Privacy Policy
rm777 is committed to protecting the privacy and security of every player on our platform. This Privacy Policy explains exactly what personal data we collect, how we use it, who we share it with, and what rights you hold as a data subject.
How We Approach Your Data
We collect only what is genuinely necessary to operate your account, process MYR transactions, and meet our compliance obligations. No superfluous data collection.
All personal data stored by rm777 is encrypted at rest using industry-standard AES-256 encryption. All data in transit is protected by TLS 1.3 protocols.
rm777 does not sell, rent, or trade your personal data to any third-party marketing companies. Your information is used only as described in this Privacy Policy.
You have clear rights over your personal data — including access, correction, portability, and deletion. We have straightforward processes to honour each of these rights.
We keep your data only for as long as necessary for its stated purpose or as required by law. Account data is deleted or anonymised within a defined period after closure.
This policy is written in clear, accessible English so Malaysian players can fully understand how their data is handled without needing to parse legal jargon.
This Privacy Policy (hereinafter "Policy") is published by rm777 (hereinafter "rm777", "the Company", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at rm777.casa. This Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from individuals (hereinafter "Player", "User", or "you") who access or register on the rm777 Platform.
rm777 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise that our Malaysian players — whether in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam — trust us with sensitive information, and we take that responsibility seriously.
By registering an account, accessing the Platform, or submitting any personal data to rm777, you acknowledge that you have read, understood, and consent to the practices described in this Policy. If you do not agree to this Policy, you should not use the rm777 Platform.
Scope: This Policy applies to all personal data processed by rm777 in connection with the Platform, including data collected via the website, mobile platform, live chat, email correspondence, payment processing, and KYC verification procedures.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, transmission, disclosure, erasure, or destruction. |
| "Data Subject" | The natural person to whom Personal Data relates — in this context, you as a registered or prospective Player of rm777. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the Processing of their Personal Data. |
| "Third Party" | Any natural or legal person, public authority, agency, or body other than the Data Subject, rm777, and persons who, under rm777's direct authority, are authorised to process Personal Data. |
| "KYC Data" | Identity and address verification documents submitted by Players in fulfilment of Know Your Customer requirements, including copies of the Malaysian MyKad, Driver's Licence, Passport, and proof of address documents. |
| "Platform" | The rm777 website, mobile interface, and all associated services accessible at rm777.casa. |
rm777 collects the following categories of Personal Data from Players and prospective Players:
When you create an rm777 account, we collect: full legal name, date of birth, gender, residential address (including city and postcode within Malaysia), email address, and mobile phone number. This information is required to create and maintain your account.
To comply with anti-money laundering obligations and to verify your identity and age (minimum 21 years), we collect copies of government-issued identity documents such as your Malaysian MyKad (NRIC), Driver's Licence, or Passport, together with proof of address documentation. This data is processed solely for verification and regulatory compliance purposes.
We collect transactional data associated with deposits and withdrawals, including: payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect), transaction amounts in MYR, transaction timestamps, and partial payment identifiers as provided by the payment processor. rm777 does not store complete debit or credit card numbers on its servers.
We record your betting and gaming history, including games played, bet amounts, wagering outcomes, session durations, and bonus usage. This data is used for account management, responsible gambling monitoring, dispute resolution, and fraud prevention.
We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and pages visited. This data is used to maintain Platform security and improve user experience.
When you contact our support team via live chat, email, or any other channel, we retain records of those communications — including the content of messages, timestamps, and resolution notes — for quality assurance, training, and dispute resolution purposes.
rm777 collects Personal Data through the following channels:
- Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, participate in a promotion, or otherwise interact with the Platform.
- Automated collection: Through cookies, web beacons, pixel tags, and server logs that capture technical and behavioural data as you browse and use the Platform. See Section 11 for full details.
- Payment service providers: When you make a deposit via Touch 'n Go eWallet, DuitNow, FPX, or any other accepted MYR payment method, the relevant payment provider may share transaction confirmation data with rm777.
- Identity verification services: In connection with KYC procedures, rm777 may use third-party identity verification providers who process your submitted documents and return a verification result.
