Official rsm3 Documents

Rsm3 Privacy Policy — How We Protect the Personal Data of Malaysian Users

Rsm3 takes your privacy very seriously. This Privacy Policy transparently explains what data we collect, why we collect it, how we store and protect it, and your rights as a Malaysian user to control your own personal data. Please read this document before registering an account at rsm3.xyz.

Last updated: 1 January 2026 Language: Bahasa Malaysia Applies to: Malaysia

256-bit
SSL Data Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
5 days
Complaint Response Time

Rsm3's Privacy Commitment

Six Data Protection Principles rsm3 Stands By

Before reading the full document, here is a summary of the core principles that shape how rsm3 handles the personal data of Malaysian users — written in plain, easy-to-understand language.

Your Data Is Never Sold

Rsm3 has never and will never sell, rent, or trade users' personal data to any third party for marketing or any other purpose. Your data belongs to you — rsm3 uses it solely for legitimate platform operations as clearly stated in this Privacy Policy.

Bank-Grade Encryption

All data transmitted between your device and rsm3's servers is protected by 256-bit SSL encryption — the same technology used by Maybank, CIMB, and other major Malaysian banks. Data stored in rsm3's databases is also fully encrypted and accessible only to authorised personnel with a legitimate need.

You Are in Control of Your Own Data

Rsm3 users have the right to access, correct, download, or request the deletion of their personal data at any time. Such requests are processed within 5 business days through rsm3 customer support. No fee is charged for reasonable and valid data access or correction requests.

Collect Only Necessary Data

Rsm3 practises data minimisation — we only collect information that is genuinely necessary to operate the platform safely and effectively. We do not collect irrelevant data simply for storage or broad analysis without a clear and legitimate purpose.

Clear Data Retention Periods

Rsm3 sets clear retention periods for each data category. Data is not kept longer than necessary for the stated purposes, unless required by applicable Malaysian law such as the Anti-Money Laundering Act 2001. Once the retention period expires, data is securely deleted.

Immediate Data Breach Notification

In the event of any data security breach that may affect users' personal information, rsm3 is committed to notifying affected users within the timeframe required by law. We will not conceal or delay disclosure should a breach actually occur.


Important Note: This Privacy Policy explains how rsm3 collects, uses, stores, and protects the personal data of users on our platform. By registering an account and using rsm3's services, you agree to the privacy practices described in this document. If you do not agree, please do not use the rsm3 platform.

1

Introduction & Scope of Privacy Policy

This Privacy Policy is issued by rsm3 and applies to all users who access or use the rsm3.xyz platform, including all services, functions, and features available on it. This document reflects rsm3's commitment to transparency in data handling.

Rsm3 operates entirely within the Malaysian context and complies with the relevant data protection provisions under applicable Malaysian law. We understand that user trust is our most valuable asset — and that trust begins with how we handle the personal information you entrust to us when registering and using the rsm3 platform.

This Privacy Policy applies to all personal information collected through: new account registration, the login process and general platform use, processing of deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, interactions with the rsm3 customer support team, and use of responsible gaming features on our platform.

If you have any questions about this Privacy Policy before registering, we encourage you to contact the rsm3 support team first via live chat or email at support@rsm3.xyz.

2

Personal Data We Collect

Rsm3 collects several categories of personal data from users — all for legitimate, specific purposes. The table below outlines the types of data collected and how they are gathered:

Data Category Example of Specific Information How It Is Collected
Identity Data Full name, date of birth, IC or passport number Registration form, KYC process
Contact Data Malaysian phone number, email address Registration form, profile updates
Financial Data E-wallet information (Touch 'n Go, GrabPay, DuitNow), deposit and withdrawal history Deposit and withdrawal transactions
Technical Data IP address, device type, operating system, web browser, access logs Collected automatically during platform use
Gaming Data Betting history, games played, account balance, bonus history Collected automatically during gameplay activity
Communication Data Live chat conversation records, support emails, complaint history Interactions with the rsm3 support team
Preference Data Preferred language, responsible gaming settings, notification preferences User account settings

Rsm3 does not collect sensitive data such as medical records, religious beliefs, political affiliations, or sexual orientation under any circumstances. We also do not use facial recognition or biometric software for any purpose.

