Official Documents

Rm888 Privacy Policy – Personal Data Protection Malaysian Players

This page provides a detailed explanation of how rm888 collects, uses, stores, and protects the personal data of all our members in Malaysia. We believe you have the right to know exactly what happens to your information — and we are fully committed to protecting it.

Last updated: 1 January 2026
256-bit SSL
Officially Licensed
Data Protected
24/7 BM Support
Trusted Since 2018
256-bit
SSL Encryption Active
0
Data Sold to Third Parties
2FA
Two-Factor Authentication Available
24/7
Security Monitoring

Rm888's Six Data Protection Commitments

How rm888 concretely protects the privacy and personal data of every member in Malaysia

256-bit SSL Encryption

All data transmitted between your device and rm888 servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks such as Maybank and CIMB. The padlock icon in your browser's address bar confirms that your connection to rm888 is secure and fully encrypted at all times.

No Sale of Data to Third Parties

Rm888 does not sell, rent, or commercially exploit member personal data to any third party for marketing or commercial purposes. Your data is not a product we trade in. We share only the minimum information necessary to process your transactions with licensed payment service providers such as FPX, Touch 'n Go eWallet, DuitNow, and GrabPay — and even then, only what is strictly required to complete the transaction.

Your Data, Your Control

As an rm888 member, you have full rights to access, correct, or request deletion of your personal data at any time. You may also withdraw consent to receive marketing communications without affecting your right to continue using the rm888 platform. All personal data requests are processed within 14 business days.

Fund & Data Segregation

Rm888 member funds are held in accounts that are completely separate from the company's operational accounts — meaning your money cannot be used for rm888's business operations under any circumstances. The same principle applies to data — the systems storing members' personal data are isolated from the platform's operational systems, with strict access control layers in place to prevent any unauthorised access.

Mobile Account Security

Rm888 strongly recommends that all members enable two-factor authentication (2FA) in their account settings. With 2FA active, every login attempt from a new device requires a verification code sent to your registered Malaysian mobile number — a code only you can receive. This adds a highly effective layer of protection even in the event that your password is compromised.

Periodic Policy Updates

The rm888 Privacy Policy is reviewed on a regular basis to ensure it reflects current practices and meets all applicable data protection legal requirements. Any significant changes to this policy will be communicated to members via their registered email and in-platform notifications before those changes take effect — you will never be caught off guard by updates made without notice.

This Privacy Policy explains how rm888 ("we", "the platform") collects, uses, stores, and protects your personal information ("member", "you") when you register and use the rm888 platform in Malaysia. By creating an rm888 account, you agree to the collection and use of data as described in this policy.

1Personal Data We Collect

Rm888 collects several categories of personal data when you use our platform. We only collect data that is genuinely necessary to provide the services you request and to ensure the platform operates securely and fairly:

Data Category Sample Information How It's Collected
Identity Data Full name, date of birth, MyKad/passport number Registration form & KYC verification
Contact Data Malaysia phone number, email address Registration form
Transaction Data Deposit history, withdrawal history, payment method names Automatically upon each transaction
Game Data Betting records, games played, play sessions Automatically during platform use
Technical Data IP address, device type, web browser, operating system Automatically upon visiting the platform
Cookie Data Language preferences, login sessions, display settings Cookies and similar tracking technologies

Rm888 does not collect more information than is necessary to provide our services. We do not request credit card details or bank account information directly — all financial transactions are processed through licensed third-party payment gateways such as FPX, Touch 'n Go eWallet, DuitNow, GrabPay, Boost, and ShopeePay, each of which maintains its own privacy policy and security standards.

Rm888 will never ask for your account password, PIN, or OTP via email, phone, or live chat. If anyone claims to be an rm888 representative and requests such information, please report it to our customer support team immediately.

2How We Use Your Personal Data

The data we collect is used for specific, legitimate purposes. Below is a full list of how rm888 uses members' personal data:

  • Platform service provision — Processing account registrations, verifying identities, handling deposits and withdrawals, and ensuring uninterrupted access to all rm888 games and services.
  • Security & Fraud Prevention — Detecting and preventing fraudulent activity, bot usage, multiple account ownership, money laundering, and any form of platform manipulation. This includes analysing unusual betting patterns and cross-checking registration information.
  • Service communications — Sending important notifications related to your account — including transaction confirmations, security alerts, policy updates, and essential service information. These communications cannot be opted out of as they are directly tied to the security of your account.
  • Marketing communications (with consent) — To send information about rm888 promotions, bonuses, and the latest offers via email or SMS, but only where you have given consent to receive such communications. You may withdraw this consent at any time through your account settings or by contacting the rm888 customer support team.
  • Platform improvements — Analysing usage data in aggregate (not individual data) to understand how players use the rm888 platform and to make improvements to interface design, game selection, and the overall experience.
  • Responsible gaming — Monitoring gameplay patterns to identify early signs of problem gambling and to activate appropriate self-exclusion tools to protect members who may need assistance.
  • Legal compliance — To meet legal obligations applicable to the operation of the rm888 platform, including reporting requirements to relevant authorities where required by law.

