Updated: 1 January 2026

Rm666 Privacy Policy – Personal Data Protection for Malaysian Players

Rm666 takes your privacy seriously. This document clearly explains how we collect, use, store, and protect the personal data of Malaysian players using our platform. By registering an rm666 account, you agree to this Privacy Policy.

Your Data Is Safe
SSL 256-bit · Malaysia PDPA 2010
Encrypted
Not Sold
Your Rights
SSL 256-bit
Data Never Sold
PDPA Compliant
24/7 Support
Officially Licensed

Rm666's Privacy Commitment to Malaysian Players

Six core principles that guide how rm666 manages your personal data

256-bit SSL Encryption

All data transmitted between your browser and rm666's servers is encrypted using 256-bit SSL standards — the same security technology used by Malaysia's leading financial institutions and banks.

Data Never Sold or Shared

Rm666 does not sell, rent, or share your personal data with third parties for marketing purposes without your explicit consent. Your information belongs to you — rm666 is simply the trusted custodian.

Compliant with Malaysia's PDPA 2010

Rm666 operates in full accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every aspect of how your data is collected and managed is governed by locally recognised data protection law.

Right of Access & Rectification

You have the right to review, request corrections to, or request deletion of your personal data held by rm666 at any time by contacting our support team.

Secure Data Storage

Rm666 players' personal and financial data is stored on servers protected by multiple layers of security, strict access controls, and continuous monitoring for cyber threats.

Marketing Communications Control

You may opt out of receiving any marketing communications from rm666 at any time through your account settings or by contacting our customer support directly.

Important Prerequisites

This Privacy Policy explains how rm666 collect, use, disclose, and protect your personal information when you use the rm666 platform at rm666.run. This document forms part of the agreement between you and rm666, and should be read alongside our Terms & Conditions.

By registering an account, making a deposit, or using any rm666 service, you confirm that you have read and understood this Privacy Policy. If you do not agree, please do not use the rm666 platform. For any enquiries, contact us at support@rm666.run.

1

Introduction & Scope of Privacy Policy

Rm666 is an online Sports Betting and casino platform operating in Malaysia. We take our players' privacy seriously and are committed to protecting your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

This Privacy Policy applies to all individuals who use the rm666 platform, including website visitors, registered players, and former players whose data is still retained by rm666 in accordance with legally mandated retention periods. It covers all rm666 services, including live Sports Betting such as the Malaysia Super League and EPL, Live Casino, slots, Virtual Sports, and all related platform features.

Rm666 acts as the data controller for personal data collected through this platform. This means we are fully responsible for determining the purposes and means of processing your data, and we comply with all obligations imposed on data controllers under applicable Malaysian data protection law.

Current Version

This Privacy Policy takes effect from 1 January 2026. Players will be notified of any changes to this policy in accordance with the procedures set out in Section 11.

2

Personal Data We Collect

Rm666 collects your personal data through various means as you interact with our platform. The types of data we collect depend on the purpose of use and the legal compliance obligations applicable to rm666:

Data Category
Example Information
Collection Methods
Identity Information
Full name, date of birth, MyKad number
Registration form & KYC
Contact Information
Malaysian phone number, email address
Registration form
Financial Information
RM deposit & withdrawal records, payment methods (TNG, GrabPay, DuitNow)
Platform transactions
Usage Data
Betting records, games played, session duration
Automated system logs
Technical Data
IP address, browser type, operating system, device ID
Cookies & server logs
Communication Data
Live chat history, email, player feedback
Customer support interactions

Rm666 follows the principle of data minimisation — we only collect data that is strictly necessary for the stated purposes. We do not request irrelevant information, and we do not store sensitive data such as passwords in plain text. All passwords are stored in hashed form using industry-recognised algorithms.

3

Purpose of Personal Data Use

Rm666 uses your personal data only for legitimate, specified purposes. The following are the primary purposes for which rm666 uses player data:

  • Account Management — to create and maintain your rm666 account, process registrations, verify your identity, and manage your player profile.
  • Transaction Processing — processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX in MYR.
  • Service Provision — allowing you to access and use all rm666 platform features, including Sports Betting, Live Casino, slots, and virtual sports.
  • KYC & AML Compliance — fulfilling legal requirements related to identity verification (Know Your Customer) and anti-money laundering (Anti-Money Laundering).
  • Platform Security — detecting and preventing fraud, bot usage, collusion, and other unauthorized activities that could compromise the integrity of the rm666 platform.
  • Responsible Gaming — monitoring gameplay patterns to identify signs of problem gambling and taking proactive steps to protect at-risk players.
  • Service Communications — sending important notices relating to your account, changes to terms, security updates, and transaction information.
  • User Experience Enhancement — analysing usage patterns to improve rm666's platform design, performance, and game offerings.
  • Marketing (with consent) — sending promotional information, bonus offers, and the latest rm666 updates to players who have given their consent.