Note on Phone Numbers

Rsm3 only accepts active Malaysian phone numbers (beginning with 01x or 6001x) during registration. Phone numbers are used for OTP verification and account security communications — they will not be shared with third parties for marketing purposes without your consent.

3

Purpose of Data Collection & Use

Rsm3 uses the personal data it collects solely for legitimate, necessary, and clearly stated purposes. The following are the primary purposes for which user data is used on the rsm3 platform:

  • Registration & Account Management: To create and maintain a valid user account, verify your identity at login, process password reset requests, and manage your account settings on rsm3.
  • Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as to process winnings withdrawals to the same payment methods. This includes transaction verification and the financial record-keeping required by law.
  • Fraud Prevention & Security: To detect and prevent fraudulent activity, bonus abuse, multiple account registrations, money laundering, and any other security threats to the rsm3 platform and its users.
  • Customer Support Services: To provide effective and personalised support to users who contact the rsm3 support team via live chat or email, including resolving complaints and responding accurately to enquiries.
  • Responsible Gaming: To monitor usage patterns that may indicate problem gambling, enforce limits set by users themselves, and provide appropriate interventions when needed to protect the wellbeing of rsm3 users.
  • Platform Improvements: To analyse aggregated, non-identifiable usage patterns for the purpose of improving the design, performance, and features of the rsm3 platform — all in the interest of a better user experience.
  • Service Communications: To send important account-related notifications such as deposit confirmations, security alerts, information on bonuses you have claimed, and key service updates from rsm3.
  • Legal Compliance: To meet applicable Malaysian legal requirements, including identity verification and transaction record obligations under anti-money laundering legislation.

Rsm3 does not use user data for any purpose beyond those stated above without first obtaining the user's explicit consent. If we wish to use your data for a new purpose not covered in this Privacy Policy, we will notify you and seek your consent before doing so.

4

How rsm3 Protects Your Data

Protecting user data is rsm3's highest technical and operational priority. We continually invest in security infrastructure to ensure your personal information remains safe at all times.

Below are the concrete security measures rsm3 has put in place to protect the data of Malaysian users:

256-bit SSL Encryption

All data transmitted between users' devices and rsm3's servers is encrypted using TLS 1.3 protocol with 256-bit key length — the highest industry standard, the same used by Malaysia's leading banks.

Encrypted Database

All user data stored in the rsm3 database is encrypted at rest. Database access is restricted exclusively to authorised technical personnel through strict access controls.

Two-Factor Authentication (2FA)

Rsm3 provides 2FA for all user accounts. Once enabled, logging in requires OTP verification via your registered Malaysian phone number — an additional security layer that is strongly recommended.

24/7 Security Monitoring

Rsm3's automated security monitoring system operates around the clock to detect any suspicious activity, intrusion attempts, or unusual access patterns on user accounts.

Regular Data Backups

Rsm3 user data is automatically backed up to a secure, separate location every day. These backups ensure your data will not be lost due to any unforeseen technical failure.

Strict Staff Access Controls

Only rsm3 staff with a legitimate need and who have completed data privacy training may access users' personal information. All access is logged and periodically audited by the internal security team.

While rsm3 takes all reasonable steps to protect user data, no security system can be guaranteed to be 100% immune to all threats. Users also play an important role in their own account security — please keep your password confidential and enable 2FA for maximum protection on rsm3.

5

Data Sharing with Third Parties

Rsm3 does not sell, rent, or trade users' personal data to any third party for any purpose whatsoever. This is a commitment we uphold without exception.

