Rm100k Privacy Policy – How We Protect the Personal Data of Malaysian Players

1 Introduction

Rm100k is fully committed to protecting the privacy and personal data of every player on our platform. Your trust is our most valuable asset — and that trust can only be built on complete transparency about how we handle the information you share with us.

This Privacy Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the collection, storage, use and disclosure of personal data in Malaysia. As a platform serving Malaysian players, rm100k views PDPA compliance not merely as a legal obligation but as a reflection of our respect for your privacy as a user.

This policy applies to all information collected through the rm100k.click website, any related mobile applications, email communications, and any direct interactions with the rm100k customer support team. It also applies to data collected during the registration process, identity verification (KYC), payment processing, and active use of the platform.

2 Data We Collect

Rm100k collects different types of data depending on how you interact with our platform. Our principle is to collect only what is necessary and nothing more.

Data you provide directly:

• Registration Information: Full name, Malaysian phone number, email address, date of birth and account details;
• KYC Documents: MyKad or passport copy, selfie for facial verification, bank statement or utility bill for address verification;
• Financial Information: Details of the payment methods used (Touch 'n Go eWallet account number, GrabPay, Boost or ShopeePay, FPX details for Maybank2u or CIMB Clicks, DuitNow) — rm100k does not directly store credit or debit card numbers;
• Communications: Conversation records with the customer support team via live chat, WhatsApp, or email.

Data collected automatically during platform use:

• Your IP address, browser type and device operating system;
• Access times and dates, pages visited and session duration;
• Betting activity records, including selected markets, stake amounts and outcomes;
• Mobile device information if you access rm100k via smartphone;
• Cookie and similar tracking technology data (see Section 9 for more details).

3 How We Use Your Data

Rm100k uses the personal data collected for the following purposes, all of which are necessary to provide a safe, fair and responsible betting service to players in Malaysia:

• Account Management: Registering, verifying and maintaining your player account, including processing withdrawal requests via Touch 'n Go, DuitNow, GrabPay or FPX;
• Identity Verification (KYC): Verifying your identity and age in accordance with platform operating requirements and legal compliance;
• Fraud Prevention: Identifying and preventing fraudulent activity, money laundering or misuse of the rm100k platform;
• Service Provision: Enabling you to bet on Malaysia Super League, EPL, BWF badminton, MPL Malaysia esports, play at live Baccarat and Roulette tables, and use all features of the rm100k platform;
• Customer Support: Handling enquiries, complaints and support requests via live chat, WhatsApp or email;
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and reaching out to players who may need assistance;
• Platform Improvements: Analysing aggregated usage data to improve the rm100k platform's interface, performance and features;
• Service Communications: Sending important account-related notifications such as transaction confirmations, policy updates, and security alerts;
• Marketing Communications: Sending information about rm100k promotions and offers — only where you have given consent to receive such communications.

Rm100k does not use your personal data for any purpose other than those stated above without first obtaining your renewed consent.

4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), rm100k processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil the service agreement between you and rm100k — including payment processing, bet settlement and account management;
• Legal Compliance: Processing required to comply with legal obligations applicable to rm100k, including KYC and anti-money laundering requirements;
• Legitimate Interests: Processing for rm100k's legitimate business interests, such as fraud prevention, platform security and service improvements — provided these interests do not override your fundamental rights and freedoms;
• Consent: For certain processing activities such as marketing communications, rm100k will seek and rely on your explicit consent, which may be withdrawn at any time.

5 Data Sharing & Disclosure

Rm100k does not sell, rent or share your personal data with third parties for their own marketing or commercial purposes. Your data may only be shared in the following limited circumstances:

• Service Providers: Technical service providers that help us operate the platform — including cloud infrastructure providers, Malaysian payment service providers (Touch 'n Go, DuitNow and FPX processors) and customer support service providers — all of whom are bound by strict confidentiality agreements and may only process your data in accordance with rm100k's instructions;
• Authorities: When required by Malaysian law or upon an official request from a competent authority such as the Royal Malaysia Police, a court, or a relevant regulatory body;
• Fraud Prevention: With identity verification or fraud prevention companies engaged to verify player identities and detect suspicious activity;
• Within the Corporate Group: With entities within the rm100k group of companies where relevant, subject to equivalent protections;
• Business Transfer: If rm100k is involved in a merger, acquisition or asset sale, player data may be transferred — however, players will be notified in advance.

6 International Data Transfers

In certain circumstances, your personal data may be processed or stored outside Malaysia — for example, on cloud infrastructure servers operating across multiple locations to ensure optimal availability and performance of the rm100k platform.

Where such data transfers occur, rm100k ensures that:

• The recipient country or territory has a level of data protection equivalent to or greater than that of Malaysia;
• Appropriate safeguards are in place, such as standard contractual clauses or legally binding data processing agreements;
• Transferred data is protected by encryption both in transit and at rest;
• Foreign service providers involved are bound by privacy policies that comply with recognised international standards.

