Rmc8 Privacy Policy — Personal Data Protection for Malaysian Players

Welcome to the Privacy Policy rmc8. We at rmc8 understand that privacy is more than just words — it is the trust you place in us when you register and use our platform. We take that trust seriously.

Platform rmc8 accessible via the official rmc8.ws website and our mobile app. In operating this platform for Malaysian players, we necessarily process certain personal information for the purposes of service operations, legal compliance, and enhancing the user experience.

This document sets out clearly and honestly: what data we collect, why we need it, who can access it, how long we retain it, and what rights you have as the owner of that data. There is nothing hidden in the fine print — everything is stated here in plain terms.

If you have any questions about how rmc8 handles your personal data, do not hesitate to contact our Data Protection Officer at privacy@rmc8.ws.

rmc8 collects various types of information depending on how you interact with our platform. Below is a comprehensive overview of the data categories we collect:

A. Information You Provide Directly

• Identity Information: Full name, identity card number (MyKad), date of birth, gender.
• Contact Information: Email address, mobile number, residential address in Malaysia.
• Financial Information: Bank account numbers, e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow), and transaction history for deposits and withdrawals in MYR.
• KYC Verification Documents: MyKad copy, latest bank statement, utility bill, or other proof of address documents.
• Account Information: Username, password (stored in encrypted form), security questions.

B. Automatically Collected Information

• Technical Data: IP address, device type, operating system, browser type and version.
• Usage Data: Pages visited, session duration, games played, betting history, login frequency.
• Location Data: Approximate location based on IP address for geo-compliance purposes.
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 9).

C. Information from Third Parties

• Identity verification data from licensed third-party KYC service providers.
• AML (Anti-Money Laundering) compliance information from recognised databases.
• Data from payment providers such as Maybank2u, CIMB Clicks, and e-wallet operators to verify transactions.

rmc8 uses the personal information collected for the following purposes, and only for these purposes:

We never use your data for purposes not listed in the table above without first obtaining your renewed consent. Should you wish to withdraw consent for promotional communications, you may do so at any time via your account settings or by contacting us.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), rmc8 must have a valid legal basis for every personal data processing activity. The bases we rely on are:

• Contract Performance: Processing necessary to provide you with the rmc8 platform services as requested — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required under Malaysian law, including KYC requirements under AML regulations, tax compliance, and requests from competent authorities.
• Legitimate Interest: Processing required for rmc8's legitimate business interests, including platform security, fraud prevention, and product analytics — provided these interests do not override your fundamental rights and freedoms.
• Consent: For certain activities such as marketing communications and promotions, we rely on your explicit consent. You have the right to withdraw this consent at any time.

rmc8 never sells your personal data to any party. This is our absolute commitment to all Malaysian players.

However, in the course of operating our platform, there are certain situations where we need to share your information with carefully selected third parties:

• Payment Service Providers: DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay operators for processing your MYR deposit and withdrawal transactions.
• KYC Service Providers: Licensed and accredited third-party identity verification companies appointed to verify your documents and identity for compliance purposes.
• Game Providers: Game development companies that supply slots, live casino, table games, and Sports Betting to the rmc8 platform. Data shared is limited to what is necessary for game operation.
• Legal Authorities: The Royal Malaysia Police (PDRM), Bank Negara Malaysia, the Malaysian Communications and Multimedia Commission (MCMC), or any government authority with lawful jurisdiction, where required by law or court order.
• Auditors & Professional Advisors: Accounting firms, law firms, and auditors involved in our business operations are bound by strict confidentiality obligations.

All third parties who receive your data are required to uphold data protection standards equivalent to those of rmc8. We conduct due diligence on all partners before sharing any user data.

rmc8 invests heavily in data security infrastructure. We employ multiple layers of technical and organisational protection to keep your personal data safe from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and rmc8 servers is encrypted using 256-bit SSL/TLS protocol — the same standard used by Malaysia's leading banks.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including passwords and financial information, is encrypted using the latest encryption algorithms.
• Layered Access Controls: Access to players' personal data is restricted to staff who require it to perform their duties, based on the principle of least privilege.
• Regular Security Audits: The rmc8 platform undergoes regular penetration testing and security audits conducted by qualified independent parties.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to any suspicious activity or security threats.
• Incident Response Plan: rmc8 has established incident response procedures in place. In the event of a data breach that affects you, we will notify you within the timeframe required by law.

While we take all reasonable precautions, no system can guarantee absolute 100% security in an online environment. You can also help protect yourself by using a strong password and never sharing your login credentials with anyone.

rmc8 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

Once the relevant retention period has expired, your data will be securely deleted or anonymised in such a way that it can no longer be associated with you.

Under Malaysia's PDPA, you have several important rights regarding your personal data as processed by rmc8. The following are those rights and how to exercise them:

Platform rmc8 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how players use our services.

The types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect the functionality of the rmc8 platform.

Platform rmc8 is intended exclusively for adult users aged Aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21.

Should we discover or be notified that we have collected personal data from an individual below the required age, we will take immediate steps to delete that data and close the associated account.

If you suspect that someone under the age of 21 has registered an account or is using the rmc8 platform, please contact us immediately at support@rmc8.ws.

In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia. This may occur when we use services from cloud infrastructure providers or international game suppliers.

In all such cases, rmc8 ensure that:

• Transfers are made only to countries or companies that maintain a level of data protection equivalent to or higher than Malaysia's.
• Appropriate data transfer agreements (including standard contractual clauses) have been put in place with data recipients.
• Overseas data recipients are bound by strict confidentiality and security obligations.

Your financial data relating to transactions in Malaysian Ringgit (MYR) through local Malaysian payment systems such as DuitNow, FPX, Touch 'n Go eWallet, and others is processed within Malaysia only.

rmc8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other relevant circumstances.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the rmc8 platform homepage for a minimum of 30 days.
• Sending email notifications to all active registered members.
• For highly material changes, we may seek your renewed consent.

Continued use of the platform rmc8 after the revised Privacy Policy is published will be considered your acceptance of those changes. If you do not agree with any of the changes, please stop using the platform and contact us to close your account.

rmc8 has appointed a Data Protection Officer responsible for ensuring our platform's compliance with Malaysia's PDPA and this Privacy Policy.

To submit any request relating to your personal data — including access, rectification, erasure, or any enquiry about how we handle your data — please contact:

If you are not satisfied with how we have handled your privacy-related request, you have the right to lodge a complaint with Malaysia Department of Personal Data Protection (JPDP) under the Ministry of Digital.