Privacy Policy rm100 – Personal Data Protection for Malaysian Members

Rm100 ("we", "the rm100 Platform" or "the Company") is fully committed to protecting the privacy and data security of all members using the rm100.xyz platform. This Privacy Policy explains in detail how we collect, use, store, protect and, in certain circumstances, share your personal information.

By registering as an rm100 member or continuing to use our platform after an update, you agree to the data protection practices set out in this Privacy Policy. This Policy applies to all your interactions with rm100 — from account registration and daily betting activity to deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow or FPX, through to every enquiry you submit to our customer support team.

Rm100 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. We regard privacy protection not merely as a legal obligation, but as part of our responsibility to the Malaysian player community that trusts our platform.

Rm100 collects members' personal data through several distinct channels based on platform requirements. The following are the main categories of data we collect:

A. Account Registration Information

• Full name as shown on your Malaysian identification card
• An active Malaysian phone number (for OTP verification)
• Valid email address
• Date of birth (for age verification — you must be 18 or above)
• Password (stored in a hashed format that is unreadable by anyone)

B. Identity Verification Information (KYC)

• A copy of your Malaysian Identity Card (MyKad) — required for identity verification and AML compliance
• Additional supporting documents that may be requested for verification of large withdrawals

C. Financial Transaction Data

• Records of all deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Records of all withdrawal requests and their processing status
• Account balance history and betting activity

D. Platform Activity Data

• Login activity, session times, and activity while using the rm100 platform
• Full betting history — games played, sports markets selected, bet sizes
• Chat history with the rm100 customer support team

E. Technical Data

• IP address used when accessing rm100
• Device type (Android, iOS, desktop) and web browser
• Cookie and session data for platform functionality purposes

Personal data collected by rm100 is used solely for lawful purposes to which you have given explicit or implied consent through your use of our platform. The primary purposes are as follows:

For the delivery of marketing communications such as promotional offers on baccarat, poker, Liga Super football and esports, rm100 will request your separate consent at the point of registration. You may withdraw this consent at any time via your account settings or by contacting the rm100 support team.

Rm100 will not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. However, there are specific circumstances in which rm100 needs to share data with selected parties for platform operations:

Technical Service Providers: rm100 works with carefully selected third-party providers to help operate the platform — including payment solution providers (for processing DuitNow, GrabPay, Touch 'n Go and FPX transactions), cloud service providers, and game software providers. All third parties are bound by strict confidentiality agreements and may only use your data for the specific purposes defined by rm100.

Legal Authorities: rm100 may disclose members' personal data where required by Malaysian law, court order, regulatory authority directive, or as part of Anti-Money Laundering (AML) compliance procedures. In such situations, rm100 will disclose only the minimum data necessary.

Fraud Investigation: In cases involving fraud, money laundering, or serious misuse of the rm100 platform, we may share relevant information with law enforcement authorities or security service providers working with us.

Rm100 continually invests in security infrastructure to ensure that all members' personal and financial data is protected to the highest standard. The key security measures we have in place are:

• 256-bit SSL Encryption: All communications between your browser and the rm100 platform are encrypted using the latest TLS protocol, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Password Hashing: rm100 member passwords are never stored in plain text. We use strong one-way hashing algorithms — meaning that even in the event of a breach, your password cannot be recovered.
• Two-Factor Authentication (2FA): rm100 supports two-factor authentication via phone number OTP for sensitive operations such as withdrawals and password changes, adding an extra layer of protection to your account.
• 24/7 Monitoring: The rm100 system is continuously monitored for suspicious activity, unauthorised access attempts, and usage pattern anomalies that may indicate fraudulent activity.
• Regular Security Audits: The rm100 platform undergoes regular external security audits conducted by independent cybersecurity experts to identify and address any system vulnerabilities.
• Internal Access Controls: Only rm100 staff with a legitimate business need may access members' personal data, and all such access is fully logged and monitored.

Rm100 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the rm100 platform.

