Official Policy

Privacy Policy rm98 — Your Data, Our Responsibility

Rm98 is committed to protecting every player's privacy. We handle all personal data with industry-grade encryption, with full transparency, and never sell your information to any third party.

Last Updated: 1 January 2026

Rm98 Privacy Commitment

The six core pillars underpinning the protection of your personal data on the rm98 platform.

256-bit SSL Encryption

All data transmitted between your device and rm98 servers is protected with 256-bit SSL encryption — the same security standard used by leading banking institutions worldwide. No sensitive data crosses the internet without full protection.

Data Not Sold

Rm98 has never and will never sell, rent, or share player personal data with advertisers or third-party companies for marketing purposes without your explicit consent. Your information belongs to you, not us.

Secure & Transparent KYC

The identity verification (KYC) process at rm98 is handled with full confidentiality. Documents you submit are stored in an isolated environment, accessed only by licensed verification staff, and automatically deleted when no longer needed.

Your Data, Your Control

Rm98 players have full rights to access, correct, or request deletion of their personal data. The request process is straightforward — contact our support team and we will process your request within 14 business days.

Responsible Cookies

Rm98 uses cookies solely to enhance the user experience, maintain login sessions, and understand aggregate usage patterns that cannot be individually identified. You can manage cookie settings through your browser at any time.

Data Breach Notification

In the event of any security breach involving player data, rm98 is committed to notifying affected players within 72 hours of incident detection, complete with details of the steps taken to contain the situation.


1Introduction

Welcome to the rm98 Privacy Policy page. This document explains how we collect, use, store, and protect your personal data when you use the rm98 online gaming platform at rm98.ng.

Rm98 takes our responsibility to player privacy seriously. We understand that your trust is the most valuable asset we safeguard. Every decision involving personal data is made with the best interests and safety of our players as the top priority.

This Privacy Policy applies to all users accessing the rm98 platform, whether via the website, mobile app, or any official rm98 digital channel. By registering an account or using our services, you agree to the terms set out in this Privacy Policy.

Important Note

This Privacy Policy should be read together with Terms and Conditions rm98. In the event of any conflict, this Privacy Policy shall apply specifically to matters relating to personal data.

2Data We Collect

Rm98 collects various types of personal data to enable us to provide quality services, ensure platform security, and comply with relevant legal requirements. The following are the categories of data we collect:

Data Categories Example Information Requirements
Identification Data Full name, identity card number, date of birth Mandatory (KYC)
Contact Data Email address, mobile phone number Mandatory
Financial Data Bank account number, account holder name, e-wallet Mandatory (transactions)
Technical Data IP address, device type, browser, operating system Automatic
Behavioural Data Game records, betting history, session duration Automatic
Document Data Passport copies, bank statements, proof of address Upon request

Rm98 does not collect sensitive data such as medical information, political views, or religious beliefs. We only collect data that is strictly necessary to provide a safe and responsible gaming service.

3How We Collect Data

Your personal data is collected through several key channels when you interact with the rm98 platform:

  • Account Registration: Information you provide directly when creating a new account, including your name, email, and phone number.
  • KYC Process: Identification and financial documents you upload for identity verification purposes.
  • Financial Transactions: Payment details recorded during deposits and withdrawals via DuitNow, FPX, Touch 'n Go, Boost, and GrabPay.
  • Platform Usage: Data collected automatically as you browse the website or use the rm98 app, including session cookies and activity logs.
  • Support Communications: Records of conversations with the customer support team via Live Chat or email for quality control and reference purposes.
  • Mobile Devices: When you use the rm98 app, we may collect general location data (state/city) to verify that you are accessing from a permitted region.
We Do Not Use Third-Party Data Collection

Rm98 does not use third-party advertising SDKs, social media tracking pixels, or analytics tools that share your personal data with external platforms without your knowledge. All analytics we conduct are for rm98 internal use only.

4Data Usage Purposes

Rm98 uses the personal data collected for the following purposes, all in the interest of players and platform security:

  • Account Management: Creating, verifying, and maintaining your player account to ensure a smooth and secure gaming experience at all times.
  • Transaction Processing: Processing deposits and withdrawals accurately and promptly, ensuring funds reach the correct account.
  • Identity Verification (KYC): Meeting legal compliance requirements and preventing fraud, money laundering, and other illegal activities.
  • Service Communications: Sending important notifications such as transaction confirmations, security updates, and policy changes.
  • Customer Support: Resolving inquiries, complaints, and technical issues more efficiently using interaction history records.
  • Fraud Prevention: Detecting and investigating suspicious activity, multi-account usage, and fraudulent attempts that could compromise platform security.
  • Responsible Gaming: Monitoring gameplay patterns to identify players who may need support or self-control tools.
  • Platform Improvements: Analysing usage data in aggregate (without identifying individuals) to improve platform performance and user experience.

Rm98 will not use your data for purposes unrelated to the services we provide without first obtaining your consent.

