Privacy Policy

1. Introduction

This Privacy Policy ("Policy") issued by RM1131 ("rm1131", "the Company", "we", "us", "our") and applies to all personal data collected, processed, stored, or transmitted in connection with your use of the rm1131 website atrm1131.cam and all associated services, gaming products, payment systems, and support channels (collectively, the "Platform").

rm1131 operates as an online gaming and sports betting platform serving users across Malaysia and other permitted jurisdictions. We recognise that the personal information you entrust to us is sensitive, and we take our obligations as a data controller seriously. This Policy is written in plain English so that every user — whether based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere — can clearly understand their rights and our obligations.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement governing your relationship with rm1131.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, either directly or in combination with other data, including names, identification numbers, contact details, financial information, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, organisation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Subject" — The identified or identifiable natural person to whom Personal Data relates; in the context of this Policy, this means you, the user of the rm1131 Platform.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. rm1131 acts as the Data Controller in respect of all Personal Data collected via the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller, subject to documented instructions and contractual obligations.
• "Cookies" — Small text files placed on your device by the Platform that store information about your browsing session, preferences, and activity.
• "KYC Data" — Identity and address verification documents collected as part of the Know Your Customer verification process required by anti-money laundering regulations.

3. Data Controller

RM1131 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, rm1131 is responsible for determining the lawful basis for data collection, the purposes for which data is processed, and the measures in place to protect that data.

If you have any questions about how rm1131 handles your Personal Data, or wish to exercise any of your data subject rights as described in Section 10 of this Policy, you may contact our data protection team using the contact details provided in Section 16.

4. Data We Collect

rm1131 collects Personal Data from you through several channels and at different points of your interaction with the Platform. The categories of Personal Data we collect are as follows:

4.1 Registration & Account Data

When you register an Account on rm1131, we collect:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification —21+ only);
• Email address and mobile number;
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
• Username and encrypted password;
• Account preferences and communication settings.

4.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations, we collect:

• Copies of government-issued photo identification (Malaysian MyKad, Driver's License, or Passport);
• Proof of address documents (utility bills or bank statements dated within three months);
• Selfie photographs holding identification documents;
• Source of funds documentation where required by regulatory standards.

4.3 Financial & Transaction Data

When you make deposits or withdrawals, we process:

• Payment method details (e-wallet identifiers for Touch'n Go eWallet, Boost, GrabPay; bank account details for FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank);
• Cryptocurrency wallet addresses for BTC, ETH, USDT, and BNB transactions;
• Transaction amounts, dates, and processing statuses;
• Historical deposit and withdrawal records.

4.4 Gaming & Behavioural Data

• Game session history, wager amounts, and outcomes;
• Sports betting selections, odds accepted, and settlement results;
• Bonus and promotional activity records;
• Responsible gambling tool usage (deposit limits, session, self-exclusion records).

4.5 Technical & Device Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session timestamps and login records;
• Cookie identifiers and analytics data (see Section 9).

4.6 Communication Data

• Records of live chat, email, and WhatsApp communications with our support team;
• Feedback, complaints, and dispute correspondence;
• Marketing preferences and opt-in/opt-out records.

5. Data Processing

rm1131 processes your Personal Data for the following specific purposes:

6. Legal Basis for Processing

rm1131 relies on the following legal bases to justify the processing of your Personal Data:

• Contractual Necessity: Processing required to perform our contract with you — including account management, game delivery, and payment processing — is conducted on the basis of contractual necessity. Without this processing, rm1131 cannot provide its services to you.
• Legal Obligation: Certain processing activities, including KYC verification, anti-money laundering transaction monitoring, and age verification, are required by applicable laws and regulations. rm1131 is obligated to carry out this processing regardless of your preferences.
• Legitimate Interest: rm1131 processes limited categories of data for legitimate business purposes, including fraud prevention, platform security, and analytics. We ensure that such processing does not disproportionately affect your rights and interests.
• Consent: Where we send you marketing communications, offer personalised promotions, or deploy non-essential cookies, we do so only with your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

rm1131 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Your data is shared only in the limited circumstances described below:

7.1 Service Providers & Data Processors

We engage trusted third-party service providers who process Personal Data on our behalf under strict contractual obligations. These include payment gateway operators (processing transactions via FPX, DuitNow, e-wallets, and cryptocurrency networks), identity verification service providers (KYC processing), cloud infrastructure and hosting providers, and customer communication platforms. All such providers are bound by data processing agreements that restrict their use of your data to specified purposes only.