For more information on the safeguards applied to international data transfers, you may contact the rm100k team at support@rm100k.click.

7 Data Security

Rm100k implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

The technical security measures we implement include:

• Data Encryption: All data in transit is protected with TLS 1.3 and 256-bit SSL encryption. Sensitive data such as passwords is stored using irreversible cryptographic hashing algorithms;
• Access Controls: A role-based access control (RBAC) system ensures rm100k staff can only access data relevant to their job responsibilities;
• Security Monitoring: An intrusion detection system and suspicious activity monitoring operate around the clock to identify and respond to security threats in real time;
• Security Testing: Penetration testing and security vulnerability assessments are conducted regularly to identify and address potential weaknesses before they can be exploited.

While rm100k takes data security seriously, no system can guarantee absolute 100% security. In the event of a data security breach affecting your personal data, rm100k will notify you and the relevant authorities within the timeframe required under applicable Malaysian law.

You also play an important role in keeping your account secure. Please ensure your rm100k password is strong and unique, never share your login credentials with anyone, and contact us immediately if you suspect any suspicious activity on your account.

8 Data Retention

Rm100k retains your personal data for as long as necessary to fulfil the original purpose of collection and to comply with applicable legal obligations. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account is active with rm100k and for a reasonable period after account closure for the purpose of resolving post-closure matters;
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax legal requirements;
• KYC Documents: Retained for as long as the account is active and for the period stipulated by applicable anti-money laundering legislation;
• Support Communication Logs: Retained for three (3) years for dispute resolution and service quality improvement purposes;
• Technical Data (Access Logs): Retained for 90 days for security purposes and technical troubleshooting.

Once the retention period has ended and there is no legal obligation to retain the data further, rm100k will delete or anonymise the relevant personal data in a secure and irreversible manner.

9 Cookies & Tracking Technologies

The rm100k platform uses cookies and similar tracking technologies to enhance the user experience, analyse traffic and maintain platform security. We use several categories of cookies:

• Required Cookies: These cookies are essential for the core functions of the rm100k platform — including maintaining your login session, remembering your language preference, and ensuring basic security. The platform will not function properly without them and they cannot be declined;
• Performance Cookies: Collecting information on how visitors use the rm100k platform — which pages are visited most frequently, time spent on each page and any error messages encountered. This information is used in aggregate to improve the platform;
• Functional Cookies: Allows the rm100k platform to remember your preferences — such as username, language and region — to deliver a more personalised experience;
• Analytics Cookies: rm100k uses analytics tools to understand overall platform usage patterns — this data is processed anonymously and cannot be linked to any individual user.

You can control and manage cookies through your web browser settings. However, blocking all cookies may affect certain functions on the rm100k platform, such as login sessions and your personal settings.

10 Your Rights Under the PDPA

As an rm100k player and data subject under Malaysia's PDPA, you have the following rights in relation to your personal data:

To exercise any of the rights above, please contact the rm100k team by emailing support@rm100k.click with the subject line "Personal Data Rights Request" or via live chat within the platform. rm100k will process your request within 30 working days and inform you of the action taken.

11 Child Data Protection

Rm100k is a betting platform strictly restricted to individuals aged 21 and above. We do not knowingly or intentionally collect personal data from individuals under the age of 21.

Rm100k's registration process requires age verification and identity verification through KYC procedures. Should rm100k discover that personal data has been collected from an individual who does not meet the minimum age requirement, we will promptly take the following steps:

• Closing the relevant account immediately;
• Delete all personal data associated with that individual;
• Returning any available funds in the account to the rightful owner via an appropriate method.

If you believe your child or a minor you know may have registered an account on rm100k, please contact us immediately at support@rm100k.click and we will handle the matter promptly and in strict confidence.

12 Changes to This Privacy Policy

Rm100k reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements to how we protect your data. The date of the most recent update is always displayed at the top of this document.

For material changes — that is, changes that significantly affect how we use your data — rm100k will provide advance notice through:

• In-platform notifications on your next login to rm100k;
• Email to the email address registered to your account;
• A clear notice on the rm100k website homepage.

Continued use of the rm100k platform after any changes take effect will be considered acceptance of the amended policy. If you do not agree with the changes, you have the right to close your account and withdraw all funds before they take effect.

13 Contact Us About Privacy

For any questions, concerns or requests relating to this Privacy Policy or how rm100k handles your personal data, please reach us through the following channels:

• Email: support@rm100k.click (for privacy matters, please use the subject line "Data Privacy Enquiry")
• Live Chat: Available 24/7 within the rm100k platform — response within two minutes
• WhatsApp: Number available after logging in to your rm100k account

Rm100k will respond to privacy-related enquiries within 14 business days. For more complex requests such as data access or deletion applications, the response may take up to 30 business days, and we will keep you updated on the progress of your request within that period.