5Third-Party Data Sharing

Rm98 does not sell or rent player personal data to any third party. However, there are limited situations where we may share your information with certain parties:

  • Payment Providers: Required financial information is shared only with licensed payment service providers (such as DuitNow and FPX gateways) solely to process your transactions. These providers are bound by strict confidentiality agreements.
  • Technology Partners: Cloud infrastructure providers and technical service partners that support rm98 platform operations. All such partners are bound by strict data protection agreements and are not permitted to use your data for their own purposes.
  • Regulatory Body: If directed by a legitimate regulatory body or court order, rm98 will disclose the required information in accordance with applicable law.
  • Fraud Investigation: In cases involving serious fraud or criminal activity, rm98 may share information with the relevant law enforcement authorities.
Our Guarantee

All third parties working with rm98 have signed legally binding data confidentiality agreements. They may only access data required for their specific tasks and are prohibited from using it for any other purpose.

6Data Retention Period

Rm98 retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by applicable law. The following are our retention period guidelines:

  • Active Account Data: Retained for the duration your account is active and for a minimum of six (6) years after account closure, to fulfil financial compliance requirements.
  • Transaction Records: Retained for seven (7) years in accordance with Malaysian accounting and financial legal requirements.
  • KYC Documents: Retained for five (5) years after the business relationship ends, in accordance with anti-money laundering (AML) legal requirements.
  • Communication Logs: Customer support interaction records are retained for two (2) years for quality control and dispute resolution purposes.
  • Cookie Data: Session cookies are deleted when you close your browser; preference cookies expire after 12 months unless renewed.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

7Player Rights Regarding Personal Data

As a rm98 player, you have the following rights regarding your personal data. rm98 is committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or incomplete, you may request an immediate correction.

Right to Erasure

You may request the deletion of your personal data, subject to any legal obligations binding on us.

Right to Restriction of Processing

You may request that we restrict the processing of your data in certain circumstances during an investigation.

Right to Data Portability

You may request your data in a structured, machine-readable format for portability purposes.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the rm98 support team via Live Chat or email at [email protected]. We will process your request within 14 business days.

8Cookies & Tracking Technologies

Rm98 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session verification, security, and navigation. These cookies cannot be disabled as they are critical to platform operation.
  • Performance Cookies: Collecting aggregate information on how players use our platform without identifying individuals. This data helps us improve platform performance and usability.
  • Functional Cookies: Saving your preferences such as language, display settings, and login information to streamline your experience on future visits.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the rm98 platform. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

rm98 Does Not Use Advertising Cookies

We do not use third-party advertising cookies or social media tracking pixels that monitor your activity across other websites outside the rm98 platform.

9Data Security

Player data security is rm98's absolute top priority. We continuously invest in the latest security infrastructure to ensure your personal data is always protected against cyber threats.

  • Data Encryption: All data is stored in encrypted format using the AES-256 algorithm. Data in transit is protected with TLS 1.3 — the latest and most secure version of the web security protocol.
  • Strict Access Controls: Access to players' personal data is granted only to staff who require it to perform their duties, based on the principle of least privilege.
  • Two-Factor Authentication (2FA): All staff accounts with access to player data are required to use 2FA. Players are also encouraged to enable 2FA for added protection.
  • Periodic Audits: rm98's security infrastructure undergoes periodic independent security audits by certified cybersecurity firms to identify and address any vulnerabilities.
  • Incident Response Plan: rm98 has a comprehensive security incident response procedure to ensure any breach can be detected, contained, and resolved swiftly.
Enterprise-Grade Server Infrastructure

Rm98 servers are housed in certified Tier-3 data centres with 24/7 physical protection, redundant cooling systems, uninterruptible power supply (UPS), and automatic fire suppression — ensuring the highest levels of data availability and security.

10Changes to This Privacy Policy

Rm98 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. Any material changes will be communicated to you via:

  • Prominent notifications within the rm98 platform when you are logged in.
  • An email will be sent to the address registered on your account at least 14 days before the changes take effect.
  • Updates to this Privacy Policy page with a refreshed "Last Updated" date at the top of the page.

Continued use of the rm98 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and withdraw your balance.

We encourage you to review this page periodically to stay informed on how we protect your personal data.

11Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the rm98 Data Protection Officer (DPO) team is ready to assist you:

  • Live Chat: Available 24/7 directly within the rm98 platform — the fastest way to get an immediate response.
  • Privacy Email: [email protected] — for personal data-related requests, please indicate "Privacy Request" in the subject line of your email.
  • Telegram: Contact a support agent via the official rm98 Telegram channel for immediate assistance.

Rm98 is committed to responding to all privacy-related enquiries within 14 business days. For data deletion or data transfer requests, processing may take up to 30 business days depending on the complexity of the request.

For complaints that our team is unable to resolve, you have the right to refer to the relevant data protection authority or regulatory body in Malaysia.


Join rm98 Today

Play with Peace of Mind — Your Data is Always Protected

Register a free rm98 account today and enjoy a secure, transparent gaming experience that fully respects your privacy.

256-bit SSL
Data Not Sold
Secure KYC
24/7 Support

Bahasa Melayu