Rm777 Privacy Policy – Your Personal Data Protection

01 Introduction

Platform rm777 takes our responsibility to protect the privacy and security of every player's personal information seriously. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international industry standards.

This document explains in detail:

• The types of personal information we collect from you;
• The purpose and manner in which we use that information;
• Parties that may be granted access to your information;
• Security measures we take to protect your data;
• Your rights regarding the personal information we hold about you.

This policy takes effect from 1 January 2026 and supersedes all previous versions. Any updates will be displayed on this page along with the new effective date.

02 Types of Personal Data We Collect

rm777 collects only the information necessary to provide our players with a secure, fair, and high-quality service. The following are the categories of data we collect:

03 How We Use Your Data

Every piece of data we collect is used for a clear and legitimate purpose. rm777 will not use your information for any other purpose without informing you in advance:

• Account Management: Creating, verifying, and managing your account on the platform rm777.
• Transaction Processing: Processing deposits, withdrawals, and all financial activities securely and accurately.
• Identity Verification (KYC): Verifying your identity to prevent fraud and money laundering.
• Customer Support: Handling your enquiries, complaints, and support requests effectively.
• Platform Security: Detecting and preventing fraudulent activity, intrusion attempts, and platform abuse.
• Service Improvements: Analysing usage patterns to improve platform quality and the player experience.
• Communications: Sending important notifications related to your account, promotions (if you have opted in), and platform updates.
• Legal Compliance: Meeting applicable legal and regulatory obligations.

04 Data Sharing with Third Parties

rm777 does not sell or rent your personal data to any third party. However, in certain situations, we may need to share your information with the following parties:

• Payment Service Providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions. They are bound by strict confidentiality agreements.
• Game Providers: Game provider companies partnering with rm777 may receive the minimum data required to ensure game integrity.
• Identity Verification Services: Third parties that assist with KYC processing and anti-money laundering (AML) compliance.
• Authorities: Law enforcement agencies, regulatory bodies or courts when required under Malaysian law.
• Analytics Services: Third-party analytics tools that help us understand how the platform is used — this data is typically aggregated and does not identify individuals.

All third parties who receive your data are bound by strict data protection agreements and are only permitted to use that information for the specified purposes.

05 Data Security Measures

We invest seriously in security infrastructure to ensure your data is always protected. The technical and organisational measures we implement include:

• 256-bit SSL encryption for all data communications between your device and our servers.
• Encryption of data at rest for all sensitive information stored in our databases.
• Multi-layered access controls — only authorised staff may access players' personal data, and every access is logged.
• 24/7 security monitoring through an always-active automated threat detection system.
• Regular security testing including penetration testing by independent auditors.
• Two-factor authentication (2FA) available for all player accounts as an additional layer of protection.
• Staff training — all staff rm777 receive regular data protection training.

While we take all reasonable measures, no system is 100% immune. Should any data breach occur that affects your information, we will notify you within the timeframe required by applicable law.

06 Cookies and Tracking Technologies

Platform rm777 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display settings, and login details (if you select "Remember Me").
• Analytics Cookies: Helping us understand how players use the platform so we can make meaningful improvements. This data is collected anonymously.
• Marketing Cookies: Used to display relevant promotions to you based on your interests and activity. You may opt out of this type of cookie.

You can manage your cookie settings through your internet browser at any time. Disabling certain cookies may affect the functionality of some parts of the platform.

07 Data Retention Period

rm777 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable law. The following are general data retention guidelines:

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• KYC Documents: Retained for the period specified by the relevant regulatory authority.
• Security Logs: Retained for 90 days for security incident investigation purposes if required.
• Analytics Data: Anonymised data is retained for a longer period for trend analysis purposes.

When data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures.

08 Your Rights Under PDPA

As a player rm777 and as a Malaysian citizen or resident, you have the following rights regarding your personal data:

09 Child Protection

Platform rm777 is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data from children under the age of 18.

If we discover that personal data of a child has been collected inadvertently, we will take immediate action to delete the information and close the account in question. Parents or guardians who have concerns about their child's use of the platform are encouraged to contact our support team promptly.

10 Changes to This Privacy Policy

rm777 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document;
• Displaying a clear notice on the platform's home page for at least 14 days;
• Sending email notifications to all registered members for significant changes.

Continued use of the platform rm777 after the changes take effect will be considered as your acceptance of the updated policy. We encourage you to review this page periodically.

11 How to Contact Us

If you have any questions, concerns or wish to exercise your personal data rights, our Data Protection Officer (DPO) team rm777 ready to assist you through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the platform rm777 — the fastest way to get assistance.
• Email: Send your enquiry to our team at [email protected] — we aim to respond within 1 to 2 business days.

For requests related to data access, correction, or deletion, please include your account number and the type of request so we can process your application more efficiently. The confidentiality of every request is guaranteed.