7.2 Regulatory & Law Enforcement Authorities

rm1131 may be required by applicable law, court order, or regulatory direction to disclose certain Personal Data to competent authorities, including anti-money laundering agencies, financial regulators, or law enforcement bodies. Such disclosures will be made only to the extent strictly required by the applicable legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rm1131's business, Personal Data held by rm1131 may be transferred to the relevant successor entity as part of that transaction, subject to equivalent privacy protections being maintained.

8. Data Retention

rm1131 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and registration data: Retained for the duration of your Account and for minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and identity verification data: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, in accordance with applicable AML regulations.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming history and behavioural data: Retained for the duration of your Account and up to three (3) years following Account closure.
• Customer support communications: Retained for two (2) years from the date of last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for audit purposes.

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised such that it can no longer be associated with you.

9. Cookies & Tracking Technologies

rm1131 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance user experience, and gather analytical data. By continuing to use the Platform, you consent to the use of cookies in accordance with this Policy.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and regional settings (e.g., Malaysian Ringgit display). These improve your experience but are not strictly essential.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform, which pages are most visited, and how users arrive at the Platform. This data is used to improve our services.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

9.2 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies, or to be notified before a cookie is stored. Please note that disabling strictly necessary cookies will impair your ability to use core features of the Platform, including account login and payment processing.

10. Your Rights as a Data Subject

As a data subject, you are entitled to exercise the following rights in respect of your Personal Data held by rm1131. To exercise any of these rights, please contact using the details in Section 16. We will respond to all verifiable requests within thirty (30) days of receipt.

Please note that certain rights may be limited where rm1131 is required to retain or process your data to comply with legal obligations, such as AML record-keeping requirements. We will notify you of any such limitation when responding to your request.

11. Data Security

rm131 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, loss, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the rm1131 Platform is protected by TLS/SSL encryption (256-bit). Look for the padlock icon in your browser's address bar when using rm1131.
• Encryption at Rest: Sensitive Personal Data, including passwords, financial details, and KYC documents, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to Personal Data within rm1131's systems is restricted on a strict need-to-know basis. All employees who have access to Personal Data are subject to confidentiality obligations.
• Two-Factor Authentication: Available and recommended for all user accounts. Users are encouraged to enable 2FA to protect their Account credentials.
• Intrusion Detection: Continuous monitoring for suspicious access patterns, unauthorised login attempts, and potential data breaches.
• Regular Security Audits: rm1131 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our systems.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you have reason to believe that your account has been compromised, please contact us immediately at [email protected].

12. Protection of Minors

The rm1131 Platform is strictly intended for persons aged21 years and above. rm1131 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in the Account registration process, and additional KYC verification may be required to confirm age.

If rm1131 becomes aware that an Account has been registered by or on behalf of an individual under the age of 21, we will immediately suspend the Account, permanently close it, and securely delete all associated Personal Data to the extent permitted by applicable law. We will report such instances to the relevant authorities where required.

If you are a parent or guardian and believe that a minor has registered an Account on rm1131, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take immediate action.

13. International Data Transfers

As an internationally operating platform, rm1131 may transfer your Personal Data to countries outside of Malaysia for the purposes described in this Policy, including to cloud infrastructure providers, KYC processing services, and payment gateway operators who may be based in different jurisdictions.

Where Personal Data is transferred to jurisdictions that may not provide the same level of data protection as Malaysia's Personal Data Protection Act 2010(PDPA), rm1131 will ensure that appropriate safeguards are in place. These safeguards may include standard contractual clauses, binding corporate rules, or other approved transfer mechanisms that ensure your data receives equivalent protection.

14. Third-Party Services

The rm1131 Platform integrates with third-party services to deliver certain features, including payment processing, game content delivery, and customer support infrastructure. These third-party services operate their own privacy policies and data practices, which are independent of rm1131's obligations under this Policy.

rm1131 has no control over how third-party service providers collect or use data that is not transmitted by rm1131 to them. We encourage users to review the privacy policies of any third-party services they interact with in connection with the Platform.

rm1131 does not embed third-party advertising networks or data brokers on the Platform. Any analytics or tracking tools deployed on the Platform are used exclusively for internal platform improvement and fraud prevention purposes.

15. Policy Changes

rm1131 reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. All updates will be published on this page with the effective date clearly indicated at the top of the Policy.

Where changes are material — meaning they significantly alter the way we process your Personal Data or affect your rights — rm1131 will notify you in advance by email to your registered address or by prominent notice on the Platform. We recommend that all users review this Policy periodically to remain informed of any changes.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should discontinue your use of the Platform and close your Account in accordance with ourTerms & Conditions.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by rm1131, please contact our Data Protection team using the following details. All data protection enquiries are handled by dedicated personnel and will receive a response within thirty (30) days.

For concerns specifically related to responsible gambling data or self-exclusion records, please refer to our Responsible Gambling Policy page.