remi189 Privacy Policy for Malaysian users

Section 1

Introduction and scope

This Privacy Policy applies to personal data processed in connection with remi189, including data obtained when a user browses the website, communicates with support, submits verification material or interacts with available account and payment features. It should be read together with the remi189 Terms & Conditions.

remi189 provides English-language information concerning casino-style entertainment, sports betting, Malaysian payment methods and responsible gambling. This policy applies to adults aged 21 and above. remi189 does not knowingly seek personal data from minors.

In this policy, “personal data” means information that identifies a person or can reasonably be linked to an identifiable person. Aggregated or properly anonymised information that cannot reasonably identify an individual is not treated as personal data.

Section 2

Categories of data collected

Depending on how remi189 is used, the following categories of information may be collected:

• Identity data: full name, date of birth, nationality and details from a valid identification document.
• Contact data: email address, residential address and other details voluntarily provided to remi189.
• Account data: username, encrypted or hashed credentials, account settings, responsible gambling limits and account status.
• Verification data: identity images, proof of address, selfie verification and information required for KYC or anti-fraud checks.
• Transaction data: MYR amounts, timestamps, payment references, withdrawal status and limited payment-method identifiers.
• Technical data: IP address, browser type, device characteristics, operating system, access time and security logs.
• Usage data: pages viewed, navigation events, language preferences and interaction with remi189 content.
• Communication data: messages sent to support and records reasonably necessary to resolve a request or complaint.

remi189 does not ask users to disclose a password, one-time code or complete online banking credential to support staff. Such information should never be provided through email or unsecured chat.

Section 3

How personal data is obtained

Personal data may be obtained directly when a user supplies information, indirectly through normal website operation or from a service provider involved in identity, fraud or payment checks. For example, a user may provide account details, while remi189 systems record the device and time used to access a protected area.

Where payment functionality is available, information may arise through interactions involving Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, DuitNow, FPX or selected cryptocurrencies. remi189 does not necessarily receive every detail held by the payment provider.

Users must ensure that personal data submitted to remi189 is accurate and that they are authorised to provide it. Information belonging to another person must not be submitted without a lawful basis and appropriate permission.

Section 4

Purposes of data processing

remi189 may process personal data for the following legitimate and lawful purposes:

• Operating, maintaining and securing the website;
• Creating and administering an account where account services are available;
• Confirming that a user is aged 21 or above;
• Carrying out identity, KYC, fraud prevention and payment ownership checks;
• Recording deposits, withdrawals, payment disputes and applicable MYR limits;
• Responding to questions, technical reports and privacy requests;
• Applying deposit limits, cooling-off periods and self-exclusion instructions;
• Detecting unusual access, multiple-account misuse or attempted promotional abuse;
• Improving content about casino formats, EPL, Liga Super Malaysia, UFC and payment guidance;
• Meeting applicable legal, regulatory, accounting and record-keeping obligations.

remi189 does not process personal data merely because it may be technically possible to do so. Processing should remain connected to a stated and proportionate purpose.

Section 5

Legal grounds and consent

The basis for processing may include performance of an agreement, compliance with a legal obligation, protection of legitimate interests, prevention of fraud, protection of users or consent where consent is required. The applicable basis depends on the data and purpose involved.

Where remi189 relies on consent, consent should be freely given, specific and informed. A user may withdraw consent for future processing where applicable, although withdrawal does not make earlier lawful processing invalid. Certain information may still need to be retained or processed to satisfy security, dispute or legal obligations.

Section 6

Cookies and similar technologies

remi189 may use cookies, local storage and comparable technologies to maintain essential sessions, remember preferences, measure website performance and detect suspicious activity. Essential technologies may be required for login security and core website operation.

Analytics information may show, for example, whether users in Kuala Lumpur, Penang or Johor Bahru generally access remi189 by mobile or desktop. Where practical, such reporting should be aggregated and used to improve usability rather than identify a particular user.

Browser controls can block or remove cookies. Disabling essential storage may prevent some remi189 features from working correctly. Cookie preferences do not override records required for security or legal compliance.

Section 7

Payments and financial information

Transaction records may include the payment method, partial account or wallet identifier, MYR amount, status, time and reference. remi189 uses such information to administer transactions, investigate errors, prevent fraud and maintain financial records.

