rmc8 Privacy Policy

1 Introduction

rmc8 ("rmc8", "we", "us", "our") operates the online gaming platform available at rmc8.app. We are committed to protecting the privacy and personal data of all players who register and use our services. This Privacy Policy ("Policy") describes the types of personal information rmc8 collects, the purposes for which it is used, the parties with whom it may be shared, and the choices and rights available to you in relation to your personal data.

This Policy applies to all personal data collected through your use of the rmc8 Platform, including when you register an account, make deposits or withdrawals, participate in games, contact our customer support, or visit rmc8.app. By using the rmc8 Platform, you acknowledge that you have read and understood this Privacy Policy.

rmc8 processes personal data in accordance with applicable data protection legislation. Malaysian players should be aware that rmc8 takes the protection of personal data seriously and implements appropriate technical and organisational measures to safeguard your information.

2 Personal Data We Collect

2.1 Registration Data

When you create an rmc8 account, we collect the following personal information:

• Full legal name (as per your national identity card or passport);
• Date of birth (for age verification purposes — rmc8 is strictly 21+ only);
• Malaysian mobile number (your primary account identifier and OTP destination);
• Email address (if provided during registration);
• Residential address (required for enhanced identity verification).

2.2 Identity Verification (KYC) Data

As part of our regulatory compliance obligations, rmc8 may collect copies of identity documents including your MyKad (Malaysian National Identity Card), passport, proof of address documents, and payment method documentation during the Know Your Customer (KYC) process.

2.3 Transaction Data

rmc8 records all financial transactions conducted on your account, including deposit amounts, withdrawal requests, payment methods used (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX), transaction timestamps, and transaction reference numbers.

2.4 Gaming Activity Data

We collect data about your gaming activity on the rmc8 Platform, including games played, bet amounts, game outcomes, session durations, and bonus usage history. This data is used for account management, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Technical and Device Data

When you access rmc8, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, mobile network information, and general geographic location (city/region level, derived from IP address). This information is used for fraud prevention, security monitoring, and platform optimisation.

2.6 Communications Data

If you contact rmc8 customer support via live chat, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Use Your Personal Data

rmc8 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your rmc8 player account, including processing your login credentials and maintaining your MYR wallet balance;
• Identity Verification: To verify your age (21+ requirement) and identity in compliance with our KYC obligations and applicable anti-money laundering regulations;
• Payment Processing: To process your deposits and withdrawals via your chosen Malaysian payment methods and to maintain accurate transaction records;
• Service Delivery: To provide you with access to rmc8's games, live casino, sportsbook, jackpots, and all other platform features;
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Responsible Gaming: To monitor your gaming activity and identify patterns that may indicate problem gambling behaviour, and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited activities on the rmc8 Platform;
• Legal Compliance: To comply with our obligations under applicable law, including anti-money laundering regulations, gaming licensing requirements, and data protection legislation;
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the rmc8 Platform's performance, usability, and game offering.

4 Legal Basis for Processing

rmc8 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and rmc8 (i.e., to provide you with access to the Platform and its services in accordance with our Terms & Conditions);
• Legal Obligation: Processing is necessary to comply with rmc8's legal obligations, including AML/KYC requirements, gaming licensing conditions, and applicable tax reporting requirements;
• Legitimate Interests: Processing is necessary for rmc8's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics, provided these interests are not overridden by your fundamental rights;
• Consent: Where rmc8 relies on your consent as the legal basis for processing (for example, for certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing already carried out.

5 Data Sharing and Disclosure

5.1 Service Providers

rmc8 may share your personal data with carefully selected third-party service providers who assist in operating the Platform, including payment processors (such as FPX operators and e-wallet providers), identity verification services, KYC solution providers, cloud hosting providers, and customer support platform operators. All third-party service providers are contractually required to process your data only in accordance with rmc8's instructions and to implement appropriate security measures.

5.2 Regulatory and Legal Disclosure

rmc8 may disclose your personal data to regulatory authorities, law enforcement agencies, gaming regulators, or other governmental bodies where required or permitted to do so by applicable law, including in connection with anti-money laundering investigations, fraud investigations, or responses to lawful legal process.

