Rm7709 Privacy Policy — Personal Data Protection for Malaysian Players

1Introduction & Data Controller

rm7709 is the data controller responsible for ensuring your personal data is processed lawfully, fairly and transparently in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility very seriously and have appointed an internal privacy officer to ensure ongoing compliance with applicable data protection laws in Malaysia.

This Privacy Policy applies to all services offered under the rm7709, covering the rm7709.net website, mobile application (if applicable), Sports Betting services, Live Casino, blackjack, table games, lottery, and all official communications from rm7709. It also applies to all registered members, non-member users browsing the platform, and any individual who interacts with rm7709 through our official communication channels.

This Privacy Policy should be read together with Terms & Conditions rm7709, which forms an integral part of the overall agreement between you and this platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data handling, this Privacy Policy shall prevail.

2Personal Data We Collect

2.1 Data You Provide Directly

When you register an account or use the services of rm7709, you provide us with several categories of personal data directly:

• Identity information: Full name as stated on your MyKad, date of birth, and MyKad number (for KYC verification)
• Contact information: Active email address, Malaysian mobile number and residential address
• Financial information: Malaysian bank account number, bank name, TNG eWallet account number, DuitNow, GrabPay, Boost, or ShopeePay account registered in your own name
• Login information: Username and encrypted password (rm7709 does not store passwords in plain text)
• Profile information: Language preferences, game preferences, limits you have set yourself and any other information you choose to share

2.2 Data Collected Automatically

While you are using the platform rm7709, some data is collected automatically through our technical systems:

• Technical data: IP address, web browser type, device operating system, screen resolution and device information
• Usage data: Pages visited, session duration, click records, and navigation patterns within the platform
• Transaction data: Complete history of deposits, withdrawals, bets, wins, and losses — required for legal compliance and fraud detection
• Location data: General location (state or city) derived from IP address, used for geo-compliance and security purposes
• Cookie data: Session information and preferences stored via cookies — please refer to Section 8 for further details

3How Your Personal Data Is Used

rm7709 only uses your personal data for purposes that are lawful, necessary and proportionate. The table below sets out the purposes for which data is used and the legal basis underlying each:

For marketing communications — such as notifications about the latest rm7709 promotions, exclusive bonus offers and platform news — we will only send these to you if you have given explicit consent during registration or through the notification settings in your account. You may withdraw this consent at any time via your rm7709 account settings or by contacting our support team.

4Data Sharing with Third Parties

rm7709 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may need to share certain data with the following categories of recipients, strictly on a need-to-know basis and with appropriate safeguards in place:

• Payment service providers: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX providers (Maybank2u, CIMB Clicks) receive the transaction information required to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle your data.
• Game providers: Game software providers such as Evolution Gaming, Pragmatic Play and others may receive anonymised account identifiers for the purpose of operating live games. Your full name and financial information are not shared with game providers.
• Legal authorities: rm7709 will disclose personal data to Malaysian government agencies, regulatory bodies or law enforcement authorities when required by a valid court order, regulatory directive or other legal obligation.
• Technical service providers: Cloud infrastructure providers, cybersecurity services and analytics providers that help operate the rm7709 platform may process some of your data in the capacity of a data processor — not a data controller — under strict data processing agreements.

5Data Security — How We Protect Your Information

rm7709 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or accidental disclosure. These measures include:

• Data encryption in transit: All communications between your browser and rm7709's servers use HTTPS with a 256-bit SSL/TLS certificate — data transmitted cannot be read even if intercepted
• Data encryption at rest: Sensitive data such as passwords (stored as cryptographic hashes), financial information and identity verification data is encrypted within rm7709's databases
• Access controls: Access to member personal data is restricted to rm7709 staff with a legitimate need to access it, based on a need-to-know principle — with full audit logs maintained for every access
• 24/7 security monitoring: Automated monitoring systems detect and alert on any suspicious activity or unauthorised access attempts in real time
• Regular penetration testing: rm7709 conducts regular security assessments by independent cybersecurity experts to identify and address any system vulnerabilities
• Two-factor authentication (2FA): Members are encouraged to enable two-factor authentication for an added layer of security on their rm7709 account

Although rm7709 takes every reasonable step to protect your data, no security system can guarantee absolute protection. You also play an important role in keeping your account secure — use a strong password, do not share your login credentials and log out of your account when using a shared device.