3Sharing Data with Third Parties

Rm888 does not sell or commercialise members' personal data. That said, in the course of operating the platform, we do need to share certain data with carefully selected third parties in the following categories:

  • Payment service providers — Licensed payment gateways that process your deposit and withdrawal transactions — FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, DuitNow, GrabPay, Boost, and ShopeePay. Data shared is limited strictly to the information required to complete the transaction. All of these payment providers maintain strict data security standards and are bound by data protection agreements with rm888.
  • Licensed game providers — Game providers such as Pragmatic Play, PG Soft, Habanero, Evolution Gaming, and Spribe receive only the limited data required to run games within the rm888 platform — typically an anonymised player ID and the betting information needed for game functionality. All of these providers are internationally licensed companies bound by their own strict privacy policies.
  • Legal authorities — rm888 will disclose members' personal data to relevant authorities where required to do so by law, court order, or in the context of a legitimate investigation into unlawful activity. Such disclosures are made solely out of legal obligation and not as a matter of business choice.
  • Technical service providers — Cloud infrastructure and technical service providers that assist in the operation of the rm888 platform may have limited access to data in the course of delivering their technical services. All such providers are bound by strict confidentiality and data protection agreements with rm888.

All third parties working with rm888 are contractually bound to handle your data in accordance with the data protection standards set by rm888 — no third party is permitted to use your data for any purpose beyond the agreed scope.

4rm888 Data Security Measures

Rm888 invests seriously in data security infrastructure to protect the personal and financial information of all our members. The following are the key security measures we have implemented:

  • 256-bit SSL Encryption — All communications between your browser and rm888's servers are protected with Transport Layer Security (TLS) encryption using 256-bit keys. This ensures that data transmitted — including login credentials and transaction details — cannot be intercepted or read by any party between your device and rm888's servers.
  • Secure password storage — Your rm888 account password is never stored in plain text. rm888 uses a robust hashing algorithm with salting to store passwords — meaning that even in the highly unlikely scenario where the rm888 database is exposed, your actual password cannot be recovered by any party.
  • Two-Factor Authentication (2FA) — rm888 provides and encourages the use of two-factor authentication for all accounts. With 2FA active, every login attempt from an unrecognised device requires a six-digit verification code sent to your registered Malaysian mobile number — providing a highly effective additional layer of protection.
  • Continuous security monitoring — rm888's systems are continuously monitored by our security team to detect any unusual activity or unauthorised access attempts. Any identified threats are addressed promptly in accordance with established incident response protocols.
  • Regular penetration testing — rm888 conducts regular security testing, including penetration testing by independent security experts, to identify and patch any vulnerabilities in our systems before they can be exploited by malicious parties.
  • Strict internal access controls — Access to rm888 members' personal data is restricted to staff who genuinely require it to perform their duties. All access is logged and regularly audited. No rm888 staff member may access a member's personal data without a legitimate, accountable business reason.

5Cookies & Tracking Technologies

Rm888 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

  • Essential cookies — These cookies are required for the core functionality of the rm888 platform — including maintaining your login session as you navigate the platform and processing your financial transactions. Without these cookies, the rm888 platform will not function properly. You cannot opt out of these essential cookies without affecting platform functionality.
  • Preference cookies — These cookies store your preferences such as display language, theme, and other settings so you do not have to reconfigure them every time you visit the rm888 platform. They improve your overall experience but are not essential to the platform's core functionality.
  • Analytics cookies — rm888 uses analytics cookies to understand how players use our platform in aggregate — which pages are visited most frequently, how long players spend in each section, and where they exit the platform. This data helps us improve the platform but does not identify you personally.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the rm888 platform. For more information on how to manage cookies in popular browsers in Malaysia, please refer to the help section of Chrome, Safari, or Firefox, whichever you use.

6Your Rights as a Data Subject

As an rm888 member, you have several rights regarding your personal data, which we fully respect. These rights can be exercised at any time by contacting our team:

Right of Access

You have the right to request a copy of all personal data we hold on you. rm888 will provide a complete personal data report within 14 business days of receiving your request.

