RM777 Privacy Policy – Data Protection & Privacy for Malaysian Players

1Introduction

This Privacy Policy is issued by rm777 (referred to as "we", "rm777", or "the platform" in this document) and applies to all users who access or use rm777's services through rm777.biz and all associated platforms.

Rm777 is an online entertainment platform offering digital casino games, slots, blackjack, roulette, poker, cricket, and a wide range of other games to players in Malaysia. In delivering these services, we need to collect and process certain personal information from users. This Privacy Policy explains how we do so responsibly and transparently.

Rm777 complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia and all applicable data protection legislation. By registering an account or using any rm777 service, you confirm that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.

2Personal Data We Collect

Rm777 collects several categories of personal information for different purposes. Below is a full overview of the types of data we may collect from you:

We may also collect data you provide voluntarily — for example, when you fill in a feedback form, enter a competition, or contact the rm777 support team via Live Chat or email. This data is used solely for purposes related to your request or participation.

3How We Use Your Personal Data

Rm777 uses the personal data we collect for the following purposes, all of which are grounded in valid legal bases under Malaysia's PDPA:

• Account Management: Creating and maintaining your rm777 account, including identity verification, age eligibility checks, and account settings management.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to your account. Your financial information is required to complete these transactions securely.
• Gaming Services Provision: Operating slots, blackjack, roulette, poker, cricket, and all other games on the rm777 platform; recording game history; calculating and crediting winnings.
• Bonus Management: Managing bonus eligibility, tracking wagering requirement fulfilment, and preventing abuse of rm777 promotions.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, the use of bots or automation software, and any violations of rm777's Terms & Conditions.
• Customer Support: Processing and resolving queries, complaints, and requests you submit to the rm777 support team.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support, including deposit limit tools and self-exclusion options.
• Service Communications: Sending important notices about platform changes, policy updates, or account information that you need to be aware of.
• Marketing Communications (with your consent): Sending information about rm777 promotions, bonuses, and new offers. You may opt out of marketing communications at any time via the "unsubscribe" link in any email or through your account settings.
• Legal Compliance: Fulfilling legal obligations imposed on rm777, including anti-money laundering (AML) reporting requirements and requests from lawful authorities.

4Data Sharing with Third Parties

Rm777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share your personal data with a limited set of third-party categories as outlined below:

• Payment Service Providers: E-wallet and banking service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and the FPX system need to receive the relevant transaction details in order to process your deposits and withdrawals.
• Game Provider: Game software providers whose products are used on the rm777 platform may receive the technical data required to operate their games. These providers are bound by strict confidentiality agreements.
• Identity Verification Providers: Third-party KYC verification services that assist us in verifying your identity to meet legal compliance requirements.
• Legal Authorities: When required by Malaysian law or upon a lawful request from authorities such as the police, courts, or law enforcement agencies, rm777 will provide the necessary data in accordance with proper legal process.

5Data Security

Rm777 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The key security measures we employ include:

• 256-bit SSL Encryption: All communications between your device and rm777's servers are encrypted using 256-bit TLS/SSL protocol — the same protection standard used by Malaysia's leading financial institutions.
• Strict Access Controls: Your personal data is accessible only to rm777 staff who require it to carry out their legitimate duties. All access is logged and audited.
• Encrypted Data Storage: Sensitive data stored in our databases — including financial information and identity verification documents — is kept in encrypted form.
• Security Penetration Testing: The rm777 system undergoes regular penetration testing by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: rm777 supports two-factor authentication (2FA) to add an extra layer of protection to your account.
• Incident Response Plan: rm777 has a comprehensive security incident response procedure in place. Should a data breach occur that affects your rights or freedoms, we will notify you within a reasonable timeframe in accordance with legal requirements.

While we take all reasonable steps to protect your data, no system is entirely free from risk. You also play an important role in your account's security — always use a strong, unique password for your rm777 account and never share it with anyone.

6Cookies & Tracking Technologies

Rm777 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core rm777 platform functionality, such as maintaining your login session and enabling security features. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helping us understand how players interact with the rm777 platform — which pages are visited most frequently, how long play sessions last, and which areas are causing technical issues. This information is used for continuous improvement.
• Functional Cookies: Enables the rm777 platform to remember your preferences — such as your preferred language, display settings, and favourite games — for a more personalised experience.

You can manage cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain features on the rm777 platform. For guidance on managing cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to the respective browser's help documentation.

7Data Retention Period

Rm777 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration of your active rm777 account, plus any required retention period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial and anti-money laundering legislation.
• Identity Verification Documents (KYC): Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later, in line with AML compliance requirements.
• Game History: Retained for a minimum of 2 years for audit purposes, dispute resolution, and responsible gambling compliance.
• Support Communication Records: Retained for 2 years after case resolution for quality control purposes and reference in the event of a recurring dispute.

When data is no longer needed and there is no legal obligation to retain it, rm777 will securely delete or anonymise it. Anonymised data is no longer considered personal data and may be used for statistical and analytical purposes without any time restriction.

8Your Personal Data Rights

As an rm777 player and data subject under Malaysia's data protection laws, you have the following rights with respect to your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you. rm777 will provide this information in a readable format within 14 working days from the date your request is received.
• Right to Rectification: If you find that the data we hold about you is inaccurate or out of date, you have the right to request a correction. You can also update certain basic details directly through your rm777 account settings.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you may request the deletion of your personal data. Please note that this right has its limitations — for instance, we are unable to delete data that is required to fulfil a legal obligation or to resolve an outstanding dispute.
• Right to Object to Processing: You may object to the processing of your data for specific purposes, particularly for direct marketing. You can withdraw your consent to marketing emails at any time via the unsubscribe link in the relevant email.
• Right to Data Portability: You have the right to request your personal data in a structured, reusable format for transfer to another party where technically feasible.

To exercise any of the rights above, please send us a written request at support@rm777.biz stating the type of right you wish to exercise and your account information for identity verification purposes. rm777 will process your request within 14 working days and will notify you if we require additional information to do so.

9Children & Minors

The rm777 platform is intended exclusively for individuals aged 18 years and above. We do not target children or minors, and we do not knowingly collect personal data from individuals under the age of majority.

If we discover or have reasonable grounds to believe that personal data has been collected from someone under 18 years of age without proper age verification, we will take immediate steps to:

• Immediately suspending any related accounts while the investigation is conducted.
• Deleting all personal data collected from the individual concerned upon confirmation that they are underage.
• Ensuring that no financial transactions are processed or winnings credited to the account in question.

Parents or guardians who believe their child has registered for or used the rm777 platform without permission are urged to contact us immediately at support@rm777.biz so that we can take appropriate action without delay.

10Changes to This Privacy Policy

Rm777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or in response to new operational requirements.

When we make material changes to this Privacy Policy — meaning changes that significantly affect how we use your data — we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notice to all registered members by email to the address linked to their rm777 account.
• Displaying a prominent notice on the rm777 platform at least 7 days before the changes take effect.

Your continued use of the rm777 platform after an updated Privacy Policy takes effect will be considered your acceptance of the revised version. If you do not agree with the changes, you may close your rm777 account before the effective date.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding rm777's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Privacy Email: support@rm777.biz – please include "Privacy Enquiry" in the subject line of your email
• Live Chat: Available on the rm777 platform, 24 hours a day, 7 days a week, in Bahasa Melayu
• Response Time: Privacy-related enquiries will be responded to within 14 business days; urgent data security matters will be addressed within 24 hours.

Rm777 is committed to resolving all privacy concerns in a fair, transparent, and timely manner. If you believe that rm777 has not handled your personal data in accordance with applicable laws, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.