However, in order to operate the platform effectively, rsm3 may need to share limited user data with certain third parties in the following circumstances — and only for the purposes stated:

  • Payment Service Providers: rsm3 shares necessary transaction information with Malaysian e-wallet providers and payment service partners such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX for the purpose of processing deposits and withdrawals. These providers maintain their own privacy policies and are subject to applicable data protection requirements.
  • Game Providers: In certain cases, limited game session information may be shared with game providers such as Evolution Gaming, Pragmatic Play, or PG Soft for technical resolution and fair game verification purposes. No personally identifiable information is shared without a clear justification.
  • Regulatory Authorities & Law Enforcement: rsm3 will disclose user data to the relevant authorities if required by a valid court order, writ, or legal directive in Malaysia. rsm3 will not disclose user data in response to informal requests that lack a sound legal basis.
  • Technical Service Providers: rsm3 uses cloud service providers and technical infrastructure partners that process data on our behalf. All such providers are bound by strict confidentiality agreements and are not permitted to use rsm3 user data for their own purposes.

In all data-sharing scenarios described above, rsm3 ensures that only the minimum data necessary is shared — not a user's full profile. rsm3 also ensures that all third parties receiving our users' data are bound by security and confidentiality obligations equivalent to rsm3's own standards.

Cross-Border Data Transfers

In some cases, rsm3 user data may be processed by servers located outside Malaysia for cloud service and technical infrastructure purposes. rsm3 ensures that all such data transfers are protected by appropriate data transfer agreements and safeguards equivalent to those provided in Malaysia.

6

Cookies & Tracking Technologies

Rsm3 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit the rsm3 platform. They allow the platform to remember your preferences and deliver a more personalised, seamless experience.

The following are the categories of cookies rsm3 uses:

You can control or delete preference cookies through your web browser settings. However, disabling essential and security cookies may negatively affect the functionality of the rsm3 platform. For instructions on managing cookies across different browsers, please refer to your browser's help documentation.

7

Data Retention & Deletion

Rsm3 does not retain users' personal data for longer than is necessary for the purposes stated in this Privacy Policy. Data retention periods are as follows:

  • Active Account Data: Retained for as long as a user's account remains active on the rsm3 platform and for a reasonable period following account closure, subject to applicable legal requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction, in line with applicable Malaysian tax and anti-money laundering legal requirements.
  • Security Logs: Retained for 90 days for security investigation and fraud detection purposes. After this period, logs are securely deleted unless an active investigation is ongoing.
  • Customer Support Records: Live chat conversations and support emails are retained for 2 years from the date of the last interaction, for reference purposes and to resolve any subsequent complaints that may arise.
  • Cookie Data: Session cookies expire automatically when you close your browser. Persistent cookies are set for a maximum period of 12 months, after which they must be renewed.

Once the applicable retention period has expired and there is no legal requirement to retain the data further, rsm3 will securely delete or anonymise the data using appropriate methods to ensure it cannot be recovered.

Users who request account closure may simultaneously request the deletion of their data. Data deletion requests will be processed within 30 business days, subject to record-keeping obligations required under Malaysian law. rsm3 will notify users in writing once the data deletion process is complete, or if there is a legitimate reason why certain data must be retained for a longer period.

8

User Rights Over Personal Data

Rsm3 respects the rights of Malaysian users over their personal data. Below are the rights you hold as an rsm3 user, and how to exercise them:

Right to Access

You have the right to request a copy of all personal data rsm3 holds about you. This request will be processed within 5 business days and provided in a readable format.

Right to Correction

If any personal data held by rsm3 is inaccurate or out of date, you have the right to request an immediate correction. We will process correction requests within 3 business days.

Right to Deletion

You may request that rsm3 delete your personal data when it is no longer needed for the purpose it was collected, subject to any legal obligations requiring the retention of certain records.

Data Portability

You have the right to request your personal data in a machine-readable format (such as CSV or JSON) for portability or reuse. Such requests are processed within 10 business days.

