This Privacy Policy was last updated on 1 January 2026. By continuing to use the platform rm30, you confirm that you have read and agreed to the way we manage your personal data as described in this document.
1Introduction & Scope of the rm30 Privacy Policy
This Privacy Policy is published by rm30 and applies to all users who browse, register, or use the rm30.my platform and any related services. We at rm30 fully understands how important privacy is to every Malaysian user, and we take this responsibility extremely seriously.
The primary purpose of this Privacy Policy is to clearly and transparently explain what types of personal data we collect when you use the platform rm30, why that data is needed, how it is used and protected, and the rights you hold over your personal data. We believe that transparency in data management is the foundation of a healthy, trust-based relationship between rm30 and all our members in Malaysia.
This Privacy Policy should be read in conjunction with rm30 Terms & Conditions and other policies published on this platform. Should any conflict arise between this Privacy Policy and any other document, this Privacy Policy shall take precedence as the primary reference for all matters relating to the processing of your personal data at rm30.
Scope of Application
This Privacy Policy applies to all users of the rm30 platform in Malaysia — including unregistered visitors, active registered members, and former members whose accounts have been closed. Data collected during any interaction with rm30 is protected under this policy.
2Types of Personal Data We Collect
rm30 collects your personal data from various sources whenever you interact with our platform. The data collected falls into several main categories as follows:
Data You Provide Directly
- Registration Information: Full name as per your Malaysian Identity Card, an active mobile number registered in your name, and a valid email address.
- Identity Verification (KYC) Information: A copy of your Malaysian Identity Card or passport, along with any other supporting documents that rm30 may require for compliance purposes.
- Financial Information: Your e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or bank account information (for FPX transactions via Maybank2u, CIMB Clicks, and other Malaysian banks) used for deposits and withdrawals.
- Communications: Any messages, emails, or conversation records you send to the rm30 customer support team.
Automatically Collected Data
- Technical Data: Your device's IP address, web browser type and version, operating system, screen resolution, and other technical device information.
- Usage Data: A complete record of your gaming activity on rm30, including games played, session duration, wagering amounts, game outcomes, and overall activity patterns.
- Transaction Data: A complete history of all deposits, withdrawals, and bets made through your rm30 account.
- Location Data: General location information based on your IP address for compliance and security purposes — rm30 does not collect precise GPS location data without your explicit consent.
Data Minimisation Principle
Rm30 only collects data that is strictly necessary to provide the services you use. We do not collect excessive or irrelevant data beyond what is required to operate the platform. Every category of data we collect has a clear and legitimate purpose.
3How rm30 Uses Your Personal Data
rm30 uses collected personal data solely for legitimate and responsible purposes. The primary purposes for which your data is used are as follows:
- Account Management: To create, verify, and manage your rm30 account — including the login process, identity verification, and account recovery when required.
- Service Provision: To enable you to access and play all games available on rm30, process deposits and withdrawals using Malaysian e-wallets and FPX, and ensure a smooth and satisfying gaming experience.
- Security & Compliance: To detect and prevent fraud, money laundering, unauthorised access, and any activity that violates applicable laws or rm30's Terms & Conditions. Your data is also used to fulfil mandatory KYC and AML (Anti-Money Laundering) compliance obligations.
- Customer Support: To enable the rm30 support team to identify your account, understand the context of your enquiry, and provide accurate and effective assistance in Bahasa Melayu.
- Service Communications: To send you important notifications regarding your account, policy updates, security information, and rm30-related promotions that you have consented to receive.
- Platform Improvement: Anonymised usage data is used to analyse the performance of the rm30 platform, identify technical issues, and plan improvements that will enhance the gaming experience for all our Malaysian members.
rm30 will never use your personal data for any purpose not stated above without first obtaining your consent. We never use your data to profile users for manipulative or unethical exploitation.
4Disclosure of Data to Third Parties
rm30 takes a highly cautious and restricted approach to disclosing members' personal data to third parties. Our policy is not to share your data with any external party except in the following limited circumstances:
- Payment Service Providers: When processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, only the minimum transaction data required is shared with the relevant payment gateway provider solely to facilitate the secure completion of the transaction. These providers are bound by strict confidentiality agreements with rm30.
- Game Software Providers: Game developers who supply titles such as video slots and live casino games to rm30 may require minimal technical data (not personally identifiable information) for game operation and RTP auditing purposes.
- Regulatory Authorities: rm30 may disclose personal data to the relevant Malaysian authorities when required by law, court order, or as part of cooperation in a legitimate official investigation. In such situations, rm30 will only disclose the minimum data necessary and will notify you of the disclosure to the extent permitted by law.
