raya88 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data collected and processed by raya88 ("raya88", "we", "us", "our") in connection with the operation of the raya88 online gaming platform accessible at raya88.win and any related services, communications, or interactions.

This Policy applies to all registered players, prospective players who interact with the raya88 Platform without completing registration, and any other individuals whose personal data raya88 processes in the course of its operations.

By registering an account on raya88 or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the raya88 Platform.

2. Data Controller

raya88 acts as the data controller in respect of personal data collected through the raya88 Platform. As data controller, raya88 determines the purposes and means of processing your personal data. For all data-related enquiries, requests, or complaints, contact us at: [email protected]

3. Personal Data We Collect

raya88 collects the following categories of personal data:

raya88 does not intentionally collect sensitive personal data such as biometric data, health information, or political opinions unless specifically required for regulatory compliance purposes, in which case your explicit consent will be sought.

4. How We Collect Your Data

raya88 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you interact with the raya88 Platform, including via cookies, session identifiers, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment transaction data from payment processors (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, FPX). raya88 only receives data from third parties where you have authorised such disclosure or where raya88 is legally permitted to obtain such data.

5. Legal Basis for Processing

raya88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the raya88 Services to you, including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and gaming regulatory obligations.
• Legitimate interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional data sharing, where your specific consent has been obtained. You may withdraw consent at any time by contacting support.

6. How We Use Your Data

raya88 uses your personal data for the following purposes:

• Creating, verifying, and managing your raya88 Account
• Processing deposits, withdrawals, and other financial transactions in MYR
• Complying with KYC, AML, and other regulatory obligations imposed by gaming and financial authorities
• Detecting, investigating, and preventing fraud, money laundering, and other illegal activity
• Providing customer support via live chat and email
• Monitoring for responsible gaming indicators and enforcing 21+ age restrictions
• Improving Platform performance, user experience, and game offerings
• Sending account-related notifications (transaction confirmations, security alerts, policy updates)
• Sending promotional communications, where you have given consent to receive them
• Resolving disputes and enforcing raya88's Terms & Conditions

7. Data Sharing & Disclosure

raya88 does not sell your personal data. We may share your data with the following categories of recipients only where necessary and lawful:

• KYC & identity verification providers: To verify your identity and comply with regulatory obligations.
• Payment processors: To process deposits and withdrawals (e.g., Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX). These providers receive only the data necessary to process your transaction.
• Gaming platform providers & software licensors: Game providers and platform infrastructure providers who process data on raya88's behalf under contractual data processing agreements.
• Regulatory & law enforcement authorities: Where raya88 is legally required to disclose information, including in response to lawful requests from Malaysian authorities, anti-money laundering reporting obligations, or court orders.
• Fraud prevention services: To screen for and prevent fraudulent activity on the Platform.

All third-party service providers engaged by raya88 are contractually obligated to maintain appropriate data protection standards and may only use your data for the specific purposes for which it has been shared.

8. Cookies & Tracking Technologies

raya88 uses the following types of cookies and similar technologies on the Platform:

• Strictly necessary cookies: Essential for the Platform to function. These cookies enable session management, authentication, and security features. They cannot be disabled without impairing core Platform functionality.
• Performance & analytics cookies: Used to understand how players interact with the Platform — for example, which pages are visited most frequently. This data is aggregated and anonymised.
• Functional cookies: Used to remember your Platform preferences, such as language settings and display options.

raya88 does not use cookies to build advertising profiles or to track your activity across third-party websites. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality.

9. Data Retention

raya88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, in accordance with AML and gaming regulatory requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 3 years from the date of the interaction.
• Technical and usage data: Retained for up to 24 months in identifiable form, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, raya88 will securely delete or anonymise your personal data.

10. Data Security

raya88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and raya88 servers
• Encryption of sensitive data at rest, including identity documents and financial records
• Role-based access controls limiting data access to authorised personnel only
• Regular security audits and penetration testing of Platform infrastructure
• Intrusion detection systems and real-time security monitoring
• Secure, access-controlled data centres for server infrastructure

While raya88 takes all reasonable precautions, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, raya88 will notify affected individuals and relevant authorities in accordance with applicable law.

11. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by raya88:

• Right of access: You may request a copy of the personal data raya88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to raya88's legal retention obligations.
• Right to restriction: You may request that raya88 restrict processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of certain personal data in a machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, contact raya88 at [email protected] with your full name, registered Account username, and a description of your request. raya88 will respond within 14 business days. Identity verification may be required before processing your request.

12. Children & Minors

raya88 strictly prohibits access to the Platform by individuals under the age of 21. raya88 does not knowingly collect personal data from individuals under 21 years of age. If raya88 becomes aware that personal data has been collected from a minor, that data will be immediately deleted and the Account closed. Parents or guardians who believe a minor has accessed the raya88 Platform should contact support immediately.

13. International Data Transfers

The raya88 Platform is operated from servers located in secure data centres. In certain cases, your personal data may be processed by third-party service providers located outside of Malaysia — for example, KYC verification providers or cloud infrastructure providers. Where such transfers occur, raya88 ensures that appropriate safeguards are in place, including contractual data processing agreements and, where applicable, adequacy decisions or standard contractual clauses consistent with applicable data protection law.

14. Changes to This Policy

raya88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Players via the Platform or by email to your registered account address. The effective date displayed at the top of this page reflects the date of the most recent revision. Continued use of the raya88 Platform following notification of any changes constitutes your acceptance of the updated Policy.

15. Contact & Complaints

For all privacy-related enquiries, requests, or concerns, contact the raya88 Data Protection team at: [email protected]

raya88 takes all privacy complaints seriously and will investigate and respond to all legitimate complaints promptly. If you are not satisfied with raya88's response to a complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.