rm1k Official Documents

Privacy Policy rm1k – Our Commitment to Protecting Your Personal Data in Malaysia

At rm1k, your privacy is not merely a formality. Every piece of information you share with us is handled with the utmost trust. This Privacy Policy clearly sets out what data we collect, why we need it, how it is protected, and the full rights you hold over your own data — all in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 January 2026
YOUR DATA IS SECURE
SSL 128-bit · PDPA 2010

6 Core Principles rm1k Privacy Policy

This is rm1k's commitment to every Malaysian member on how your personal data is handled — straightforward and free of confusing jargon.

128-bit SSL Encryption

All data transmitted between your device and rm1k's servers is encrypted using the same 128-bit SSL technology used by Malaysia's major banks. Whether you are logging in, making a deposit via Touch 'n Go eWallet or GrabPay, or submitting any information, it is protected by a layer of encryption that cannot be easily breached by outside parties.

Malaysia PDPA Compliance

Rm1k is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) — the country's primary data protection law. This means the collection, processing, and storage of your personal data is carried out in accordance with the principles established under Malaysian law, not merely at our own discretion.

No Sale of Data to Third Parties

Rm1k has never sold, rented, or shared your personal data with advertisers, data brokers, or any third party unrelated to platform operations — and never will. Your data is used solely for the purposes you have consented to, not to line someone else's pockets.

Minimum Data Collection

Rm1k only collects data that is genuinely necessary to operate the platform safely and effectively. We do not gather irrelevant or excessive information. Every data point we request has a clear operational or legal justification — there is no data collection for its own sake.

Full Control Is Yours

You have the full right to access, correct, transfer, or request deletion of your personal data at any time, at no charge. rm1k makes this process straightforward — simply contact our support team and we will handle your request within the timeframe stipulated by the PDPA.

Confidentiality of Gaming Records

Your gaming history on rm1k — whether slots such as Bonanza and Dawn of Egypt, or live casino sessions like Control Squeeze — is confidential information accessible only to you and authorised rm1k staff. These records are never shared with any external party without your consent.

1 Introduction & Scope of rm1k's Privacy Policy

Important: By using the rm1k platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Welcome to rm1k's Privacy Policy page. rm1k is an online casino platform operating in Malaysia, committed to protecting the privacy of every member. This Privacy Policy ("Policy") explains how rm1k collects, uses, stores, protects, and occasionally shares your personal information when you use the rm1k website, mobile app, and all associated services.

This Policy applies to all individuals who register an account with rm1k, visit our website without registering, or communicate with our support team through any channel. This Policy should be read together with rm1k Terms & Conditions and together constitute the entire agreement between you and rm1k regarding the use of your personal data.

As a platform serving Malaysian users, rm1k fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA), including the seven data protection principles set out in the Act: General Principle, Notice & Choice, Disclosure, Security, Retention, Data Integrity, and Access.

2 Personal Data We Collect

Rm1k collects various types of personal data depending on the context of your interactions with the platform. Below is a full breakdown of the data we may collect:

Data Category Example Information How It's Collected Requirements
Identity Full name, MyKad/passport number, date of birth, gender Registration form, KYC Mandatory
Relationship Malaysian phone number, email address Registration form Mandatory
Financial Payment methods (TNG, GrabPay, DuitNow, FPX), transaction history Deposits, withdrawals Mandatory
Technical IP address, device type, browser, operating system Automatically during use Automatic
Games Betting history, games played, win/loss records Platform activity Automatic
Communication Customer support chat records, emails, feedback Direct interactions Where relevant

rm1k no collect credit/debit card PINs, online banking passwords, or any biometric data. We use a tokenisation system to process payments — meaning your sensitive payment details are never stored directly on rm1k's servers.

3 How We Use Your Personal Data

Rm1k uses the personal data collected for legitimate and transparent purposes. We will not use your data beyond what is stated below without first obtaining your consent:

  • Account management – Creating, verifying, and maintaining your rm1k account, including the identity verification (KYC) required for secure platform operations.
  • Transaction processing – Processing your deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, as well as handling all your withdrawal requests.
  • Service delivery – Providing access to all rm1k games, including slots, Live Baccarat, Control Squeeze, and all other games available on the platform.
  • Security & fraud prevention – To detect and prevent suspicious activity, identity fraud, multiple accounts, money laundering, and any misuse of the rm1k platform.
  • Service communications – Sending important account-related notifications such as OTP verification, security alerts, terms updates, and transaction information.
  • Marketing (with consent) – Sending information about rm1k promotions, bonuses, and special offers only to members who have given their consent to receive marketing communications. You may withdraw this consent at any time.
  • Responsible gaming – Monitoring gaming patterns to identify members who may benefit from responsible gambling support, and providing the necessary tools.
  • Legal compliance – To fulfil legal obligations under Malaysia's PDPA and other applicable laws, and to cooperate with authorities where required by law.

The legal bases for rm1k's data processing are: (1) fulfilment of a contract with you as a member; (2) rm1k's legitimate interests in operating a secure platform; (3) compliance with legal obligations; and (4) your consent for marketing purposes.

