🔒 OFFICIAL PRIVACY POLICY

RM98 Privacy Policy – Data Protection & Privacy for Malaysian Members

RM98 takes the privacy and security of members' personal data very seriously. This page clearly explains how we collect, use, store, and protect your information.

Updated: 1 January 2026
256-bit SSL Encryption
Data Not Sold
Privacy Guaranteed
PDPA Compliance

RM98's Commitment to Your Privacy

Six core personal data protection commitments we make to every RM98 member

End-to-End Data Encryption

All data transmitted between your device and RM98's servers is encrypted using 256-bit SSL protocol — the same standard used by leading financial institutions in Malaysia.

Data Not Sold to Third Parties

RM98 has never and will never sell, rent, or transfer members' personal information to any third party for marketing or commercial purposes without the member's explicit consent.

Personal Data Protection Act Compliance

The RM98 platform is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We handle your data in accordance with the legal framework established by the Malaysian government.

Your Data, Your Control

You have the right to access, correct, or request the deletion of your personal data held by RM98. Requests may be submitted to our support team at any time.

Limited Data Retention Period

RM98 retains your personal data only for as long as necessary for service and legal compliance purposes. Data that is no longer required is securely deleted.

Data Breach Notification

In the event of any data security breach that may affect member information, RM98 will notify the affected members within the timeframe required by law.

Quick Summary: RM98 only collects data necessary to deliver our services, does not sell your data to any party, and gives you full control over your personal information. This Privacy Policy sets out our commitments in detail and is legally binding on RM98.

1 Introduction

This Privacy Policy is published by RM98 ("we", "platform") and applies to all users of the rm98.io website and related services ("members", "you"). It sets out in detail how we collect, use, disclose, transfer, and store your personal information in connection with your use of the RM98 platform.

RM98 comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation. By using the RM98 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform.

We believe transparency is the foundation of trust. That is why this Privacy Policy is written in plain, straightforward language – not in dense legal jargon. You have the right to know exactly what happens to your data, and we are committed to keeping you informed.

2 Personal Data We Collect

RM98 collect various categories of personal data depending on the nature of your interactions with our platform:

Data Category Sample Information Primary Purpose
Identity Data Full name, date of birth, MyKad/passport number Identity verification (KYC), legal compliance
Contact Data Email address, phone number, residential address Service communications, transaction verification
Financial Data Payment methods (TNG, GrabPay, FPX), deposit/withdrawal records Transaction processing, fraud prevention
Technical Data IP address, device type, web browser, access time Security, technical troubleshooting
Gaming Data Betting history, game preferences, account activity Responsible gaming, service personalisation
Communication Data Live chat records, support emails, and filed complaints Customer service improvement

Note: RM98 does not collect sensitive data such as biometric information, medical records, or political views. We only request data that is strictly necessary to provide our services to you.

3 How We Collect Data

Your personal data is collected through several means:

  • Account Registration – Information you provide when registering an RM98 account, such as your name, phone number, and email address.
  • Platform Usage – Data automatically generated when you use the platform, including pages visited, games played, and session duration.
  • Financial Transactions – Information relating to deposits and withdrawals processed via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u (FPX), CIMB Clicks (FPX), and other supported local payment methods.
  • KYC Process – Identity verification documents submitted during the Know Your Customer process, including copies of MyKad and other supporting documents.
  • Customer Support Interactions – Information you share when contacting the RM98 support team via live chat or email.
  • Cookies & Tracking Technologies – Technical data collected via cookies, pixels, and similar technologies for analytics and user experience improvement purposes. (See Section 8 for more details.)

4 How We Use Your Data

RM98 use your personal data only for legitimate purposes directly related to the provision of our services. The primary purposes for which your data is used are as follows:

  • Create and manage your account on the RM98 platform.
  • Processing your deposits and fund withdrawals securely and accurately.
  • Verifying your identity to comply with KYC requirements and anti-money laundering (AML) laws.
  • Providing effective customer support and resolving any technical or transaction-related issues.
  • Sending important account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.
  • Analysing usage patterns to improve platform quality, user experience, and game offerings.
  • Detecting and preventing fraud, money laundering, and other illegal activities on the platform.
  • Monitoring gaming behaviour to support RM98's responsible gaming programme.
  • Sending you relevant promotional communications and bonus offers (subject to your communication preferences).
  • To comply with applicable legal obligations and regulations.

