Privacy Policy

1. Introduction

rmc8 ("we", "us", "our", "the Company") operates the online gaming platform accessible at https://rmc8.cam ("the Platform"). We understand that your personal data is important to you, and we take our responsibility to protect it seriously.

This Privacy Policy ("Policy") sets out in clear terms what personal information rmc8 collects from Members ("you", "your") and visitors to the Platform, the purposes for which that information is processed, the legal bases upon which processing rests, and your rights in relation to your data.

This Policy forms part of your agreement with rmc8 and should be read alongside our Terms & Conditions. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2. Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

3. Data Controller Information

rmc8 is the Data Controller responsible for the personal data collected through the Platform. The Company operates under international gaming licensing and maintains data processing practices consistent with internationally recognised data protection standards.

For all data protection queries, access requests, or complaints, Members may contact rmc8 via the support channels set out in Section 14 of this Policy. rmc8 aims to respond to all data-related enquiries within 30 calendar days of receipt.

4. Personal Data We Collect

rmc8 collects personal data through several channels. The table below describes the categories of data collected and their primary source:

4.1 Data You Are Not Required to Provide

You may browse certain non-member areas of the Platform without providing personal data beyond Technical Data collected automatically. However, registration, deposits, gameplay, and withdrawals require the provision of Registration Data, Financial Data, and KYC Data as applicable. Failure to provide required data may prevent us from opening or maintaining your account.

5. Purposes of Processing & Legal Basis

rmc8 processes your personal data only where a valid legal basis exists. The principal purposes and their corresponding legal bases are set out below:

6. Data Sharing & Disclosure

rmc8 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers (Data Processors)

rmc8 engages carefully selected third-party service providers to assist in operating the Platform, including payment processors (e.g., providers facilitating Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and cryptocurrency transactions), identity verification providers, cloud infrastructure providers, and customer communication platforms. All service providers are bound by data processing agreements that restrict their use of your data to the purposes for which it was shared.

6.2 Game Studio Partners

Games available on the Platform are supplied by third-party studios. Certain Technical Data and Gaming Activity Data (such as session tokens and bet records) is necessarily shared with these studios to operate the games correctly. Game studios operate under contractual obligations consistent with this Policy.

6.3 Legal and Regulatory Authorities

rmc8 may disclose personal data to regulatory authorities, law enforcement bodies, or courts where required to do so by applicable law, regulation, court order, or in response to a valid governmental request. Where permitted, rmc8 will notify the affected Member of such a disclosure.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rmc8's business, Member data may be transferred to the successor entity as part of that transaction. Members will be notified of any such transfer and the applicable privacy terms of the successor entity prior to the transfer taking effect.

7. International Data Transfers

rmc8 operates infrastructure across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, rmc8 takes appropriate safeguards to ensure that your personal data remains protected to a standard equivalent to applicable data protection requirements. Safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Processing only in jurisdictions recognised as providing an adequate level of data protection;
• Binding corporate rules or equivalent internal data transfer agreements where applicable.

By using the Platform, you acknowledge that your personal data may be transferred internationally as described in this Section. If you would like further information about the specific safeguards applied to your data, please contact us at the details set out in Section 14.

8. Data Retention

rmc8 retains personal data for no longer than is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by law. The following general retention principles apply:

• Active Account Data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, to meet anti-money laundering record-keeping obligations and to facilitate dispute resolution.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or from account closure, whichever is later, in compliance with applicable AML legislation.
• Financial Transaction Records: Retained for a minimum of five (5) years following the transaction date, consistent with financial record-keeping obligations.
• Communication Data: Support transcripts and correspondence retained for a minimum of two (2) years from the date of the interaction.
• Technical / Log Data: Retained for up to twelve (12) months in rolling form for security and fraud analysis, after which records are deleted or anonymised.

On expiry of the applicable retention period, personal data is either securely and permanently deleted or anonymised such that it can no longer be associated with an identified or identifiable individual.

9. Security Measures

rmc8 implements and maintains technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your browser or device and the rmc8 Platform is encrypted using Transport Layer Security (TLS). Sensitive data at rest (including passwords, KYC documents, and payment data) is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data by rmc8 staff is governed by role-based access controls on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Two-Factor Authentication: rmc8 supports and strongly encourages the use of two-factor authentication (2FA) on all Member accounts. 2FA significantly reduces the risk of unauthorised account access.
• Regular Security Audits: rmc8 conducts periodic security assessments and vulnerability testing of Platform infrastructure to identify and remediate weaknesses promptly.
• Incident Response: rmc8 maintains a data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements.

While rmc8 applies robust security measures, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your own account credentials. Please use a strong, unique password and enable 2FA on your rmc8 account.

10. Cookies & Tracking Technologies

rmc8 uses cookies and similar tracking technologies to operate the Platform, analyse usage, and improve user experience. The following types of cookies may be set when you access the Platform:

Strictly necessary cookies cannot be disabled as they are required for the Platform to function. You may configure your browser to reject or delete other categories of cookies; however, this may affect Platform functionality. rmc8 does not use third-party advertising cookies or cross-site behavioural tracking cookies.

11. Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by rmc8. To exercise any of these rights, please contact us using the details in Section 14. We will respond within 30 calendar days of receiving a valid request.

Please note that certain rights are subject to exceptions. For example, rmc8 may be required to retain KYC and transaction data to comply with legal obligations even if you request erasure. We will explain the applicable exception clearly when responding to any request we cannot fulfil in full.

12. Minors & Age Restriction

rmc8 is strictly an adult platform. Access is limited to individuals who are aged 21 years or older. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

Age verification is mandatory at registration and as part of the KYC process. Where rmc8 identifies or has reason to believe that an account holder is under the age of 21, the account will be immediately suspended, all pending transactions cancelled, and the matter reviewed. Any funds deposited by an underage user will be managed in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and believe that a person under your care has registered an account with rmc8 without your knowledge, please contact us immediately at the details provided in Section 14. We will take prompt action to investigate and close any such account.

13. Changes to This Policy

rmc8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform operations. The date of the most recent revision is displayed at the top of this Policy.

Where changes are material — meaning they significantly affect your rights or how your data is used — rmc8 will provide advance notice to registered Members via the email address associated with your account or through a prominent notice on the Platform, at least 14 days before the revised Policy takes effect.

We encourage you to review this Policy periodically to remain informed of how rmc8 protects your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how rmc8 has handled your personal data, please contact our data protection team through the following channels:

• Email (plain text — not a clickable link): [email protected] — please use the subject line "Data Privacy Request" for efficient routing.
• Live Chat: Available 24/7 via the Member dashboard after login. Select "Account & Privacy" from the support category menu.

All data rights requests will be acknowledged within 3 business days and resolved within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

For responsible gambling enquiries or to activate self-exclusion tools, please also visit our Responsible Gambling page.