RM35 Privacy Policy – Personal Data Protection for Malaysian Players

rm35 respects and values the privacy of every individual who uses our platform. This Privacy Policy has been drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and other relevant legislation, and to provide full transparency to all rm35 members regarding how we handle their personal information.

This Privacy Policy applies to all personal data collected by rm35 through various channels — including the rm35 website, mobile app (where available), customer support services, and all other interactions you have with the rm35 platform. By using rm35's services, you consent to the collection and use of your personal data as described in this Privacy Policy.

We at rm35 believe that Malaysian players have the right to know exactly what happens to their personal information. No deliberately obscured terms, no fine print that's hard to understand — we explain everything in plain, clear language so you can make informed decisions about your privacy with rm35.

rm35 collect your personal data through several means — directly when you provide it to us, and automatically when you use our platform. The following are the categories of data we collect:

Data You Provide Directly:

• Your full name as it appears on your Malaysian identity card (MyKad) or passport.
• An active Malaysian phone number and email address (if provided).
• Date of birth for age verification (to confirm you are 18 years of age or older).
• Your Malaysian bank account information or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) for deposit and withdrawal purposes.
• Identity verification documents such as a copy of your MyKad or passport, as required during the KYC (Know Your Customer) process.
• Communications you send to the rm35 support team via LiveChat, email, or other channels.

Automatically Collected Data:

• Your IP address, browser type, and device information used to access rm35.
• Gaming activity data — including betting records, winnings, losses, and time spent playing — required to operate the rm35 platform and meet compliance requirements.
• Financial transaction data — all records of deposits and withdrawals made through your rm35 account.
• Session data and access logs that record the timing and frequency of your use of the rm35 platform.
• General location data (based on IP address) used to verify that you are accessing rm35 from Malaysia.

rm35 use your personal data solely for the following legitimate and stated purposes:

• Registration & Account Management: To create and maintain your rm35 account, verify your identity, and confirm that you meet the eligibility requirements to use the platform.
• Financial Transaction Processing: Processing your deposits and withdrawals via your preferred Malaysian payment methods — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Gaming Service Maintenance: To conduct fair gaming operations at rm35, record game outcomes, and uphold the integrity of every round.
• Legal & Regulatory Compliance: To comply with applicable Malaysian legal requirements, including Anti-Money Laundering (AML) laws, KYC requirements, and reporting to the relevant authorities when mandated.
• Customer Support: To provide effective support to rm35 members who need assistance, resolve complaints, and improve our service quality based on your feedback.
• Platform Security: Detect and prevent fraud, account abuse, money laundering, and any activity that violates rm35's Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need support regarding their gaming habits, in line with rm35's commitment to responsible gaming.
• Service Communications: Sending important account-related notifications — such as transaction confirmations, security alerts, and changes to terms — via the phone number or email address you registered with rm35.

rm35 will not use your personal data for third-party marketing, commercial profiling for sale, or any other purpose not stated above without first obtaining your explicit consent.

rm35 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, in the course of legitimate platform operations, there are certain situations where rm35 may need to share limited information with specific parties:

• Payment Service Provider: Transaction information that must be shared with Malaysian payment service providers (such as the FPX system and e-wallet providers) solely for the purpose of processing your deposits and withdrawals. These providers are subject to their own privacy policies and security standards.
• Platform Technology Provider: Third-party providers who supply the technical infrastructure for rm35's operations may have limited access to your data within the scope of their service contracts. All such providers are required to sign strict confidentiality agreements with rm35.
• Malaysian Authorities: rm35 will disclose information to Malaysian authorities (such as the police, judicial bodies, or government agencies) when required by applicable Malaysian law or pursuant to a valid court order.
• Audit & Compliance: Independent audit bodies recommended by rm35 to verify game fairness and operational compliance may have limited access to statistical data (not individual personal data) for audit purposes.

rm35 implement comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or inadvertent disclosure. The key security measures we have in place include:

• 256-bit SSL encryption for all data in transit between your device and rm35's servers.
• Encryption of sensitive data (including passwords hashed using modern encryption algorithms) in rm35's server storage.
• Role-based access control that ensures only authorised rm35 personnel can access specific data.
• Continuous 24/7 security monitoring with automated intrusion detection systems.
• Regular security testing, including penetration testing conducted by independent security specialists.
• Regular data backup procedures to ensure service continuity and protection against data loss.

Data Retention Period: rm35 retains your personal data for as long as your account remains active and for the period prescribed by Malaysian law following account closure. Financial transaction data is retained for a minimum of 7 years in line with Malaysia's anti-money laundering legal requirements. Once the mandatory retention period has lapsed, your data will be securely deleted or anonymised.

Platform rm35 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Below are the types of cookies we use:

• Essential Cookies: Required for core rm35 platform functions such as login authentication, session management, and account security. These cookies cannot be disabled without affecting rm35's basic functionality.
• Functional Cookies: Saving your preferences and settings on rm35 — such as your preferred language, display theme, and game settings — so you don't have to reconfigure them each time you access the platform.
• Analytics Cookies: Helping rm35 understand how members use our platform on an aggregate basis, so we can improve the design and functionality of rm35 over time. This data is anonymised and not linked to any individual's identity.
• Security Cookies: Used by rm35's security systems to detect and prevent fraudulent activity and unauthorised access to member accounts.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies may affect specific functions of the platform rm35. For more information on how to manage cookies on your device, please refer to the help guide for your browser.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a member rm35 have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data rm35 holds about you. rm35 will provide the requested information within a reasonable timeframe.
• Right to Rectification: If the personal data rm35 holds about you is inaccurate or out of date, you have the right to request a correction. You may also update certain information directly through your rm35 account settings.
• Right to Withdraw Consent: You may withdraw your consent to the processing of your personal data for specific purposes at any time, although doing so may affect rm35's ability to provide you with full services.
• Right to Erasure: Under certain circumstances and subject to data retention obligations prescribed by Malaysian law, you may request the deletion of your personal data from rm35's systems.
• Right to Complain: If you believe rm35 has processed your personal data in a manner that violates the PDPA 2010, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights listed above, please contact our support team rm35 via email at [email protected], clearly stating your request. rm35 will process your request within a reasonable timeframe and notify you of the action taken.

rm35 strictly prohibits the use of our platform by individuals under the age of 18. This Privacy Policy and the rm35 platform as a whole are not intended for children or minors.

Rm35 does not knowingly collect personal data from individuals under the age of 18. Should we discover that personal data from a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you as a parent or guardian discover that your underage child has registered for or used the platform rm35, please contact us immediately at [email protected] so we can take the appropriate action without delay.

rm35 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, applicable legal requirements in Malaysia, or improvements to the rm35 platform.

Any material amendments to this Privacy Policy will be communicated to rm35 members via in-platform notifications or email at least 14 days before the changes take effect. These notifications will outline the key changes made so you can clearly understand what has been updated.

Continued use of the platform rm35 following the effective date of any amendment to the Privacy Policy will be deemed as your acceptance of the revised policy. If you do not agree with the changes, you are requested to discontinue use of the rm35 platform and contact us to arrange an orderly account closure.

The current version of this rm35 Privacy Policy takes effect in 2026. Previous versions of the rm35 Privacy Policy are available upon request by emailing [email protected].

If you have any questions, concerns, or requests regarding rm35's Privacy Policy or the handling of your personal data, please do not hesitate to reach us through the following channels:

• LiveChat: Available 24/7 directly within the rm35 platform. This is the fastest way to get an immediate response from our Malaysian-speaking support team.
• Email: Send your enquiry in detail to [email protected]. We aim to respond to all emails within 6 business hours.

For requests relating to your personal data rights under Malaysia's PDPA 2010 (such as access, correction, or deletion requests), please clearly state "PDPA Data Request — [Your RM35 Username]" in your email subject line so that your request can be promptly directed to the responsible team at rm35.