- Merger or Acquisition Parties: If rm30 is involved in any merger, acquisition, or sale of assets, user data may be transferred to the new entity. In such circumstances, you will be notified in advance and given choices regarding your data.
rm30 NEVER: sell, rent, or trade your personal data to any marketing companies, data brokers, or third parties that have no legitimate operational need to access such data. This is a non-negotiable commitment.
5Data Security at rm30
rm30 continuously invests in robust security infrastructure to protect the personal data of all our Malaysian members. The security measures we implement encompass multiple layers of protection:
rm30 Security Protection Standards
Data Encryption in Transit (256-bit SSL)100%
Encryption of Stored Data100%
Role-Based Access Control (RBAC)100%
Real-Time Threat Monitoring24/7
Regular Security AuditsEvery Quarter
- End-to-End Encryption: All communication between your browser and rm30's servers is protected by 256-bit TLS/SSL protocol — the same standard used by Malaysia's leading banks such as Maybank and CIMB to secure their customers' transactions.
- Internal Access Controls: Only rm30 staff with a legitimate business need are permitted to access user data, and all such access is strictly logged and monitored.
- Two-Factor Authentication (2FA): rm30 provides and actively encourages the use of two-factor authentication for all member accounts as an effective additional layer of security to prevent unauthorised access.
- Periodic Data Backups: User data is regularly backed up to a secure, separate server location to ensure data availability in the event of any unexpected incident.
- Penetration Testing: rm30 conducts regular security testing by independent security experts to identify and address any system vulnerabilities before they can be exploited.
Although rm30 takes all reasonable steps to protect your data, no security system can guarantee 100% absolute protection against every possible threat. We therefore ask for your cooperation in playing a role in securing your own account — in particular by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly.
6Cookies & Tracking Technologies at rm30
Platform rm30 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies used are as follows:
- Essential Cookies: These cookies are essential for the basic operation of the rm30 platform — including maintaining your login session, remembering your language preference, and ensuring security features function correctly. This type of cookie cannot be disabled without affecting the platform's core functionality.
- Performance Cookies: Used to collect aggregated and anonymised information about how users interact with the rm30 platform — including the most frequently visited pages and time spent in each section. This data helps us improve the platform's design and performance.
- Functional Cookies: Allows rm30 to remember the preferences you have set — such as your favourite game type, last betting denomination, and display settings — so you don't have to reconfigure them every time you log in.
- Analytics Cookies: rm30 uses anonymised analytics data to understand overall platform usage patterns, helping us make smarter decisions about feature improvements and the user experience.
You may manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality or your gaming experience on the platform rm30. Please refer to your web browser's documentation for guidance on how to manage cookie settings.
7Your Personal Data Rights
As a member rm30 and as a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding your personal data that we fully respect:
Right to Data Access
You have the right to request a copy of all personal data we hold about you. rm30 will provide this information in a readable format within 14 business days of receiving a valid request.
Right to Data Rectification
If any personal data we hold is inaccurate, outdated, or incomplete, you have the right to request a correction. You may update basic information directly within your rm30 account settings.
Right to Erasure
You may request the deletion of your personal data from rm30's systems under certain circumstances — for example, when the data is no longer needed for the purpose for which it was originally collected. Such requests are subject to any applicable legal record-keeping obligations.
Right to Object to Processing
You have the right to object to the processing of your personal data for specific purposes — such as the use of your data for marketing communications. You may withdraw your marketing consent at any time through your rm30 account settings.
Right to Data Portability
In certain circumstances, you may request your personal data in a structured, machine-readable format to facilitate its transfer to another service provider should you choose to do so.
To exercise any of the rights above, please contact our support team rm30 via email at [email protected] or through the 24/7 live chat available on the platform. We will process your request promptly and respond within the stipulated timeframe.
8Data Retention & Deletion Period
rm30 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. The following is a general guide to our data retention periods:
| Active Account Information | For as long as your rm30 account remains active and for 7 years after closure |
| Financial Transaction Records | Minimum 7 years as required under Malaysian law |
| Game Records & Activity | 5 years from the date the activity occurred |
| Support Communication Logs | 3 years from the date of communication |
| Anonymised Analytics Data | Unlimited (not attributable to any individual) |
| KYC & Identity Verification Data | 7 years after the business relationship ends |
Once the relevant retention period has expired, rm30 will securely and irreversibly delete or anonymise your personal data. This deletion process is carried out in accordance with strict internal procedures to ensure that data cannot be accessed or recovered once the process is complete.
