authorities will be notified in a timely manner.

While rmc88 applies rigorous security standards, no transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Members are responsible for maintaining the confidentiality of their own Account credentials.

Section 10

Your Rights

Subject to applicable law and certain conditions, you hold the following rights in relation to the Personal Data rmc88 holds about you:

Right of Access: You have the right to request confirmation of whether rmc88 processes Personal Data about you, and if so, to receive a copy of that data along with information about how it is processed.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete Personal Data held about you without undue delay.
Right to Erasure: In certain circumstances, you have the right to request the deletion of your Personal Data. This right is subject to exceptions, including where we are required to retain data to comply with legal obligations such as AML record-keeping requirements.
Right to Restriction of Processing: You have the right to request that we temporarily restrict the processing of your Personal Data in certain circumstances, such as where the accuracy of the data is contested or where you have objected to processing pending verification of our legitimate grounds.
Right to Data Portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object to the processing of your Personal Data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our Data Privacy team via the support channels set out in Section 14 of this Policy. We will respond to all valid requests within a reasonable timeframe consistent with applicable law. We may require you to verify your identity before processing a data request.

Section 11

Minors & Age Restriction

rmc88 is an adult gaming platform. Our Services are strictly restricted to individuals who are at least twenty-one (21) years of age. rmc88 does not knowingly collect Personal Data from persons under the age of 21.

We apply mandatory age verification controls as part of the KYC process and actively monitor for indicators of underage access. Where we have reason to believe that an Account has been registered by or is being used by a person under the age of 21, we will immediately suspend that Account, investigate the matter, and delete any associated Personal Data to the extent permitted by applicable law and our legal obligations.

If you believe that a minor may have registered on the Platform using falsified information, please contact our support team immediately at [email protected] (plain text only — not a clickable link).

Parental Advisory: rmc88 strongly encourages parents and guardians to use parental control tools to restrict access to online gambling sites on devices accessible to minors. rmc88 is not liable for losses incurred through accounts created with fraudulent age information.

Section 12

Cross-Border Data Transfers

rmc88 may engage Data Processors and infrastructure providers who operate outside of Malaysia, including in jurisdictions within Southeast Asia, Europe, and North America. Where Personal Data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that applicable within Malaysia, rmc88 will ensure that appropriate safeguards are in place to protect such data, including:

Execution of data processing agreements with receiving entities that include contractual data protection obligations;
Transfer to entities certified under internationally recognised data protection frameworks where applicable;
Application of technical safeguards including encryption during transfer and at rest in the destination jurisdiction.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia as described in this Policy.

Section 13

Policy Amendments

rmc88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the structure of our business. The date of the most recent revision is displayed prominently at the top of this page.

Where changes are material — meaning they significantly affect how we process your Personal Data or the rights available to you — we will provide prior notice via the Platform or by email to the address registered to your Account. For minor or administrative updates, changes may take effect upon publication.

We encourage you to review this Policy periodically. Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the amended terms. If you do not agree to the revised Policy, you must discontinue use of the Platform and contact support to arrange Account closure.

Section 14

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or rmc88's processing of your Personal Data, please contact us through any of the following channels. All privacy-related enquiries will be handled in accordance with applicable data protection law and rmc88's internal privacy governance procedures.

Data Privacy Enquiries (Email): [email protected] — please include "Privacy Request" in the subject line of your message (plain text address — not a clickable link).
Business Enquiries: [email protected] (plain text address — not a clickable link).
Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the Platform. Average response time under 90 seconds.

rmc88 will acknowledge receipt of all formal privacy requests within two (2) business days and will respond substantively within thirty (30) calendar days of receipt, or within such shorter period as may be required by applicable law. Where a request is complex or involves a high volume of data, we may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reasons for it.

Right to Complain: If you are dissatisfied with how rmc88 has handled your Personal Data or responded to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.