Privacy Policy rm666 – Malaysian User Data Protection

Rm666 ("we", "the rm666 platform", "rm666.im") respects the privacy of every individual who uses our platform. This Privacy Policy explains in detail how rm666 collects, processes, stores, protects, and shares your personal data when you use our online casino services.

This document applies to all users who access the rm666 platform, including registered members, visitors who browse our website without registering, and any individuals who interact with rm666 through our customer support channels.

By registering an rm666 account or continuing to use our platform, you confirm that you have read, understood, and fully accepted the terms of this Privacy Policy. If you do not agree with any part of this Privacy Policy, please discontinue your use of the rm666 platform.

This rm666 Privacy Policy should be read together with rm666 Terms & Conditions and together both documents form a comprehensive agreement between you and rm666 regarding your use of the platform and the management of your personal data.

Rm666 collects personal data from you through several different methods. The type of data collected depends on how you interact with our platform.

2.1 Data You Provide Directly

When you register an rm666 account, interact with our support team, or use certain features on the platform, you may provide us with the following information directly:

• Identity information: Full name as per MyKad, date of birth, Malaysian identification card number (for the KYC process).
• Contact information: An active Malaysian mobile number and a valid email address.
• Account information: rm666 username, password (stored as an encrypted hash — rm666 does not store passwords in plain text).
• Financial information: Payment account details used for transactions on rm666 — Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, ShopeePay.
• Verification documents: MyKad image or other identification documents submitted during the KYC process.
• Communications: The content of any messages, complaints, or other communications you send to the rm666 support team.

2.2 Automatically Collected Data

When you access the rm666 platform, our systems automatically log certain technical information required for the platform's safe and efficient operation:

• Device data: Device type, operating system, phone model, screen resolution.
• Network data: IP address, internet service provider (ISP), geographic location (state/country) based on IP.
• Browser data: Browser type and version, language settings, time zone.
• Activity data: Pages visited within rm666, session times and duration, games played, deposit and withdrawal dates and amounts.
• Cookie data: Information stored through cookies and similar tracking technologies — explained further in Section 6.

Rm666 uses the personal data it collects solely for legitimate purposes directly related to the operation of our online casino platform. The primary purposes for which data is used are as follows:

3.1 rm666 Marketing Communications

Rm666 may send you marketing communications about the latest promotions, new bonuses, or newly launched games on our platform. These communications will be sent via email or SMS to the number registered on your rm666 account.

You may opt out of rm666 marketing communications at any time by clicking the "unsubscribe" link in any of our marketing emails, or by updating your communication preferences in your rm666 account settings. Opting out of marketing does not affect essential operational communications such as transaction notices or account security alerts.

Rm666 does not sell, rent, or transfer users' personal data to third parties for their own commercial or marketing purposes. This is an absolute commitment rm666 makes to all its members.

However, in order to operate the rm666 platform safely and efficiently, we may need to share certain data with the following limited categories of third parties:

4.1 Operational Service Providers

Rm666 works with service providers that help us operate this platform, including:

• Payment processors: Payment gateway service provider that processes Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay transactions in MYR on behalf of rm666.
• Identity verification service providers: Companies that assist rm666 in carrying out KYC processes and anti-money laundering (AML) checks.
• Cloud and computing service providers: Data storage companies and server infrastructure providers that store and process rm666 data within a secure environment.
• Game providers: Licensed game providers such as Pragmatic Play, PG Soft, and Evolution Gaming may receive the game session data required to run their games on the rm666 platform.
• Analytics providers: Anonymous analytics services that help rm666 understand platform usage patterns for improvement purposes.

All third-party service providers engaged by rm666 are required to meet data security standards equivalent to those of rm666, and are prohibited from using any data provided for purposes other than those specified in their agreement with rm666.

4.2 Legal Requirements

Rm666 may be required to disclose users' personal data to government authorities or law enforcement if mandated by law, court order, or valid legal process. In such circumstances, rm666 will disclose only the minimum data necessary and, where permitted by law, will notify the relevant user of the request.

Rm666 implements comprehensive technical and organisational security measures to protect users' personal data against unauthorised access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

• Encryption in transit: All communications between your device and rm666's servers are encrypted using 256-bit TLS/SSL protocol. This covers all web pages, games, and APIs used by the rm666 platform.
• Stored data encryption: Sensitive data, including payment information and KYC documents, is stored in encrypted form within rm666's database. Passwords are stored using a one-way cryptographic hash function — rm666 never stores passwords in plain text.
• Access controls: Access to rm666 user data is granted only to staff with a legitimate business need, on a minimum permissions basis (principle of least privilege).
• Intrusion detection system: rm666 employs a continuous security monitoring system that detects and alerts on any suspicious activity or unauthorised access attempts.
• Regular security audits: rm666 conducts regular security audits and penetration testing by independent third parties to identify and address any security vulnerabilities.

5.2 Shared Responsibilities

While rm666 takes all reasonable steps to protect your data, the security of your rm666 account also depends on your own actions. You are responsible for:

• Use a strong, unique password for your rm666 account.
• Do not share your rm666 password or login credentials with anyone.
• Log out of your rm666 account after each session, especially on shared devices.
• Reporting any suspicious activity on your rm666 account to our support team promptly.
• Ensuring that the device you use to access rm666 is free from malware.

Rm666 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and understand usage patterns for ongoing improvement.

6.1 Types of Cookies Used by rm666

6.2 Managing Your Cookie Preferences

You can manage or disable optional cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality or your experience on the rm666 platform. Essential cookies cannot be disabled as they are required for the platform's core operations.

As an rm666 user, you have the following rights regarding your personal data held by rm666. We are committed to making it easy for you to exercise these rights in a straightforward manner and without undue burden.

To exercise any of the rights above, please contact the rm666 privacy team by email at support@rm666.im by providing your full name, rm666 account number, and the specific right you wish to exercise. rm666 will verify your identity before processing any personal data request to ensure your account remains secure.

Rm666 retains users' personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required by applicable laws and regulations.

8.1 Data Retention Period

8.2 Data Deletion

When the data retention period expires, or upon a valid user request (subject to legal requirements), rm666 will securely delete or anonymise the relevant personal data using industry-recognised data deletion methods.

Please note that even after your rm666 data deletion request has been processed, some data may remain in rm666's system backups for a limited period before being permanently deleted from all systems during the next scheduled backup maintenance cycle.

The rm666 platform is designed exclusively for adults aged 18 and above. rm666 does not knowingly collect, process, or store personal data of individuals under the age of 18.

If rm666 determines that personal data belonging to an individual under the age of 18 has been collected without the knowledge or consent of a lawful guardian, we will take immediate steps to delete that data and close the account in question.

Rm666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer.

When material changes are made to rm666's Privacy Policy, we will notify you by one of the following methods:

• Sending a notification email to the registered email address on your rm666 account, at least 14 days before the changes take effect.
• Displaying a clear notice on the rm666 platform homepage regarding upcoming changes.
• Displaying a pop-up notice within the rm666 platform that requires you to confirm your acknowledgement before you can continue using the service.

Continued use of the rm666 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. The date of the most recent update will always be displayed at the top of this document.

If you do not agree with any changes to rm666's Privacy Policy, you have the right to close your account before the changes take effect by contacting the rm666 support team.

If you have any questions, concerns, or requests regarding rm666's Privacy Policy or how we handle your personal data, our team is ready to help.

For official requests relating to personal data rights, please email support@rm666.im with the subject line "Personal Data Request" and include your rm666 account number along with clear details of your request. rm666 is committed to processing all valid requests within 14 business days.