Rmadrid888 Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

This Privacy Policy ("Policy") is published by rmadrid888, which operates the online betting and casino platform at rmadrid888.biz. This document outlines our privacy practices – including the types of personal data we collect, the purposes for collection, how we use it, and your rights in relation to that data.

This policy applies to all users of the rmadrid888 platform, including website visitors, prospective members, active registered members, and former members whose accounts have been closed. It also covers all interactions with our platform via the website, mobile app (where applicable), and any official rmadrid888 communication channels.

Rmadrid888 is a Data Controller as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are fully responsible for how your personal data is processed and protected. All data processing we carry out is based on a valid legal ground – whether that is your consent, contractual necessity, a legal obligation, or our legitimate interests.

Rmadrid888 collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect:

Rmadrid888 does not collect sensitive data such as your health information, religious beliefs, or political views. We only collect data that is strictly necessary for platform operations and legal compliance.

Rmadrid888 uses your personal data for the following purposes, each grounded in a valid legal basis under the PDPA 2010:

• Account management: To create, verify and manage your member account, including the login process, identity verification and profile management.
• Financial transaction processing: To process your deposits and withdrawals in MYR via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, and other internet banking methods.
• Gaming service provision: To give you access to all games on the rmadrid888 platform – from Sports Betting on the Malaysia Super League and EPL, to Live Casino, slots, roulette, poker and virtual sports.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, money laundering and any conduct that violates our Terms & Conditions.
• Service communications: To send you important notifications regarding your account, policy updates, transaction confirmations and necessary security information.
• Marketing (with your consent only): To send you promotional information, bonus offers and news about new games or betting options – only if you have opted in to receive such communications.
• Legal compliance: To fulfill our legal obligations, including anti-money laundering (AML) requirements and PDPA compliance.
• Platform improvements: To analyze aggregated and anonymized usage patterns for the purpose of improving the rmadrid888 platform user experience.

Rmadrid888 never sell, rent or trade your personal data to any third party for marketing or commercial purposes. However, in certain limited situations, we may need to share your data with the following parties:

• Payment service providers: Malaysian payment platforms such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost and ShopeePay receive only the minimum transaction data required to process your payment. These providers are bound by their own privacy policies and Malaysian financial compliance obligations.
• IT and infrastructure service providers: Companies that support our platform's technical infrastructure, including cloud and security service providers, all of whom are bound by strict confidentiality agreements.
• Law enforcement authorities: Relevant Malaysian authorities may request access to certain data pursuant to a court order or valid legal requirement. rmadrid888 is obligated to comply with such lawful requests.
• Independent auditor: Certified auditing firms that conduct compliance, security and game fairness reviews – they do not retain user data once the audit is complete.

In all instances of data sharing with third parties, rmadrid888 ensures that transfers are conducted securely, that only necessary data is shared, and that recipients are bound by equivalent data protection obligations.

Rmadrid888 continually invests in the latest digital security infrastructure to ensure your personal data remains protected at all times. The technical and organizational security measures we have implemented include:

• Encryption in transit: All communications between your browser and rmadrid888's servers are protected by TLS 1.3 / SSL 256-bit encryption, rendering your data unreadable to unauthorized parties during transmission.
• Encryption at rest: Sensitive data stored in our databases, including identity verification information and financial data, is encrypted at rest using AES-256 standards.
• Tiered access controls: Access to members' personal data is restricted on a need-to-know basis – only staff who require access to perform their job functions are permitted to do so.
• Real-time threat monitoring: Our SIEM (Security Information and Event Management) system monitors all platform activity 24/7 to detect intrusion attempts, data anomalies, and unauthorized access.
• Regular security audits: rmadrid888 undergoes penetration testing and security audits by independent firms at least twice a year.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an added layer of protection on their account.

Rmadrid888 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies (Required): Required for core platform functionality — login, active sessions, security, and language preferences. These cookies cannot be disabled as the platform will not function without them.
• Preference Cookies: Stores your preferences such as game settings, default betting limits and display options. This helps the platform remember your preferences between sessions.
• Analytics Cookies (Internal): Helps us understand how members use the platform — which pages are most visited, navigation paths, and points where users encounter difficulty. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Used to detect and prevent fraudulent activity, verify that each session is legitimate, and identify unauthorised access attempts.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the rmadrid888 platform. For more information on how to manage cookies, refer to your browser's help documentation.

Rmadrid888 retains your personal data only for as long as necessary for the stated purposes, or as required by applicable law. The following outlines our data retention policy:

Once the retention period expires, your data will be securely deleted or anonymised in a manner that can no longer be linked back to you as an individual.

Rmadrid888 makes it straightforward for you to submit any request relating to your privacy rights. The process is simple and transparent:

1. Email us at support@rmadrid888.biz with the subject line "PDPA Privacy Request – [Request Type]". For example: "PDPA Privacy Request – Data Access" or "PDPA Privacy Request – Data Deletion".
2. Specify the type of request clearly: whether you are requesting access, correction, deletion, restriction of processing, or data portability.
3. Include identity verification details sufficient for us to verify that the request is coming from the legitimate account holder — this is important to protect your privacy from unauthorised third-party requests.
4. Await a confirmation of receipt within 3 business days. We will process your request within 14 business days for standard requests, or 30 business days for more complex ones.

Rmadrid888 takes the protection of underage players very seriously. Our platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Steps we take to prevent access and data collection by underage individuals:

• An age verification process during registration that requires date of birth confirmation
• Know Your Customer (KYC) procedures that verify member identity through official Malaysian documents
• An automated detection system that flags accounts suspected of belonging to underage individuals
• Immediate and uncompensated closure of any account confirmed to belong to an individual under 18 years of age

If you believe that a child or underage individual is using the rmadrid888 platform, please notify us immediately at support@rmadrid888.biz and we will take prompt action.

As a platform handling financial transactions in MYR, rmadrid888 is required under Malaysian law to implement KYC (Know Your Customer) procedures to meet anti-money laundering (AML) requirements. This involves collecting and verifying identity documents in certain circumstances.

The KYC data we collect is processed as follows:

• Identity documents (copies of Malaysian IDENTITY CARD or Passport) are stored in a secure system separate from regular gaming data, with an additional layer of encryption.
• KYC documents are accessible only to specially trained compliance staff and cannot be accessed by regular customer support personnel.
• Credit/debit card information not stored on rmadrid888 servers – we use PCI DSS-certified third-party payment processors to handle card data securely.
• For payments made via Malaysian e-wallets (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), only the transaction reference number and amount in RM are stored – not your e-wallet login credentials.

Rmadrid888 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. When we make material changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this page
• Sending email notifications to all registered members at least 14 days before material changes take effect
• Displaying a prominent notice within the platform at login for a minimum of 30 days after the changes take effect
• Maintain an archived version of all previous Privacy Policies, available to members upon request via support email

Continued use of the rmadrid888 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rmadrid888 handles your personal data, we encourage you to contact us directly in the first instance. Our team will work to resolve any concerns you may have within a reasonable timeframe.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP) under the Ministry of Communications and Digital.