Right to Restrict Processing

Under certain circumstances, you may request that rsm3 temporarily suspend the processing of your data — for example, while you are disputing the accuracy of your data or objecting to the way we are using it.

Right to Object

You may object to the processing of your personal data for specific purposes, including its use for direct marketing communications. Such requests will be actioned immediately for marketing purposes and within 5 business days for all other purposes.

To exercise any of the rights above, please contact the rsm3 support team via live chat or email at support@rsm3.xyz, specifying the particular right you wish to exercise along with your account details. All requests will be handled confidentially and at no charge for reasonable requests. rsm3 may decline requests that are unreasonable, repetitive, or would require a disproportionate effort — and we will explain the reason for any such refusal in writing.

9

Children's Data Protection

Rsm3 has a strict policy on the protection of minors. The rsm3 platform is for individuals aged 18 and above only only — this is not merely a terms-of-use requirement but also a moral and legal commitment that rsm3 upholds with the utmost seriousness.

Rsm3 does not knowingly collect, store, or process any personal data from individuals under the age of 18. Should rsm3 discover that we have inadvertently collected data from a minor, we will take the following steps immediately:

  • Suspending the account in question immediately and without prior notice.
  • Permanently deleting all personal data associated with the account from our systems as swiftly as possible.
  • Not processing any withdrawals on the account in question until the age verification investigation is complete.
  • Reporting the incident to the relevant authorities where required by law.

If you believe a minor may have registered an account on rsm3, please contact us immediately at support@rsm3.xyz with the details you are aware of. rsm3 will promptly investigate the report and take appropriate action to safeguard the well-being of the child in question.

10

Amendments to This Privacy Policy

Rsm3 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our privacy practices, the services we offer, or applicable legal requirements. We are committed to informing users of any material changes that affect how we handle your personal data.

When material changes are made to this Privacy Policy, rsm3 will notify users through one or more of the following methods: a prominent notice displayed on the rsm3 platform's main page; an in-account notification upon your next login; or an email sent to the address registered to your account. The date of the most recent update is always shown at the top of this document so you can identify when the last change occurred.

We encourage rsm3 users to review this Privacy Policy periodically — especially before providing any additional personal data or when using new features on the platform. Continued use of the rsm3 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any amendments, please discontinue use of the platform and contact us to close your account.

11

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way rsm3 handles your personal data, please do not hesitate to contact us. rsm3's team, fluent in Bahasa Malaysia, is ready to assist you through the following channels:

  • Live Chat: The fastest way to get an immediate response. rsm3 live chat is available 24 hours a day, 7 days a week, including all Malaysian public holidays. Average response time is under 3 minutes. Accessible directly via the chat icon on the rsm3 platform.
  • Email: For more detailed privacy enquiries or to exercise your data rights, send an email to support@rsm3.xyz with "Privacy Enquiry" in the subject line. We respond to all privacy enquiries within 5 business days.
  • FAQ: Section FAQ rsm3 contains answers to the most frequently asked questions about data privacy and account security.

Rsm3 takes all privacy-related complaints seriously. If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in Malaysia.

Thank you for taking the time to read the rsm3 Privacy Policy carefully. Your trust is the foundation of our relationship, and we will continue to ensure that your personal data is handled with the highest level of care and respect on the rsm3 platform.


Your Data Is Safe at rsm3 — Register with Confidence Today

Rsm3 protects your privacy with bank-grade encryption, a strict no data-sale policy, and full support for Malaysian user rights. Register a free account and claim your 200% Welcome Bonus of up to RM 1,000 with complete confidence.


18+
Your Privacy Protected — Your Gaming Responsible

Rsm3 is strictly for users aged 18 and above. We take the protection of your personal data seriously while promoting healthy, responsible gaming. If you need assistance with account limits, self-exclusion, or any aspect of responsible gaming, reach out to our team in complete confidence at any time.

Responsible Gaming Guide

Bahasa Melayu