- Fraud prevention and analytics services: Third-party fraud detection tools may provide risk scores or device fingerprint data in connection with account activity.
rm777 processes your Personal Data only for specific, identified purposes. The table below sets out the primary purposes for which we process your data:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your rm777 Player account, including login authentication and account preference management. |
| Payment Processing | Processing MYR deposits via Touch 'n Go, DuitNow, FPX, and other accepted methods; processing withdrawal requests to your verified payment account. |
| KYC & Identity Verification | Verifying your identity and age (21+) in compliance with anti-money laundering obligations and our Terms & Conditions. |
| Fraud & Security | Detecting, preventing, and investigating fraud, money laundering, collusion, bonus abuse, and other prohibited conduct. |
| Responsible Gambling | Monitoring gaming patterns to identify signs of problem gambling and to apply deposit limits, session limits, or self-exclusion at a Player's request or where required. |
| Legal Compliance | Meeting our obligations under applicable laws and regulations, including retaining transaction records and KYC data for legally required periods. |
| Customer Support | Responding to your inquiries, complaints, and support requests via live chat and email. |
| Platform Improvement | Analysing aggregated and anonymised usage data to improve the Platform's performance, design, and game offering. |
| Marketing Communications | Sending promotional emails and in-Platform notifications about bonuses and offers, subject to your marketing preferences (see Section 14). |
rm777 processes your Personal Data on the following legal bases:
- Contractual necessity: Processing required to perform our obligations under the account agreement between you and rm777, including account creation, payment processing, and dispute resolution.
- Legal obligation: Processing required to comply with anti-money laundering regulations, responsible gambling obligations, and other applicable legal requirements, including KYC verification and transaction record-keeping.
- Legitimate interests: Processing carried out in pursuit of rm777's legitimate business interests, including fraud prevention, Platform security, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms.
- Consent: Where processing is based on your consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
rm777 does not sell, rent, or otherwise trade your Personal Data for commercial purposes. We may share your data with the following categories of recipients only where necessary and on a strictly need-to-know basis:
Transaction data is shared with relevant payment processors — including providers facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect transactions — solely to the extent required to process your deposit or withdrawal in MYR.
For KYC purposes, copies of your identity and address documents may be transmitted to third-party identity verification service providers who verify the authenticity of the documents and confirm your identity details. These providers are contractually bound to process your data only for this purpose.
Technical data including IP addresses, device identifiers, and behavioural patterns may be shared with fraud detection platforms to identify and prevent unauthorised access, account takeover, money laundering, and bonus abuse.
Where required by applicable law, court order, or regulatory directive, rm777 may disclose your Personal Data to competent authorities. rm777 will, where legally permitted, notify you of such a disclosure request.
Lawyers, accountants, auditors, and other professional advisers engaged by rm777 may access Personal Data to the extent necessary to provide their professional services, subject to strict confidentiality obligations.
Some of the third-party service providers used by rm777 — including cloud infrastructure, KYC verification, and fraud detection platforms — may be located outside Malaysia. Where Personal Data is transferred internationally, rm777 ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure that your data receives a standard of protection equivalent to that applied within Malaysia.
By using the rm777 Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia where data protection laws may differ from those applicable in Malaysia. rm777 takes all reasonably practicable steps to ensure such transfers are conducted securely and in accordance with this Policy.
rm777 retains your Personal Data for the following periods, or for longer where required by law:
- Account data and gaming history: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping requirements.
- KYC documents: Retained for a minimum of five (5) years from the date of submission or the date of last transaction, whichever is later.
- Financial transaction records: Retained for a minimum of seven (7) years in compliance with financial record-keeping obligations.
- Customer support communications: Retained for three (3) years from the date of the last communication, unless longer retention is required for an unresolved dispute or legal proceeding.
- Marketing preferences and consent records: Retained for the duration of the marketing relationship plus two (2) years to demonstrate compliance.
Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to you.
rm777 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit AES encryption for Personal Data stored at rest on rm777 servers;
- TLS 1.3 encryption for all data transmitted between your device and the rm777 Platform;
- Strict access controls limiting employee access to Personal Data on a need-to-know basis, with access logs maintained and regularly reviewed;
- Multi-factor authentication requirements for administrative access to systems containing Personal Data;
- Regular penetration testing and security vulnerability assessments conducted by qualified third-party security professionals;
- Intrusion detection and real-time threat monitoring systems operating on a 24/7 basis.
Important: While rm777 employs robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your rm777 account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.
rm777 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by the Platform. They allow us to recognise your browser, maintain your session, and remember your preferences.
Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a session. These cannot be disabled without impairing Platform functionality.
