rmc8 Privacy Policy

1Introduction

rmc8 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at rmc8.win. In providing our services to players across Malaysia — including in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Bangsar — we necessarily collect and process certain personal data. We take this responsibility seriously.

This Privacy Policy is incorporated by reference into the rmc8 Terms and Conditions and forms part of the agreement between rmc8 and each registered member. By creating an account on rmc8 or by using any service available at rmc8.win, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2Data We Collect

2.1 Information You Provide Directly

When you register an rmc8 account or use our services, we collect the following categories of personal data that you provide to us:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification document details (for identity verification purposes).
• Contact data: Email address, mobile phone number, and residential address.
• Financial data: Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, Maybank, CIMB, or Public Bank account number), transaction history, deposit amounts, and withdrawal requests.
• Account credentials: Username and encrypted password hash.
• Communications data: Records of live chat sessions, email correspondence, and support ticket submissions made to the rmc8 support team.

2.2 Information Collected Automatically

When you access rmc8.win, we automatically collect certain technical and behavioural data through cookies and server logs, including:

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, and browser information.
• Session data including pages visited, games accessed, time on site, and betting activity.
• Referral source (how you arrived at rmc8.win).

3How We Use Your Data

rmc8 uses the personal data we collect for the following purposes:

rmc8 does not use your personal data for purposes incompatible with those listed above without your prior consent or a separate legal basis.

4Legal Basis for Processing

rmc8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the rmc8 member agreement, including account management, payments, and gameplay delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, gaming licence conditions, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have expressly opted in. You may withdraw consent for marketing communications at any time by contacting rmc8 support.

5Data Sharing

rmc8 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances:

• Payment processors: Financial data is shared with our payment service partners (including the operators of Touch n Go eWallet, Boost, and banking partners) solely to process transactions on your behalf.
• Identity verification providers: Identity data is shared with third-party KYC verification services to fulfil our regulatory obligations.
• Game content providers: Anonymised gameplay data (without personal identifiers) may be shared with game studios for statistical and auditing purposes.
• Regulatory and law enforcement authorities: We are required to disclose certain data to regulatory bodies, law enforcement agencies, and other authorities where mandated by law.
• Professional advisers: Legal, accounting, and auditing firms engaged by rmc8 may access limited personal data in the course of their professional engagement, subject to confidentiality obligations.

All third-party processors engaged by rmc8 are contractually required to process personal data only in accordance with our instructions and applicable data protection standards.

6Cookies & Tracking Technologies

rmc8.win uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that authenticate your login and maintain your account state. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and game lobby layout.
• Analytics cookies: Used to collect anonymised data about how members use rmc8.win, helping us identify usability issues and improve the platform. Analytics data is aggregated and not linked to individual accounts.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing your rmc8 account.

7Data Retention

rmc8 retains personal data for as long as necessary to fulfil the purposes set out in this Policy and to comply with applicable legal obligations. The following general retention periods apply:

• Active account data is retained for the duration of your rmc8 membership.
• Following account closure, identity and financial data is retained for a minimum of five (5) years to comply with AML record-keeping obligations and gaming licence conditions.
• Customer support communications are retained for three (3) years from the date of each interaction.
• Anonymised analytics data may be retained indefinitely as it does not constitute personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8Data Security

rmc8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• SSL/TLS encryption for all data transmitted between your browser and rmc8.win.
• Encrypted storage of passwords using one-way hashing algorithms (passwords are never stored in plaintext).
• Access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Automated monitoring for suspicious access patterns and account anomalies.

While rmc8 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying rmc8 immediately if you suspect unauthorised access to your account.

9Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by rmc8:

• Right of access: You may request a copy of the personal data rmc8 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to rmc8.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests in circumstances where your individual rights and interests override those legitimate interests.

To exercise any of the above rights, please contact the rmc8 data protection team via the email address listed in Section 13. rmc8 will respond to verified requests within thirty (30) days.

10Minors

rmc8 strictly prohibits the registration and use of its platform by individuals under the age of 21. rmc8 does not knowingly collect personal data from persons under 21 years of age. If rmc8 becomes aware that personal data has been collected from an individual under 21, that data will be deleted and the associated account will be permanently closed. If you believe a minor has registered on rmc8, please contact our support team immediately.

11International Data Transfers

rmc8's platform infrastructure and some of our third-party service providers are located outside Malaysia. Where personal data is transferred internationally, rmc8 ensures that appropriate safeguards are in place — including contractual data protection clauses — to ensure that your data receives a level of protection equivalent to that applicable in Malaysia. By using rmc8, you consent to the transfer of your personal data to jurisdictions outside Malaysia where such transfers are necessary to provide our services.

12Policy Updates

rmc8 reserves the right to update this Privacy Policy at any time. Where changes are material, we will provide notice via the rmc8 platform or by email to your registered address. The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of rmc8.win following publication of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, please contact rmc8 support to close your account.

13Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by rmc8, please contact us through:

24/7 Live Chat: Available in your rmc8 account dashboard — the fastest way to reach our support team.

Email: [email protected]

rmc8 aims to acknowledge all data-related requests within 48 hours and to provide a full response within 30 days. For complex requests, we may request additional verification of your identity before processing.