rm1 Official Documents

Privacy Policy rm1 – Protecting Your Personal Data in Malaysia

Rm1 values the privacy of every member. This policy clearly sets out how we collect, use, store, and protect your personal information when you use the rm1.asia betting platform.

Updated: 1 January 2026
Language: Bahasa Melayu (ms-MY)
Jurisdiction: Malaysia
support@rm1.asia

This policy outlines rm1's comprehensive commitment to protecting your privacy.

12 Policy Sections
256-bit SSL Encryption
Right to Access & Data Erasure
Malaysia PDPA Compliance
Protected Deposit Methods: Touch 'n Go GrabPay Boost ShopeePay DuitNow FPX / Maybank2u CIMB Clicks

Rm1's Privacy Commitment to Malaysian Members

Six core principles that shape how rm1 manages and protects the personal data of every member who trusts our platform.

Full 256-bit SSL Encryption

All data transmitted between your device and rm1 servers is protected with 256-bit SSL encryption — the same security standard used by Malaysia's major banks such as Maybank and CIMB. No data travels without protection.

Data Not Sold to Third Parties

Rm1 has never sold, rented or traded members' personal data to any third party for marketing or commercial purposes, and never will. Your information belongs to you — it is not a business asset to be bought or sold.

Full PDPA Malaysia Compliance

Rm1 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All processes relating to the collection, storage and use of member data are designed to comply with applicable local legislation.

Restricted Data Access for Trained Staff Only

Rm1 member personal data is accessible only to staff who have been specifically authorised and have completed data protection training. Access is logged and actively monitored to prevent any unauthorised use.

Right of Access, Correction & Erasure of Data

Every rm1 member has the right to request a copy of the personal data we hold, correct any inaccurate information, or request deletion of data under certain circumstances provided for under Malaysia's PDPA.

Marketing & Communications Controls

You may opt out of marketing communications from rm1 at any time via your account settings or by contacting our support team. rm1 respects your preferences, no questions asked.

Important Notice

This Privacy Policy describes rm1's practices regarding the collection and management of your personal data. By registering for or using the rm1 platform, you agree to the terms set out in this policy. Please read it carefully and contact us at support@rm1.asia if you have any questions.

01Introduction & Scope of Privacy Policy

Rm1 ("we", "the platform" or "rm1.asia") is fully committed to protecting the privacy and personal data of every individual who uses our platform. This Privacy Policy transparently explains how we collect, process, store, use and protect your personal information when you interact with the rm1.asia website and the rm1 mobile app.

This policy applies to all individuals who register an rm1 account, browse our website without registering, or contact the rm1 support team through any communication channel. It should be read together with rm1's Terms & Conditions and our Responsible Gaming Policy.

This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. rm1 operates as a data controller responsible for all personal data we process.

02Types of Personal Data We Collect

Rm1 only collects personal data that is strictly necessary to provide a secure, efficient platform service that meets applicable legal requirements. The categories of data we collect are as follows:

2.1 Identity & Contact Data

  • Full name as it appears on your Malaysian identity card or passport
  • An active Malaysian mobile phone number
  • Email address (if provided)
  • Date of birth for age verification purposes
  • A copy of your identification document (MyKad or passport) when required for further identity verification

2.2 Financial & Transaction Data

  • E-wallet information used for deposits — Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow
  • Malaysian bank account information for withdrawal processing via FPX, Maybank2u, or CIMB Clicks
  • A complete record of all deposits, withdrawals, and transactions on the rm1 platform
  • Your betting history and gaming activity on rm1

2.3 Technical & Usage Data

  • IP address of the device used to access rm1
  • Device type, operating system and web browser version
  • Cookie data and related tracking technologies as described in Section 8
  • In-platform activity logs, including login times and pages visited
  • General geolocation data based on IP address (not precise GPS location)

Important: rm1 does not collect or store credit card or debit card information directly in our systems. All payment processing via e-wallet and FPX is handled by third-party payment providers that comply with PCI-DSS security standards.