Rm666 will not use your personal data for any purpose beyond those stated above without first obtaining fresh consent from you, unless required to do so by applicable Malaysian law.

4

Data Sharing with Third Parties

Rm666 does not sell or rent players' personal data to any third party. However, in the course of operating the platform, rm666 may need to share certain information with carefully selected third parties in the following circumstances:

  • Payment Service Providers — eWallet and banking service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive the transaction information necessary to process your deposits and withdrawals.
  • Game Service Providers — companies that supply gaming software to rm666 may receive player IDs and session data necessary for games to function correctly.
  • KYC Service Provider — a third-party identity verification platform that helps rm666 meet KYC requirements by receiving the identification information needed for the verification process.
  • Malaysian Authorities — rm666 will disclose information to Malaysian authorities such as the police, courts, or regulatory bodies where required by law or a valid court order.
  • Technology Service Providers — cloud infrastructure providers, cybersecurity services, and analytics partners that help rm666 operate the platform safely and efficiently.

All third parties that rm666 works with are bound by strict confidentiality agreements and are only permitted to use player data for the specific purposes that have been agreed upon. rm666 does not share players' personal data with advertising companies or data brokers for third-party marketing purposes.

Data Sharing Protection

Every data-sharing agreement with third parties includes data protection clauses ensuring those parties adhere to security standards comparable to rm666's own. rm666 conducts periodic assessments of third parties to ensure ongoing compliance.

5

Data Security Measures

Rm666 implements multiple layers of technical and organizational security measures to protect players' personal data from unauthorized access, loss, alteration, or disclosure. rm666's key data security measures include:

Data Transmission Encryption (256-bit SSL)100%
Internal Admin Access Control99%
Real-Time Threat Monitoring24/7
Two-Factor Authentication (2FA)Available
  • 256-bit SSL Encryption — all communications between your browser and rm666's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate, rendering data unreadable to any party attempting to intercept it.
  • Secure Password Storage — account passwords are never stored in plain text. rm666 uses strong hashing algorithms such as bcrypt with a high cost factor.
  • Role-Based Access Control — rm666 internal staff may only access the player data necessary for their specific role — the principle of least privilege is enforced at every level.
  • Monitoring & Audit Logs — all access to player data is recorded in secure audit logs. Any suspicious access will immediately trigger an alert to the rm666 security team.
  • Two-Factor Authentication — rm666 supports and encourages the use of 2FA on player accounts as an additional layer of security.
  • Player Fund Segregation — player funds in rm666 accounts are held separately from the company's operational accounts, protecting your money from any financial issues that may affect the company.

While rm666 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of a data breach that may affect players, rm666 will notify affected players within the timeframe required under Malaysian law.

6

Use of Cookies

Rm666 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the rm666 website. The following are the types of cookies we use:

Cookie Type
Purpose
Retention Period
Important
Managing login sessions, platform security, and core rm666 functionality
Session / 30 days
Functionality
Storing your language preferences, display settings, and personal preferences
1 year
Analytics
Analysing platform usage patterns for the continuous improvement of rm666
2 years
Marketing
Displaying relevant rm666 promotional offers based on your interests (with consent only)
90 days

Essential cookies cannot be disabled as they are required for the core functionality of the rm666 platform. For all other cookies, you can manage your preferences through your browser settings. Please note that disabling certain cookies may affect your experience on rm666.

7

Cross-Border Data Transfers

In the course of global operations, some third-party service providers working with rm666 may process or store data outside Malaysia. Where such transfers occur, rm666 ensures that:

  • Data transfers are carried out only to countries or entities that provide a level of data protection comparable to Malaysia's standards.
  • Appropriate data transfer agreements, including standard contractual clauses, are put in place before any transfer takes place.
  • Data recipients outside Malaysia are bound by contractual obligations that require them to protect your data in accordance with the standards set by rm666.
  • Data transfers cover only the information strictly necessary for service delivery — rm666 does not transfer data beyond what is required.

Cross-border data transfers carried out by rm666 relate primarily to cloud infrastructure services, certain international game providers, and security analytics services. Sensitive financial data and KYC information are prioritized for storage on servers located in Malaysia or the Asia-Pacific region.

8

Data Retention Period

Rm666 retains your personal data only for as long as necessary for the stated purposes or as required under Malaysian law. Retention periods vary by data category:

Data Category
Retention Period
Active account data
Throughout active account + 5 years after closure
Financial transaction records
7 years (Malaysia LHDN statutory requirement)
KYC Documents
5 years after account closure
Support communication logs
3 years
Technical & security logs
1 year
Analytics data (anonymised)
Unlimited (anonymised)

When a retention period expires, rm666 will securely delete or anonymise your personal data using industry-recognised methods that ensure the data cannot be recovered. Players may request early deletion of their data under certain circumstances as outlined in Section 9 below, subject to legal obligations requiring rm666 to retain data for a minimum period.