Performance & Analytics Cookies: Used to collect anonymised data about how Players use the Platform — pages visited, time spent, and error reports — to improve Platform performance.
Functional Cookies: Used to remember your preferences such as language settings, display options, and responsible gambling tool configurations.
Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.
You may control non-essential cookies through your browser settings or the cookie preference centre available on the Platform. Please note that disabling essential cookies will prevent you from logging in and using the Platform. Disabling performance cookies will not affect your ability to play but will reduce our ability to improve the Platform experience.
As a Data Subject, you hold the following rights in respect of your Personal Data processed by rm777. You may exercise any of these rights by contacting our support team at [email protected]. rm777 will respond to all verified requests within 30 days.
You have the right to request a copy of the Personal Data rm777 holds about you, together with information about how it is used and with whom it has been shared.
If any Personal Data rm777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly through your Account settings.
Subject to our legal retention obligations — including anti-money laundering requirements that mandate retention of transaction records — you may request that rm777 delete your Personal Data. Erasure requests will be honoured to the maximum extent permitted by law.
You may request a copy of Personal Data you have provided to rm777 in a structured, commonly used, machine-readable format (e.g., CSV) where the processing is based on your consent or performed by automated means.
In certain circumstances — such as where you contest the accuracy of your data or have objected to processing — you may request that rm777 restrict the processing of your Personal Data while the matter is resolved.
You have the right to object to processing of your Personal Data where that processing is based on rm777's legitimate interests. You may also object to the processing of your Personal Data for direct marketing purposes at any time, free of charge.
Where processing is based on your consent — including marketing communications — you may withdraw that consent at any time by updating your preferences in Account settings or contacting our support team. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
The rm777 Platform is strictly intended for use by individuals aged 21 years and above only. rm777 does not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to belong to persons under the minimum age will be immediately suspended and all associated data retained only for the minimum period required to demonstrate our compliance, after which it will be securely deleted.
If you believe a minor has registered an account with rm777, please notify us immediately at [email protected]. We will investigate and, if confirmed, close the account and take all appropriate steps to ensure the individual's data is handled in accordance with our obligations.
With your consent, rm777 may send you promotional communications about bonuses, new games, sports betting promotions, and other offers relevant to your use of the Platform. These communications may be delivered by email, SMS, or in-Platform notifications.
You may opt out of marketing communications at any time by:
- Clicking the "Unsubscribe" link in any marketing email you receive from rm777;
- Updating your communication preferences in the Notifications section of your Account settings; or
- Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".
Please note that opting out of marketing communications does not affect the sending of transactional or account-related communications, such as deposit confirmations, withdrawal notifications, and security alerts, which are essential to the operation of your account.
The rm777 Platform integrates with third-party services including game providers, payment processors, and analytics tools. While rm777 selects these providers with care and requires contractual data protection commitments from each of them, rm777 is not responsible for the privacy practices of third-party providers.
All third-party data processors engaged by rm777 are required to implement appropriate technical and organisational security measures and to process Personal Data only in accordance with rm777's documented instructions and for the specific purposes for which they are engaged.
rm777 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The date of the most recent revision is shown at the top of this page. Where a material change is made, rm777 will endeavour to provide advance notice to registered Players via email or a prominent notice on the Platform.
Your continued use of the rm777 Platform following the publication of a revised Privacy Policy constitutes your acceptance of those revisions. We encourage you to review this page periodically to remain informed about how we protect your data.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how rm777 handles your Personal Data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.
For the purpose of exercising your data rights, please include your full name, registered email address, and a clear description of your request. We may ask you to verify your identity before processing any access, erasure, or portability request.
Other Important Documents
The full legal agreement governing your use of the rm777 Platform, including account rules, bonus terms, payment conditions, and prohibited conduct.
Our commitment to player welfare, including self-exclusion tools, deposit limits, session reminders, and access to professional support resources in Malaysia.
Quick answers to the most common questions about accounts, payments, bonuses, and platform features — written specifically for Malaysian players.
Learn about the rm777 story, our founding team, our platform values, and why thousands of Malaysian players choose us for online casino and sports betting.
Your Data Is Safe With Us — Now Let's Play
With your privacy protected by robust security measures and a clear, transparent policy, explore everything rm777 has to offer — from live casino and slots to EPL & Liga Super Malaysia sports betting. For players aged 21 and above only.
For players aged 21 and above only. Please gamble responsibly.