03How rm1 Collects Your Personal Data

Rm1 collects your personal data through several channels, depending on how you interact with the platform:

Collection SourceData TypeRequirements
Account registration formName, phone number, date of birthMandatory
Deposit & withdrawal processE-wallet and bank account informationMandatory
Identity verification (KYC)MyKad / passport copyUpon rm1's request
Customer support communicationsConversation content, emailsAutomatically upon contact with
Platform usageActivity logs, IP address, device dataTechnical automation
Cookies & AnalyticsBrowsing behaviour, preferencesControllable

Rm1 has never purchased or acquired your personal data from third-party sources without your knowledge and consent. All data we hold is either provided directly by you or generated automatically through your use of the platform.

04How Your Personal Data Is Used

Rm1 uses the personal data you provide solely for legitimate and necessary purposes. All data usage is grounded in a lawful basis under Malaysia's PDPA. The primary purposes for using your data are:

  • Account management: Creating, verifying, and managing your rm1 account, including mandatory identity and age verification.
  • Transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your Malaysian bank account or e-wallet.
  • Service delivery: Gives you access to all rm1 platform features, including Sports Betting, e-sports, roulette, lottery, and Live Casino.
  • VIP Programme & Rewards: Calculating VIP points, weekly cashback, and managing the benefits of the rm1 VIP Rewards programme according to your tier.
  • Security & fraud prevention: Detecting and preventing fraudulent activity, multi-account abuse, money laundering, and other illegal conduct on the platform.
  • Legal compliance: Meeting Malaysian legal obligations, including anti-money laundering (AML) reporting requirements as stipulated by the relevant authorities.
  • Customer support: Providing technical assistance and resolving complaints raised by members.
  • Service communications: Sending important notifications about your account, policy changes, or relevant security information.
  • Marketing (with consent): Sending information about rm1 promotions, bonuses, and offers — only if you have given your consent to receive them.

Rm1 does not use your data to make automated decisions that materially affect your rights without human review. Any decisions regarding account suspension or other actions are subject to manual review by the rm1 team.

05Sharing Data with Third Parties

Rm1 takes the protection of your personal data seriously. We only share the minimum necessary data with third parties in limited circumstances and with appropriate safeguards in place:

5.1 Approved Service Providers

Rm1 works with carefully selected third-party service providers who are bound by strict confidentiality agreements. These provider categories include:

  • Payment processors: E-wallet providers such as Touch 'n Go, GrabPay, Boost and ShopeePay, as well as FPX providers, to enable financial transactions to be processed securely.
  • Cloud infrastructure provider: Cloud servers used to operate the rm1 platform – bound by strict data protection agreements.
  • Identity verification service provider: The KYC platform used to verify member identities when required.
  • Analytics providers: Analytics software that helps rm1 understand platform usage patterns for improvement purposes — data is shared in aggregated form that does not identify individuals.

5.2 Legal Obligations

Rm1 may be required to disclose your personal data to Malaysian authorities in the following circumstances:

  • A valid court order or warrant issued by Malaysian authorities
  • Investigations related to money laundering or financial crime
  • Requests from Bank Negara Malaysia or relevant government agencies under valid legal authority

rm1's Commitment: We have never shared, and will never share, your personal data with advertisers, third-party marketing companies, or any commercial entity that has no legitimate need to access it in the context of providing rm1's services.

06Data Retention & Security Measures

Rm1 invests seriously in security infrastructure to ensure your personal data is protected at every stage of storage and processing.

6.1 Data Retention Period

Rm1 retains your personal data for as long as your account is active and for the period required by Malaysian law following account closure. In general:

  • Account and transaction data is retained for a minimum of 7 years following account closure to meet Malaysian legal requirements concerning financial records.
  • Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
  • Technical log and IP data is retained for 90 days for security and investigation purposes.
  • Marketing data such as communication preferences is retained until you withdraw your consent or close your account.

