rm9 Privacy Policy
This policy clearly explains how we collect, store, use, and protect your personal data at rm9.
Introduction and Purpose of This Policy
rm9 Casino (referred to as "rm9" or "we" on this page) is a platform providing online casino and football betting services in Myanmar. We take the security of players' personal data seriously.
This Privacy Policy ("Policy") explains how we collect, handle, store, and protect the personal data of players and visitors who access the website at https://rm9.im, and for what purposes. By reading this policy and continuing to use rm9's services, you are considered to have agreed to the terms set out in this policy.
This policy should be read alongside rm9's Terms and Conditions and Responsible Gaming policy. Together these documents form the complete service framework for rm9 players.
Data We Collect
rm9 collects personal data in the following categories in order to deliver services effectively—
2.1 — Information provided when registering an account
- Full name
- Date of birth (for 21+ age verification)
- Email address
- Phone number
- Username and password (stored in hashed form)
- Payment account details (KBZPay, Wave Money, AYA Pay, bank transfer)
2.2 — Information collected automatically when you use the service
- IP address and estimated network location
- Browser type, version and language settings
- Device type (desktop, mobile, tablet)
- Pages, games visited and time spent viewing
- Session cookies and tracking tokens
- Deposit / withdrawal records and play history
2.3 — Information received from third parties
- Transfer confirmations from payment service providers
- Fraud check data from service providers to prevent fraudulent activity
rm9 does not collect personal information beyond what is needed for gaming purposes.
Data handling purposes
rm9 handles collected personal data only for the following purposes—
3.1 — Account management
To create player accounts, verify account authenticity, reset passwords and maintain account security.
3.2 — Payment processing
To process deposits and withdrawals via KBZPay, Wave Money, AYA Pay and bank transfers. Financial records are retained for as long as required by law.
3.3 — Gaming compliance
To carry out checks required to prevent money laundering and financial fraud. To fulfill age verification (21+).
3.4 — Service improvement and player experience
Play data is analyzed to identify games, promotions and services that players prefer. This analysis is handled in aggregate form only, not at the individual player level.
3.5 — Customer support
Providing 24/7 Burmese live chat and email support requires access to the player's account history as a necessary reference.
3.6 — Security and fraud prevention
rm9 monitors foreign IP access, repeated login attempts and suspicious payment patterns to maintain platform stability and protect players' funds.
Cookies and tracking technology
The rm9 website uses cookies and similar tracking technologies to maintain player sessions, remember preferred settings and improve website performance.
Cookie types
- Essential Cookies — Required to maintain login sessions, process payments and run security checks; these cannot be disabled.
- Functional Cookies — Remember language preferences, game settings and UI preferences.
- Analytics Cookies — Used to understand which games and services players use most; this data is not used to identify individual players.
You can block cookies in your browser settings, but please note that blocking essential cookies may cause login and payment functions on rm9 to work incorrectly.
Third parties and data sharing
rm9 has a core policy to protect players' personal data. Personal data may only be shared where necessary, and only with the following parties in accordance with this policy—
- Payment processors — KBZPay, Wave Money and AYA Pay receive only the financial information needed to process transfers.
- Banks — Only the bank account details strictly required to carry out bank transfers are shared.
- Security and fraud prevention providers — Companies engaged solely to perform account security checks.
- Law enforcement authorities — Provided only in response to a legal requirement or court order.
rm9 will not sell, rent or disclose players' personal data to any advertising company, data broker or unrelated third party.
Data retention period
rm9 retains personal data for as long as needed to fulfill the purpose for which it was collected, and for as long as required by law or regulation—
- Account data — retained for the lifetime of the account and for a period after closure as required by law.
- Financial records — retained for an extended period to allow financial auditing and irregularity checks.
- Game records — retained for a defined period for reference in resolving player disputes.
- Support records — player interaction records are retained to ensure consistent service.
When there is no longer a purpose to continue retaining data, or when the retention period expires, we securely delete the data.
Data Security Measures
rm9 applies technical and procedural security measures to protect players' personal data from unauthorized access, alteration, disclosure, or destruction—
- All website and API communications are protected with TLS/SSL encryption (HTTPS)
- Player passwords are stored using a strong hashing algorithm and are never stored in plain text
- Financial data is stored in an encrypted database
- Only rm9 staff who strictly need access to personal data in order to provide the service may view it (role-based access control)
- In the event of a data breach, rm9 will notify you and the relevant authorities without delay
- Staff receive regular training on personal data handling and cybersecurity
While we have the measures above in place, we want to be clear that no website or data storage method can guarantee 100% security. Players should also take responsibility for keeping their own accounts secure.
Players' Personal Data Rights
Every rm9 player has the following rights regarding the personal data they have provided—
Right to access
rm9 will transparently disclose what data is held about you upon request.
Right to rectification
You can request that inaccurate or incomplete personal data be corrected.
Right to erasure
You can request that your data be deleted after the legally required retention period has ended.
Right to data portability
You can request your personal data in a readable file format.
Right to restriction
You can request a temporary restriction on data processing while a dispute is being resolved.
Right to contact
Questions or requests regarding personal data can be sent to [email protected].
To exercise any of the rights above, contact us at [email protected] or via 24/7 Live Chat on the rm9 website. We will act on your request as quickly as possible from the date it is received.
Protection for those under 21
rm9 services are for users aged 21 and above only. If we become aware that personal data of anyone under 21, including minors, has been collected, we will delete it immediately.
A date of birth must be provided when registering an account, and we use it to verify the 21+ age requirement. If a false date of birth is given to open an account, rm9 may suspend or close that account and retain the relevant records.
For more information about our core privacy policy, please read the Responsible Gaming page.
Amendments to this Policy
rm9 may update this privacy policy in line with business requirements, legal changes, or technology developments. When amendments are made, the "Last updated" date shown at the top of this page will be updated to reflect the most recent revision date.
We will display a clear notice on the rm9 website so that players are aware of any policy changes. If you continue to use rm9 services after a change has been made, you will be considered to have accepted the updated policy.
If you have any questions or concerns about this policy, you can contact us at [email protected]. The rm9 customer support team is available 24/7 and will respond in Myanmar language.