Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how rm1asia ("Company", "we", "us", or "our"), the operator of the online gaming platform accessible atrm1asia.cam ("Platform"), collects, processes, stores, shares, and protects the personal data of individuals who register for or use the Platform ("Players", "Users", or "you").

rm1asia respects the privacy of all its users and is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection legislation and international best practices. This Policy forms part of the broader agreement between you and rm1asia, read together with our Terms & Conditions.

By registering an account, accessing the Platform, or otherwise providing your personal data to rm1asia, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, phone number, financial data, device identifiers, and gameplay records.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, rm1asia.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller, including payment processors and identity verification providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data for a specific purpose.
• "KYC" means Know Your Customer — the identity verification process required under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) standards.
• "Cookies" means small text files placed on a user's device by a website to store information about the user's session, preferences, and browsing behaviour.

3 Data Controller

rm1asia acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, rm1asia is responsible for determining the purposes for which your personal data is collected and the manner in which it is processed. All enquiries regarding this Policy or the exercise of your data subject rights should be directed to our Data Protection team as specified in Section 17.

Where rm1asia engages third-party Data Processors — such as payment service providers, identity verification services, or cloud infrastructure partners — those parties act strictly in accordance with rm1asia's written instructions and are contractually bound to implement appropriate technical and organisational measures to protect your data.

4 Data We Collect

rm1asia collects the following categories of personal data from Players:

Category	Specific Data Points	Purpose
Identity Data	Full legal name, date of birth, gender, nationality, MyKad or passport number	Account registration, KYC/AML compliance, age verification
Contact Data	Email address, Malaysian mobile number, residential address (city/state)	Account communications, support verification
Financial Data	Payment method details (e-wallet ID, bank account number), transaction history, deposit and withdrawal records in MYR	Payment processing, AML monitoring, fraud prevention
KYC Documents	MyKad (front & back), passport scan, proof of payment method, proof of address	Regulatory compliance, identity verification, fraud prevention
Gameplay Data	Game history, bet amounts, win/loss records, session duration, bonus usage	Platform operation, responsible gambling monitoring, dispute resolution
Technical Data	IP address, device type, browser type, operating system, login timestamps, session identifiers	Security, fraud detection, platform optimisation
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer service, dispute resolution, training and quality assurance
Marketing Preferences	Opt-in/opt-out status for promotional emails and notifications	Targeted communications (where consented)

5 How We Collect Data

rm1asia collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, making deposits or withdrawal requests, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically as you use the Platform, including via cookies, session tracking, and server logs;
• Third-party sources: Identity verification information from KYC service providers, fraud and AML screening results from compliance partners, and payment transaction data from processors such as Touch'n Go, Boost, GrabPay, DuitNow, and FPX;
• Public sources: Publicly available information used for fraud detection and compliance screening purposes.

6 Legal Basis for Processing

rm1asia processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account creation, payment processing, game delivery, and customer support;
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, and directives from competent regulatory authorities;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gambling management — where those interests do not override your fundamental privacy rights;
• Consent: Processing for direct marketing communications and optional personalisation features — which you may withdraw at any time without affecting the lawfulness of prior processing.

7 How We Use Your Data

rm1asia uses collected personal data for the following purposes:

• Registering and managing your Player Account;
• Processing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20;
• Conducting identity verification and KYC checks in compliance with applicable AML and CTF regulations;
• Detecting, investigating, and preventing fraudulent transactions, multi-accounting, and other prohibited activities;
• Settling bets, resolving game disputes, and maintaining accurate transaction records;
• Monitoring gameplay patterns to identify signs of problem gambling and administering responsible gambling tools including deposit limits, session limits, and self-exclusion;
• Providing customer support via live chat and email;
• Sending transactional communications (e.g., account alerts, deposit confirmations, withdrawal notifications);
• Sending promotional communications where you have provided explicit consent;
• Improving the Platform's functionality, performance, and user experience through anonymised usage analytics;
• Complying with legal and regulatory obligations, including responding to lawful requests from Malaysian or international law enforcement agencies.

8 Disclosure to Third Parties

rm1asia does not sell, rent, or otherwise transfer your personal data to unafiliated third parties for their own commercial marketing purposes. Your data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and affiliated banking partners — for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML screening services used to verify player identities and comply with regulatory obligations;
• Technology and infrastructure partners: Cloud hosting, cybersecurity, and platform analytics providers who process data on our behalf under strict contractual controls;
• Regulatory and law enforcement authorities: Where disclosure is required by law, court order, or the directive of a competent regulatory body;
• Professional advisors: Including legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of assets, player data may be transferred to a successor entity — you will be notified prior to any such transfer.

