raa888 Privacy Policy – How We Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is issued by raa888 ("raa888", "we", "us", or "our") and applies to all personal data processed in connection with your use of the raa888 online gaming platform accessible at raa888.app ("Platform"). raa888 acts as the data controller in respect of personal data collected directly through the Platform.

By registering an account or otherwise using the raa888 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy should be read in conjunction with the raa888 Terms & Conditions, which govern the overall relationship between you and raa888 as a player.

2. Personal Data We Collect

raa888 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

raa888 does not intentionally collect special category data (such as health or biometric data) except where required for responsible gaming assessments or legally mandated KYC processes.

3. How We Collect Your Data

raa888 collects personal data through the following means:

• Direct Interactions: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and analytics tools. See Section 9 for details on cookies.
• Third Parties: Identity verification agencies, payment processors (including Touch n Go eWallet and Boost), fraud prevention services, and public databases where required for AML and KYC compliance.

4. How We Use Your Personal Data

raa888 uses the personal data we collect for the following purposes:

• To create, verify, and manage your raa888 account;
• To process deposits and withdrawals in MYR and fulfil our contractual obligations to you as a player;
• To conduct identity verification and age verification (you must be 21 or older to use raa888);
• To comply with anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) regulations;
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited activities on the Platform;
• To administer and enforce responsible gaming tools, including self-exclusion requests and deposit limits;
• To communicate with you about your account, transactions, promotions, and platform updates;
• To improve the raa888 Platform through analytics, testing, and performance monitoring;
• To resolve disputes and enforce our Terms & Conditions;
• To comply with any applicable legal or regulatory obligation.

5. Lawful Basis for Processing

raa888 processes your personal data on the following lawful bases:

• Contract Performance: Processing necessary to register your account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with KYC, AML, responsible gaming regulations, and other applicable legal obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, analytics, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: For non-essential cookies and marketing communications, where your explicit consent has been obtained and where you retain the right to withdraw consent at any time.

6. Data Sharing and Disclosure

raa888 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment Processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers necessary to process your transactions;
• Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and age;
• Fraud Prevention Services: External agencies and databases used to detect and prevent fraud and money laundering;
• Technology Providers: Hosting, cloud infrastructure, and cybersecurity service providers who process data on our behalf under data processing agreements;
• Regulatory Authorities: Licensing bodies, law enforcement agencies, and courts where we are legally required or permitted to disclose information;
• Game Providers: Certified game studios whose software is integrated into the raa888 Platform, to the extent necessary to deliver the game experience and resolve disputes.

All third parties with whom raa888 shares personal data are required to respect the security of your data and to treat it in accordance with applicable data protection law.

7. International Data Transfers

raa888 may transfer your personal data to servers or service providers located outside Malaysia. Where such transfers occur, raa888 ensures that adequate safeguards are in place — including standard contractual clauses approved by relevant data protection authorities or equivalent mechanisms — to protect your data to a standard consistent with this Policy.

By using the raa888 Platform, you acknowledge and consent to the potential transfer of your personal data to jurisdictions outside Malaysia where raa888 or its service providers operate.

8. Data Retention

raa888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements.

Specifically:

• Account data and gaming records are retained for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping obligations;
• Financial transaction records are retained for a minimum of seven (7) years;
• Customer support communications are retained for three (3) years from the date of the last interaction;
• Cookie and analytics data is retained in accordance with the retention periods described in our cookie settings.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

9. Cookies and Tracking Technologies

The raa888 Platform uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing the Platform's core functionality.
• Analytical Cookies: Used to collect aggregated information about how players use the Platform, enabling raa888 to improve performance and user experience. These are activated only where you have provided consent.
• Functional Cookies: Used to remember your preferences (such as language settings) to personalise your experience across sessions.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the raa888 Platform.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in respect of the personal data raa888 holds about you:

• Right of Access: You may request a copy of the personal data raa888 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You may request that raa888 limit the processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests. raa888 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact raa888 at [email protected]. We will respond to all requests within thirty (30) calendar days. We may require proof of identity before processing your request.

11. Data Security

raa888 implements appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the raa888 Platform;
• Encryption of sensitive personal data at rest;
• Industry-standard password hashing — your actual password is never stored in readable form;
• Two-factor authentication availability for player accounts;
• Regular security audits and vulnerability assessments;
• Strict internal access controls limiting data access to authorised personnel on a need-to-know basis.

While raa888 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. raa888 cannot guarantee absolute security but is committed to maintaining industry-leading standards and responding promptly to any security incidents.

12. Children and Minors

The raa888 Platform is strictly intended for adults aged 21 years and above. 21+ raa888 does not knowingly collect personal data from persons under the age of 21. If you are aware that a minor has provided personal data to raa888 or has registered an account, please contact us immediately at [email protected]. Upon confirmation, raa888 will take steps to delete the relevant data and close the account without delay.

13. Third-Party Links

The raa888 Platform may contain references to third-party services such as payment processors. raa888 is not responsible for the privacy practices of any third-party services. We encourage you to review the privacy policies of any third parties before submitting personal data to them. raa888's Privacy Policy applies solely to data collected through the raa888.app Platform.

14. Updates to This Privacy Policy

raa888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The current version of the Policy will always be published at raa888.app/privacy-policy with the effective date displayed at the top of the page.

Where changes are material, raa888 will notify registered Players by email to the address associated with their account prior to the changes taking effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by raa888, please contact our Data Protection team: