Malaysia PDPA 2010 SSL 256-bit No Third-Party Disclosure

Privacy Policy RM25 – Personal Data Protection for Malaysian Players

At RM25, your privacy is not merely a legal obligation – it is a genuine commitment we take seriously. This Privacy Policy clearly sets out what information we collect, how it is used, who can access it and your rights as a Malaysian player in controlling your own personal data on the RM25 platform.

Last Updated: 1 January 2026
🔒

Your Data Is Protected
Fully by RM25

Data Protection Principles

Six Privacy Commitments RM25 for Malaysian Players

These are the core principles that underpin how RM25 manages and safeguards the personal information of every player

Bank-Grade Encryption

All data transmitted between your device and RM25's servers is protected with 256-bit SSL encryption – the same security standard used by leading Malaysian banking institutions such as Maybank and CIMB. Your personal and financial information remains fully secure in transit at RM25.

Strict Access Controls

Only RM25 staff who genuinely require access to your data for authorised service purposes are permitted to view that information. All access to player data is logged and regularly audited to ensure that no misuse of information occurs within the RM25 organisation.

No Data Selling

RM25 has never sold, rented, or disclosed Malaysian players' personal information to any third party for marketing or commercial purposes — and we never will. Your data belongs to you, and we treat it that way, with no hidden exceptions.

PDPA 2010 Compliance

All data handling practices at RM25 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). We uphold the data protection rights guaranteed under Malaysian law to every citizen and resident using the RM25 platform.

Control in Your Hands

RM25 gives you full control to access, correct, update, or request the deletion of your personal data at any time. You may also withdraw your consent for RM25 to use your data for any marketing communications at any time, quickly and easily.

Limited Data Retention

RM25 retains your personal data only for as long as necessary for the stated purpose, or as required under applicable Malaysian law. Data that is no longer needed is disposed of securely using certified, industry-standard deletion procedures.

Key Summary of RM25's Privacy Policy

This Privacy Policy describes RM25's data protection practices with respect to the personal information of Malaysian players using our platform. By registering for and using RM25's services, you consent to us processing your personal information in accordance with the terms set out in this document. Please read it carefully and contact us if you have any questions.

01

Introduction – Who We Are and Why Privacy Matters

RM25 is an online casino platform operating exclusively for the Malaysian market. We understand that the trust of Malaysian players is our most valuable asset, and that trust begins with responsible, transparent and secure management of personal data.

This Privacy Policy has been drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international cybersecurity industry best practices. We regard privacy as a fundamental right of every Malaysian user who entrusts RM25 with their personal information, and we uphold that trust with our fullest commitment.

Whether you are registering an RM25 account, making a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow or other Malaysian payment methods, or playing your favourite games such as slots, live casino or video poker on our platform – various types of information are collected. This Privacy Policy explains precisely what that information is and how RM25 uses it to deliver the best possible service while safeguarding your privacy interests.

02

Types of Personal Data Collected by RM25

RM25 collects personal data from Malaysian players only when it is genuinely necessary for legitimate purposes related to the provision of our services. The following are the categories of information we collect:

👤
Identity Information

Full name, MyKad or Malaysian passport number, date of birth and gender submitted during RM25 account registration for identity verification and legal compliance purposes.

📱
Contact Information

An active Malaysian phone number, email address and mailing address where applicable. This information is used for OTP verification, transaction notifications and service-related communications from RM25.

💳
Financial Information

Details relating to registered payment methods — such as your Touch 'n Go, GrabPay, Boost, or ShopeePay e-wallet account IDs — as well as records of deposit and withdrawal transactions processed through the RM25 platform.

🎮
Gaming Activity Data

Gaming history records including games played on RM25, bet amounts, game outcomes and session durations. This data is used for responsible gaming purposes and service analytics.

🌐
Technical Data

IP address, device type, operating system, browser type and other technical information collected automatically when you access the RM25 platform. This data helps us detect security threats and improve the overall user experience.

💬
Communications Data

Records of customer support conversations via live chat, WhatsApp or email with the RM25 team. These records are retained for service quality control purposes and to resolve any disputes that may arise.

