Privacy Policy

05How We Collect Personal Data

RM99A collects personal data through the following means:

• Direct Registration: Information you provide when creating an rm99a account, including name, date of birth, email address, and preferred payment methods.
• KYC Submission: Identity and address documents submitted voluntarily in response to a verification request from our compliance team.
• Transactional Data: Information generated automatically when you make deposits or withdrawals via Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or USDT TRC20.
• Platform Interaction: Data generated automatically through your use of the Platform, including game play sessions, bet placements, and navigation behavior.
• Cookies and Tracking Technologies: Session and preference data collected via cookies, web beacons, and similar technologies as described in Section 11.
• Customer Support Interactions: Information provided by you during live chat or email exchanges with theRM99A support team.
• Third-Party Sources: In limited circumstances, RM99A may receive data from licensed third-party payment processors, fraud prevention services, or identity verification providers for the purpose of validating account information.

06Purposes & Legal Basis for Processing

RM99A processes your personal data for the following specific purposes, each supported by a stated legal basis:

07Data Sharing & Disclosure

RM99A does not sell your personal data. We may share your data with the following categories of third parties strictly as necessary to operate the Platform and comply with applicable obligations:

• Payment Processors: Licensed e-wallet and banking partners (including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks including Maybank, CIMB, Public Bank, and Hong Leong Bank) receive data necessary to process your financial transactions. These entities operate under their own privacy policies and data security standards.
• Game Studio Partners: Our licensed game content providers receive session tokens and anonymized play data required to deliver game content. These partners do not receive your identity or financial data.
• Identity Verification Services: Third-party KYC and anti-money laundering service providers may receive identity document data to assist with the verification process.
• Fraud Prevention Providers: Services engaged to detect and prevent fraudulent activity, collusion, and unauthorized account access may receive technical and behavioral data for analysis.
• Regulatory and Legal Authorities: RM99A will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of law where required by law, court order, or other binding legal process. This includes cooperation with Malaysian authorities where applicable.
• IT Infrastructure Providers: Cloud hosting and infrastructure partners that store or process Platform data on behalf of RM99A, under binding data processing agreements that require equivalent data protection standards.

08International Data Transfers

The operation of the RM99A Platform may involve the transfer of personal data to servers or service providers located outside of Malaysia. In particular, cloud infrastructure, game studio partners, and certain specialized service providers may be based in jurisdictions including but not limited to the European Union, the United Kingdom, and Southeast Asian countries.

Where such international transfers occur, RM99A takes appropriate measures to ensure that your personal data is afforded a level of protection consistent with this Policy, including through the use of contractual safeguards (such as standard data protection clauses), the selection of providers in jurisdictions recognized as providing adequate data protection, or other appropriate transfer mechanisms.

09Data Retention

RM99A retains personal data for the periods set out below, after which data is securely deleted or anonymized unless retention is required by applicable law:

• Active Account Data: Retained for the duration of your membership and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by the applicable regulatory authority.
• Transaction Records: Retained for seven (7) years to satisfy financial record-keeping obligations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Preference Data: Retained until you withdraw consent for marketing communications, following which it is deleted within 30 days.
• Technical and Session Data: Retained for a rolling period of 12 months for security monitoring and analytics purposes.

When personal data is no longer required for the purposes set out above and no legal retention obligation applies, RM99A will securely delete or irreversibly anonymize the data within a reasonable timeframe.

10Security Measures

RM99A implements a range of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.2+): All data transmitted between your device and rm99a servers is encrypted in transit.
• AES-256 Encryption at Rest: Sensitive stored data, including KYC documents and financial identifiers, is encrypted using industry-standard encryption algorithms.
• Access Control and Least-Privilege Principles: Internal access to personal data is restricted on a strictly need-to-know basis, with role-based access controls and multi-factor authentication required for staff accessing sensitive systems.
• Penetration Testing and Security Audits: RM99A engages independent security specialists to conduct regular penetration tests and vulnerability assessments of Platform infrastructure.
• Fraud Detection Systems: Automated monitoring systems analyze account activity patterns to detect and flag potentially fraudulent or anomalous behavior in real time.
• Secure Data Deletion: Personal data that has reached the end of its retention period is deleted using secure data erasure methods that prevent reconstruction.

11Cookies & Tracking Technologies

The RM99A Platform uses cookies and similar tracking technologies to operate core platform functionality, enhance user experience, and support security and analytics functions. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including user authentication, session management, and security token functions. These cookies cannot be disabled without impeding your ability to use the Service.
• Performance and Analytics Cookies: Used to collect aggregated, anonymized data about how Members navigate and interact with the Platform. This data helps RM99A identify usability improvements and optimize the platform experience.
• Functional Cookies: Store your preferences, such as language settings and remembered login state, to provide a more personalized experience across sessions.
• Security Cookies: Used to support fraud detection, anomaly identification, and the enforcement of session time-out rules.

RM99A does not place third-party advertising cookies or permit third-party ad networks to collect data through the Platform for external advertising purposes.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some Platform features. For strictly necessary cookies, consent is not required as they are essential to service delivery.

12Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights in relation to the personal data RM99A holds about you. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to verified requests within 30 days.

• Right of Access You have the right to request a copy of the personal data that RM99A holds about you, along with information about how it is processed and shared.
• Right to Rectification If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure In certain circumstances, you may request the deletion of your personal data. This right is subject to exceptions, including where retention is required by legal obligation (e.g., AML record-keeping for five years post-account closure).
• Right to Restrict Processing You may request that we limit the processing of your personal data in specific circumstances, such as while a dispute about data accuracy is under review.
• Right to Data Portability Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object Where processing is based on legitimate interests, you have the right to object. RM99A will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

13Minors and Age Protection

The RM99A Platform is strictly restricted to individuals aged21 years and above. RM99A does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory component of the registration and KYC process for all rm99a accounts.

If RM99A discovers or has reasonable grounds to believe that an account has been registered by, or is being used by, a person under the age of 21, the account will be immediately suspended. All associated funds and personal data collected in connection with the underage account will be handled in accordance with applicable law and, where appropriate, deleted upon confirmation of the underage status.

14Policy Amendments

RM99A reserves the right to amend, update, or revise this Privacy Policy at any time. When material changes are made, we will update the Effective Date indicated at the top of this page and, where the changes are significant, we will endeavor to notify active Members via their registered email address.

We encourage all Members to review this Policy periodically to stay informed about how RM99A is protecting your data. The version of the Policy in effect at the time of any data processing activity governs that activity. Continued use of the rm99a Platform following the publication of a revised Policy constitutes acceptance of the changes, to the extent permitted by applicable law.

15Contact Us

For any questions, concerns, or requests related to this Privacy Policy, or to exercise any of your data rights as described in Section 12, please contact the RM99A privacy and data protection team through the following channels:

When submitting a data subject request, please include sufficient information to allow us to verify your identity (such as your registered email address and MyKad or passport number) and clearly state the specific right you wish to exercise. This is necessary to prevent unauthorized access to your personal data.