6Data Retention Period

rm7709 retain your personal data for as long as your account remains active or as long as necessary to provide services to you. We also retain data for a defined period following account closure to meet legal obligations, resolve disputes, and enforce our agreements. Our key data retention guidelines are as follows:

• Active account data: Retained for as long as your rm7709 account remains active and for the required period following account closure
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction, in accordance with Malaysian legal requirements on financial records and anti-money laundering
• Identity verification records (KYC): Retained for a minimum of 5 years after the business relationship ends, in line with applicable legal requirements
• Customer support communication logs: Retained for 3 years from the date of last interaction
• Technical log data: Retained for 12 months from the date of creation, then anonymised or deleted
• Marketing data: Retained until you withdraw consent or request deletion

Once the relevant retention period has expired, rm7709 will securely delete or anonymise your personal data so that it can no longer be linked to you. In cases where immediate deletion is not feasible — for example, where data is stored in backup systems — rm7709 will ensure the data remains securely protected until deletion can be carried out.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a member rm7709 holds several important rights regarding your personal data. rm7709 is committed to facilitating the exercise of these rights within a reasonable timeframe:

8Cookies & Tracking Technologies

Platform rm7709 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how members use our platform. Cookies are small text files stored on your device by your web browser when you visit rm7709.net.

The following are the types of cookies used by rm7709 and their respective purposes:

You can manage cookie settings through your web browser. However, disabling strictly necessary cookies may seriously affect the functionality of the rm7709 platform. rm7709 does not use third-party cookies for targeted advertising or sell your browsing data to advertising networks.

9Protection of Children's Data

Platform rm7709 is intended exclusively for individuals aged 18 years of age and above only. We do not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian who believes your child has provided personal data to rm7709 without your consent, please contact us immediately at support@rm7709.net.

Once verified, rm7709 will take the necessary steps to delete the data and close the relevant account within a reasonable timeframe. Any outstanding balance will be returned via an appropriate method once the true account holder's identity has been verified.

10International Data Transfers

In some cases, your personal data may be processed or stored outside Malaysia — for example, when using international cloud infrastructure services or working with international game providers. When this occurs, rm7709 ensure that any such data transfers are carried out with adequate safeguards equivalent to the standards set out under Malaysia's PDPA 2010.

Safeguards applied to international data transfers include legally binding data processing agreements with the relevant providers, data protection impact assessments prior to transfer, and ongoing monitoring of data protection compliance by rm7709's international partners.

11Amendments to This Privacy Policy

rm7709 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements. When we make material changes, we will notify you through one or more of the following methods:

• A prominent in-platform notification on rm7709 the next time you log in
• To the email address registered to your account
• Update the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically. Your continued use of the rm7709 following any amendment taking effect will be considered acceptance of the updated terms. If you do not agree with any changes, you have the right to close your rm7709 account and request deletion of your personal data.

12Contact Us — Privacy Enquiries

If you have any questions, concerns or complaints regarding this Privacy Policy or how rm7709 handles your personal data, we strongly encourage you to contact us directly. The rm7709 privacy team will respond to privacy-related enquiries within 14 business days of receiving your request.

• Privacy email: support@rm7709.net (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week on the rm7709 platform for immediate enquiries
• Response time: Under 3 minutes (live chat) or 14 business days (privacy-related email)

If you are not satisfied with how rm7709 in handling your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, which is the regulatory authority responsible for PDPA compliance in Malaysia.