03

How RM25 Uses Your Personal Data

RM25 uses Malaysian players' personal data solely for legitimate, reasonable purposes directly related to the provision of our online casino services. We do not use your data for any purpose unrelated to RM25's services.

Purpose of Use Data Used Basis
RM25 Account Management Identity, Contact Contract
Deposit & withdrawal processing Financial, Identity Contract
Identity & Age Verification Identity, Documents Legal
Responsible gaming monitoring Gaming Activity Public Interest
Account security & anti-fraud Technical, Financial Legitimate Interests
RM25 Customer Support Communications, Account Contract
RM25 promotional marketing (with consent) Relationship, Preferences Consent
Legal and regulatory compliance All categories Legal

When you sign up for promotions or notifications from RM25 – such as welcome bonus updates, weekly slots cashback offers or Malaysian festive promotions – we will use your email address or phone number for those communications. You may opt out of receiving such marketing communications at any time via the unsubscribe link in our emails or by contacting the RM25 support team.

04

Legal Basis for Data Processing at RM25

All personal data processing by RM25 rests on a solid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA 2010). We process your data based on one or more of the following grounds:

Contract Performance

Processing necessary to provide the RM25 services you have requested – including account management, processing deposit and withdrawal transactions via Malaysian payment methods, and providing access to games on our platform.

Legal Obligation Compliance

RM25 is required under Malaysian law to carry out identity verification (KYC) procedures, maintain financial transaction records and report any suspicious activity to the relevant authorities when necessary.

Your Consent

For specific purposes such as marketing communications, sending RM25 promotional notifications and personal usage analytics, RM25 will request your explicit consent and will only proceed with processing once that consent has been given.

Legitimate Interests of RM25

Processing required for RM25's legitimate interests, including fraud prevention, system security, platform improvement analytics and research to develop better gaming products for Malaysian players.

05

Sharing of Personal Data with Third Parties

RM25 does not sell, rent or disclose Malaysian players' personal information to third parties for marketing or commercial purposes under any circumstances. However, there are limited situations in which data sharing may occur with trusted parties:

  • Payment Processors: Required transaction information is shared with authorised Malaysian payment processors such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and the FPX system to process your deposits and withdrawals. All these payment processors are held to strict data security standards.
  • Technology Service Providers: RM25 engages selected third-party technology service providers such as cloud service providers, platform analytics tools and cybersecurity systems. All such providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.
  • Legal Authority: RM25 will disclose personal information to the relevant Malaysian authorities if required by law, court order or investigations relating to fraud, money laundering or other criminal activity.
  • Identity Verification: As part of the KYC (Know Your Customer) process, RM25 may engage licensed third-party identity verification services in Malaysia to verify the authenticity of identification documents submitted by players.
Key RM25 Guarantees

RM25 does not share Malaysian players' personal information with any advertising companies, marketing data aggregators, social media platforms or data brokers under any circumstances. Your privacy is a line we will never cross.

06

Data Security Measures at RM25

RM25 continuously invests in the latest security infrastructure to ensure the personal data of every Malaysian player is protected at all times. The following are the key security measures we have in place:

🔐
End-to-End Encryption

All data communications between you and RM25 are encrypted using TLS 1.3 and 256-bit SSL encryption, which cannot be broken by any current technology.

🖥️
Secure Data Centre

RM25 data is stored in high-grade data centres equipped with multi-layered physical access controls, surveillance cameras, and 24/7 intrusion detection systems.

🔍
Security Audit

RM25 conducts regular security audits by independent cybersecurity experts to identify and address any system vulnerabilities before they can be exploited.

🚨
Incident Response

RM25 has a comprehensive incident response plan in place. In the event of a data breach, affected players will be notified within 72 hours.

Beyond the technical measures above, RM25 also enforces strict organisational controls, including privacy awareness training for all staff, role-based access control (RBAC) where each employee can only access data necessary for their specific role, and immediate account deactivation procedures upon the end of any staff member's employment.

07

Cookies, Tracking Technologies & Analytics at RM25

RM25 uses cookies and similar tracking technologies to enhance the user experience on our platform and to understand how Malaysian players interact with our services. Cookies are small text files stored on your device when you visit the RM25 site.