Minimum Necessity Principle: RM98 uses your data solely for the purposes stated above. We do not use your data for unrelated purposes without first obtaining your fresh consent.

5 Data Sharing with Third Parties

RM98 do not sell or rent your personal data to any third party. However, in certain situations, we may need to share your data with the following parties:

  • Payment Service Providers – Such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers to process your financial transactions.
  • Game Software Providers – Third-party game providers that supply slots, Live Casino, and other game content on the RM98 platform, subject to strict confidentiality agreements.
  • Technical Service Providers – Companies that provide IT infrastructure, web hosting, analytics, and cybersecurity services to RM98.
  • Legal Authorities – Malaysian government authorities or regulatory bodies legally entitled to request certain information under their statutory powers.
  • Identity Verification Services – Third-party service providers that assist us with the KYC process and member identity verification.

All third parties that receive member data RM98 bound by strict confidentiality agreements and are only permitted to use that data for specified purposes. RM98 is responsible for ensuring these third parties uphold data protection standards equivalent to our own.

RM98 does not share your data with advertising companies, data brokers, or any commercial entity not directly involved in the delivery of our platform services.

6 Data Storage & Security

Your personal data is stored on secure servers protected by multiple layers of security. RM98 employ comprehensive technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction:

  • 256-bit SSL encryption for all data transmitted between you and the RM98 platform.
  • Sensitive data such as financial information is encrypted when stored in the database.
  • Strict access controls – only RM98 employees who require access to perform their duties are permitted to view member data.
  • Continuous 24/7 security monitoring and automated intrusion detection systems.
  • Regular internal and external security audits to identify and address vulnerabilities.
  • Two-factor authentication (2FA) for internal access to systems containing member data.

Retention Period: Active account data is retained for the duration of the active account period plus 7 years to comply with legal and audit requirements. Data from closed accounts will be deleted or anonymised once the mandatory retention period has expired.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by RM98:

Right of Access

You have the right to obtain a copy of the personal data we hold about you.

Right to Rectification

You have the right to correct any data that is inaccurate or incomplete.

Right to Erasure

You may request the deletion of your data under certain circumstances provided for by law.

Right to Object

You may opt out of data processing for direct marketing purposes at any time.

Data Portability Right

You may request your data in a machine-readable format for the purpose of transfer.

Right to Restriction

You may request a restriction on the processing of your data under certain circumstances.

To submit any request relating to the rights above, please contact the privacy team at RM98 at privacy@rm98.io. We will respond to your request within 14 business days. In complex cases, this period may be extended to 30 days, and you will be notified accordingly.

8 Cookies & Tracking Technologies

RM98 uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the RM98 website.

We use three types of cookies:

Cookie Type Purpose Period
Important Required for core platform functions such as login sessions and security Session / 30 days
Functionality Saves your preferences such as language and display settings for your convenience 1 year
Analytics Helps us understand how users interact with the platform for improvement purposes 2 years

You can manage and delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect certain functions of the platform. RM98.

9 Children's Data

Platform RM98 is intended for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child has registered on the RM98 platform without authorisation are urged to contact us immediately at support@rm98.io.

10 Links to Third-Party Websites

Platform RM98 may contain links or references to third-party websites or services. This Privacy Policy applies solely to the RM98 platform and not to any external websites or services.

RM98 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit, particularly when sharing any personal information on those sites.

11 Privacy Policy Amendments

RM98 reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service enhancements. Any amendments will take effect upon publication on this page.

For material and significant amendments, RM98 will notify members via email or platform notification with reasonable notice before any changes take effect. Your continued use of the RM98 platform after the effective date of an amendment will be considered your acceptance of the updated Privacy Policy.

The date of the latest amendment is always displayed at the top of this page. We encourage you to review this page periodically.

12 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way RM98 handling your personal data, please contact us through the following channels:

RM98 Data Protection Officer
Email: privacy@rm98.io
General Support: support@rm98.io
Response Time: 14 business days

You may also lodge a data protection complaint with Malaysia's Department of Personal Data Protection (PDPD) if you believe your rights under the PDPA 2010 have been violated.

Your Privacy is Protected. Join RM98 with Confidence!

Over 500,000 Malaysian members have trusted RM98 with their personal data. Register your free account today and enjoy a safe, secure gaming experience.

By registering, you agree to RM98's Privacy Policy and Terms & Conditions.

Bahasa Melayu