4 Data Storage & Security

Rm1k takes data security extremely seriously. We invest in industry-grade security infrastructure to ensure your data is always protected against unauthorised access, loss, or misuse.

🔐
End-to-End Encryption

All sensitive data is encrypted in transit using 128-bit SSL and at rest using robust AES encryption.

🛡️
Strict Access Control

Only authorised rm1k staff with a legitimate operational need may access members' personal data. All access is logged and monitored.

🔄
Backup & Recovery

Rm1k data is automatically backed up to a separate secure location to ensure no data loss occurs, even in emergency situations.

🕵️
Regular Security Audits

Rm1k conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities.

Data retention period: rm1k retains your personal data for as long as your account remains active, or for as long as necessary to fulfil the purposes set out in this Policy. Once an account is closed, your personal data will be retained for the minimum period required under Malaysian law — typically 7 years for financial records — before being securely deleted using irreversible methods.

Data Storage Location: rm1k members' personal data is stored on servers located in Malaysia and/or countries with equivalent or stronger data protection laws. rm1k does not transfer your data to countries without adequate data protection without appropriate contractual safeguards in place.

5 Data Sharing with Third Parties

Rm1k does not sell or rent your personal data to any third party. However, there are limited circumstances in which we may share your data with carefully selected third parties:

  • Payment service providers – eWallet and online banking providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX receive the transaction information necessary to process your deposits and withdrawals. These providers are subject to their own privacy policies and Bank Negara Malaysia regulations.
  • Gaming platform provider – rm1k's technology partners who provide games may receive the minimum technical data required to deliver the gaming experience. All such partners are bound by strict data protection agreements with rm1k.
  • Support service providers – Companies that assist rm1k in operating the platform — such as hosting services, security analytics, and technical support — may access data in a limited data processor capacity, subject to strict confidentiality agreements.
  • Legal authorities – rm1k will disclose personal data to the police, courts, or Malaysian regulatory authorities when required by Malaysian law, a valid warrant, or a court order. rm1k will endeavour to notify you of any such request to the extent permitted by law.

rm1k no share your personal data with advertising companies, social media platforms, or data brokers. You will not receive targeted ads from rm1k on external platforms based on your activity at rm1k.

6 Cookies & Tracking Technologies

Rm1k uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

Cookie Type Purpose Duration Status
Essential Cookies Maintaining login sessions, account security, and language preferences Session / 30 days Mandatory
Functional Cookies Remembering game preferences, preferred betting limits, display settings 90 days Choice
Analytics Cookies Understanding how members use the platform to improve rm1k 1 year Choice
Security Cookies Detecting suspicious activity, preventing fraud and unauthorised access Session Mandatory

Essential and security cookies are required for the rm1k platform to operate securely and cannot be disabled. Functional and analytics cookies can be managed through the cookie settings within the rm1k platform or your browser settings. Please note that disabling functional cookies may affect your gaming experience.

Rm1k does not use cross-site tracking technologies or third-party marketing pixels that monitor your activity outside of the rm1k platform.

7 Your Rights Under Malaysia's PDPA

As an individual whose data is processed by rm1k, you hold the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA). rm1k is committed to making it straightforward for you to exercise these rights:

Right of Access

You have the right to obtain a copy of all personal data rm1k holds about you. Submit your request by email to [email protected] and we will provide a full data report within 21 days, as required under the PDPA.

Right to Rectification

If the personal data rm1k holds about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Most information can be updated directly through your rm1k account profile settings, or by contacting our support team.

Right to Erasure

You may request the deletion of your personal data when it is no longer needed for its original purpose, or when you withdraw your consent. Please note that rm1k may be required to retain certain data to fulfil legal obligations, even after a deletion request has been received.

Right to Object to Processing

You may object to the processing of your personal data for direct marketing purposes at any time, without needing to provide a reason. For other types of processing, you may object by providing grounds relating to your particular circumstances.

Right to Withdraw Consent

For any data processing that relies on your consent (such as marketing), you may withdraw that consent at any time through your rm1k account notification settings or by contacting us. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights above, contact the rm1k Data Protection Officer by email: [email protected] with the subject line "PDPA Rights Request – [Your Full Name]". We will respond within 21 days of receiving your complete request.

8 Protection of Minors' Data

Rm1k is an exclusive platform for individuals aged 21 and above. rm1k does not knowingly collect, process, or store any personal data of individuals under the age of 21.

Should rm1k discover that personal data belonging to an individual under the age of 21 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered an rm1k account without permission are urged to contact us immediately at [email protected].

9 Changes to rm1k's Privacy Policy

Rm1k reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, newly offered services, or applicable legal requirements.

When material (significant) changes are made to this Privacy Policy, rm1k will:

  • Updating the "Last updated" date at the top of this page.
  • Notify all rm1k members via their registered email or in-platform notification at least 14 days before the changes take effect.
  • For significant changes, re-consent will be requested from members before their data is processed under the updated terms.

Your continued use of the rm1k platform after any policy changes take effect constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your rm1k account and request the deletion of your data.

