Official Documents Updated: January 2026

Rm1 Privacy Policy — Personal Data Protection for Malaysian Members

This Privacy Policy explains how rm1 collects, stores, uses, and protects your personal data as a member of our platform. Your trust matters to us — and this policy is written in plain language so you fully understand your rights.

256-bit SSL Bahasa Malaysia Guaranteed User Rights Updated 2026
Privacy Commitment

Rm1's Six Data Protection Principles

The rm1 Privacy Policy is built on these six core principles — not merely a legal document, but our genuine promise to every member.

Fully Protected Data

All personal data and financial transactions for rm1 members are protected with bank-grade 256-bit SSL encryption. No one — including rm1's internal staff — can access your account password in its original form.

No Data Sales

Rm1 does not sell, lend, or rent members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not a business asset of ours.

Full Transparency

We tell you exactly what data is collected, what it is used for, and how long it is retained. There is no hidden data collection or undisclosed purposes within this policy.

User Rights Respected

Every rm1 member has the right to access, correct, or request deletion of their personal data at any time. Your request will be processed within the stipulated timeframe, no questions asked.

Minimum Required Data

Rm1 only collects data that is strictly necessary to operate — phone numbers for OTP, payment details for transactions, and usage data for platform improvements. We do not collect excessive data.

Immediate Amendment Notice

If any material changes are made to this Privacy Policy, rm1 will notify members via their registered phone number before the changes take effect. You will never miss an important update.

Important Note: This Privacy Policy applies to all users who register, log in, or use any service on the rm1 platform at rm1.onl. By using the rm1 platform, you agree to the collection and use of data as described in this document. This policy should be read together with Terms & Conditions rm1.

1. Personal Data Collected by rm1

Rm1 collects your personal data through several means — directly when you interact with the platform, and automatically when you use our services. Here are the categories of data we collect:

Data Category Example Information How It Is Collected
Identity Information Full name, identity card number (MyKad), date of birth Provided by you during KYC
Contact Information Malaysian phone number, email address Provided during registration
Financial Information Deposit & withdrawal records, payment methods used (Touch 'n Go, DuitNow, FPX, etc.) Generated through platform transactions
Usage Data Game records, betting history, login times, games accessed Auto-generated during use
Device & Technical Data IP address, device type, operating system, web browser, screen resolution Collected automatically by the system
Communication Data Live Chat support session content, emails, and reports submitted to rm1 Provided by you through support channels

Rm1 does not collect sensitive data such as medical information, sexual orientation, or biometric data. For the KYC (Know Your Customer) process, rm1 may request a copy of your MyKad or bank statement — this is an industry-standard requirement for identity verification and anti-money laundering purposes, and all documents received are handled under strict security controls.

Regarding children's data: rm1 does not knowingly collect data from individuals under the age of 21. Should we discover that such data has been collected without our knowledge, it will be deleted immediately and the relevant account will be closed.

2. How rm1 Uses Your Data

Every piece of data rm1 collects is used for a specific and legitimate purpose. rm1 will not process your data for any purpose beyond what is stated below without prior notice and — where required — your consent:

  • Account management: Creating and maintaining your rm1 account, verifying your identity, and handling registration and account recovery.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as managing withdrawals to your Malaysian bank account or e-wallet.
  • Service delivery: Giving you seamless access to all rm1 games — Sports Betting on the Malaysia Super League and EPL, Live Casino, Roulette, Poker, E-Sports, and Lottery.
  • Security & fraud prevention: Detecting suspicious activity, preventing unauthorised access, and protecting the rm1 platform from misuse.
  • Legal compliance: Meeting all applicable AML (Anti-Money Laundering) and KYC requirements, and complying with any lawful requests from regulatory authorities.
  • Customer support: Resolving queries, complaints, and technical issues you report to the rm1 support team.
  • Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to develop new features and improve the rm1 user experience.
  • Service communication: Sending important account-related notifications such as deposit confirmations, responsible gambling limit reminders, and material policy updates.

For marketing and promotional purposes (such as informing you about new bonuses or sports promotions on rm1), rm1 will use your phone number to send messages only if you have given consent during registration or at a later time. You may withdraw this consent at any time through your account settings.