6.2 Technical Security Measures

The technical measures we use to protect your data include:

  • 256-bit SSL/TLS encryption for all data communications between the platform and your device
  • Encryption of sensitive data within databases using AES-256 standards
  • Role-based access control — only authorised staff may access members' personal data
  • Continuous, real-time auditing and monitoring of data access
  • Regular security testing and vulnerability assessments conducted on an ongoing basis
  • A tested security incident response plan to ensure swift action in the event of a data breach

07Your Rights as a Data Subject

Under Malaysia's PDPA and the data protection principles we follow, you have the following rights regarding the personal data we hold about you:

Right of Access

You have the right to request a copy of the personal data rm1 holds about you. We will provide this information within 21 business days from the date your request is received.

Right to Rectification

If your personal data held in rm1's systems is inaccurate or out of date, you have the right to request a correction. We will update your records within 14 business days.

Right to Erasure

Under certain circumstances, you have the right to request deletion of your personal data. However, this is subject to legal data retention obligations that we are unable to override.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. rm1 will cease using your data for that purpose immediately.

To exercise any of the above rights, send a written request to support@rm1.asia with the subject line "Data Rights Request – [Your Account Number]". We may require additional identity verification before processing your request to ensure the security of your data.

08Cookies & Tracking Technologies

Rm1 uses cookies and similar tracking technologies on our platform. Cookies are small text files stored on your device when you browse rm1.asia. We use several types of cookies for different purposes:

8.1 Essential Cookies (Cannot Be Disabled)

These cookies are required for the basic functioning of the rm1 platform and cannot be disabled without affecting your ability to use it. They include login session cookies, security cookies, and language preference cookies.

8.2 Performance & Analytics Cookies

These cookies help rm1 understand how members use the platform – which pages are visited most often, how long users spend in each section, and any technical issues they may encounter. This data is collected in aggregate form that does not directly identify individuals. You can opt out of this analytics data collection in the rm1 website cookie settings.

8.3 Functional Cookies

These cookies store your preferences such as your chosen language, display layout, and other personal settings so you do not need to reset them each time you log in to rm1.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the login functionality and security of the rm1 platform. For guidance on managing cookies in popular browsers, refer to your browser's help documentation.

09Cross-Border Data Transfers

As a platform that operates primarily for Malaysian users, rm1 prioritises storing data within the Asian region to ensure low latency and compliance with local laws. However, the use of certain cloud service providers and technologies may involve data being processed at data centres located in other countries.

When your personal data is transferred across borders, rm1 ensures that:

  • Data recipients are bound by data processing agreements that meet protection standards equivalent to Malaysia's PDPA.
  • Data transfers are carried out only for legitimate and necessary purposes in the context of delivering rm1's services.
  • Appropriate safeguard mechanisms such as standard contractual clauses are applied to ensure data security throughout its transfer.

10Children's Privacy & Minors

Rm1 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18, under any circumstances.

If rm1 discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to:

  • Immediately close the account in question
  • Deleting all associated personal data from our systems
  • Voiding all bets and transactions made by the account in accordance with established procedures

If you become aware that a child or individual under 18 has registered an rm1 account, please report it to us immediately at support@rm1.asia so we can take appropriate action without delay.

Parental Responsibility: rm1 encourages parents and guardians to monitor their children's internet usage and ensure that the devices they use are protected against access to websites unsuitable for minors.

11Changes to This Privacy Policy

Rm1 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this document
  • Notifying all active rm1 members via email or in-account notification at least 14 days before the changes take effect
  • Retaining previous versions of the Privacy Policy for reference by members who require them

Continued use of the rm1 platform after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

Rm1 recommends that you review this Privacy Policy page periodically. Non-material changes — such as spelling corrections or language clarifications — may not be accompanied by a formal notification, though the last updated date will always be kept current.

12Contact the rm1 Privacy Officer

If you have any questions, concerns, or complaints about how rm1 manages your personal data, we encourage you to reach out to us directly. rm1 has a dedicated officer to handle data privacy matters:

  • Privacy Email: support@rm1.asia – please use the subject line "Privacy Policy Enquiry" for priority processing
  • Live Chat: Available 24/7 on the rm1 platform and app for general enquiries
  • Official Complaint: For formal privacy complaints, email support@rm1.asia with the subject line "Formal Privacy Complaint – [Account Number]"

Rm1 is committed to responding to all privacy-related enquiries within 14 business days. For urgent matters relating to a potential data breach or unauthorised use of your information, please mark your message as "URGENT" for immediate processing by our team.

