RTM88 Privacy Policy – Data Protection & Member Privacy

1 Introduction

RTM88 ("we", "Platform", "company") is an online gaming platform operating under rtm88.net. We take member privacy extremely seriously and are committed to ensuring that every piece of personal information you share with us is handled with care, security, and responsibility.

This Privacy Policy explains the types of personal data we collect, the purposes for collection, how we use it, who may receive it, and your rights regarding that data. It applies to all registered members, website visitors, and anyone who interacts with the RTM88 platform whether through our website or mobile app.

By using the RTM88 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

2 Personal Data We Collect

RTM88 only collects personal data necessary to provide our services safely and efficiently. We do not collect any unnecessary or excessive information. The following are the categories of data we collect:

Your data is collected in several ways: directly when you fill in a registration form or submit KYC documents; automatically through cookie and analytics technologies while you use the platform; and occasionally through trusted third parties such as verified payment providers.

3 How We Use Your Data

RTM88 uses your personal data solely for legitimate and necessary purposes in operating the platform and delivering the best service to you. We do not use your data beyond the scope stated below without obtaining your prior consent.

• Account management — Creates and maintains your account, processes registration, and verifies your identity through a secure KYC process.
• Financial transaction processing — Processes deposits, withdrawals, and all financial activity in your account securely and in a timely manner.
• Security and fraud prevention — Identifies and prevents suspicious activity, money laundering, and platform abuse.
• Service communications — Sends important account-related notifications, security updates, promotional information (if you have opted in), and responses to customer support enquiries.
• Responsible gaming — Monitors gameplay patterns to identify signs of problem gambling and provide appropriate support to members who need assistance.
• Platform improvement — Analyses aggregated usage data (without identifying individuals) to improve the design, performance, and overall experience of the rtm88 platform.
• Legal compliance — Fulfils applicable legal and regulatory obligations, including reporting to the relevant authorities in cases required by law.

4 Data Sharing with Third Parties

RTM88 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, in the course of operating the platform, we may need to share your data with the following categories of third parties to a very limited extent and only where there is a legitimate need:

• Payment service providers — Such as FPX, DuitNow, and e-wallet providers to process your financial transactions securely.
• Identity verification providers — Trusted third parties assisting with the KYC process to verify member identity in accordance with compliance requirements.
• IT infrastructure providers — Companies providing hosting, cloud storage, and the technical infrastructure required to operate the rtm88 platform securely.
• Government authorities — Information may be disclosed to law enforcement authorities or regulatory bodies when required by Malaysian law or court order.

5 Cookies & Tracking Technologies

RTM88 uses cookies and similar tracking technologies to enhance user experience, maintain login session security, and collect analytics data for continuous platform improvement.

• Essential Cookies — Required for core platform functions such as login authentication and session management. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — Collects information on how you use the platform to help us identify technical issues and improve site speed and responsiveness.
• Functional Cookies — Saves your preferences such as language, display settings, and login history to provide a more personalised and convenient experience.
• Analytics Cookies — Helps us understand overall usage patterns through aggregated data that cannot be used to identify any specific individual.

You can manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the RTM88 platform.

6 Data Security

RTM88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or accidental destruction.

• End-to-end encryption — All data communications use TLS 1.3 protocol with 256-bit SSL encryption to ensure your information cannot be intercepted during transmission.
• Two-factor authentication (2FA) — rtm88 supports two-factor authentication for all member accounts to provide an additional layer of protection against unauthorised access.
• 24/7 security monitoring — Our security team monitors our systems around the clock to detect and respond to any threats or suspicious activity.
• Strict access controls — Only authorised personnel who require access to specific data to perform their duties are permitted to access member personal data, based on the principle of minimum access rights.
• Periodic security audits — rtm88 conducts regular penetration testing and security audits to identify and address system vulnerabilities.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by RTM88. We fully respect and facilitate the exercise of these rights.

8 Data Retention Period

RTM88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data — Retained throughout the period your account is active and for 7 years after account closure for anti-money laundering compliance purposes.
• Financial transaction records — Retained for a minimum of 7 years in compliance with Malaysia's financial and tax regulatory requirements.
• KYC Documents — Retained for the duration of the active account and 5 years after account closure in accordance with regulatory compliance requirements.
• Technical and security logs — Retained for 12 months for security purposes, fraud detection, and dispute resolution.
• Marketing data — Retained until you withdraw consent or request deletion, whichever comes first.

Once the applicable retention period has expired, your data will be securely deleted or permanently anonymised so it can no longer be associated with you as an individual.

9 Third-Party Links & Services

The RTM88 platform may contain links to third-party websites or services for your convenience, including payment providers and game suppliers. Please note that RTM88's Privacy Policy does not apply to those third-party websites or services.

Every game provider and payment provider partnering with RTM88 has its own privacy policy. We recommend reading the privacy policy of each third-party service you use directly. RTM88 is not responsible for the privacy practices of those third parties.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the RTM88 privacy team is here to assist you. We are committed to addressing every enquiry thoroughly and in a timely manner.

You may reach us through RTM88 customer support, available 24 hours a day, 7 days a week. For inquiries specifically related to privacy and data protection, please include "Privacy Inquiry" in your message subject line so it can be directed straight to the responsible team.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory authority in your country.