Privacy Policy rm100k – Malaysia Member Data Protection

1Information We Collect

Rm100k collects members' personal information only when necessary for legitimate platform operations. The types of information we collect include:

We do not collect sensitive information such as biometric data or medical records unless specifically required by law or requested by the member.

2How We Use Your Data

Personal information collected by rm100k is used solely for the following purposes:

• Account Management: Registering, verifying, and securely maintaining rm100k member accounts.
• Payment Processing: Processing deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, and other Malaysian payment methods efficiently.
• Identity Verification (KYC): Ensuring all members meet the age and identity requirements set by the relevant authorities.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised access to member accounts.
• Customer Support: Resolving member enquiries, complaints, and technical support requests more effectively.
• Service Improvement: Analysing usage patterns to enhance the platform experience, improve existing features, and develop new functionality.
• Marketing Communications: Sending promotional information, exclusive offers, and platform updates to members who have consented to receive such communications.
• Legal Compliance: Fulfilling legal obligations under the Personal Data Protection Act 2010 (PDPA) and relevant Malaysian legislation.

3Information Sharing with Third Parties

Rm100k does not sell, rent, or disclose members' personal data to any third party for marketing or commercial purposes. However, in the following limited situations, information sharing may occur:

• Payment Service Providers: Transaction information is shared with licensed payment processors such as FPX, DuitNow, and digital wallets to complete your financial transactions.
• Technology Service Providers: Cloud and security infrastructure providers used by rm100k are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.
• Legal Requirements: rm100k will disclose member information to Malaysian authorities if required by court order, criminal investigation, or valid regulatory requirement.
• Fraud Prevention: In cases of suspected fraud or money laundering, relevant information may be shared with the appropriate law enforcement authorities.

In all data-sharing cases, rm100k ensures that recipient parties are bound by privacy and data protection policies equivalent to or stricter than our own standards.

4Data Security

Rm100k continually invests in the latest security technologies and procedures to ensure members' personal data is protected at all times. The security measures we implement include:

• 256-bit SSL encryption for all data in transit between your device and rm100k servers.
• Encryption at rest for sensitive information such as financial details and identity documents.
• Two-factor authentication (2FA) is available for all member accounts to add an extra layer of security.
• Multi-layered firewall and intrusion detection system (IDS) that monitors inbound and outbound traffic in real time.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Clear incident response procedures to address any data breaches swiftly and effectively.

5Cookies and Tracking Technologies

Rm100k uses cookies and similar tracking technologies to enhance the user experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session verification and account security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display settings, and information that allows the platform to remember your personal settings between sessions.
• Analytics Cookies: Helping us understand how members use the rm100k platform so we can continuously improve the user experience. Data collected is anonymised and not linked to your personal identity.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect member accounts from unauthorised access.

You can manage your cookie settings through your browser settings at any time. However, disabling certain cookies may affect the full functionality of the rm100k platform.

6Your Privacy Rights

As an rm100k member, you have full rights over your personal data. These rights include:

• Right of Access: You have the right to request a copy of all personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or outdated information in our records.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from our systems, subject to legal retention requirements.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances provided for by law.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the rights above, please contact the rm100k support team via 24/7 live chat or email at [email protected]. We will process your request within 14 business days.

7Data Retention

Rm100k retains members' personal data for as long as your account is active or as long as necessary for the purposes stated in this privacy policy. Data retention periods are as follows:

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure, in line with Malaysian legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legislation.
• KYC Documents: Retained for 5 years after the last verification or account closure, whichever is later.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Analytics Data: Anonymised data is retained indefinitely for analytics and platform improvement purposes.

Once the retention period has ended, your data will be securely deleted or anonymised in accordance with our data management procedures.

8Changes to This Privacy Policy

Rm100k reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform service improvements.

When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Notifying members via in-account notifications or their registered email regarding significant changes.
• Providing reasonable notice before changes take effect in cases involving a significant reduction in your privacy protections.

Continued use of the rm100k platform after updates to the privacy policy are published will be considered your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.