If you are not satisfied with how rm1 has handled your privacy complaint after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (JPDP) through their official channels.

Your Privacy Rights as an rm1 Member

A summary of the personal data protection rights you hold as an rm1 platform member — these rights are absolute, and rm1 is committed to upholding them.

Data Access Right

Request a complete copy of the personal data rm1 holds about you. We will provide a data report within 21 business days from the date the request is received.

Right to Data Rectification

If any information in your rm1 account is inaccurate, you have the right to request an immediate correction. We will update our records within 14 business days.

Right to Withdraw Consent

You may withdraw your consent to marketing data processing at any time through your rm1 account settings or by contacting our team directly.

Right to Lodge a Formal Complaint

If you are dissatisfied with how rm1 handles your data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (JPDP).

Right to Data Erasure

Under certain circumstances, request that rm1 delete your personal data. This is subject to legal retention obligations that we are unable to override.

Right to Opt Out of Marketing

Opt out of all marketing communications from rm1 at any time without affecting your access to the platform's core services.

FAQ – rm1 Privacy Policy

Frequently asked questions from rm1 members on personal data protection and platform privacy.

No, rm1 has never and will never sell, rent, or share member personal data with advertisers or third-party marketing companies under any circumstances. Your data is shared only with service providers that assist rm1 in its operations — such as payment processors Touch 'n Go, GrabPay, and FPX — and only to the extent necessary to process your transactions. All third-party service providers are bound by strict data confidentiality agreements and are not permitted to use your data for any purpose other than those specified.

rm1 does not store your e-wallet account information or payment details directly in our systems. When you make a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay or DuitNow, you are redirected directly to the respective payment provider's platform, which operates its own independent security systems. rm1 only receives confirmation that a payment was successful — not your account details. All communication between your device and rm1's servers is protected by 256-bit SSL encryption at all times.

Yes, you may request deletion of your personal data by contacting support@rm1.asia. However, please note that rm1 is legally required under Malaysian law to retain certain financial transaction records for a minimum of 7 years following account closure. This data cannot be deleted even upon member request, as it constitutes a legal compliance obligation. Any data not subject to statutory retention requirements will be deleted within 30 days of your request being received and verified.

In the event that rm1 ceases operations or a change of company ownership occurs, member personal data will be handled in accordance with Malaysia's PDPA requirements. rm1 members will be notified in advance of any material changes to the processing of their data, and you will be given the option to exercise your rights — including requesting data deletion — before any transfer takes place. rm1 will not transfer member personal data to a new entity without appropriate notice and consent where required under the law.

Privacy & Responsible Gaming at rm1

Protecting your personal data and promoting responsible gaming are two complementary pillars of rm1's commitment to every member.

Confidential Deposit Limit Data

The deposit limits you set on your rm1 account are confidential personal information. This information is never shared with any third party and is used solely to enforce your own preferences.

Self-Exclusion Records Protected

Your self-exclusion status on rm1 is sensitive information and is fully protected. It is never disclosed to third parties without your consent.

Personal Betting History

Your betting activity records on rm1 are personal data protected under this policy. You have the right to access and request a copy of these records at any time.

Age Verification Conducted Securely

Rm1's age verification process handles your identity document data to the highest security standards. Submitted documents are stored in an encrypted environment.

Your data is safe. Your privacy is respected. rm1 is always here for you.

If you have any privacy concerns or need assistance with responsible gambling, don't hesitate to reach out to rm1's support team — available 24/7.

Responsible Gaming

Your Privacy is Protected – Join rm1 with Confidence

Your personal data is fully protected with 256-bit SSL encryption. Register for free today and enjoy a safe, transparent and exciting betting experience alongside more than 500,000 rm1 members across Malaysia.

Bahasa Melayu