5.3 No Commercial Sale of Data

rmc8 does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own independent marketing or commercial purposes. Any data sharing is strictly limited to what is necessary for the operation of rmc8's services or compliance with legal obligations.

6 Cookies and Tracking Technologies

6.1 Types of Cookies Used

rmc8 uses the following categories of cookies and similar tracking technologies on our Platform:

• Essential Cookies: Required for the Platform to function correctly, including session management and login authentication. These cannot be disabled without impairing your use of rmc8;
• Functional Cookies: Used to remember your preferences, such as language settings and game display preferences;
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the rmc8 Platform, helping us identify areas for improvement;
• Security Cookies: Used to support fraud detection and account security monitoring.

6.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the rmc8 Platform. For detailed guidance on managing cookies in commonly used browsers, please refer to your browser's help documentation.

7 Data Security

rmc8 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rmc8's servers;
• Encryption of sensitive data fields (including passwords and financial information) at rest using strong cryptographic standards;
• Access controls limiting data access to authorised rmc8 personnel on a need-to-know basis;
• Regular security audits and penetration testing of rmc8's systems;
• Multi-factor authentication for rmc8 system access by internal staff.

While rmc8 takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system can be guaranteed to be completely secure. You are responsible for maintaining the security of your own rmc8 login credentials.

8 Data Retention

rmc8 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure to comply with anti-money laundering and gaming regulatory requirements;
• KYC documentation is retained for the period specified by applicable AML regulations from the date of account closure;
• Customer support communications are retained for three (3) years for dispute resolution and quality assurance purposes;
• Gaming activity logs are retained for the period required by rmc8's licensing authority.

Following the expiry of applicable retention periods, rmc8 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual.

9 Your Privacy Rights

Subject to applicable law and rmc8's legitimate interests, you have the following rights in respect of your personal data held by rmc8:

• Right of Access: You have the right to request a copy of the personal data rmc8 holds about you;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data;
• Right to Erasure: In certain circumstances, you have the right to request that rmc8 delete your personal data. Note that this right may be limited where rmc8 is required to retain data by law;
• Right to Restriction: You have the right to request that rmc8 restrict the processing of your personal data in certain circumstances;
• Right to Object: Where rmc8 processes your data on the basis of legitimate interests, you have the right to object to such processing;
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact rmc8's customer support team via 24/7 live chat on the Platform or by emailing [email protected] (plain text — not a clickable link). rmc8 will respond to verified data rights requests within the timeframe required by applicable law.

10 Children's Privacy

The rmc8 Platform is strictly intended for adults aged 21 years and above. rmc8 does not knowingly collect personal data from individuals below the age of 21. If rmc8 becomes aware that personal data has been collected from an individual who is underage, we will take immediate steps to delete such data and suspend the associated account. If you have reason to believe that an underage individual has registered an rmc8 account, please contact our customer support team immediately.

11 International Data Transfers

rmc8's operations and infrastructure may involve the transfer of your personal data to servers or service providers located outside of Malaysia. Where such transfers occur, rmc8 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that which it would receive within Malaysia. This includes the use of contractual data protection clauses with international service providers and selection of providers who maintain internationally recognised data security certifications.

12 Third-Party Links

The rmc8 Platform may contain references to other pages or services within the rmc8 ecosystem. rmc8 is not responsible for the privacy practices of any third-party websites or services that may be linked to from our Platform. We encourage you to review the privacy policy of any third-party site you visit. rmc8's Privacy Policy applies solely to data collected through rmc8.app and rmc8's own services.

13 Changes to This Privacy Policy

rmc8 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via their registered contact details or through a prominent notice on the rmc8 Platform, with at least fourteen (14) days' notice where practicable. The "Last Updated" date at the top of this Policy will be revised to reflect any changes. Your continued use of the rmc8 Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

rmc8 encourages all players to review this Privacy Policy periodically. The most current version will always be available at rmc8.app/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or rmc8's handling of your personal data, please contact us through the following channels:

• Live Chat: 24/7 via the rmc8 Platform (fastest response)
• Email: [email protected] (plain text — not a clickable link)

Our support team serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and all regions of Malaysia, 24 hours a day, 365 days a year.