RTM88 Privacy Policy – Your Personal Data Protection

1 Information We Collect

RTM88 collects various types of information to enable us to provide you with a secure, seamless, and tailored service as a member. The information we collect falls into several main categories:

1.1 Personal Information You Provide Directly

This is information you provide yourself during the registration process, KYC verification, or when interacting with our support team:

• Full name as it appears on your identification card or passport.
• Date of birth for age eligibility verification (18 years and above).
• Active email address for account communications and notifications.
• Mobile phone number for two-factor authentication (2FA).
• Current valid residential address.
• Copies of identification documents (MyKad, passport) for the KYC process.
• Registered payment method details (bank account number, e-wallet number).

1.2 Information Collected Automatically

When you use the RTM88 platform — whether via web browser or mobile app — our systems automatically record the following technical information:

• IP address and approximate geographic location.
• Device type, model, operating system, and browser version.
• Login times, session duration, and platform usage patterns.
• Transaction logs — including date, time, game type, and wagering amount.
• Cookie data and device identifiers for secure session authentication.

2 How We Use Your Data

RTM88 only uses your personal data for legitimate, relevant, and necessary purposes. Below is a summary table outlining the purposes of data use and their legal basis:

RTM88 will not use your data for any other purpose not stated above without first obtaining your consent.

3 Data Sharing with Third Parties

RTM88 does not sell your personal data to any party. However, there are limited situations where we need to share certain information with trusted third parties in order to deliver our services properly:

• Payment Processors: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost require basic transaction information to securely process your deposits and withdrawals.
• KYC Service Providers: Authorised third parties that assist us in verifying member identities in accordance with legal compliance requirements.
• Game Software Providers: Game session data is shared with licensed game providers to ensure fairness and game integrity.
• Regulatory Authorities: RTM88 will disclose required information to legal or regulatory authorities when mandated by a court order or applicable law.

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

4 Data Security & Protection Measures

RTM88 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. Key security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and rtm88 servers is encrypted using the latest TLS protocols.
• Two-Factor Authentication (2FA): An additional security layer via OTP codes sent to your registered mobile number.
• Internal Access Controls: Only specifically authorised RTM88 staff may access member personal data, and every access is logged for audit purposes.
• Continuous Monitoring: Our threat detection system runs 24 hours a day, 7 days a week to identify and block any unauthorised access attempts.
• Regular Backups: Your data is regularly backed up to a secure, separate location to ensure availability in the event of a technical incident.
• Penetration Testing: RTM88 conducts regular security audits by independent experts to identify and address any system vulnerabilities.

5 Data Retention Period

RTM88 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Below are the data retention guidelines we follow:

• Active Account Data: Retained for the duration your account remains active and in use.
• Financial Transaction Data: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax legal requirements.
• KYC Records: Retained for a minimum of five (5) years after account closure in accordance with AMLA requirements.
• Support Communication Logs: Retained for two (2) years for complaint resolution and reference purposes.
• Marketing Data (with consent): Retained until you withdraw consent or request deletion.

Upon expiry of the designated retention period, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

6 Cookies & Tracking Technologies

The RTM88 platform uses cookies and similar tracking technologies to enhance your user experience. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform (pages visited, time spent) to help us improve our services. All data is collected anonymously.
• Functional Cookies: Remembering your preferences and settings (language, preferred payment method) to deliver a more personalised experience.
• Analytics Cookies: Used internally to understand platform usage patterns and improve our products.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect certain functions of the RTM88 platform.

7 Your Rights Over Personal Data

As an rtm88 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the rtm88 Data Protection Officer through our customer support channels. We will process your request within 30 business days.

8 International Data Transfers

In the course of platform operations, your personal data may be processed or stored on servers located outside Malaysia by our technical service providers. Any such data transfer is carried out with appropriate safeguards, including:

• Use of standard contractual clauses approved by data protection authorities.
• Ensuring the recipient country provides a level of data protection equivalent to or higher than Malaysia.
• Obtaining your consent where required by law.

RTM88 will not transfer your personal data to jurisdictions that do not provide an adequate level of protection without appropriate additional safeguards in place.

9 Children's Privacy

The RTM88 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the rtm88 Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. The date of the latest update will always be stated at the top of this page. Continued use of the RTM88 platform after amendments are published will be deemed as your acceptance of the updated policy.