3. Sharing Data With Third Parties

Rm1 does not sell members' personal data to anyone. This is a non-negotiable commitment. However, there are limited situations where rm1 needs to share data with certain parties in order to operate properly:

  • Payment providers: Required transaction information is shared with Malaysian e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX payment processors to complete your deposits and withdrawals. This sharing is kept to a minimum and limited strictly to what is necessary to process the transaction.
  • Technology infrastructure providers: rm1 uses cloud computing services and technical infrastructure from trusted third-party providers. These providers are bound by strict confidentiality agreements and may only access data for technical purposes.
  • Competent legal authorities: rm1 will disclose members' personal data to Malaysian government authorities or law enforcement bodies if required by law, a valid court order, or to assist in criminal investigations such as money laundering or fraud.
  • Professional advisers: In very limited circumstances, data may be shared with legal counsel or auditors in the context of legal disputes or compliance requirements. All such parties are bound by professional confidentiality obligations.

Rm1 does not share data with marketing companies, data brokers, or third-party advertising platforms. If you receive unsolicited marketing communications claiming to be from rm1, please contact our support team immediately as this may be a phishing attempt.

rm1 will never ask for your password or account details via email or text message. If you receive such a communication claiming to be from rm1, do not follow the instructions and report it to support@rm1.onl immediately.

4. rm1 Data Security Measures

Rm1 continuously invests in security infrastructure to ensure your personal and financial data is protected to the highest standard. Here are the key security layers we have in place:

  • 256-bit SSL encryption: All communications between your browser or app and rm1's servers are encrypted using TLS 1.3 with 256-bit keys — the same standard used by Malaysia's leading banking institutions.
  • Secure password storage: Your rm1 account password is never stored in plain text. Our system uses a one-way hashing algorithm (bcrypt), ensuring your password cannot be decrypted — not even by rm1 staff.
  • Two-factor authentication (2FA): rm1 offers 2FA via OTP for all accounts. We encourage all members to enable this feature for an added layer of account security.
  • 24/7 threat monitoring: rm1's security systems continuously monitor platform activity to proactively detect intrusion attempts, unusual account behaviour, and other cybersecurity threats.
  • Internal access controls: Only rm1 staff who require access for their specific job responsibilities are permitted to access member data — based on the principle of least privilege.
  • Regular security audits: rm1 conducts regular security assessments and penetration testing by independent third parties to identify and address vulnerabilities before they can be exploited.

While rm1 takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure. You also play an important role in keeping your account safe — never share your password, use secure Wi-Fi networks, and ensure your device has the latest security updates installed.

Data breach response procedure: If rm1 detects a data breach that may affect members' personal information, we are committed to notifying affected members within a reasonable timeframe and taking remedial action promptly. Members who suspect any unauthorised activity on their account should contact support@rm1.onl immediately.

5. Cookies, Tracking & Similar Technologies

Rm1 uses cookies and similar tracking technologies to keep the platform running smoothly and to improve your experience. The following are the types of cookies we use:

  • Essential cookies: These are cookies required for the rm1 platform to function — including login session cookies that keep you signed in while browsing the platform. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: These cookies help us understand how members use the rm1 platform — which pages are visited most, how long sessions last, and where technical errors occur. This data is collected in aggregate and does not identify individuals.
  • Functional cookies: These cookies store your personal preferences such as language settings, display theme, and your last accessed game — so you do not have to reconfigure them each time you log in.

Rm1 does not use third-party cookies for advertising or cross-site tracking. All cookies used are strictly for the operation and improvement of the rm1 platform.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the login functionality and your experience on the rm1 platform. More information on managing cookies is available in your browser's help section.

Rm1 also uses your IP address for security purposes — to detect suspicious login attempts from new locations and to comply with any applicable geo-restrictions. Your IP address is not used to personally identify you in platform analytics.

6. Your Rights as an rm1 Member

As an rm1 member and as an individual whose personal data we process, you have the following rights, which you may exercise at any time:

Right of Access

You have the right to request a copy of all personal data that rm1 holds about you. rm1 will provide this copy within 14 business days from the date the request is received.

Right to Rectification

If you find that any personal data rm1 holds about you is inaccurate or out of date, you have the right to request immediate correction through your account settings or rm1 support.

Right to Erasure

You may request the deletion of your personal data when your rm1 account is closed. This request is subject to data retention obligations required under applicable law.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes. You can opt out of promotional communications at any time through your rm1 account settings.

Right to Restrict Processing

Under certain circumstances, you may request that rm1 restrict the processing of your data — for example, while you are verifying its accuracy or disputing its processing.

Data Portability Right

You may request your personal data in a machine-readable format (such as CSV or JSON) so you can transfer or keep your own records if needed.

To exercise any of the rights above, you may: (1) log in to your rm1 account settings and navigate to the "Privacy & Data" section, or (2) contact the rm1 support team by email at support@rm1.onl with the subject line "Privacy Rights Request". rm1 will acknowledge your request within 3 business days and resolve it within 14 business days.