9Children's Privacy & Protection of Young Users
Platform rm30 is a service exclusively restricted to individuals who are aged 18 years and above. We do not intentionally collect, store, or process the personal data of any individual under the age of 18 under any circumstances.
Should rm30 discovers or becomes aware that personal data belonging to individuals under 18 years of age has been inadvertently collected, we will take immediate action to delete that data and close the relevant account. This is part of rm30's commitment to protecting vulnerable groups in Malaysian society, in line with our Responsible Gaming policy.
Parental & Guardian Responsibilities
Parents and guardians in Malaysia are encouraged to use parental control software and monitor their children's online activity. If you suspect your child has accessed the rm30 platform, please contact us immediately at [email protected] for prompt action.
10Amendments to the rm30 Privacy Policy
rm30 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in the technologies we use. Any material changes to how we handle your personal data will be communicated to you via:
- An email notification sent to the email address registered to your rm30 account at least 14 days before the amendment takes effect.
- A clear in-platform notice on rm30 that will be displayed when you log in to your account.
- Publication of the latest version of the Privacy Policy on this page (rm30.my/privacy-policy) with an updated effective date.
Continued use of the platform rm30 after the effective date of any amendment will be considered your acceptance of the revised Privacy Policy. If you do not agree with any changes, you may close your rm30 account and request the deletion of your data by contacting our support team.
11Contact Us About Data Privacy
If you have any questions or concerns, or wish to exercise your rights regarding personal data held by rm30, please reach out to our team through the following channels:
| Privacy & Data Email | [email protected] |
| Platform Live Chat | Available on the rm30 platform (24/7) |
| Support Language | Bahasa Melayu & English |
| Support Operating Hours | 24 hours a day, 7 days a week |
| Typical Response Time | 5–15 minutes (live chat); 24–48 hours (email) |
| Data Request Processing Time | Maximum 14 business days |
Support & Privacy Team rm30 is available to assist you in Bahasa Melayu at all times. We understand that data privacy matters can be sensitive and require careful handling — and we are here to ensure every query you raise is resolved with the utmost professionalism, empathy, and transparency that reflects rm30's core values as a trusted online casino platform for Malaysian players.
FAQ – rm30 Privacy Policy
The most frequently asked questions by Malaysian players about how rm30 manages their personal data and privacy.
No, absolutely not. rm30 has never and will never sell, rent, or trade our members' personal data to any third party for commercial or marketing purposes. This is a non-negotiable commitment and one of the core values we have upheld since rm30 first began operations. Your personal data is used solely for legitimate rm30 operational purposes as set out in this Privacy Policy. Any disclosure of data to third parties — such as payment providers or regulatory authorities — is carried out only in the strictly limited and lawful circumstances explicitly stated in Section 4 of our Privacy Policy.
rm30 uses 256-bit SSL encryption to protect all data communications during financial transactions. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u or CIMB Clicks, all transaction information is processed through encrypted, secure payment channels. rm30 does not store your full e-wallet or bank account details on our servers — only anonymised payment tokens required to process future transactions are retained. This means that even in the event of an unexpected security incident, your full financial information remains fully protected.
Yes, you have the right to request the deletion of your personal data from rm30's systems under certain circumstances. To submit this request, contact the rm30 support team by email at
[email protected] or via live chat, clearly stating your data deletion request. Please note, however, that rm30 may be required to retain certain data (such as financial transaction records) for periods prescribed by applicable Malaysian law — including a minimum 7-year financial record retention requirement. In such cases, rm30 will clearly inform you of which data cannot be deleted and the legal reasons why.
When you close your rm30 account, your personal data is not immediately deleted, as rm30 has certain legal obligations to retain records for specified periods. Financial transaction records, for example, must be kept for a minimum of 7 years in accordance with Malaysian legal requirements. Once the relevant retention period expires, your data will be securely deleted or anonymised in an irreversible manner. During the post-closure retention period, rm30 will not use your data for any active purpose, and access to that data is strictly limited to authorised personnel for legal compliance purposes only.
rm30 maintains a comprehensive security incident response procedure to address any potential data breach. In the event of a security incident affecting members' personal data, rm30 will: (1) promptly contain and investigate the incident using both internal and external security teams; (2) notify affected members via email and in-platform notices as quickly as possible and within the timeframe required by Malaysian law; (3) provide clear information on the type of data potentially affected, the associated risks, and steps you can take to protect yourself; and (4) report the incident to the relevant authorities as required by law. We are fully committed to transparency in such situations.