9

Your Privacy Rights as an rm666 Player

As an rm666 player based in Malaysia, you have the following rights regarding your personal data under the Malaysia PDPA 2010 and rm666's policies:

Right of Access

You have the right to request a copy of the personal data rm666 holds about you. Such requests will be processed within 30 business days. rm666 reserves the right to charge a reasonable administrative fee for repeated or extensive requests.

Right to Rectification

If your data is inaccurate or incomplete, you can request a correction through your rm666 account profile settings or by contacting our customer support team. Corrections that do not require additional verification are processed immediately.

Right to Erasure

You may request deletion of your personal data when it is no longer needed for its original purpose, or when you withdraw your consent. This right is subject to rm666's legal obligations to retain certain data, such as financial records, for prescribed retention periods.

Right to Object & Restriction

You may object to the processing of your data for marketing purposes at any time. You may also request a restriction on processing in certain circumstances, such as when the accuracy of your data is in dispute or when processing is unlawful.

Right to Data Portability

You have the right to receive the personal data you have provided to rm666 in a structured, machine-readable format, and to transfer it to another data controller if you wish.

To exercise any of the rights above, please contact the rm666 privacy team by email at support@rm666.run, stating the right you wish to exercise along with sufficient information to verify your identity. rm666 will respond within 30 business days of receiving a valid request.

10

Children's Privacy

The rm666 platform is strictly for individuals aged 18 and above. rm666 does not knowingly collect or process the personal data of anyone under 18. Should rm666 discover that data belonging to an underage individual has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that data and close the associated account.

Parents or guardians who believe their child may have registered an rm666 account without authorisation are urged to contact us immediately at support@rm666.run. rm666 will cooperate fully to resolve such situations promptly and responsibly.

Child Protection

Rm666 employs an age verification process during registration and a KYC process to ensure only individuals aged 18 and above can use the platform. Parents are encouraged to use parental control software to prevent minors from accessing online betting sites.

11

Privacy Policy Amendments

Rm666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, updated legal requirements, or new service offerings. Any material changes to this Privacy Policy will be communicated to players via:

  • Email or SMS notification to the phone number or email address registered to your rm666 account.
  • A prominent banner or pop-up notice displayed on the rm666 platform when players log in after an amendment takes effect.
  • Updating the "Last Updated" date at the top of this Privacy Policy.

Rm666 will provide at least 14 days before any material changes to this Privacy Policy take effect. Continued use of the rm666 platform after the amendment's effective date will be considered acceptance of the updated policy. If you do not agree with the changes, you may close your rm666 account before they take effect.

12

How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rm666 handles your personal data, please reach us through the following channels:

Privacy Email
support@rm666.run
Include "Privacy Inquiry" in the email subject line. Response time: < 2 business days.
Live Chat
Available 24/7 on the rm666 platform.
For urgent privacy enquiries. Response time: < 5 minutes.

Rm666 has a dedicated internal privacy officer responsible for ensuring compliance with Malaysia's PDPA and the platform's privacy policy. Privacy complaints that cannot be resolved through rm666's internal channels may be referred to the Department of Personal Data Protection (JPDP) Malaysia — the official regulatory body for personal data protection in Malaysia.

Player Privacy – rm666's Priority from Day One

If you've ever had concerns about data privacy when using an online betting platform, those concerns are completely understandable. Many people have heard stories about user data being leaked, sold to advertisers, or used without the owner's knowledge. At rm666, we understand this concern — and that is precisely why our privacy policy is not just a box-ticking document. It reflects how we actually operate.

Since rm666 began operations in 2019, we have upheld high standards in the management of player data. We believe that players' trust in our platform depends not only on fair odds and fast payouts, but also on their confidence that personal information — names, phone numbers, RM transaction records — is handled with the utmost responsibility.

Why Malaysia's PDPA Matters to rm666 Players

The Personal Data Protection Act 2010 (PDPA) is a Malaysian law governing how companies collect, process, and store users' personal data. rm666 is fully compliant with the PDPA, which means you as a player have legally protected privacy rights — not just non-binding company promises. These include the right to know what data we hold about you, the right to request corrections, and in certain circumstances, the right to request deletion of your data.

In the context of a betting platform like rm666, PDPA compliance means we are required to obtain valid consent before collecting and processing your data, clearly state the purposes for which it is used, and ensure it is only accessible to staff who genuinely need it. For rm666, this is not merely a legal obligation — it is how we do right by our players.

