Privacy Policy rm777 — Your Personal Data Protection

1 Introduction

Welcome to the rm777 Privacy Policy. This document is the official agreement between you ("Member", "User", "you") and rm777 ("Platform", "we", "us") regarding how we handle your personal information.

Rm777 takes seriously the trust you place in us when you register and use this platform. Your personal information is more than just data — it is your identity and privacy, and we are fully committed to protecting it.

This Privacy Policy applies to all rm777 services, including the website at rm777.bid, the official rm777 mobile app for Android and iOS, and all our official communication channels such as customer support, email, and in-app notifications.

By using the rm777 platform, you agree to the data collection and usage practices described in this Privacy Policy. If you disagree with any part of this policy, please discontinue use of our platform.

2 Data Collected

Rm777 collects several categories of personal information from members. Below is a detailed explanation of the types of data we collect and how they are obtained:

A. Information You Provide Directly:

• Full name as shown on official identification documents (MyKad or passport)
• Date of birth and gender
• Email address and mobile number
• Account password (stored in an unreadable hashed format)
• Current residential address
• Bank account or digital wallet details for transaction processing purposes
• Identity verification documents (MyKad, passport, utility bill) during the KYC process
• Photos or scans of documents uploaded for verification purposes

B. Information Collected Automatically:

• IP address and network information
• Web browser type and version of your device's operating system
• Pages visited, time of visit, and actions taken within the platform
• Game session data including bets, wins, and gaming activity
• Device information such as phone model and unique device identifier
• General location data (based on IP address, not GPS)
• Deposit and withdrawal transaction logs

C. Information from Third Parties:

• Identity and credit information from trusted KYC service providers
• Payment verification information from licensed payment processors
• Compliance data from the relevant regulatory authority

3 How We Use Your Data

Rm777 uses the personal information collected for the following purposes only. We do not use your data for any purpose other than those stated below without obtaining additional consent from you:

• Service Provision: Processing registrations, managing your account, and securely handling deposits and withdrawals.
• Identity Verification (KYC): Verifying your identity to comply with anti-money laundering (AML) and counter-terrorism financing (CFT) legal requirements.
• Platform Security: Identifying and preventing fraud, unauthorised access, multi-account usage, and suspicious activity.
• Customer Support: Providing relevant assistance and efficiently resolving your complaints or enquiries.
• Service Communications: Sending important notifications about your account, transactions, policy changes, and security updates.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.
• Platform Improvements: Analysing aggregated and anonymised usage data to improve the user experience.
• Marketing (with consent): Sending promotional information and exclusive offers — only if you have given consent to receive marketing communications.

4 Data Sharing

Rm777 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary to deliver our services:

• Payment Processors: Required transaction information is shared with licensed payment service providers (FPX, DuitNow, digital wallet operators) to process your deposits and withdrawals.
• KYC Service Providers: Identity verification documents are shared with our accredited KYC partners for verification purposes only.
• Game Providers: Minimum required game data is shared with game software providers solely to enable gameplay sessions to function.
• Regulatory Body: rm777 will disclose required information to lawful authorities when mandated by law, court order, or official investigation.
• Cloud Services & Infrastructure: Data is stored on secure servers managed by cloud infrastructure providers that comply with international security standards.

All third parties we work with are required to meet strict data confidentiality requirements and are only permitted to use your data for purposes we have specified. They may not use your data for their own interests.

5 Data Security

Rm777 continuously invests in the latest security infrastructure to ensure your personal data is protected against all threats. Key security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Data encryption at rest for all data stored on our servers.
• Passwords are stored in bcrypt hash format — no one, including rm777 staff, can view your original password.
• Role-based access control (RBAC) — only authorised staff may access member data, strictly on a need-to-know basis.
• 24/7 security monitoring to detect and respond to any suspicious activity in real time.
• Regular security audits by independent experts to identify and address any system vulnerabilities.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of security.

While we take all reasonable precautions, no system can be guaranteed 100% secure against all cyber threats. In the event of a data breach involving your information, rm777 will notify you in a timely manner and take immediate remedial action.

6 Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy principles, you have the following rights regarding your personal data at rm777:

7 Cookie Policy

Rm777 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage or block cookies through your browser settings. Please note that blocking essential cookies may affect certain functions of the rm777 platform, including login capability and session security.

8 Children's Data

Rm777 is a platform restricted to users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge — for example, due to age misrepresentation during registration — we will take immediate action to delete that data and close the account in question.

9 International Data Transfers

As an online platform, your data may be stored or processed on servers located outside Malaysia. For all international data transfers, rm777 ensures that:

• The recipient country or region maintains a level of data protection equivalent to or higher than Malaysia's PDPA.
• Lawful data transfer agreements have been established with recipient parties to ensure your data remains protected.
• All data transfers comply with applicable legal and regulatory requirements.
• Servers storing your data comply with international security standards such as ISO 27001 and SOC 2.

Rm777 consistently strives to process data as close to the Malaysian region as possible to minimise risks associated with cross-border data transfers.

10 Privacy Policy Amendment

Rm777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any changes will be posted on this page with a clear updated date.

For changes that are material and significant — such as changes to how we use your data or new data sharing with third parties — we will notify you via email or in-account notification at least 14 days before the changes take effect.

Continued use of the rm777 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the changes come into effect.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly.

The rm777 Data Protection Team is committed to responding to all privacy enquiries within a reasonable timeframe. For matters requiring thorough investigation, we may need up to 14 business days to provide a complete and accurate response.