Raa888 Privacy Policy – Personal Data Protection for Malaysia Members

1 Introduction

Raa888 ("Platform", "We") operates a digital entertainment platform offering a wide range of online wagering and gaming services. In delivering these services, we collect and process certain personal data to ensure a smooth, secure, and regulatory-compliant gaming experience.

This Privacy Policy is drafted in accordance with international data protection principles and aims to clearly and transparently explain:

• The types of personal data we collect from you;
• The purpose and legal basis for processing that data;
• How we protect and securely store your data;
• Your rights regarding the personal data we hold;
• How you can contact us for any privacy enquiries.

Raa888 acts as the responsible data controller for all personal information collected through our platform. We take this responsibility seriously and are committed to managing your data with full integrity and transparency.

2 Personal Data We Collect

Raa888 collects various types of data depending on how you interact with our platform. Below is a summary of the data we collect:

3 How We Use Your Data

All data collected by raa888 is used for clear and legitimate purposes. We do not use your data for any purpose other than those stated below:

• Account Management: Creating, verifying and maintaining your member account on the raa888 platform;
• Payment Processing: Processing deposits, withdrawals and all financial transactions securely and accurately;
• KYC/AML Compliance: Verifying member identities and complying with anti-money laundering requirements in accordance with international regulations;
• Customer Support: Providing effective assistance when you contact the raa888 support team;
• Platform Security: Detecting and preventing fraud, multi-accounting and other suspicious activities;
• Service Improvement: Analyzing usage patterns to improve platform quality and experience;
• Marketing Communications: Sending promotional information and exclusive offers — only to members who have given their consent.

4 Legal Basis for Data Processing

Raa888 processes your personal data on the basis of one or more of the following valid legal grounds:

• Contract Performance: Processing required to fulfil our contractual obligations to you, including providing platform services, processing payments and managing your account;
• Legal Obligation: Processing required to comply with applicable laws and regulations, such as KYC requirements, financial reporting and anti-money laundering prevention;
• Legitimate Interests: Processing for legitimate business interests such as platform security, fraud prevention and service improvement, provided these interests do not override your fundamental rights;
• Consent: For direct marketing communications and the use of non-essential cookies, we rely on your consent, which may be withdrawn at any time.

5 Data Sharing with Third Parties

Raa888 does not sell your personal data. However, under certain circumstances, we may share data with the following parties to operate the platform:

• Payment Providers: Banks, DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and other payment processors required to complete your financial transactions;
• Game Software Providers: Game developers who provide content to the raa888 platform, subject to strict confidentiality agreements;
• Technical Service Providers: Server hosting companies, cloud services, and technical infrastructure providers operating under strict data protection contracts;
• Regulatory and Enforcement Body: Legal authorities, courts or regulatory bodies issuing valid requests in accordance with applicable law;
• Identity Verification Services: Third-party providers that assist us in conducting KYC checks and identity document verification.

6 Data Storage and Security

Raa888 applies comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL Encryption: All data communications between your device and the raa888 servers are protected with advanced encryption protocols;
• Internal Access Controls: Only raa888 staff who require access to your personal data to perform their authorised duties are permitted to do so;
• Regular Security Audits: The raa888 platform undergoes regular penetration testing and security audits conducted by independent security experts;
• Two-Factor Authentication: Access to internal systems containing member data is protected by mandatory two-factor authentication;
• Retention Period: Personal data is retained for as long as necessary for the stated purpose, or as required by law — typically no more than 7 years after account closure.

7 Cookies and Tracking Technologies

Raa888 uses cookies and similar tracking technologies to enhance your experience on the platform. There are several categories of cookies we use:

• Essential Cookies: Required for basic platform operations such as login authentication and session management. These cookies cannot be disabled;
• Functional Cookies: Saving your preferences such as language, currency and display settings to provide a more personalized experience;
• Analytics Cookies: Helping us understand how members use the raa888 platform so we can continuously improve it. This data is collected in aggregate and does not identify individuals;
• Marketing Cookies: Used to display relevant content and offers to you. These cookies are only activated once you have given your consent.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the raa888 platform.

8 Your Rights Regarding Personal Data

As a raa888 member, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact the raa888 support team via Live Chat on the platform or by emailing us. We will process your request within 30 business days.

9 International Data Transfer

In operating the raa888 platform, your personal data may be transferred to and stored on servers located outside Malaysia. All international data transfers conducted by raa888 are subject to adequate safeguards, including:

• Use of approved standard contractual clauses for data transfers to recipients in countries that have not received an adequacy decision;
• Data processing agreements with all third-party service providers who handle your data;
• Periodic assessments of the data protection practices of our partners worldwide.

Raa888 ensures that a level of data protection consistent with this Privacy Policy is maintained regardless of where your data is stored or processed.

10 Contact Us for Privacy Enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the raa888 platform — the fastest way to get a response;
• Email: [email protected] — for written requests requiring official documentation;
• Response Time: We aim to respond to all privacy enquiries within 3 business days and to fulfil formal requests within 30 days.