RM99 takes the protection of every member's personal data seriously. This Privacy Policy transparently explains what information we collect, how it is used, and the security measures we have in place to safeguard your privacy at all times.
Rm99's commitment to your privacy goes beyond words – these are the concrete steps we take to protect every member's information.
Every piece of information you share with rm99 – from your identity card number to your e-wallet details – is protected by 256-bit SSL encryption during both transmission and storage. This is the same security standard used by Malaysia's leading banks, including Maybank and CIMB.
RM99 has never sold, rented, or traded members' personal information to any third party for marketing, commercial analytics, or any other purpose unrelated to the operation of the rm99 platform — and never will. Your data belongs to you.
RM99 follows the principle of data minimisation – we only collect information that is genuinely necessary to manage your account, process financial transactions, and meet our legal obligations. No excess data is collected without a clear and legitimate purpose.
As an rm99 member, you have the right to access, correct, download or request deletion of your personal data at any time. Simply contact the rm99 support team via live chat or email and we will process your request within the stipulated timeframe.
All rm99 member data is stored on servers protected by multiple layers of firewalls, real-time intrusion detection systems, and round-the-clock security monitoring. Physical access to the data storage infrastructure is restricted to authorised personnel only.
Rm99 operates in accordance with internationally recognised data protection standards. All data collection, storage and usage processes comply with relevant legal frameworks, including anti-money laundering (AML) and know your customer (KYC) requirements.
This Privacy Policy ("Policy") is published by RM99 ("we", "rm99") and applies to all users and members who register for or use the rm99 platform, accessible via rm99.link and any related subdomains or applications.
Rm99 understands that privacy is a fundamental right, not merely a legal obligation. When you create an rm99 account, make a deposit via DuitNow or Touch 'n Go eWallet, play slots or live baccarat, or simply browse our platform — you are entrusting us with your personal information. We do not take that trust lightly.
This policy is written in plain, easy-to-understand language with the aim of clearly and honestly explaining: what data we collect, why we collect it, who has access to it, how long it is retained, and what choices you have regarding your personal data. If after reading this policy you still have questions, rm99's support team is available via live chat 24/7.
During the rm99 registration process and while using the platform, you provide the following information directly:
While you use the rm99 platform, our systems automatically record the following technical information:
All financial transaction records on the rm99 platform – including deposits, withdrawals, bonuses received, and betting history – are securely stored as part of your account records and to meet legal compliance requirements related to anti-money laundering (AML).
Rm99 uses the personal data we collect solely for the following legitimate and necessary purposes:
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Account Management – to create, verify and manage your rm99 account | Name, email, phone number, IC number | Contractual fulfilment |
| Transaction Processing – deposits and withdrawals via DuitNow, TnG, GrabPay, and more. | Financial information, transaction records | Contractual fulfilment |
| KYC Verification – verifying the identity and age of members | Identity documents, verification images | Legal requirements |
| Fraud Prevention – identifying and preventing fraudulent activity | IP address, device data, activity patterns | Legitimate interest |
| Customer Service – responding to enquiries and complaints | Name, email, activity records | Contractual fulfilment |
| AML Compliance – to comply with anti-money laundering legislation | All financial transaction records | Legal requirements |
| Platform Improvement – analysing usage to improve rm99 | Anonymised activity data | Legitimate interest |
| Promotional Communications – to inform you of rm99 promotions and offers (where permitted) | Email, phone number | Consent |
RM99 will not use your personal data for any purpose beyond those listed above without first obtaining your explicit consent. If you do not wish to receive promotional communications, you may opt out at any time through your account settings or by contacting the rm99 support team.
Rm99 states unequivocally that we never sell, rent, trade, or disclose members' personal data to any third party for their own marketing or commercial purposes. This is a non-negotiable principle that will not change.
In limited and necessary circumstances, rm99 may share certain data with the following parties:
RM99 takes data security infrastructure seriously to protect every member's information. The key technical measures we employ include:
Beyond technical measures, rm99 also enforces strict operational security controls:
While RM99 takes all reasonable steps to prevent data breaches, in the unlikely event of a security incident affecting members' personal data, RM99 is committed to notifying affected members within a reasonable timeframe and taking prompt remedial action.
Cookies are small text files stored on your device by your web browser when you visit the rm99 platform. rm99 uses cookies for the following purposes:
You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete and block cookies. Please note that disabling essential cookies may affect the functionality of the rm99 platform, including your ability to log in to your account.
RM99 retains your personal data for as long as necessary for the purposes set out in this Policy, subject to applicable legal requirements. General data retention guidelines are as follows:
Once the stipulated retention period has lapsed and there is no legal requirement to continue storing the data, rm99 will securely and irreversibly delete or anonymise it. The data deletion process follows industry-recognised standard procedures.
As an rm99 member, you have the following rights regarding your personal data. All requests can be submitted to the rm99 team via live chat or email at support@rm99.link:
Request a copy of all personal data rm99 holds about you, including account records and transaction history.
Request a correction to any inaccurate or incomplete personal data held in your rm99 account records.
Request the deletion of your personal data, subject to any applicable legal retention requirements.
Object to the processing of your data for specific purposes, such as marketing communications from rm99.
Request your data in a machine-readable format for portability if needed.
Request that rm99 temporarily restrict the processing of your data under certain circumstances defined by law.
Rm99 will process requests related to your data rights within 30 working days from the date the request is received. In complex cases, this period may be extended with prior notice to you. rm99 does not charge for reasonable personal data requests.
The rm99 platform is for individuals aged 18 and above only. rm99 does not knowingly collect or process personal data from children or individuals under the age of 18. Should rm99 discover that personal data of a minor has been collected without proper age verification, that data will be deleted immediately and the associated account will be closed.