Right to Rectification

If any personal data we hold on you is inaccurate or out of date, you have the right to request a correction. We will update the relevant data within seven business days of completing your identity verification.

Right to Erasure

You have the right to request deletion of your personal data ("right to be forgotten") under certain circumstances — such as when the data is no longer required for the purpose it was collected. This request is subject to rm888's legal obligations to retain certain records.

Right to Restrict Processing

You have the right to request that rm888 restrict the processing of your personal data in certain circumstances — for example, while you are contesting the accuracy of the data or while you are considering whether to exercise your right to erasure.

Data Portability Right

You have the right to receive the personal data you have provided to rm888 in a machine-readable format (JSON or CSV) so that you can transfer it to another service provider should you wish to do so.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Once you object, rm888 will immediately stop using your data for that purpose, no questions asked.

To exercise any of the rights above, please contact the rm888 Privacy Officer by email at privacy@rm888.express or via live chat customer support. Please include your full name and registered phone number for identity verification. All requests will be processed within 14 business days.

7Data Retention Period

Rm888 does not retain your personal data for longer than is necessary for the purpose for which it was collected. Below is a guide to data retention periods by category:

  • Active account data — For as long as your rm888 account remains active, we retain all relevant personal data and gameplay records in order to provide our services and meet our legal obligations.
  • Financial records & transaction data — Financial transaction records — including deposits, withdrawals, and betting history — are retained for seven years from the date of the relevant transaction, or longer if required by applicable law. This is the standard requirement for financial protection compliance and anti-money laundering purposes.
  • Closed account data — After an rm888 account is closed at a member's request (and not due to fraud), core personal data will be retained for the period prescribed by law before being securely deleted from our systems.
  • Cookie data — Session cookies expire when you close your browser. Persistent cookies have a set validity period of between 30 days and 12 months, depending on their function.

Once the relevant retention period has expired, rm888 securely deletes or anonymises the data using industry-standard data destruction methods — ensuring that deleted data cannot be recovered by any party.

8Contact the rm888 Privacy Officer

Rm888 has appointed a Data Privacy Officer responsible for overseeing compliance with this privacy policy and handling all enquiries and requests related to members' personal data. You can reach the rm888 Privacy Officer through the following channels:

  • Dedicated Privacy Email — Send an email to privacy@rm888.express for all privacy and personal data enquiries and requests. This inbox is monitored exclusively by rm888's privacy team and receives a response within 2 to 3 business days.
  • General customer support — For general privacy enquiries, you may also reach the rm888 customer support team via live chat on the platform or by emailing our general support address at support@rm888.express. Privacy-related enquiries will be routed to the Privacy Officer for handling.

All personal data rights requests will be acknowledged within 48 hours and fully resolved within 14 business days of receipt. If your request requires additional time due to its complexity, we will notify you of the delay and provide an updated timeframe.

9Changes to This Privacy Policy

Rm888 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in platform operations. The "Last updated" date at the top of this page will always reflect the date of the current version of this policy.

For significant and material changes — such as changes to the categories of data collected, the purposes for which data is used, or the sharing of data with new parties — rm888 will notify members via their registered email address and through in-platform notifications at least seven days before the changes take effect. This gives you sufficient time to review the changes and decide whether you wish to continue using the rm888 platform.

Continued use of the rm888 platform after any Privacy Policy changes take effect will be considered acceptance of the updated policy. If you do not agree with any changes, you have the right to close your rm888 account by contacting our customer support team.

Why Data Privacy Matters to rm888 and Malaysian Players

In the world of online betting platforms, there is one thing players often overlook but that really matters — what happens to your personal information after you register. Your name, phone number, email address, financial transaction history — all of this is sensitive information. If it ends up in the wrong hands or is used for purposes you never agreed to, the consequences can be serious.

Rm888 has taken this responsibility seriously since the platform first launched in 2018. Our commitment to data protection was not something added later in response to new regulations or external pressure — it has been part of how we designed and built the platform from the ground up. Our security infrastructure is built to protect members' data, not merely to pass minimum compliance audits.

One thing we always emphasise to new rm888 members is this: rm888 never stores your bank account or e-wallet details directly. When you make a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, or FPX, you are interacting directly with a licensed third-party payment gateway that operates its own robust security infrastructure. rm888 only receives confirmation that a payment was successful — not your account details or e-wallet password. This means that even in the highly unlikely hypothetical scenario where rm888's servers were ever compromised, your banking or e-wallet information simply would not be there to steal.