Types of Cookies Used by rm100:

• Session Cookies (Required): Technical cookies required to maintain your login session, keep you signed in while using the platform, and store your game preferences during an active session. These cookies cannot be disabled without affecting the platform's core functionality.
• Functional Cookies: Cookies that store your preferences such as interface language, display format and personalised settings, making your experience more comfortable on future visits.
• Analytics Cookies: rm100 uses internal analytics tools to understand how members use the platform — for example, which games are most popular, peak usage times, and areas of the platform that need improvement. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Cookies that help rm100 identify and prevent suspicious activity, unauthorised login attempts, and potential fraud by verifying your device identity during each session.

You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect certain rm100 platform functions, such as maintaining your login session.

Rm100 retains members' personal data only for as long as necessary for the purpose for which it was collected, or as required by law. rm100's data retention policy is as follows:

• Active Account Data: Retained for as long as your rm100 account remains active and in use. Accounts inactive for 24 consecutive months will be notified by email before any action is taken.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of transaction, as required by Malaysian financial legislation and AML compliance obligations.
• Identity Verification Documents (KYC): Retained for 5 years from the date of last verification or account closure, whichever is later, in line with Malaysia's AMLA requirements.
• Platform Activity Log: Technical logs are retained for 12 months for security and dispute resolution purposes.
• Customer Support Records: Communication history with the rm100 support team is retained for 3 years to enable follow-up in the event of disputes or subsequent complaints.

Once the specified retention period has elapsed, rm100 will securely delete or anonymise your personal data in accordance with established procedures.

As an rm100 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

Rm100 is a betting platform intended exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

Should rm100 discover that we have inadvertently collected personal data from an individual under the age of 18, we will immediately take the following steps:

• Immediately closing any associated accounts.
• Deleting all associated personal data from our systems as promptly and securely as possible.
• Returning any genuine deposit balance (if applicable) to the original payment method in accordance with the relevant procedures.

Parents or guardians who discover that a child or ward under their care has registered for or used the rm100 platform are asked to contact our support team immediately at support@rm100.xyz for prompt action.

The rm100 platform may contain links or integrations to third-party websites or services in certain contexts — for example, live game providers for live baccarat or poker. Please be aware that this rm100 Privacy Policy applies only to the rm100.xyz platform and services directly operated by rm100.

Rm100 is not responsible for the privacy practices of any third-party websites or services that may be accessed through our platform. We encourage you to read the privacy policy of every website you visit outside of rm100.

For live game providers operating within the rm100 platform — such as live baccarat, Texas Hold'em poker, and e-sports providers — rm100 has data processing agreements in place to ensure they handle only the minimum technical data required to deliver the games, and do not use that data for any other purpose.

Rm100 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operating practices, legal requirements, or new platform features. Any amendments will be published on this page with a new "Last Updated" date.

For significant and material amendments — those that fundamentally change how we use your data — rm100 will notify members via their registered email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and decide whether to continue using the rm100 platform.

For minor amendments such as language corrections, clarifications, or non-material changes, rm100 may update this Privacy Policy without separate notice to members. We recommend checking this page periodically.

Your continued use of the rm100 platform after any amendments take effect will be considered acceptance of the revised policy. If you do not agree with the changes, you have the right to close your rm100 account and request deletion of your data in accordance with the procedure set out in Section 8 above.

If you have any questions, concerns, or complaints regarding this rm100 Privacy Policy, or wish to submit a privacy rights request, the rm100 team is ready to assist through the following channels:

• Privacy Email: support@rm100.xyz — please include "Privacy Enquiry" in the subject line of your email to ensure it is handled by the appropriate team.
• 24/7 Live Chat: Directly within the rm100 platform — for general enquiries or urgent questions about your privacy and account security.

Rm100 is committed to responding to all privacy enquiries within 14 business days. For more complex requests such as full data access or data deletion, additional time may be required depending on the scope of the request; however, we will update you on the current status within 14 days of receiving it.

If you are dissatisfied with rm100's response to your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory authority under the PDPA 2010 framework.