RSM3 Privacy Policy – Protecting Your Personal Data in Malaysia

Rsm3 collects various categories of personal information from its members under certain circumstances. Below is a full explanation of the types of data rsm3 may collect and the circumstances in which they are collected:

A) Information You Provide Directly

When you register an rsm3 account, you provide information such as your full name, Malaysian phone number, email address, and chosen password. When rsm3 requires identity verification — particularly for withdrawals above a certain limit — we may request a copy of your MyKad or other valid identification document. You will also provide bank account or e-wallet details (such as your Maybank account number or Touch 'n Go eWallet account ID) when registering a deposit or withdrawal method.

B) Information Collected Automatically

When you use the rsm3 platform, our systems automatically record technical information including your device's IP address, browser type, operating system, access date and time, and pages visited within the platform. This information is used solely for security, fraud detection, and platform improvement purposes.

C) Gaming Activity Information

Rsm3 maintains a complete record of your gaming activity, including betting history, wins and losses, games played (from Dragon Fishing to Hi Lo Live), and general usage patterns. These records are necessary to ensure fair play, resolve any disputes, and comply with the audit and reporting requirements set by the relevant regulatory bodies.

Types of Data Collected by RSM3:

Rsm3 uses the personal data it collects for legitimate and transparent purposes. The following is a full explanation of each data use purpose at rsm3:

• Service provision: To process your account registration, verify your identity, handle deposits and withdrawals, and ensure all financial transactions on the rsm3 platform run smoothly and securely.
• Security and fraud prevention: IP addresses, device information, and usage patterns are analysed by rsm3's security systems to detect and prevent fraudulent activity, multiple account ownership, money laundering, and other security threats that could harm other members.
• Legal compliance: rsm3 has certain legal obligations under Malaysian legislation that require us to retain transaction records for specified periods and to report certain activities to the relevant authorities when required.
• Service communications: rsm3 uses your email address and phone number to send you important account-related notices — such as deposit confirmations, withdrawal notifications, security alerts, and platform policy updates. These communications are part of the rsm3 service and are not promotional material.
• Platform improvements: Anonymised and aggregated usage data helps rsm3's technical team understand how players interact with the platform, identify technical issues, and make improvements that deliver a better gaming experience for all members.
• Customer support: Your interactions with the rsm3 customer support team are recorded so we can provide you with better and more consistent service every time you contact us.
• Promotions and offers (with consent): If you have given consent to receive marketing communications, rsm3 may contact you about promotions, bonuses, and exclusive offers relevant to your gaming interests. You may withdraw this consent at any time.

Rsm3 stores your personal data on servers housed in secure data centres with multiple layers of physical and digital protection. Below are the comprehensive security measures rsm3 has implemented to safeguard your information:

• Data transmission encryption: All communications between your device and rsm3's servers are protected by the latest version of TLS (Transport Layer Security) protocol with 256-bit encryption. This means that even if someone were to intercept your connection, they would be unable to read its contents.
• Data-at-rest encryption: Sensitive data such as passwords are stored in a hashed format that cannot be decrypted — even by rsm3's own internal staff. Sensitive financial information is stored in an encrypted format with strictly managed keys.
• Internal access controls: rsm3 implements a role-based access control (RBAC) system to ensure that each staff member can only access the data required to perform their specific duties. All access to sensitive data is logged and audited on a regular basis.
• 24/7 security monitoring: The rsm3 information security team continuously monitors the platform to detect any suspicious activity, intrusion attempts, or anomalies that may indicate a security threat.
• Secure password management: rsm3 recommends using a strong, unique password for your account. The rsm3 platform supports two-factor authentication (2FA) for an added layer of security.

Data Retention Period: rsm3 retains your personal data for as long as your account remains active. After an account is closed, rsm3 may keep certain records for the period required under Malaysian law — typically between 5 and 7 years for financial records. Data that is no longer required will be securely deleted or anonymised.

Rsm3 does not sell, rent, or transfer members' personal data to third parties for their marketing or commercial purposes. This is a non-negotiable policy and forms the foundation of rsm3's privacy commitment. However, there are limited circumstances under which rsm3 may share your information with certain parties:

• Payment service providers: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks, the transaction information required is shared with the respective payment provider to process your transaction. rsm3 only shares the minimum information necessary for this purpose.
• Game software providers: rsm3 uses gaming software from trusted third-party providers. These providers may receive anonymised game data for technical purposes. rsm3 ensures that all such providers comply with privacy standards equivalent to or higher than rsm3's own policy.
• Legal authorities: rsm3 will disclose members' personal information to the relevant Malaysian authorities — such as the police, anti-corruption commission, or courts — when required to do so by a valid court order, warrant, or other applicable legal obligation.
• Fraud and financial crime prevention: In cases where rsm3 suspects serious money laundering or fraudulent activity, relevant information may be shared with the appropriate financial intelligence unit as required under Malaysian law.

