Privacy Policy Raja88 — How We Protect the Personal Data of Malaysian Members

Raja88 ("we", "the Platform") is fully committed to protecting the privacy of every individual who uses our platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the raja88.click website, the Raja88 mobile app, or any other services we provide.

We take a privacy-first approach in every product design and operational decision we make. This means data protection is not something we bolt on at the end — it is built into the way we develop and run Raja88 from the ground up.

This policy is written specifically for Malaysian users in clear, accessible language. Should any inconsistency arise between the Malay version and any other language version (if available), the Malay version shall prevail for Malaysian members.

By using the Raja88 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Raja88 collects personal data through several means — information you provide directly during registration and platform use, data generated automatically as you use the platform, and in certain cases, information from legitimate third-party sources.

A. Data You Provide Directly

• Registration Information: Full name, Malaysian mobile number, email address, date of birth, and your chosen password.
• Identity Verification (KYC): A copy of your identity document (MyKad) or passport, a selfie for facial verification, and proof of ownership of your payment method — collected only when required to process your first withdrawal or when our system flags the need for additional verification.
• Financial Information: Your eWallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or Malaysian bank account number registered for deposit and withdrawal purposes.
• Customer Support Communications: Live chat, WhatsApp, and email conversations between you and the Raja88 support team are retained for quality assurance and dispute resolution purposes.
• Feedback & Surveys: If you complete a feedback form or participate in a Raja88 user survey, the information you provide is retained for product improvement purposes.

B. Automatically Generated Data

• Platform Usage Data: Records of betting activity, games played, wager amounts, session duration, and general usage patterns — required for account management and fraud prevention purposes.
• Device & Technical Data: Device type, operating system, app version, IP address, and unique device identifier — used for account security and user experience optimisation.
• Location Data: General location information based on your IP address — used solely for security purposes and to ensure compliance with regional operating requirements.
• Cookie & Tracker Data: Information collected through cookies and similar tracking technologies while you browse the Raja88 website — described in greater detail in Section 8.

C. Data Types by Requirement

Raja88 uses the personal data it collects solely for legitimate purposes that are necessary to deliver the best platform experience to Malaysian members. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your Raja88 account, processing registrations, verifying your identity, and enabling you to log in securely.
• Financial Transaction Processing: Processing deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — as well as handling withdrawal requests to your preferred payment method.
• Platform Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-accounting, money laundering, and any misuse of the platform that could compromise the safety of other members.
• Customer Support: Providing assistance when you contact Raja88 support, resolving complaints, and responding to your enquiries effectively.
• Legal Compliance: To fulfil legal obligations, including KYC and AML (Anti-Money Laundering) requirements applicable to the platform's operations.
• Product Improvement: Analysing aggregated, anonymised usage data to understand how members use the platform and to make relevant improvements.
• Important Communications: Sending important account-related notifications, updates to terms, or security alerts — never for marketing purposes without your consent.
• Promotions and Offers (with Consent): If you have consented to receive marketing communications, we use your data to deliver relevant promotions and offers based on your interests and usage patterns.

Raja88 adheres to the principle of data minimisation — we only collect and process data that is strictly necessary for the purposes stated above. We do not collect excessive data or use it for other purposes without your consent.

Raja88 does not sell, rent, or trade members' personal data to any third party for commercial or marketing purposes. However, there are limited situations where we need to share data with certain parties to operate the platform — and this is done under strict controls.

Who May Receive Your Data and Why:

• Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and other payment processors used to handle your deposit and withdrawal transactions. Data is shared only to the extent required to process the relevant transaction.
• Technical Service Providers: Companies providing technical infrastructure services to Raja88 (such as hosting, CDN, and cybersecurity) — bound by strict data confidentiality agreements with Raja88.
• KYC/AML Service Providers: Third parties that assist Raja88 in carrying out identity verification and anti-money laundering compliance checks as required by law.
• Regulatory Authorities: Law enforcement agencies, regulatory bodies, or courts with valid legal authority to request information — Raja88 will only comply with lawful court orders or official requests and will notify you where permitted to do so.
• In Business Operations: In the event of a merger, acquisition, or sale of Raja88's assets, user data may be transferred to the new entity — members will be notified in advance and given the option to close their account if they do not agree.

Raja88 continually invests in security technologies and procedures to ensure your personal data is protected in the most effective way possible. The technical and organisational security measures we employ include:

• Data Encryption in Transit: All communications between your browser or app and Raja88's servers are encrypted using 256-bit TLS/SSL — making any transmitted data unreadable even if intercepted.
• Data Encryption at Rest: Sensitive data such as passwords (stored as salted hashes), financial information, and KYC documents are encrypted within Raja88's databases.
• Multi-Tiered Access Controls: Only specifically authorised Raja88 staff may access user data — and every access is logged for audit purposes.
• Two-Factor Authentication (2FA): Raja88 strongly encourages all members to enable 2FA on their accounts as an added layer of security. For Raja88's internal system administration, 2FA is mandatory.
• 24/7 Security Monitoring: Intrusion detection systems and round-the-clock traffic monitoring to identify and respond to security threats promptly.
• Regular Security Audits: Raja88 conducts regular vulnerability assessments and penetration testing by independent security specialists to identify and address weaknesses before they can be exploited.
• Staff Training: All Raja88 staff who handle user data undergo regular data protection training to ensure compliance with security procedures.

While Raja88 takes all reasonable measures to protect your data, no system can guarantee absolute 100% protection against all cyber threats. You also play a role in keeping your account secure — use a strong password, do not share your login credentials, and notify Raja88 immediately if you suspect any suspicious activity on your account.

Raja88 does not retain your personal data longer than necessary for the purpose it was collected, or beyond the period required by law. The following are our data retention guidelines by category:

• Active Account Data: For as long as your Raja88 account remains active — your account data, profile information, and preferences are retained to ensure a seamless platform experience.
• Financial Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of 7 years from the date of the transaction — a standard financial compliance requirement related to anti-money laundering regulations.
• KYC Documents: Copies of identity cards and other verification documents are retained for the period stipulated by applicable compliance requirements — typically no more than 5 years after account closure.
• Customer Support Records: Conversation and complaint records are retained for 3 years from the date of the last interaction, for quality purposes and to assist in resolving any subsequent disputes.
• Analytics Cookie Data: Depending on the cookie type — ranging from a few seconds (session cookies) to a maximum of 2 years (persistent cookies). Further details are provided in Section 8.
• After Account Closure: Upon closure of your Raja88 account, we will delete or anonymise personal data that is no longer needed within 90 days — except for data that must be retained for legal compliance or to resolve any outstanding disputes.

If you would like to know exactly how long specific data about you is retained, you may contact the Raja88 support team at support@raja88.click with a written request.

As a Raja88 member and as an individual who has submitted personal data to us, you hold several important rights that we fully respect. You may exercise these rights at any time by contacting Raja88:

The Raja88 website and app use cookies and similar tracking technologies to enhance your experience, keep your account secure, and understand how the platform is used. Cookies are small text files stored on your device when you visit the Raja88 website.

The following are the types of cookies used by Raja88:

You can manage your cookie settings through the "Privacy Settings" section in your Raja88 account, or via your browser or device settings. Please note that disabling certain cookies may affect the functionality or your overall experience on the Raja88 platform.

The Raja88 platform is strictly intended for individuals aged 18 and above. Raja88 does not intentionally target, collect, or process personal data from individuals under the age of 18.

All registrants are required to confirm that they are at least 18 years of age during the registration process. A more rigorous age verification process (via KYC documents) is carried out before the first withdrawal is processed for each new member.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe that someone under the age of 18 has registered a Raja88 account, please contact us immediately at support@raja88.click.

In the course of operating the Raja88 platform, your personal data may be stored or processed outside Malaysia — for example, on servers located in other countries used by Raja88's technical infrastructure providers.

When this occurs, Raja88 ensures that such data transfers are carried out with protections equivalent to or exceeding the standards required in Malaysia, through the following measures:

• Selecting service providers that comply with internationally recognised data protection standards
• Incorporating standard data protection contractual clauses in all agreements with vendors outside Malaysia
• Ensuring sensitive data is encrypted both in transit and at rest across all storage locations

Raja88 does not transfer data to countries that lack an adequate level of data protection without first putting in place appropriate additional safeguards.

The Raja88 platform may contain integrations or references to third-party services — including game providers, payment gateways, and analytics providers — each of which has its own privacy policy governing how they handle user data.

Raja88 is not responsible for the privacy practices of third-party services that operate independently from the Raja88 platform. We encourage you to read the privacy policies of any payment service providers you use within the payment ecosystem — for example, the privacy policies of Touch 'n Go eWallet, GrabPay, or your preferred bank.

When you make a payment through any of these methods, your transaction data is also subject to the terms and privacy policy of the respective provider — not Raja88's policy alone.

Raja88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, evolving legal requirements, or newly introduced platform features.

When there are significant changes to how we handle your personal data, Raja88 will notify you through:

• In-platform notification on Raja88 the next time you log in
• A message to your registered phone number for any changes that materially affect your privacy rights
• Update the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically. Your continued use of the Raja88 platform following any amendments constitutes your acceptance of the updated policy.

If you have any questions or concerns, or wish to exercise your rights regarding personal data as outlined in this Privacy Policy, please contact Raja88 through the following channels:

• Privacy Email: support@raja88.click — please use "Data Privacy Enquiry" as the email subject for faster processing
• Live Chat: Available 24/7 via the chat icon on the Raja88 platform or app — best for general privacy enquiries
• WhatsApp: Available via the Raja88 support number listed in your account

Raja88's support team operates 24 hours a day in Bahasa Malaysia and is ready to assist with all your data privacy enquiries thoroughly and courteously. Formal requests to exercise privacy rights will be processed within 14 business days from the date of receipt.