Privacy Policy — ra88

This Privacy Policy ("Policy") describes how ra88 ("ra88", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to registered players, visitors to the ra88 website, and any other individuals who interact with our Services.

ra88 operates under an international gaming authority licence and takes its obligations under applicable data protection legislation seriously. We are committed to processing personal data lawfully, fairly, and in a transparent manner. This Policy is incorporated by reference into the ra88 Terms & Conditions and should be read alongside them.

If you have any questions about how ra88 handles your personal data, please contact our Data Protection team at [email protected] (plain text only — not a clickable link).

ra88 collects personal data from you in the following categories, depending on how you interact with our platform:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify compliance with the 21+ age requirement);
• Malaysian mobile number (used as your primary account identifier and for OTP verification);
• Email address (where provided);
• Identity verification documents (e.g., MyKad, passport) where required for KYC compliance.

2.2 Financial Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, FPX bank account details, USDT wallet address);
• Account wallet balance history.

2.3 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, browser type and version;
• Session duration, pages visited, and features accessed within the ra88 platform;
• Game activity logs, including bets placed, games played, and session histories.

2.4 Communications Data

• Live chat transcripts and support ticket correspondence;
• Marketing communication preferences;
• Feedback and survey responses (where submitted voluntarily).

ra88 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data except where strictly required by applicable KYC law.

ra88 processes your personal data for the following purposes:

• Account Management: To create, verify, operate, and maintain your ra88 account, including identity verification and age confirmation;
• Service Delivery: To provide access to casino games, live dealer tables, sportsbook markets, crash games, and all other Services;
• Payment Processing: To process deposits and withdrawals via your selected payment method and to maintain accurate transaction records;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct;
• Regulatory Compliance: To comply with obligations under our international gaming authority licence, anti-money laundering (AML) regulations, and any applicable laws;
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling and to administer self-exclusion requests, deposit limits, and cool-off periods;
• Customer Support: To respond to your queries, complaints, and service requests;
• Platform Improvement: To analyse usage data and improve the ra88 platform, game selection, and user experience;
• Marketing Communications: To send you promotional offers, bonuses, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.

ra88 does not use your personal data for automated individual decision-making that produces legal effects without human review, except as required for fraud screening and regulatory compliance.

ra88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform our obligations under the ra88 Terms & Conditions, including account creation, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable laws, including KYC identity verification, AML transaction monitoring, and regulatory reporting;
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics, where our legitimate interests are not overridden by your privacy rights;
• Consent: Processing for optional marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ra88 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We disclose personal data only in the following circumstances:

• Payment Processors: We share necessary financial data with licensed payment service providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banks, and USDT processors) to facilitate transactions;
• Game Providers: Game activity data is shared with our licensed third-party game providers solely to the extent necessary to operate the relevant games;
• KYC & AML Service Providers: Identity verification and fraud screening data may be processed by specialist third-party compliance service providers acting as data processors on our behalf;
• Regulatory & Law Enforcement Authorities: ra88 will disclose personal data to gaming regulators, law enforcement agencies, or courts where required by law or pursuant to a valid legal order;
• Business Transfers: In the event of a merger, acquisition, or sale of ra88, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom ra88 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose.

ra88 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function, including session management, login authentication, and security features. These cannot be disabled without impairing platform functionality;
• Analytics Cookies: Used to collect anonymised or pseudonymised usage data to understand how players interact with the ra88 platform, which pages are visited most frequently, and where technical issues occur;
• Functional Cookies: Used to remember your preferences, such as language settings and game display preferences.

ra88 does not use third-party advertising or behavioural tracking cookies. You may manage cookie settings through your browser's privacy controls. Disabling essential cookies may prevent the ra88 platform from functioning correctly.

ra88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your account's active status plus a minimum period of five (5) years following account closure, to comply with AML record-keeping requirements;
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping obligations;
• KYC Documents: Identity verification documents are retained for the period required by our licensing authority's KYC rules;
• Support Communications: Live chat logs and support correspondence are retained for three (3) years from the date of the interaction;
• Marketing Consent Records: Records of consent and opt-out requests are retained for five (5) years following the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ra88's data destruction procedures.

ra88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the ra88 platform;
• One-way cryptographic hashing of account passwords — ra88 staff cannot view your password in plain text;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the ra88 platform infrastructure;
• Automated systems monitoring for unusual account activity, including suspicious login attempts and atypical transaction patterns.

Subject to applicable law, you have the following rights in relation to your personal data held by ra88:

• Right of Access: You may request a copy of the personal data ra88 holds about you;
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data held about you;
• Right of Erasure: You may request deletion of your personal data, subject to ra88's legal obligations to retain certain records (see Section 7);
• Right to Restrict Processing: You may request that ra88 limit the processing of your data in certain circumstances;
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a portable format;
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time through your ra88 account settings or by contacting support.

To exercise any of these rights, contact ra88 customer support via live chat or at [email protected]. ra88 will respond to verified requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days with prior notification.

The ra88 Services are strictly intended for adults aged 21 years and above. ra88 does not knowingly collect personal data from individuals under the age of 21. If ra88 discovers that personal data has been collected from a person under 21, the account will be immediately suspended and all personal data relating to that individual will be deleted.

If you have reason to believe that a minor has registered an ra88 account, please contact our support team immediately at [email protected].

ra88 operates internationally and your personal data may be processed in countries outside of Malaysia where our servers, data processors, or game providers are located. Where personal data is transferred internationally, ra88 ensures that appropriate safeguards are in place, including:

• Contractual data protection obligations with all third-party data processors;
• Compliance with the data transfer requirements of our international gaming authority licence;
• Technical security measures equivalent to those applied to data held domestically.

ra88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. Where material changes are made, ra88 will notify registered players via the mobile number or contact details associated with their account, or by displaying a prominent notice on the platform prior to the changes taking effect.

Your continued use of the ra88 Services following the effective date of any updated Policy constitutes acceptance of the revised terms. The date of the most recent update is displayed at the top of this page.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ra88 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the ra88 platform (no login required to access support chat)
• Email: [email protected]

ra88 is committed to resolving privacy-related queries promptly. Our team will acknowledge your query within two (2) business days and provide a substantive response within thirty (30) days.