7. Data Retention & Deletion

Rm1 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. The following are the general data retention guidelines we follow:

  • Active account data: For as long as your rm1 account remains active — this data is necessary to provide services to you.
  • Financial transaction records: Retained for a minimum of 7 years after the transaction — this is a standard requirement for financial law compliance and AML regulations in Malaysia.
  • Support communication records: Retained for 2 years after the last interaction for reference and dispute resolution purposes.
  • Technical log data: Access logs and technical data are retained for a maximum of 12 months for security monitoring and debugging purposes.
  • After account closure: When your rm1 account is voluntarily closed, personal data that is no longer required for legal obligations or unresolved disputes will be deleted or anonymised within 90 days.

Data that has exceeded its defined retention period will be securely deleted or anonymised using procedures that ensure it cannot be recovered. Anonymised records (where names and individual identifiers have been removed) may be retained longer for statistical analysis and rm1's internal reporting purposes.

8. Contact rm1 for Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rm1 handles your personal data, please reach out to us through the following channels:

Privacy Email
support@rm1.onl
Live Chat
Available 24/7 in BM
Response Time
Within 3 working days
Official Website
rm1.onl

When contacting us regarding data privacy, please clearly state: (1) the type of request you are making (access, correction, deletion, objection, etc.), (2) the phone number registered to your rm1 account for verification purposes, and (3) specific details about the data or issue you are concerned about. rm1 reserves the right to verify your identity before processing any requests relating to personal data.

Privacy Policy Amendments: rm1 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, laws, or business requirements. The latest version of the Privacy Policy is always available on this page. For material changes, members will be notified via their registered phone number within a reasonable period before the changes take effect. This policy was last updated in January 2026.

Join rm1 Today

Your data is safe with us. Over 200,000 Malaysian members have put their trust in rm1.

Register Free Log In
rm1's Security Commitment
256-bit SSL
Bank-grade encryption for all data.
No Data Sales
Your data is never sold to anyone.
2FA Available
An additional security layer for your account.
Independent Audit
Security reviewed on a regular basis.
Guaranteed User Rights
Access, correct, or delete your data.
FAQ

Frequently Asked Questions About rm1 Data Privacy

rm1 stores the information you provide during registration (phone number, KYC information where applicable), financial transaction records (deposits via Touch 'n Go, DuitNow, GrabPay, FPX, and withdrawals), platform usage records (games accessed, betting history), and support communication records. You may request a full copy of your data at any time by contacting support@rm1.onl.

rm1 does not sell or share your personal data for third-party marketing purposes. Data sharing only occurs in three limited situations: (1) with Malaysian payment providers (Touch 'n Go, GrabPay, etc.) to process your transactions, (2) with technical infrastructure providers bound by strict confidentiality agreements, and (3) with lawful authorities when required by law. In all cases, sharing is kept to the minimum necessary for the stated purpose.

Yes. When you close your rm1 account, you may request deletion of your personal data. rm1 will delete or anonymise data that is not required for legal compliance within 90 days. Please note that financial transaction records must be retained for a minimum of 7 years for AML legal compliance — this is a statutory requirement that cannot be waived even upon individual request. To submit a deletion request, contact support@rm1.onl with the subject line "Data Deletion Request".

rm1 does not store your full bank card details or e-wallet passwords. All financial transactions are processed through payment providers with their own security measures — rm1 only receives transaction confirmations, not your full financial information. For FPX deposits, you are redirected directly to your bank's secure login page — rm1 never sees your online banking credentials. All communications between you and rm1 are encrypted with 256-bit SSL.

rm1 will never ask for your password, PIN, or sensitive information via email or text message. If you receive any communication claiming to be from rm1 that requests such information, it is a phishing attempt. Do not click any links, do not provide any information, and report it to us at support@rm1.onl by forwarding the message or email. The rm1 security team will investigate and take appropriate action.

Yes. You can opt out of marketing and promotional communications from rm1 at any time in two ways: (1) Log in to your rm1 account, go to profile settings, and look for the "Notifications & Communications" option — uncheck the boxes for promotional messages, or (2) Contact rm1 support via Live Chat or email and request to be removed from marketing communications. Please note that opting out of promotions does not prevent rm1 from sending important account-related communications such as transaction confirmations or security notices.

Your Data Is Safe with rm1

Valid Licence
256-bit SSL
No Data Sales
24/7 Support
User Rights
Regular Audits
YOUR PRIVACY IS FULLY PROTECTED

Trust rm1 — The Malaysian Platform That Genuinely Cares About You

Over 200,000 Malaysian members have trusted rm1 with their data. Register for free today, deposit from RM1 only, and enjoy a platform that is secure, fair, and transparent.

Bahasa Melayu