Essential Cookies (Required)

Required for core RM25 platform functions such as maintaining your login session, processing transactions securely and preventing fraud. These cookies cannot be disabled without affecting platform functionality.

User Preference Cookies

Stores your personal preferences on RM25 such as interface language, display settings and your frequently played game preferences. This enables a more personalised experience every time you return to the platform.

Analytics Cookies

RM25 uses analytics tools to understand platform usage patterns on an aggregated, anonymised basis for service improvement purposes. This data does not identify individual players and is not linked to any personal profile.

How to Manage Cookies

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect certain functions of the RM25 platform, including the login process and transactions.

08

Your Rights as an RM25 Player Under PDPA 2010

As a Malaysian player who has entrusted RM25 with your personal data, you hold data protection rights guaranteed under Malaysia's Personal Data Protection Act 2010. RM25 respects and facilitates the exercise of all these rights:

👁️
Right of Access

You have the right to request a copy of all personal data that RM25 holds about you. Such requests will be processed within 21 business days.

✏️
Right to Correction

If your personal data held by RM25 is inaccurate or out of date, you have the right to request that it be corrected or updated promptly.

🗑️
Right to Erasure

In certain circumstances, you may request that RM25 delete your personal data. Such requests are subject to record retention obligations mandated by Malaysian law.

🚫
Right to Object

You may object to the processing of your personal data for RM25's direct marketing purposes at any time, and RM25 is obligated to cease such processing immediately.

📦
Right to Data Portability

You have the right to receive the personal data you have provided to RM25 in a machine-readable format for transfer to another service provider should you choose to do so.

⏸️
Right to Restrict Processing

In certain situations, such as when the accuracy of your data is in dispute, you may request that RM25 restrict the processing of your data until the dispute has been fully resolved.

To exercise any of the rights above, please contact the RM25 privacy team by email at [email protected], stating the right you wish to exercise along with your account details for identity verification. RM25 will respond to all privacy rights requests within the timeframe stipulated by Malaysia's PDPA 2010.

09

Protection of Minors on the RM25 Platform

RM25 takes the protection of minors extremely seriously. The RM25 platform is strictly for adults aged 18 and above, and we do not knowingly collect or process any personal information from individuals under the age of 18.

Should RM25 discover that personal information belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate action to delete that information from our systems and close the relevant account. Parents or guardians who suspect their underage child has or has previously had an RM25 account are urged to contact us immediately at [email protected].

A Note to Parents & Guardians in Malaysia

Please ensure that any device used to access RM25 is not accessible to children or individuals under the age of 18. Use the parental control features available on mobile devices and computers to prevent unauthorised access to the RM25 platform and similar sites.

10

Amendments to the RM25 Privacy Policy

RM25 reserves the right to update or amend this Privacy Policy from time to time in line with changes to Malaysian law, industry standards or our business practices. Any amendments will take effect once the latest version is published on this page with a clearly indicated update date.

For significant amendments that directly affect your privacy rights, RM25 will notify you via an in-platform notification or through the email address registered to your RM25 account, giving you reasonable time to review the changes before they take effect.

It is your responsibility to review this RM25 Privacy Policy page periodically. Your continued use of the RM25 platform after any amendments are published will be considered as your acceptance of the updated policy. If you do not agree with the changes made, please discontinue use of the RM25 platform and contact us to close your account.

11

Contact the RM25 Data Privacy Officer

If you have any questions, concerns or complaints regarding RM25's Privacy Policy or how we handle your personal data, you may contact RM25's Data Privacy Officer (DPO) through the following channels:

📧
Email

[email protected]

Response Time: < 24 hours

💬
Live Chat

Stay on the RM25 Platform

24 hours a day, 7 days a week

📱
WhatsApp

Malay Language Support

Response Time: < 2 minutes

When contacting us regarding a privacy matter, please clearly state the subject of your enquiry, your RM25 account number for identity verification purposes, and the specific details of your request or complaint so that we can provide an accurate and helpful response as promptly as possible.

