raa88 Privacy Policy

1. Who We Are

This Privacy Policy applies to the raa88 platform, accessible at raa88.org, operated by the raa88 entity licensed under the applicable international gaming authority. For the purposes of data protection law, raa88 acts as the data controller in respect of personal data collected from Members and visitors to the raa88 platform.

raa88 serves Members across Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and all other locations from which the platform is lawfully accessible. By accessing or using raa88, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

raa88 collects personal data through several channels including account registration, identity verification, payment processing, customer support interactions, and your ongoing use of the platform. The categories of personal data raa88 may collect include:

raa88 does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless expressly required for a specific regulatory or responsible gaming purpose and only with your explicit consent where required by law.

3. How raa88 Uses Your Personal Data

raa88 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which raa88 uses Member personal data include:

• Account Management — Creating, maintaining, and operating your raa88 Member account, including authentication and security.
• Identity & Age Verification — Verifying that you meet the 21+ age requirement and satisfy Know Your Customer (KYC) obligations under raa88's gaming licence.
• Payment Processing — Facilitating MYR deposits via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and bank transfer, and processing withdrawal requests.
• Regulatory Compliance — Meeting obligations under raa88's international gaming authority licence, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• Responsible Gaming — Monitoring activity patterns to identify potential problem gambling behaviour and administering self-exclusion and deposit limit tools.
• Platform Security — Detecting and preventing fraud, cheating, multi-accounting, and other prohibited conduct described in raa88's Terms & Conditions.
• Customer Support — Responding to Member enquiries, managing disputes, and delivering support via live chat and email.
• Marketing Communications — Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. Members may opt out at any time.
• Platform Improvement — Analysing aggregated and anonymised usage data to improve raa88's product, features, and performance.

4. Legal Basis for Processing

raa88 processes personal data under one or more of the following legal bases as applicable to each processing activity:

• Contractual Necessity — Processing required to perform the contract between raa88 and the Member, including account operation, payment processing, and game service delivery.
• Legal Obligation — Processing necessary for compliance with raa88's regulatory obligations under its gaming licence, including KYC, AML, and CTF requirements.
• Legitimate Interests — Processing for raa88's legitimate business interests, including fraud prevention, platform security, and platform improvement, provided such interests do not override Members' fundamental rights.
• Consent — Processing based on your freely given, specific, and informed consent where required by applicable law, including for direct marketing communications.

5. Data Sharing & Disclosure

raa88 does not sell, rent, or trade Member personal data to unaffiliated third parties for their independent marketing purposes. raa88 may share personal data in the following limited circumstances:

• Payment Processors — raa88 shares necessary financial data with authorised payment service providers (including eWallet operators and banking institutions) solely for the purpose of processing deposits and withdrawals.
• Identity Verification Providers — raa88 engages specialist KYC and identity verification service providers to assist in age and identity verification processes required under our gaming licence.
• Regulatory Authorities — raa88 may disclose Member data to its gaming licence authority, financial intelligence units, or other regulatory bodies as required by applicable law or as directed by a lawful authority.
• Legal Proceedings — raa88 may disclose personal data to law enforcement agencies or legal advisors where required by court order, subpoena, or applicable legal process.
• Group Entities — raa88 may share data with affiliated entities within the same corporate group solely for internal administrative and platform operation purposes, subject to equivalent data protection standards.

All third parties to whom raa88 discloses personal data are contractually required to process that data only for specified purposes, under raa88's instructions, and subject to appropriate security measures.

6. Cookies & Tracking Technologies

raa88 uses cookies and similar technologies on the platform for the following purposes:

• Essential Cookies — Required for the platform to function, including session management, login state maintenance, and security token handling. These cannot be disabled without impairing platform functionality.
• Performance Cookies — Used to collect aggregated, anonymised data about how Members use the raa88 platform, enabling us to identify areas for improvement. No personally identifiable information is associated with performance cookie data.
• Functional Cookies — Store Member preferences such as language settings and display preferences to personalise the raa88 experience across sessions.

raa88 does not use third-party behavioural advertising cookies or share browsing data with social media or advertising networks. You may configure your browser to refuse cookies; however, disabling essential cookies will impair your ability to use the raa88 platform, including the raa88 login function.

7. Data Retention

raa88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Member account data is retained for the duration of the Member's active relationship with raa88 and for a minimum period of five (5) years following account closure, in compliance with financial record-keeping obligations under raa88's gaming licence.
• Identity and KYC verification documentation is retained for a minimum of five (5) years following the end of the Member relationship, or such longer period as required by applicable AML/CTF regulation.
• Transaction records are retained for a minimum of seven (7) years from the date of the transaction in compliance with applicable financial regulatory requirements.
• Customer support communications are retained for three (3) years following resolution of the relevant enquiry.

Upon expiry of the applicable retention period, raa88 will securely delete or anonymise personal data in accordance with its data destruction procedures.

8. Data Security

raa88 implements appropriate technical and organisational security measures to protect Member personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption across all data transmissions between the Member's device and raa88's servers.
• Cryptographic hashing of all account passwords. raa88 does not store plaintext passwords.
• Access controls limiting internal staff access to Member personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of raa88's platform infrastructure.
• Incident response procedures to detect, contain, and notify Members of any personal data breach in accordance with applicable notification requirements.

9. Your Data Rights

Subject to applicable law, raa88 Members hold the following rights in respect of their personal data:

• Right of Access — The right to obtain a copy of the personal data raa88 holds about you, together with information about how it is processed.
• Right to Rectification — The right to request correction of inaccurate or incomplete personal data held by raa88.
• Right to Erasure — The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to raa88's legal retention obligations.
• Right to Restrict Processing — The right to request that raa88 suspends the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Object — The right to object to processing of your personal data where raa88 relies on legitimate interests as the legal basis, or to object to receipt of direct marketing communications at any time.
• Right to Data Portability — The right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.

To exercise any of these rights, please contact raa88 support. raa88 will respond to verified requests within ten (10) business days. Requests may require identity verification before raa88 can action them.

10. Children & Minors

raa88 enforces age verification during registration and reserves the right to request additional identity documentation at any time. If raa88 becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on the raa88 platform, please contact raa88 support immediately.

11. Amendments to This Policy

raa88 reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. Material changes will be notified to Members via the registered email address associated with their account and by a prominent notice on the raa88 platform.

The "Effective Date" displayed at the top of this page indicates the date on which the current version of the Privacy Policy came into force. Continued use of the raa88 platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

12. Contact & Complaints

For any questions regarding this Privacy Policy, to exercise your data rights, or to submit a data-related complaint, please contact the raa88 data team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the raa88 platform after signing in to your account

raa88 aims to acknowledge all data enquiries within 24 hours and to resolve formal subject access requests or complaints within ten (10) business days of receipt of all required information and identity verification documentation.

If you are dissatisfied with raa88's handling of a data complaint, you may be entitled to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.