9 International Data Transfers

rm1asia operates under an international gaming licence and may use service providers located in jurisdictions outside Malaysia. Where personal data is transferred to countries that do not provide an equivalent level of data protection, rm1asia will implement appropriate safeguards — such as contractual data transfer clauses based on internationally recognised model contract provisions — to ensure that your data continues to be protected to the standards described in this Policy.

Players who have questions about the safeguards applicable to a particular transfer may contact our Data Protection team as specified in Section 17.

10 Data Retention

rm1asia retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. Specifically:

• Account and identity data is retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements;
• Financial transaction records are retained for a minimum of seven (7) years following each transaction date, in compliance with applicable financial record-keeping regulations;
• Gameplay and session data is retained for three (3) years or for the duration of any unresolved dispute, whichever is longer;
• Customer support communications are retained for two (2) years following the resolution of the relevant enquiry;
• Marketing consent records are retained for the duration of the consent and fortwo (2) years thereafter as evidence of consent status.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in manner that permanently prevents re-identification.

11 Security of Your Data

rm1asia implements a comprehensive range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• At-rest encryption for sensitive data stored in our databases, including KYC documents and payment credentials;
• Multi-factor authentication (MFA) for Platform access and administrative systems;
• Role-based access controls limiting data access to personnel who require it for their specific job functions;
• Regular penetration testing and independent security audits conducted by qualified cybersecurity professionals;
• Intrusion detection and anomaly monitoring systems operating continuously across all Platform infrastructure;
• Staff training on data protection obligations, phishing awareness, and incident response protocols.

Notwithstanding the above, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, rm1asia will notify affected Players and relevant authorities in accordance with applicable legal requirements.

12 Cookies & Tracking Technologies

rm1asia uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytical cookies: Used to collect anonymised data on how Players navigate and use the Platform, helping us identify areas for improvement and optimise performance.
• Preference cookies: Store your language, display, and personalisation settings so the Platform remembers your choices between sessions.
• Security cookies: Used to detect and prevent fraudulent activity, multi-accounting, and other abusive behaviour.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect the functionality of the Platform. rm1asia does not use third-party advertising or retargeting cookies.

13 Your Rights as a Data Subject

Subject to applicable law and any overiding legal obligations, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data rm1asia holds about you, along with information on how it is being processed;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our retention obligations under AML and regulatory frameworks;
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, such as while dispute regarding its accuracy is being resolved;
• Right to Data Portability: You may request a structured, machine-readable copy of data you have provided to us, for transmission to another service;
• Right to Object: You may object to processing based on legitimate interests, including the use of your data for profiling or direct marketing;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team via live chat or the email address provided in Section 17. We will respond to all valid requests within thirty (30) calendar days. Identity verification may be required before we can fulfil a data subject request.

14 Marketing Communications

rm1asia will only send you promotional communications — including information about bonuses, new games, events, and platform updates — where you have provided explicit opt-in consent during or after the registration process. Each marketing communication will include a clear and easy-to-use unsubscribe mechanism.

You may withdraw your consent to marketing at any time by: (a) clicking the "Unsubscribe" link in any marketing email; (b) updating your notification preferences in your Account settings; or (c) contacting our support team directly. Withdrawal of marketing consent will not affect the receipt of transactional communications necessary for the operation of your Account.

15 Children's Privacy

The rm1asia Platform is strictly for use by individuals aged21 years and above. We do not knowingly collect or process personal data from individuals below the minimum age. If we become aware that personal data has been collected from an individual who does not meet the minimum age requirement, we will delete that data and close the associated account immediately, and any winings will be forfeited.

Parents and guardians who believe their child may have registered on the Platform are encouraged to contact our support team without delay so that the matter can be investigated and resolved promptly.

16 Changes to This Policy

rm1asia reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or operational circumstances. Material changes will be communicated to registered Players via email or through a prominent notice displayed on the Platform, at least fourteen (14) days prior to the changes taking effect where practicable.

The effective date at the top of this Policy will be updated each time a revision is made. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

17 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which rm1asia processes your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform's in-site live chat — the quickest channel for urgent queries;
• Email: [email protected] — please include "Privacy Request" in the subject line for data subject rights requests. We aim to respond within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.