Financial Data – Special Protection at rm666

Among all categories of data that rm666 handles, players' financial data receives the highest level of protection. This includes deposit records via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawal records in MYR. rm666 does not store players' full credit or debit card details — all transactions are processed directly through licensed and secure payment gateways.

Funds in your rm666 account are held in accounts that are segregated from the company's operational accounts. This means that even in the unlikely event rm666 faces any financial difficulty, players' funds remain unaffected. This is the player fund protection standard we uphold as part of rm666's commitment to financial security.

Transparency in Data Use

Rm666 does not believe in burying important information in small print. This Privacy Policy is written in clear, plain language that any ordinary Malaysian player can understand — not just lawyers. We want you to know exactly what data we collect, why we need it, how long we keep it, and what choices you have.

If this document leaves any of your questions unanswered, the rm666 support team is available via 24/7 live chat or email at support@rm666.run. We will never let uncertainty about privacy stand in the way of your trust in rm666 — because that trust is the foundation of our relationship with every Malaysian player on our platform.

rm666 Data Security Summary
SSL Encryption256-bit
PDPA Compliance100%
Threat Monitoring24/7
Platform Uptime99.9%
Your Privacy Rights
Access your personal data
Correction of inaccurate data
Data erasure (subject to conditions)
Direct marketing opt-out
Data Portability
Restriction of data processing

Contact support@rm666.run to exercise any of these rights.

Related Documents
Terms & Conditions Responsible Gaming About Us Frequently Asked Questions Register Account
Play Responsibly at rm666

Your data is protected. Our platform is trusted. Register for free and play with confidence.

Register for Free Now

Responsible Gaming at rm666

Player privacy and security are two sides of the same coin for rm666

Deposit Limits

Set daily, weekly, or monthly deposit limits to keep your spending in check.

Manage Budget

Only play with money you can afford to lose. Never gamble with funds set aside for your family's needs.

Self-Exclusion

Request a temporary break or permanent self-exclusion through your rm666 account settings.

18+ Only

Rm666 is strictly for individuals aged 18 and above, with no exceptions.

Find out more on the Responsible Gaming us.

FAQ – rm666 Privacy Policy

The most common questions players ask about how rm666 protects their personal data

No, rm666 never sells, rents, or shares players' personal data with advertisers or any third party for marketing purposes without the player's explicit consent. Your data is only shared under the circumstances set out in this Privacy Policy — that is, with service providers who assist us in operating the platform, such as payment providers (Touch 'n Go, GrabPay, DuitNow, etc.), game providers, and KYC services, all of whom are bound by strict confidentiality agreements. rm666 may also share data where required by Malaysian law or a valid court order.

You may request access to your personal data by contacting rm666 via email at support@rm666.run with "Data Access Request" in the subject line. Please include sufficient information to verify your identity, such as your full name and rm666 account number. rm666 will process your request within 30 business days of receiving a valid application. Data will be provided in a readable format. Please note that certain information may not be disclosed if doing so would infringe on another individual's privacy rights or conflict with rm666's legal obligations.

When you close your rm666 account, most of your active personal data will be deactivated. However, rm666 is required under Malaysian law to retain certain records for specified periods — for example, financial transaction records must be kept for 7 years in accordance with LHDN statutory requirements, and KYC documents must be retained for 5 years after account closure under AML requirements. This data is stored securely with restricted access and is not used for any marketing purposes. Once the minimum retention period has elapsed, the data will be permanently deleted using industry-recognised methods.

rm666 does not directly store players' full credit or debit card details. All financial transactions are processed through licensed payment gateways that comply with PCI-DSS security standards. For our key payment methods — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) — players interact directly with the secure interface of their respective eWallet provider or bank. rm666 receives only transaction confirmations from the payment gateway, not your card details or bank account credentials. All communications between the rm666 platform and payment gateways are encrypted using 256-bit SSL.

Yes, you can opt out of marketing communications from rm666 at any time. There are several ways to do this: first, through the communication preferences settings in your rm666 account, where you can manage the types of notifications you wish to receive; second, by clicking the "unsubscribe" link at the bottom of any rm666 promotional email; or third, by contacting the rm666 support team via live chat or email at support@rm666.run and stating that you wish to stop receiving marketing communications. Please note that even after opting out of promotional emails, rm666 will still send important account notices such as transaction confirmations, security updates, and terms changes — these communications are essential to the operation of your account and cannot be disabled.

Privacy Protected. Platform Trusted. Register Now.

Your data is protected by 256-bit SSL encryption and a transparent privacy policy. Join over 500,000 Malaysian players at rm666 — minimum deposit RM 20 via Touch 'n Go, GrabPay, or DuitNow.

Bahasa Melayu