If you become aware that a child or minor has registered on the rm99 platform, please notify our support team immediately via live chat or email at support@rm99.link. rm99 takes child protection very seriously and will respond promptly to any such report.
RM99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. Any amendments will take effect once the latest version is published on the rm99 website.
For material amendments – meaning changes that significantly affect how we use or protect your personal data – rm99 will endeavour to notify members via email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the rm99 platform.
You can check whether this Privacy Policy has been updated by referring to the "Last Updated" date at the top of this page. Your continued use of the rm99 platform after any amendments take effect will be considered your acceptance of the revised Policy.
For any questions, concerns or requests relating to your privacy and personal data at rm99, please reach out to us through the following channels. Our rm99 support team is ready to assist you:
RM99 is committed to responding to all privacy-related enquiries within 7 business days. For more complex data access or deletion requests, processing may take up to 30 business days as outlined above.
We all know the feeling of getting a "Our Privacy Policy has been updated" message and clicking "Agree" without reading a word. rm99 gets it – these documents are usually long, packed with confusing legal language, and written for lawyers, not real people. That's why we've made a deliberate effort to write the rm99 Privacy Policy differently – in plain, easy-to-understand English, with honest explanations of what we do with your data and why.
So let's be straightforward about this. When you register an rm99 account and provide your name, IC number, phone number, and email, we need that information to verify your identity, allow you to log in to your account, and ensure that any winnings you withdraw go to the right person — you. When you make a deposit via DuitNow or Touch 'n Go eWallet, we retain those transaction records not because we enjoy collecting data, but because international financial regulations require financial institutions to keep transaction records for a specified period. This is the same standard procedure followed by Malaysian banks.
Data privacy on an online casino platform like rm99 is far more sensitive than, say, a typical social media account. The data involved goes beyond just a name and email — it includes financial information, gaming behaviour patterns, and transaction records that can be deeply personal. rm99 takes this sensitivity seriously, which is why we invest more in data protection than most platforms in the industry.
One thing we want to make absolutely clear: rm99 will never disclose your gaming habits to anyone – not your family, not your employer, not anyone who asks. The fact that you play slots Gate of Olympus every Friday night or that you won RM2,400 from baccarat last month – this is personal information that remains strictly between you and rm99. The only exception is if a legal authority issues a valid court order requiring us to disclose it – in which case rm99 is legally obligated to comply.
The KYC (Know Your Customer) process may seem like a hassle at first glance — why upload a photo of your IC just to play slots? But there are good reasons for it. First, it ensures that only legitimate individuals aged 18 and above can access the rm99 platform. Second, it protects you — if your account is ever compromised or accessed by someone else, the KYC process ensures that withdrawals cannot be made to an account that isn't yours. Third, it is an international legal compliance requirement for the financial and gaming industry that rm99 must meet in order to operate legitimately.
KYC documents you submit to rm99 are stored in a system separate from the main gaming database, with stricter access controls and an additional encryption layer. rm99 staff with access to KYC documents are limited to a specially trained compliance team, and all access is logged and audited. rm99 does not use your IC image for any purpose other than identity verification – we do not extract data from it for analytics or feed it into any AI system.
Data rights sections in privacy documents often read like decorative text – written there, but practically difficult to exercise. At rm99, we want these rights to be genuinely easy to act on. If you want to know what data rm99 holds about you, send an email to support@rm99.link with the subject line "Data Access Request" and we will send you a full report within 30 days. If any information is inaccurate, we will correct it. If you wish to close your account and have all data not legally required to be retained deleted, we will handle your request with respect.
Rm99 believes that player trust is our most valuable asset. Over 500,000 registered members have chosen rm99 as their gaming platform, and much of that trust is built on the confidence that rm99 handles their information with integrity. This Privacy Policy is more than a compliance document – it is our promise to you. If at any point you feel rm99 has not upheld the commitments set out in this document, please contact us directly. We take every concern seriously and will respond with transparency and professionalism.
Six key things you need to know about data privacy at rm99.
RM99 never sells, rents, or trades members' personal information to any third party for their marketing or commercial purposes.
All data transmitted between your device and the rm99 platform is encrypted with 256-bit SSL, the same standard used by Malaysian banks.
Contact support@rm99.link to request a copy of all your data, correct inaccurate information, or request deletion of data that is not legally required to be retained.
Rm99 practises the principle of data minimisation – we do not collect information beyond what is strictly necessary to operate our services.
Your playing habits, win records and transaction history at rm99 are personal information that will not be disclosed to anyone without your consent.
For material amendments to the Privacy Policy, rm99 will provide at least 14 days' advance notice via email or an in-platform notification.
Answers to the most frequently asked questions about privacy and data protection at rm99.
For any questions or requests regarding your personal data — we're here to help.
Reach us directly via live chat within the rm99 platform for urgent privacy enquiries. Response time is under 2 minutes.
Send data access, correction or deletion requests to support@rm99.link with the subject line "Data Privacy Enquiry".
For assistance in Bahasa Malaysia, contact the rm99 team via WhatsApp, available from morning until late every day.
All personal information, financial transaction data and activity records you share with rm99 are protected by 256-bit SSL encryption and stored on secured servers. rm99 does not sell, transfer or disclose members' personal information to any third party without your explicit consent. For full details on platform usage terms, please read our Terms & Conditions.
Read RM99's Full Terms & Conditions →Over 500,000 Malaysian players have trusted rm99 with their information. Sign up for a free account, deposit from as little as RM20, and enjoy more than 1,000 games in a safe and secure environment.
For adults aged 18 and above only. Please gamble responsibly.