Regarding cookies and tracking, rm888 uses these technologies for limited and clearly defined purposes — to ensure your login session functions correctly, to save your preferences so you do not have to reconfigure them each time, and to understand in aggregate how players use our platform so we can improve it. We do not use cookies to build detailed personal profiles of you for sale to advertisers or data brokers. This sets us apart from most social media platforms and news sites you visit daily, where your behavioural data is the primary product being sold.

Your rights as a data subject are something rm888 takes seriously — not merely a formality written into this document. If you'd like to know what data we hold on you, simply email us at privacy@rm888.express and we'll provide a full report within 14 days. If any data is inaccurate, we'll correct it. If you decide to stop using rm888 and want your data deleted, we'll do so in accordance with legally mandated retention periods — we won't hold on to your data longer than the law requires simply because it might be useful to us down the line.

Malaysian players using online betting platforms often have legitimate concerns about privacy — particularly regarding identity information and financial records. rm888 understands these concerns, which is why we have designed our systems to minimise the data we collect, limit access to that data to only those who genuinely need it, and delete data that is no longer required on a strictly defined schedule. We want rm888 members to play with peace of mind — knowing their information is in responsible hands.

We also want to be clear that this Privacy Policy is not a document we write once and forget. It is a living document that we review on a regular basis — particularly when there are changes to applicable data protection laws, when we introduce new platform features that involve new data, or when we receive member feedback regarding specific privacy concerns. Any significant changes will be communicated to you with adequate notice. We encourage all rm888 members to revisit this Privacy Policy page at least once a year to stay informed about how we handle your data.

Secure Payment Methods

Rm888 does not store your payment details. All transactions are processed through licensed gateways:

Touch 'n Go eWallet
GrabPay
Boost & ShopeePay
DuitNow
FPX – Maybank2u
FPX – CIMB Clicks
Related Documents
Have a Privacy Question?

Contact rm888's Privacy Officer in Bahasa Malaysia for any questions or requests relating to your data.

privacy@rm888.express
24/7 Live Chat in Bahasa Malaysia
Response within 14 business days

FAQ – rm888 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection

No. rm888 does not sell, rent, or commercialise members' personal data to any third party for advertising or marketing purposes. Your data is not a product we trade. We only share data that is strictly necessary with licensed payment service providers (such as FPX, Touch 'n Go eWallet, DuitNow, and GrabPay) to process your transactions, and with licensed game providers (such as Pragmatic Play, PG Soft, and Evolution Gaming) to run the games you choose to play. All such data sharing is limited to the minimum information required to complete the relevant service — never for marketing purposes.

rm888 never stores your bank account details, credit/debit card numbers, or e-wallet login credentials directly in our systems. When you make a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u / CIMB Clicks), you are securely redirected to a licensed third-party payment gateway to complete the transaction. rm888 receives only a confirmation that the payment was successful — not your financial details. This means your banking and e-wallet information never passes through or is stored within rm888's systems, providing an important additional layer of protection.

Yes, you have the right to request deletion of your personal data ("right to be forgotten") by contacting the rm888 privacy team at privacy@rm888.express. Please note, however, that rm888 has legal obligations to retain certain financial records for periods stipulated by applicable law (typically seven years for financial transaction records) — data in this category cannot be deleted before the legally mandated retention period expires. After that period, or for data not subject to legal retention requirements, rm888 will securely delete your data in accordance with industry-recognised data deletion standards.

If you suspect your rm888 account has been accessed without your authorisation, take the following steps immediately: (1) Contact rm888 customer support via live chat to temporarily suspend your account; (2) Change your account password as soon as you regain control; (3) Enable two-factor authentication (2FA) in your account settings if you haven't already done so; (4) Review your login history and transaction history within your account to identify any suspicious activity; (5) Report any transactions you do not recognise to the rm888 support team. The rm888 security team will investigate the matter and take appropriate action to protect your account. Remember: rm888 will never ask for your password via email or chat — do not share your password with anyone claiming to be an rm888 representative.
Rm888's Full Commitment to Malaysian Members' Privacy

Rm888 applies strict data protection standards to all members' personal and financial transaction information. Your data is secured with 256-bit SSL encryption, is never sold to third parties, and you have full rights to access, correct, or request deletion of your data at any time. For further enquiries about your privacy, email us at privacy@rm888.express or check the page Terms & Conditions rm888 for full details on platform usage.

Your Data Is Safe. Your Games Are Waiting.

Rm888 takes your privacy seriously — from 256-bit SSL encryption to a strict no-sale policy on your data. Register now and enjoy over 500 games with confidence using Touch 'n Go eWallet, DuitNow, or FPX.

18+ only. Terms & conditions apply. Please gamble responsibly.

Bahasa Melayu