Payment providers and banks process information under their own privacy and security arrangements. Selecting DuitNow, FPX, an e-wallet or a cryptocurrency network may require data to be exchanged with the relevant processor. remi189 aims to limit that exchange to information reasonably necessary for the transaction.

Complete bank passwords, e-wallet PINs and private cryptocurrency keys must never be sent to remi189. Users should confirm the recipient details and digital asset network before authorising any transfer.

Section 8

Disclosure and service providers

remi189 may disclose limited personal data to providers that support hosting, cybersecurity, identity verification, payment processing, analytics, customer assistance, professional advice or record storage. Providers should receive only the information reasonably needed to perform the relevant service.

Data may also be disclosed where reasonably necessary to comply with law, respond to a valid legal process, investigate fraud, protect a user or defend legal rights. remi189 does not claim that information will be disclosed to a Malaysian authority unless there is a valid and applicable reason.

remi189 does not sell personal data as a standalone commodity. If the ownership or operation of remi189 changes, relevant information may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.

Section 9

International data transfers

Because internet infrastructure, hosting, verification and support services may operate across borders, personal data may be processed outside Malaysia. Privacy protections in another location may differ from those available locally.

Where international transfer safeguards are required, remi189 seeks to use appropriate contractual, technical or organisational measures. An international transfer does not authorise a recipient to use personal data for unrelated purposes.

Section 10

Data security

remi189 uses reasonable safeguards designed to protect personal data against accidental loss, unauthorised access, alteration and disclosure. Measures may include HTTPS encryption in transit, controlled access, monitoring, secure credential handling, backups and staff confidentiality requirements.

No online system can be guaranteed completely secure. Users contribute to protection by maintaining a unique password, securing their device, checking the official domain and refusing requests for one-time codes. Public Wi-Fi should be avoided when accessing sensitive account or payment information.

If remi189 identifies a security incident affecting personal data, it may investigate, contain the issue and provide notice where required. Users should report unexpected account changes or suspicious communications promptly.

Section 11

Data retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including account administration, security, fraud prevention, transaction reconciliation, self-exclusion enforcement and legal compliance.

Different records may have different retention periods. A support enquiry may not need to be retained as long as a transaction or verification record. When data is no longer required, remi189 may delete, securely destroy or anonymise it, subject to technical and legal limitations.

A request to close an account does not necessarily require immediate deletion of all records. Certain information may remain necessary to prevent duplicate accounts, honour self-exclusion, resolve disputes or meet record-keeping obligations.

Section 12

User rights and requests

Subject to applicable law and verification of identity, users may request access to personal data held by remi189, correction of inaccurate data or information about how data has been used. Other rights may include withdrawal of consent, objection to certain processing, restriction or deletion where legally available.

A request must contain enough detail for remi189 to identify the relevant records without requiring unnecessary sensitive information. Additional verification may be requested to prevent personal data from being disclosed to an impostor.

A right may be limited where fulfilling it would conflict with another person's rights, security requirements, fraud prevention, a legal obligation or the establishment or defence of a legal claim. If remi189 cannot fulfil a request, a reason should be provided where appropriate.

Section 13

Children and age restrictions

remi189 is not directed at children or anyone below the age of 21. Personal data must not be submitted by or on behalf of a minor for the purpose of gaining access to age-restricted content.

If remi189 reasonably believes that a person is underage, access may be restricted and identity verification may be requested. Information may be retained to the limited extent needed to prevent further underage access or comply with applicable obligations.

Section 14

Responsible gambling information

Privacy considerations apply to responsible gambling records, including deposit limits, cooling-off periods, self-exclusion and communications about gambling-related harm. remi189 may process these records to protect users and enforce requested restrictions.

Self-exclusion information may need to be retained even after account closure. Deleting it too early could undermine the user's request and permit unintended access. Access to such information should be limited to personnel and providers who need it for responsible gambling or security purposes.

Section 15

Changes to this Privacy Policy

remi189 may revise this Privacy Policy when website features, data practices, security controls or applicable requirements change. The effective date at the top of the page indicates when the current version became operative.

Users should review this page periodically. Where a change materially affects the handling of personal data, remi189 may provide an additional notice where reasonably practicable. Continued website use does not replace consent where fresh consent is legally required.