In all information-sharing situations described above, rsm3 ensures that recipients maintain equivalent data protection standards, and that only the minimum information necessary for a legitimate purpose is shared.

The rsm3 platform uses cookies and similar tracking technologies to enhance the user experience and maintain the security of your login session. Cookies are small text files stored on your device when you visit the rsm3 platform.

Rsm3 uses three types of cookies:

• Essential Cookies: These cookies are required for the rsm3 platform to function properly. They include session cookies that keep you logged in, security cookies that protect against CSRF attacks, and language preference cookies. Disabling these cookies will affect the core functionality of the rsm3 platform.
• Analytics cookies: rsm3 uses analytics cookies to understand how members interact with the platform — which pages are visited most often, how long users spend in each section, and how they navigate from one page to another. This information is collected in aggregate and anonymised form to help improve the platform.
• Preference cookies: These cookies store user preferences such as display settings, language selection, and game configurations to deliver a more personalised experience in future sessions.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality or user experience of the rsm3 platform. rsm3 does not use third-party cookies for advertising purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by rsm3. rsm3 is committed to helping you exercise these rights with ease and without unnecessary obstacles:

• Right to access your data: You have the right to request a copy of the personal data rsm3 holds about you. rsm3 will provide this information in a readable format within 21 business days of receiving your request.
• Right to correct your data: If you find that personal information rsm3 holds about you is inaccurate or out of date, you have the right to request a correction. rsm3 will process correction requests within 14 business days.
• Right to request deletion: Under certain circumstances permitted by law, you may request that rsm3 delete your personal data. Please note that rsm3 may be required to retain certain data for periods mandated by law, even after receiving a deletion request.
• Right to object to processing: You have the right to object to rsm3 processing your personal data for direct marketing purposes. To object to processing for other purposes, you will need to provide reasonable grounds specific to your situation.
• Right to withdraw consent: Where rsm3 processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing that took place prior to withdrawal.

To exercise any of the rights outlined above, please contact rsm3 by email at [email protected] with the subject line "Privacy Rights Request". rsm3 may need to verify your identity before processing your request for security purposes.

Rsm3 strictly does not provide services to individuals under the age of 18. The rsm3 online casino platform is exclusively for adults, and rsm3 takes this responsibility very seriously.

Rsm3 does not knowingly collect, store, or process the personal data of minors. All rsm3 account registration processes require confirmation that the user is at least 18 years of age. rsm3 reserves the right to request proof of age at any time, and any account suspected of belonging to an underage individual will be suspended immediately pending age verification.

If rsm3 finds that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. If you are a parent or guardian and discover that your child has registered an rsm3 account without your knowledge, please contact us at [email protected] right away so we can take the appropriate action.

Rsm3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, evolving legal requirements, or improvements to how we protect your information. rsm3 is committed to notifying you of any material changes before they take effect.

When material changes are made to the rsm3 Privacy Policy, we will:

• Displaying a clear notice on the rsm3 platform's main page at least 14 days before the changes take effect.
• Sending an email notice to all registered members informing them of the upcoming changes and the date they take effect.
• Updating the "Last Updated" date at the top of this document.
• In the case of highly material changes, rsm3 may seek fresh consent from members before continuing to process data under the new policy.

Your continued use of the rsm3 platform after a policy change takes effect will be considered your acceptance of the updated policy. We encourage you to revisit this Privacy Policy page periodically to stay informed about how we protect your information.

Rsm3 values every enquiry, complaint, or privacy-related request from our members. We understand that data privacy can be a source of concern, and the rsm3 team is ready to help you get clear and satisfactory answers.

For any matter relating to the rsm3 Privacy Policy – including exercising your rights as a data subject, reporting a privacy concern, or seeking further clarification on how we handle your data – please contact us via:

• Email: [email protected] (use the subject line "Privacy Policy Enquiry")
• Response Time: rsm3 is committed to responding to all privacy-related enquiries within 3 business days.

Rsm3's Malay-speaking support team is available to assist you 24 hours a day, 7 days a week. If your complaint cannot be resolved satisfactorily through rsm3's internal channels, you also have the right to escalate the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory authority.