RM 68 Privacy Policy – Data Protection for Malaysian Players

This Privacy Policy is published by RM 68 ("we", "the RM 68 platform") and applies to all users who register, access, or interact with the RM 68 platform in any capacity. By using RM 68's services, you agree to the data collection and processing practices described in this document.

RM 68 operates as an online casino entertainment platform offering slots, Live Casino, roulette, and Sports Betting for adult players in Malaysia. In providing these services, we need to collect and process certain personal data to ensure the platform operates safely, fairly, and seamlessly.

This Privacy Policy is drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. We are committed to ensuring your personal data is handled with full responsibility, transparency, and respect.

How your data flows at RM 68:

RM 68 collects only the data strictly necessary to provide and improve our services. The following are the categories of data we may collect:

A. Registration & Identity Data

• Full name (as shown on official identification documents)
• Malaysia National Identity Card (MyKad) number or passport number
• Date of birth (for age verification)
• Residential address in Malaysia
• Malaysia mobile phone number
• An active email address

B. Financial & Transaction Data

• E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay)
• Registered DuitNow information
• Bank name and FPX account number (Maybank2u, CIMB Clicks) for withdrawal transactions
• Records of all deposits, withdrawals, and in-platform transactions
• All betting activity and game records

C. Technical & Usage Data

• Device IP address
• Browser type and operating system
• Login and logout records
• Pages visited and session duration
• Cookie data and similar tracking technologies

RM 68 uses the personal data collected for the following legitimate purposes:

1. Identity Verification (KYC): Verifying that you meet the age and eligibility requirements to use the RM 68 platform
2. Account Management: Creating, maintaining, and managing your RM 68 account, including betting records and balance
3. Transaction Processing: All deposits are processed via Touch 'n Go, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, and ShopeePay, with withdrawals made to your registered account
4. Service Provision: Enabling you to play slots, Live Casino, roulette, and place Sports Betting wagers on the RM 68 platform
5. Legal Compliance: To fulfil our obligations under PDPA 2010 and related regulations, including anti-money laundering (AML) requirements
6. Platform Security: Detecting and preventing fraud, unauthorised access, and illegal activity on the RM 68 platform
7. Service Improvement: Analysing usage patterns to improve the interface and overall user experience
8. Important Communications: Sending account-related notifications, transaction updates, and important policy changes
9. Marketing (with consent): RM 68 promotional offers and bonuses are communicated only to users who have opted in to receive them

RM 68 does not sell, rent, or commercialise your personal data to any third party. However, under limited circumstances as outlined below, we may need to share your data with:

• Payment Providers: E-wallet service providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banking platforms (DuitNow, FPX) for processing your financial transactions
• Game Providers: Gaming software providers such as Evolution, Pragmatic Play, PG Soft, and Habanero that supply games on the RM 68 platform — only the minimum data necessary for technical purposes
• Authorities: Law enforcement agencies, regulatory bodies, or courts when required by Malaysian law
• Technical Service Providers: Third-party companies that provide IT infrastructure, hosting, and technical services to RM 68, all of whom are bound by strict confidentiality agreements

All third parties that receive your data from RM 68 are required to uphold data protection standards equivalent to or exceeding Malaysia's PDPA requirements. RM 68 does not permit third-party partners to use your data for their own independent marketing purposes.

RM 68 implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, disclosure, modification, or destruction:

• Encryption in Transit: All communications between your browser and the RM 68 platform are encrypted using TLS 1.3 with AES-256 encryption
• Encryption at Rest: Data stored in RM 68's database is encrypted using AES-256 encryption
• Access Controls: Access to users' personal data is restricted to RM 68 staff with a legitimate business need, applying the principle of least privilege
• Two-Factor Authentication: RM 68's internal systems are protected with multi-factor authentication
• Continuous Monitoring: Our security systems are monitored around the clock to detect any threats or suspicious activity
• Security Audits: Regular independent security audits are conducted to ensure our standards remain current and up to date

RM 68 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under Malaysian law:

• Active Account Data: Retained for as long as your account is active and for 5 years following account closure
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian accounting and AML legal requirements
• Security Logs: Retained for 12 months for fraud detection and security purposes
• Marketing Data: Deleted within 30 days of your withdrawal of consent
• Withdrawal Request Data: Retained for 7 years for financial compliance purposes

Once the relevant retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

Under Malaysia's PDPA 2010 and RM 68's commitment to privacy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the RM 68 privacy team by email at privacy@rm68.biz. All requests will be processed within 14 working days.

The RM 68 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can manage cookie settings through your browser. Please note that disabling essential cookies may affect the functionality of the RM 68 platform. Marketing cookies are only activated once you have given explicit consent.

The RM 68 platform is for users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of an underage individual has been collected without proper age verification, we will promptly delete that data and terminate the account in question. Parents or guardians who find that a child under their care has registered on RM 68 are requested to contact us at privacy@rm68.biz immediately.

RM 68 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business practices. Any amendments take effect as soon as they are published on this page.

For material and significant amendments, RM 68 will notify users via:

• In-platform notification upon your next login
• Email to the address registered with your RM 68 account
• A prominent notice on the main page of this Privacy Policy

It is your responsibility to review this Privacy Policy periodically. The date of the most recent revision is always displayed at the top of this document. Continued use of the RM 68 platform following any amendments constitutes your acceptance of the updated policy.

If you have any questions or concerns, or wish to exercise your privacy rights, please contact the RM 68 Data Privacy Officer at:

• Privacy Email: privacy@rm68.biz
• Support Email: support@rm68.biz
• Live Chat: Available 24/7 on the RM 68 platform

We are committed to responding to all privacy-related enquiries within 14 working days. For more complex requests, we will inform you of a more precise timeframe upon receiving your enquiry.

If you are not satisfied with RM 68's response to your privacy complaint, you have the right to contact the Personal Data Protection Department under the Malaysian Ministry of Communications and Digital.