Rm100k Privacy Policy – How We Protect the Personal Data of Malaysian Members

1Introduction – Why Privacy Matters to rm100k

Rm100k is an online betting platform serving hundreds of thousands of active members across Malaysia every month. In providing this service, we collect and process various types of personal data. We understand that your trust in rm100k depends greatly on how we handle this sensitive information.

This Privacy Policy was drafted to fulfil rm100k's obligations under Malaysia's Personal Data Protection Act 2010 (PDPA), as well as international industry best practices for data protection. It clearly sets out what data we collect when you register, make a deposit using Touch 'n Go eWallet or GrabPay, place bets on Malaysia Super League or EPL football, play slots or Live Casino, and when you interact with the rm100k platform in general.

Rm100k acts as the data controller for personal information collected through our platform. This means we are responsible for determining the purposes and means of processing your personal data, and we take both the legal and ethical responsibility that comes with this role seriously. If you have any questions about the content of this Privacy Policy, please contact us through the channels listed at the end of this document.

2Types of Personal Data We Collect

Rm100k collects your personal data in several ways – directly when you provide it to us during registration or while interacting with the platform, and automatically through platform technology as you use it. Below is a detailed table of the types of data collected:

2.1 Data We Do NOT Collect

Rm100k does not collect information that is irrelevant to the provision of its betting platform services. Specifically, we do not collect religious beliefs, political views, health records (except in the context of responsible gambling where you choose to disclose them), or biometric data without your explicit consent. rm100k also does not collect data from your social media profiles or monitor your activity outside of the rm100k platform.

3How rm100k Uses Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. rm100k uses your personal data for the following purposes:

3.1 Account Management & Services

• Creating and managing your rm100k account, including the identity verification (KYC) required by regulation.
• Processing your deposits and withdrawals via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, and CIMB Clicks.
• Granting access to all rm100k platform features including Sports Betting on football, badminton, slots, Live Casino, and e-sports.
• Managing your VIP programme and calculating eligible cashback rewards on a weekly basis.

3.2 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and violations of our terms of use.
• Verifying that you meet the minimum age requirement (18 years and above) to use the rm100k platform.
• Monitoring unusual transaction patterns that may indicate unauthorized access to your account.

3.3 Legal Compliance

• Fulfilling reporting obligations to Malaysian authorities as required by law.
• Retaining financial transaction records for the periods prescribed by Malaysian law.
• Supporting investigations by relevant authorities upon receipt of a valid court order or lawful directive.

3.4 Platform Improvements

• Analysing usage patterns on an aggregated, anonymised basis to improve the features of the rm100k platform.
• Optimising the user experience based on feedback and interaction data.
• Testing and developing better new features for Malaysian members.

4Third-Party Data Sharing & Disclosure

Rm100k does not sell, rent, or trade your personal data to any external party for commercial purposes. However, in the course of operating the platform, there are limited situations where your personal data may be shared with selected third parties:

All third parties that receive personal data from rm100k members are bound by data protection agreements requiring them to handle that data to security standards equivalent to those of rm100k. rm100k conducts periodic reviews of third-party providers to ensure ongoing compliance.

5Data Security – How We Protect Your Information

Rm100k takes a serious approach to security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we employ include:

• SSL/TLS Encryption: All communications between your browser and the rm100k platform are encrypted using SSL/TLS protocols. This means data in transit – including login credentials and payment details – cannot be intercepted by third parties.
• Stored Data Encryption: Personal data stored in rm100k's databases is protected with AES-256 encryption, including identification numbers, financial information, and betting history.
• Strict Access Controls: Only rm100k staff with a legitimate business need are permitted to access members' personal data, and all such access is logged and continuously monitored.
• 24/7 Security Monitoring: The rm100k system is continuously monitored to detect any unauthorised access attempts, anomalies, or security threats.
• Independent Security Audit: rm100k conducts periodic independent security audits by third-party cybersecurity experts to identify and address any vulnerabilities.
• Incident Response Plan: rm100k has clear procedures in place to handle any data breaches that may occur, including notification to affected members and the relevant authorities within the timeframes required by law.

Despite all these measures, no security system can guarantee absolute 100% protection. rm100k is committed to responding promptly and transparently should any security incident occur that affects member data.

6Cookies & Tracking Technologies

The rm100k platform uses cookies and similar technologies to enhance the user experience and ensure certain platform features function correctly. The following types of cookies are used:

6.1 Essential Cookies (Mandatory)

These cookies are required for the basic functioning of the rm100k platform and cannot be disabled. They include session cookies to maintain your logged-in status during an active session, security cookies to protect against CSRF attacks, and language preference cookies. Without these cookies, the rm100k platform will not function properly.

6.2 Performance & Analytics Cookies

These cookies help rm100k understand how members use the platform so we can keep improving it. The data collected is aggregated and anonymised — we can see which pages are most visited or where users encounter issues, but we cannot identify any individual through this data.

6.3 How to Manage Cookies

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the rm100k platform. For guidance on managing cookies on your mobile browser – commonly used to access rm100k from a smartphone – refer to your browser's documentation.

7Data Retention Period

Rm100k does not retain your personal data for longer than is necessary for the original purpose of collection, or longer than required under applicable Malaysian law. The following outlines the data retention guidelines we follow:

• Active account data: Retained for the duration your rm100k account remains active, plus any additional period required after account closure to meet legal obligations.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian tax and financial legal requirements.
• KYC and identity verification records: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering (AML) requirements.
• Customer support logs: Retained for 2 years to allow for the resolution of any disputes that may arise within that period.
• Technical data and system logs: Retained for 12 months for security purposes and threat detection.

Once the relevant retention period has expired, rm100k will securely delete or anonymize your data in accordance with established procedures, unless there is a legal requirement mandating continued retention.

8Your Personal Data Rights

As a rm100k member and Malaysian individual protected under PDPA 2010, you have the following rights regarding your personal data held by rm100k:

To exercise any of the rights above, please contact the rm100k team by email at support@rm100k.best with the subject line "Privacy Rights Request", specifying the right you wish to exercise and your account details. rm100k is committed to responding to all valid requests within 21 business days.

9Children's Privacy & Young User Protection

The rm100k platform is a betting service strictly intended for individuals aged 18 and above. rm100k does not knowingly collect personal data from children or minors under the age of 18. This is a principle rm100k does not compromise on.

During the registration process, rm100k requires age verification and conducts KYC checks to confirm that applicants meet the minimum age requirement. If rm100k discovers that personal data has been inadvertently collected from an individual under the age of 18, we will take immediate action to delete that data and close the associated account.

If you are a parent or guardian and believe that your child who is a minor has registered on the rm100k platform, please contact our support team immediately via Live Chat or email at support@rm100k.best. rm100k will investigate and take appropriate action within 24 hours of receiving the report.

10Changes to This Privacy Policy

Rm100k reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the way we protect your data. All changes will be posted on this page with a revised "Last Updated" date.

For significant changes – such as those affecting how we use your data or new rights you acquire – rm100k will proactively notify members via an in-platform notice or by email, at least 14 days before the changes take effect. This gives you time to review the changes and decide whether to continue using the rm100k platform.

Your continued use of the rm100k platform after any changes to this Privacy Policy will be considered your acceptance of the updated version. We encourage you to review this page periodically to stay informed about how we protect your privacy.

11Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the rm100k team is ready to assist through the following channels:

If after contacting rm100k you still feel that your privacy concerns have not been adequately addressed, you have the right to lodge a complaint with the relevant data protection authority in Malaysia. rm100k respects your right to do so and will cooperate fully with any investigation carried out.