rmcuci Privacy Policy

1. Introduction

rmcuci ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits rmcuci.co or uses any product or service offered through the rmcuci platform. This Privacy Policy sets out what personal data rmcuci collects, why it is collected, how it is used, with whom it may be shared, and what rights you have in relation to your personal data.

By registering an account with rmcuci or continuing to use the rmcuci platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you should cease using the rmcuci platform and contact support to request account closure.

This Policy should be read alongside the rmcuci Terms & Conditions, which govern the overall contractual relationship between rmcuci and its Players.

2. Data Controller

rmcuci is the data controller in respect of the personal data it processes. For the purposes of this Privacy Policy, the data controller is the operator of the rmcuci platform accessible at rmcuci.co. Queries relating to data protection can be directed to the rmcuci support team via the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create a rmcuci account, we collect the following information:

• Full legal name (as it appears on your Malaysian NRIC or equivalent identification document)
• Date of birth
• Gender
• Email address
• Malaysian mobile phone number
• Residential address
• Username and hashed password

3.2 Identity Verification (KYC) Data

To comply with applicable Know Your Customer obligations, rmcuci may collect:

• A copy of your valid Malaysian NRIC or passport
• A selfie or live photograph for biometric comparison
• Proof of residential address (e.g., utility bill or bank statement dated within 90 days)
• Proof of source of funds or source of wealth, where required for high-value accounts

3.3 Financial Data

rmcuci collects transactional data associated with your account, including:

• Deposit amounts, dates, and payment methods (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, FPX)
• Withdrawal requests, amounts, and processing status
• Account balance history in MYR
• Partial payment account identifiers (e.g., last four digits of an account number) — rmcuci does not store full payment account credentials

3.4 Gaming Activity Data

rmcuci records all gaming activity conducted through your account, including:

• Games played, bet amounts, outcomes, and timestamps
• Bonus usage and wagering progress
• Sportsbook bets placed, markets selected, and settlement results
• Session duration and frequency data

3.5 Technical & Usage Data

When you access the rmcuci platform, we automatically collect certain technical information:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages viewed, navigation paths, and time spent on each section
• Referral source (where applicable)
• Cookie and session identifiers (see Section 9)

3.6 Communications Data

Where you contact rmcuci via live chat, email, or any other channel, we retain records of those communications for quality assurance, compliance, and dispute resolution purposes.

4. How We Collect Your Data

rmcuci collects personal data through the following means:

• Directly from you — through account registration, KYC submission, deposit and withdrawal requests, support interactions, and any feedback you provide.
• Automatically — through cookies, server logs, and analytics tools when you visit or use the rmcuci platform.
• From third parties — including payment processors, KYC verification providers, fraud prevention services, and our game suppliers, to the extent necessary to provide and protect the rmcuci service.

5. Purposes and Legal Basis for Processing

rmcuci processes personal data for the following purposes and on the following legal bases:

• Account creation and management — necessary for the performance of the contract between rmcuci and the Player.
• Payment processing and withdrawal — necessary for the performance of the contract and compliance with financial regulations.
• Identity verification (KYC) — necessary to comply with applicable legal obligations.
• Anti-money laundering and fraud prevention — necessary to comply with legal obligations and to protect rmcuci's legitimate interests.
• Customer support — necessary for the performance of the contract and rmcuci's legitimate interest in resolving disputes and improving service quality.
• Responsible gaming monitoring — necessary to comply with licensing obligations and to protect the vital interests of Players.
• Marketing communications — based on your consent, where you have opted in to receive promotional communications from rmcuci. You may withdraw consent at any time by updating your account preferences or contacting support.
• Platform improvement and analytics — based on rmcuci's legitimate interest in improving the quality, performance, and safety of the platform.

6. Sharing Your Personal Data

rmcuci does not sell, rent, or trade your personal data to any third party. rmcuci may share your personal data with the following categories of third parties strictly on a need-to-know basis:

• Payment processors — Touch n Go, Boost, FPX gateway providers, and Malaysian banking partners, to facilitate deposits and withdrawals in MYR.
• KYC and identity verification providers — specialist third-party services that assist with document verification and biometric checks.
• Game software suppliers — licensed game providers (e.g., live dealer studios, slots developers) who may process session data in order to deliver games to your device. rmcuci requires all game suppliers to process data under contractual data protection obligations.
• Fraud prevention and AML services — third-party risk management platforms that assist rmcuci in detecting and preventing fraudulent activity.
• Regulatory and law enforcement authorities — where rmcuci is required by applicable law, court order, or regulatory direction to disclose personal data.
• Professional advisers — including lawyers and auditors, where required in connection with legal proceedings or compliance reviews, under appropriate confidentiality obligations.

