Privacy Policy

Introduction

rm99b ("rm99b", "we", "us", or "our") operates the online casino and sports betting platform accessible at https://rm99b.cam (the "Platform"). This Privacy Policy describes how rm99b collects, uses, stores, shares, and protects the personal data of individuals who register accounts, access the Platform, or otherwise interact with our services.

This Privacy Policy applies to all registered players, prospective users, and visitors to the rm99b Platform. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your use of rm99b.

By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not register an account or use the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — that is, information that can directly or indirectly identify you as an individual.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means rm99b, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of rm99b, subject to rm99b's written instructions.
• "KYC" (Know Your Customer) means the identity and age verification process rm99b conducts in compliance with applicable anti-money laundering and responsible gambling obligations.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and personalisation features.
• "User" or "you" means the individual who has registered an account on the Platform or is otherwise accessing rm99b services.

Data We Collect

rm99b collects the following categories of Personal Data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Legal full name (as it appears on your Malaysian identity document)
• Date of birth
• Malaysian identity card number (MyKad) or equivalent
• Email address
• Malaysian mobile phone number
• Residential address (city, state — e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang)

3.2 Financial & Transaction Data

• Payment method details used for deposits and withdrawals (e.g., registered Touch 'n Go eWallet mobile number, Boost account identifier, GrabPay ID, bank account number for Maybank / CIMB / Public Bank / Hong Leong)
• Deposit amounts, withdrawal amounts, transaction dates and times
• Account balance history
• Cryptocurrency wallet addresses where applicable (USDT/BTC)

3.3 Verification & KYC Data

• Photograph of your MyKad (front and back)
• Selfie photograph for identity match purposes
• Supporting documentation provided in connection with enhanced due diligence requests

3.4 Gameplay & Betting Data

• Game session logs, betting history, wagering amounts, win/loss records
• Sports betting markets accessed and wagers placed (including Liga Super Malaysia, EPL, UFC, and other events)
• Bonus activation and wagering requirement completion records

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Login timestamps and session duration
• Platform navigation data and feature usage patterns

3.6 Communications Data

• Records of live chat conversations with rm99b support
• Email correspondence with rm99b
• Complaint and dispute resolution records

How We Collect Data

rm99b collects Personal Data through the following channels:

Data Processing & Use

rm99b processes your Personal Data for the following purposes:

5.1 Account Management

To create, maintain, and administer your rm99b account, including verifying your identity, processing your login credentials, and managing your account balance and transaction history.

5.2 Payment Processing

To facilitate the processing of deposits via supported Malaysian payment channels (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Connect, and cryptocurrency) and to process withdrawal requests to your registered payout method.

5.3 Regulatory Compliance

To fulfil our legal obligations in connection with anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) requirements. This includes retaining transaction records, filing mandatory reports where required, and conducting ongoing monitoring of account activity.

5.4 Responsible Gambling

To identify and respond to patterns of gambling behaviour that may indicate potential harm, to enforce deposit limits and self-exclusion requests, and to verify age compliance under our strict 21+ policy.

5.5 Customer Support

To respond to enquiries, process complaints, and resolve disputes relating to your account, transactions, or gameplay experience.

5.6 Platform Improvement & Analytics

To analyse aggregated usage data for the purpose of improving Platform performance, optimising user experience, and developing new features. Analytical processing is conducted on pseudonymised or aggregated data wherever practicable.

5.7 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, collusion, and other prohibited conduct on the Platform.

5.8 Marketing Communications

Where you have provided explicit consent, to send you promotional communications about rm99b bonuses, VIP programme updates, and relevant offers. You may withdraw consent for marketing communications at any time by contacting support.

Legal Basis for Processing

rm99b processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and rm99b — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including AML/CTF regulations, KYC requirements, and mandatory record-keeping obligations.
• Legitimate Interests: Processing conducted for rm99b's legitimate business interests, including fraud prevention, Platform security, analytics, and service improvement — where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally in relation to optional marketing communications and non-essential cookies.

Data Sharing

rm99b does not sell, rent, or trade your Personal Data to third parties for their own independent commercial purposes. We may share your Personal Data with the following categories of recipients, strictly for the purposes described in this Policy:

7.1 Payment Service Providers

We share necessary transaction data with licensed payment processors and financial institutions required to facilitate your deposits and withdrawals, including but not limited to e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow/FPX network participants, and banks (Maybank, CIMB, Public Bank, Hong Leong).