10 Contact Us About Privacy

Rm1k takes all privacy enquiries, concerns, and complaints seriously. If you have any questions about this Privacy Policy or how we handle your personal data, there are several ways to get in touch with us:

Privacy Email

[email protected]
Subject: "Privacy Enquiry"

Live Chat

Within the rm1k platform
Available 24/7

The Malay-speaking rm1k team will respond within 3 business days for general enquiries, or within 21 days for formal PDPA rights requests. If you are not satisfied with rm1k's response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body overseeing PDPA compliance in Malaysia.

More Questions About rm1k's Privacy?

We understand that privacy can be a sensitive and sometimes complex matter. If anything in this Privacy Policy is unclear, or if you would like to know more about how we protect your data, please do not hesitate to ask. rm1k's Bahasa Malaysia-speaking support team is available 24/7 to help.

Privacy Is Not a Formality — It Is Our Responsibilities

Behind every TNG eWallet deposit, every slots spin, and every Live Baccarat session, your data is protected by security layers we have built with great care.

Malaysia PDPA Compliance 100%
Sensitive Data Encryption 100%
No Data Sales to Advertisers 100%
Privacy Request Response (< 21 days) 99.2%
Member Satisfaction Regarding Privacy 97.8%
SSL 128
Encryption Bits
PDPA 2010
Full Compliance
0
Data Breaches Reported
24/7
Security Monitoring

"We understand that your trust in rm1k depends largely on the confidence that your personal data is in responsible hands. That is why privacy protection is more than a legal obligation for us — it is a core part of rm1k's identity as Malaysia's platform of choice."

— rm1k Privacy & Compliance Team

FAQ – Privacy Policy rm1k

The most frequently asked questions from rm1k members regarding personal data protection and privacy on the platform.

No. rm1k does not sell, rent, or share your personal data with third parties for marketing or commercial purposes without your consent. The only circumstances under which rm1k shares your data are: (1) with service providers that help us operate the platform, such as payment processors (TNG, GrabPay, DuitNow, Boost, ShopeePay, FPX) that require transaction information to process your payments; and (2) with Malaysian authorities when required by law or a valid court order. All third parties working with rm1k are bound by strict data protection agreements and are not permitted to use your data for any purpose beyond what has been specified.

To submit a data access or deletion request at rm1k, send an email to [email protected] with the subject line "PDPA Rights Request – [Your Full Name]". In your email, please include your full name, rm1k account number, registered phone number, and the type of request (data access, correction, deletion, or objection). rm1k will verify your identity before processing the request and will respond within 21 days as required under Malaysia's PDPA. No fee is charged for reasonable PDPA rights requests. For a faster response, you may also initiate your request via Live Chat within the rm1k platform.

When you close your rm1k account, your personal data is not deleted immediately. rm1k is required under Malaysian law — specifically laws governing financial records and anti-money laundering — to retain certain records for the applicable minimum retention period (typically 7 years for financial records). Once this minimum retention period has elapsed, your data will be securely deleted using methods that ensure it cannot be recovered. During the post-closure retention period, your data is accessible only to authorised personnel for legal compliance purposes and is not used for any operational or marketing activities.

No. rm1k uses a tokenisation system for all payment processing, which means your sensitive payment details — whether card numbers, Maybank2u or CIMB Clicks account details, or your eWallet information — are never stored directly on rm1k's servers. When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, you are connected directly to the respective payment provider's system, which operates its own security infrastructure recognised by Bank Negara Malaysia. rm1k only retains transaction records (amount, date, payment method used) required for account management and legal compliance — not your sensitive financial details.

While rm1k invests heavily in security infrastructure to prevent data breaches, we maintain a comprehensive incident response protocol should the unexpected occur. In the event of a data breach involving members' personal data, rm1k will: (1) act immediately to contain the breach and isolate affected systems; (2) conduct a thorough investigation to determine the scope and impact of the breach; (3) notify all affected members whose data may have been compromised within the stipulated timeframe; (4) report the breach to Malaysia's Personal Data Protection Department (JPDP) in accordance with PDPA requirements; (5) implement remediation measures to prevent a recurrence. rm1k is committed to being fully transparent with both members and authorities in any such situation.
Rm1k Privacy Policy – Read Together with Terms & Conditions

This Privacy Policy should be read together with the rm1k Terms & Conditions and Responsible Gaming Policy. Together, these documents form a comprehensive framework governing the relationship between you and rm1k. rm1k is committed to ensuring this platform is a safe space — not only in terms of cybersecurity, but also with respect to privacy, integrity, and member well-being. Protecting your data is not merely a legal obligation for us — it is a core value we uphold.

If you have any privacy concerns, please reach out to us at [email protected] – we're available in Bahasa Malaysia and ready to assist 24/7.

Join rm1k – Malaysia's Most Trusted Online Casino Platform

Over 500,000 active members have trusted rm1k — not only for our world-class slots and Live Casino collection, but also for our unwavering commitment to protecting every member's privacy and personal data. Register today and enjoy a safe, exciting gaming experience.

SSL 128-bit Secure PDPA Compliance 24/7 Support Malaysian eWallets

*Terms and conditions apply. 21+ only. Play responsibly.

Bahasa Melayu