7. International Data Transfers

Some of rmcuci's third-party service providers — including game suppliers and KYC verification platforms — are located outside Malaysia. Where personal data is transferred internationally, rmcuci ensures that appropriate contractual safeguards are in place to protect your data to a standard at least equivalent to that afforded under Malaysian data protection principles. By using the rmcuci platform, you consent to such transfers where necessary to provide the rmcuci service.

8. Data Retention

rmcuci retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Account data (registration, KYC, and gaming history) is retained for a minimum of five (5) years following account closure, in accordance with applicable financial record-keeping standards.
• Communications data (live chat logs, email records) is retained for two (2) years.
• Technical and usage data is retained for twelve (12) months before being anonymised or deleted.
• Where rmcuci is involved in active legal proceedings or a regulatory investigation, relevant data will be retained until the matter is resolved, regardless of the standard retention periods above.

Upon expiry of the applicable retention period, rmcuci will securely delete or anonymise personal data in accordance with industry-standard data destruction practices.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. rmcuci uses cookies and similar tracking technologies to make the platform function correctly, improve your experience, and gather analytical data.

9.2 Types of Cookies Used by rmcuci

• Essential cookies — required for the rmcuci platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without impairing the functionality of the site.
• Analytical cookies — used to understand how Players navigate the rmcuci platform, which pages are visited most frequently, and where technical issues occur. Data collected is aggregated and anonymised where possible.
• Functional cookies — used to remember your preferences, such as your preferred language, last-played games, and display settings within the rmcuci lobby.
• Marketing cookies — used only where you have provided consent. These track whether you arrived at rmcuci via a marketing campaign, to enable rmcuci to assess the effectiveness of its promotional activity.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in to or using the rmcuci platform. Instructions for managing cookies are available in the help section of all major browsers.

10. Security Measures

rmcuci implements a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and rmcuci servers.
• Encryption of sensitive data at rest, including password hashes and payment-related identifiers.
• Strict role-based access controls — rmcuci staff access to personal data is restricted to what is necessary for their specific function.
• Regular security audits and penetration testing by qualified independent security professionals.
• Multi-factor authentication for internal rmcuci systems that handle Player personal data.

Notwithstanding the above, no data transmission over the internet is completely secure. While rmcuci takes all reasonable precautions, it cannot guarantee the absolute security of data transmitted to or from the rmcuci platform. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rmcuci will notify you without undue delay.

11. Your Data Rights

Subject to applicable law, you have the following rights in relation to personal data held by rmcuci:

• Right of access — you may request a copy of the personal data rmcuci holds about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to rmcuci's legal retention obligations.
• Right to restriction — you may request that rmcuci restricts processing of your data while a dispute or correction request is pending.
• Right to data portability — where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing carried out on the basis of rmcuci's legitimate interests where you have grounds particular to your situation.

To exercise any of these rights, please contact rmcuci support via the details in Section 15. rmcuci will respond to verified requests within 30 days. Identity verification will be required before rmcuci processes a data subject request.

12. Children and Minors

The rmcuci platform is strictly for individuals aged 21 years and over. rmcuci does not knowingly collect personal data from persons under the age of 21. If rmcuci discovers that personal data has been collected from an underage individual, the account will be immediately closed, all balances forfeited, and the personal data deleted in accordance with applicable retention obligations. If you have reason to believe that an underage person has registered on the rmcuci platform, please contact support immediately.

13. Third-Party Links

The rmcuci platform may display informational content that references third-party organisations (for example, responsible gaming support organisations). rmcuci is not responsible for the privacy practices of any third party and does not control third-party websites or services. This Privacy Policy applies only to personal data processed by rmcuci through the rmcuci platform.

14. Changes to This Privacy Policy

rmcuci reserves the right to update this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, the purposes for which it is processed, or the third parties with whom it is shared — rmcuci will notify registered Players by email to the address on file at least seven (7) days before the changes take effect. Continued use of the rmcuci platform after the effective date of any updated Policy constitutes acceptance of the revised terms. The current version of the Privacy Policy is always accessible at rmcuci.co/privacy-policy with the effective date displayed at the top.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about rmcuci's data handling practices, please contact us via:

• Live Chat: Available 24/7 from within the rmcuci platform. Response under two minutes.
• Email: [email protected]

rmcuci aims to acknowledge all privacy-related correspondence within 24 hours and to resolve substantive requests within 30 days of identity verification.