Why Choose RM25

Your Privacy, Our Priority RM25

This is why over 500,000 Malaysian players trust RM25 with their personal data every day

RM25 Compliance & Certification
  • Full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010)
  • 256-bit SSL encryption meeting Malaysian financial institution standards
  • Regular security audits conducted by independent third parties with no conflicts of interest
  • Game RNG systems are audited and certified to ensure fairness for all players
  • Comprehensive, documented data incident detection and response procedures
  • Mandatory privacy and data security training for all RM25 staff
  • A clear data retention and deletion policy in accordance with Malaysian legal requirements
RM25's Commitment to Malaysian Players

RM25 players from across Malaysia – from Kuala Lumpur to Kota Kinabalu, from Penang to Johor Bahru – can play with confidence knowing their personal data is in responsible hands. We understand that your trust is not something freely given. It must be earned through consistent, transparent and accountable practices, from day one to this very day.

Every time you deposit funds via Touch 'n Go eWallet or GrabPay, every time you play your favourite slots, every time you reach out to RM25 customer support — the data generated from those interactions is handled with the same level of care we apply to our own financial information.

Your privacy is more than a legal compliance checkbox for RM25 – it reflects our core values as a platform that genuinely respects every Malaysian player who chooses to be with us.

Frequently Asked Questions

Frequently Asked Questions About the Privacy Policy RM25

Quick answers to the questions Malaysian players ask most about privacy protection at RM25

Absolutely not. RM25 does not sell, rent, or disclose Malaysian players' personal information to any advertising company, social media platform, data broker, or third party for marketing purposes under any circumstances. This is an absolute red line we do not compromise on. Your data is collected solely to provide the RM25 platform services you use, to comply with Malaysian legal requirements, and to protect the security of your account. If you receive unsolicited marketing communications claiming to be from RM25 via a third party, please report it to us immediately at [email protected] — it did not come from us.

You may request access to your personal data held by RM25 by contacting our privacy team at [email protected]. In your email, state that you are making a Data Access request under Malaysia's PDPA 2010, and include your RM25 account number and full name for identity verification. RM25 will process your request and provide a copy of your data within 21 working days. The data will be delivered in a secure format to the registered email address on your RM25 account. No fee is charged for the first data access request made within any 12-month period.

Data retention periods at RM25 vary according to the type of data and applicable Malaysian legal requirements. Financial transaction records — including deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow and other payment methods — are retained for a minimum of 7 years in accordance with Malaysian accounting and financial regulations. Game history records are retained for 3 years. Customer support communication records are retained for 2 years. Technical data such as access logs and IP addresses are retained for 90 days for cybersecurity purposes. Upon expiry of the retention period, data is securely disposed of in accordance with RM25's standard procedures.

When you close your RM25 account, we will deactivate it and terminate your access to the platform immediately. However, RM25 is required under Malaysian law to retain certain records — such as financial transaction records and identity verification records — for the periods prescribed by the relevant legislation, even after account closure. Data not subject to any legal retention obligation will be deleted from RM25's active systems within 90 days of account closure. You may request a written statement detailing what data is still being held and for how long after closure by emailing [email protected].

RM25 has a comprehensive cybersecurity incident response plan to address any data breach situation swiftly and effectively. In the event of a confirmed data breach involving Malaysian players' personal data, RM25 will immediately take the following steps: isolate and contain the breach to prevent further damage, conduct a digital forensic investigation to determine the scope and cause of the incident, notify the Personal Data Protection Commissioner of Malaysia within the timeframe stipulated by PDPA 2010, and contact affected Malaysian players within 72 hours with clear information on what occurred, what data was involved and the steps you should take to protect yourself. RM25 is committed to full transparency in such situations.
Documents Related to RM25's Privacy Policy

This Privacy Policy should be read alongside other relevant documents on the RM25 platform. For a complete understanding of the protections available to you as a player, please also refer to the Terms & Conditions and Responsible Gaming us. For any privacy enquiries, please reach out to us at [email protected] and our team is always available to assist in Bahasa Melayu.

Your Data Is Safe 500,000+ Players Trust Us PDPA 2010 Compliant

Play at RM25 with Complete Confidence

Your personal data is fully protected at RM25. Over 500,000 Malaysian players have already trusted RM25 — now it's your turn. Register a free account today and enjoy more than 300 top games on a platform that is secure, fair, and fully respectful of your privacy.

Bahasa Melayu