7.2 Identity Verification Partners

We may engage licensed third-party KYC and identity verification service providers to assist with document authentication and age verification. Such providers are bound by data processing agreements requiring equivalent data protection standards.

7.3 Game and Software Providers

Game studios and live dealer platform operators that power rm99b's game catalogue may receive session and wagering data necessary to deliver the game service. These providers act as Data Processors under rm99b's instructions.

7.4 Regulatory Authorities

rm99b may disclose Personal Data to regulatory authorities, law enforcement agencies, courts, or other government bodies where required by applicable law or pursuant to a lawful order. We will use reasonable endeavours to notify you of such disclosure unless prohibited by law.

7.5 Professional Advisers

We may share Personal Data with our legal, accounting, and compliance advisers on a confidential, need-to-know basis where required for the provision of professional advice.

Cookies & Tracking Technologies

The rm99b Platform uses cookies and similar tracking technologies to enable core functionality, improve performance, and understand how players interact with the Platform.

8.1 Types of Cookies Used

8.2 Cookie Control

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of your Account and may prevent you from accessing certain Platform features. For analytics and marketing cookies, you may update your preferences at any time by contacting rm99b support.

Data Retention

rm99b retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with applicable AML/KYC record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years following the date of the transaction, in compliance with applicable financial regulation.
• Support communications: Retained for three (3) years from the date of the last communication, or longer where required for unresolved disputes.
• Analytics and technical data: Retained in pseudonymised or aggregated form for up to two (2) years from collection.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised.

Data Security

rm99b implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the rm99b Platform is encrypted using industry-standard 256-bit TLS encryption.
• Data Encryption at Rest: Sensitive stored data — including KYC documents and payment identifiers — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within rm99b systems is restricted on a strict need-to-know basis, governed by role-based access controls and regularly audited access logs.
• Two-Factor Authentication: All rm99b staff with access to player data are required to use two-factor authentication. We strongly encourage all registered players to enable 2FA on their accounts.
• Penetration Testing and Security Audits: The Platform undergoes regular security assessments and vulnerability testing by qualified security professionals.

Notwithstanding the above, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you believe your Account has been compromised, please contact rm99b support immediately.

Your Rights

rm99b respects your rights in relation to your Personal Data. Subject to applicable legal limitations, you hold the following rights:

To exercise any of the above rights, please contact our support team at [email protected]. We will respond to verified requests within 30 calendar days. Requests may require identity verification before they can be processed.

Minors & Age Verification

The rm99b Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process Personal Data belonging to persons under the age of 21.

As part of our KYC process, rm99b verifies the age of all registered players prior to authorising withdrawals. Where rm99b discovers or has reasonable grounds to believe that an Account holder is under 21 years of age, the Account will be immediately suspended, all pending transactions will be voided, and a report may be filed with the appropriate authorities.

If you believe that Personal Data belonging to a minor has been submitted to the Platform, please contact us immediately at [email protected] and we will take prompt steps to investigate and, where confirmed, delete the relevant data.

Third-Party Services

The rm99b Platform may contain links to, or integrate with, third-party services including game studios, payment processors, and analytics providers. This Privacy Policy applies solely to data processed by rm99b and does not extend to the practices of third parties.

When you interact with a third-party service through the Platform — for example, when making a payment via Touch 'n Go eWallet or Maybank — that third party's own privacy policy governs the processing of any data you provide directly to them. rm99b is not responsible for the privacy practices of third-party services.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of rm99b.

Policy Amendments

rm99b reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Where a material change is made to this Policy, rm99b will notify registered users via email or a prominent notice on the Platform at least seven (7) days before the amended Policy takes effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

Prior versions of this Privacy Policy are available on request by contacting rm99b support.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how rm99b is handling your Personal Data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line
• Live Chat: Available 24/7 on the rm99b Platform
• Response Time: Privacy-related requests acknowledged within 2 hours; substantive response within 30 calendar days

For data erasure requests, data portability requests, or complaints relating to data processing, please contact us by email with your full name, registered email address, and a description of your request. We will verify your identity before processing any sensitive data rights requests.