Privacy Policy – ra888

1. Introduction

ra888 ("we", "our", "us") is committed to protecting the privacy and personal data of all individuals who use the ra888 platform at ra888.win ("Platform"). This Privacy Policy ("Policy") describes in detail the categories of personal information we collect from you, the purposes for which that information is processed, the circumstances under which it may be shared with third parties, and the rights available to you in relation to your personal data.

This Policy applies to all personal data collected through your use of the Platform, whether you are a registered Member, a visitor browsing the site, or an applicant for a ra888 account. It should be read alongside our Terms and Conditions, available at /terms-conditions.

By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and do not register an account.

2. Data Controller

For the purposes of applicable data protection legislation, ra888 acts as the data controller in respect of personal data collected from Members and visitors through the Platform. As data controller, ra888 determines the purposes and means of processing your personal information.

ra888 processes personal data in accordance with the requirements of its international gaming licence, which includes obligations relating to anti-money laundering (AML) compliance, Know Your Customer (KYC) verification, responsible gaming, and player protection. These regulatory obligations constitute independent legal bases for certain processing activities described in this Policy.

Where ra888 engages third-party service providers to process personal data on its behalf — for example, payment processors, game providers, or identity verification platforms — such third parties act as data processors and are bound by contractual data processing agreements that restrict their use of your data to the specific purposes for which they were engaged.

3. Categories of Personal Data We Collect

ra888 collects personal data from you in several ways: directly when you provide it during registration or account management; automatically when you use the Platform; and from third parties where permitted by law. The principal categories of data we collect are set out in the table below.

We do not intentionally collect special category data (e.g., health, racial, political, or religious data) except where strictly necessary for responsible gaming interventions and with your explicit consent or under applicable legal obligations.

4. How We Use Your Personal Data

ra888 processes your personal data only for specific, legitimate purposes. The primary purposes for which your data is used are as follows:

• Account management: To create, maintain, and administer your ra888 account, including processing deposits and withdrawals, managing bonuses, and communicating account-related information.
• Identity verification (KYC): To verify your identity and age in compliance with our international gaming licence obligations. We are required to confirm that you are at least 21 years of age before permitting real-money play.
• Payment processing: To process your deposits and withdrawal requests through your chosen MYR payment channels, including Touch n Go eWallet, Boost, bank transfer, and card payments.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited activities on the Platform.
• Regulatory compliance: To fulfil our obligations under our gaming licence, applicable AML regulations, and other applicable legal requirements, including responding to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: To monitor gaming behaviour for indicators of potential harm, administer self-exclusion and limit tools, and communicate with Members where we have concerns about their play patterns.
• Platform improvement: To analyse aggregated and anonymised usage data in order to improve the Platform's performance, user experience, and game offerings.
• Marketing communications: With your consent, to send you information about ra888 promotions, bonuses, and platform updates. You may withdraw this consent at any time from your account settings.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions.

5. Legal Basis for Processing

Where data protection law requires that ra888 identify a lawful basis for each processing activity, the applicable legal bases are:

• Contractual necessity: Processing required to perform our contract with you as a registered Member — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law and our gaming licence obligations, including KYC verification, AML reporting, and the administration of responsible gaming tools.
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics, where our legitimate interests do not override your fundamental rights and freedoms.
• Consent: For optional processing activities such as direct marketing communications. Consent may be withdrawn at any time without affecting prior processing.

6. Sharing of Personal Data

ra888 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes identified in this Policy:

• Payment service providers: Including Touch n Go eWallet, Boost, GrabPay, and banking partners, to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC platforms used to verify your identity documents and confirm your age and address.
• Game content providers: Licensed game studios and platform providers (e.g., Pragmatic Play, Evolution Gaming, PG Soft) who may receive session-level data necessary to deliver their games.
• Regulatory and law enforcement authorities: Where required by law, court order, or our gaming licence obligations, including suspicious transaction reports filed with relevant financial intelligence units.
• Professional advisers: Legal, accounting, and auditing firms engaged by ra888, subject to professional confidentiality obligations.
• Technology and infrastructure providers: Cloud hosting, security, and platform technology suppliers who process data on ra888's behalf under contractual data processing terms.

All third parties with whom ra888 shares personal data are required to process that data in accordance with applicable data protection standards and solely for the authorised purpose for which it was disclosed.

7. Cookies & Tracking Technologies

ra888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Necessary for the operation of the Platform, including maintaining your logged-in session, storing your language and region preferences, and enabling secure authentication. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect anonymised information about how visitors interact with the Platform — including pages visited, session duration, and navigation paths — to help us improve performance and user experience.
• Security cookies: Used for fraud detection and CSRF protection, helping ra888 identify and block suspicious access attempts.
• Preference cookies: Used to remember your display preferences and customisation choices across sessions.

You may control cookie settings through your browser. Disabling essential cookies will affect your ability to log in and use core Platform features. ra888 does not use cookies to serve third-party advertising.

8. Data Retention

ra888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying applicable legal, regulatory, and licensing retention requirements.

In practice, this means:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML and gaming licence record-keeping obligations.
• KYC verification documents are retained for the same minimum period.
• Responsible gaming records, including self-exclusion history, are retained for a minimum of five years to prevent circumvention of exclusion periods across re-registrations.
• Marketing communication preferences and consent records are retained for the duration of your account and for a reasonable period thereafter for audit purposes.
• Technical and log data is typically retained for up to 12 months unless required for ongoing investigation or legal proceedings.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

ra888 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your browser and ra888's servers;
• Encryption of sensitive data at rest, including payment details and identity documents;
• Access controls ensuring that employee access to personal data is restricted to those with a legitimate operational need;
• Regular security assessments and penetration testing of the Platform;
• Two-factor authentication availability for Member accounts;
• Automatic session timeout after periods of inactivity.

Notwithstanding these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ra888 will notify affected individuals and relevant regulatory authorities in accordance with applicable legal requirements and without undue delay.

10. Your Data Rights

Subject to applicable data protection law and any overriding legal obligations (including AML and gaming licence requirements), you have the following rights in respect of your personal data held by ra888:

• Right of access: You may request a copy of the personal data ra888 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations.
• Right to restriction: You may request that processing of your data be restricted in certain circumstances, for example while the accuracy of data is contested.
• Right to portability: Where processing is based on consent or contract and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact ra888's data protection team via email at [email protected] or via live chat from within your account. We will respond to your request within 30 days of receipt, subject to any legitimate grounds for extension.

11. International Data Transfers

ra888 may transfer personal data to third parties located outside of Malaysia in the course of operating the Platform — for example, to cloud hosting providers, game studios, or KYC verification platforms with infrastructure in other countries. Where such transfers occur, ra888 ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent data transfer mechanisms, to protect your data to a standard equivalent to that required under applicable data protection law.

By using the ra888 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to service providers outside Malaysia as described in this section, in each case under appropriate data transfer safeguards.

12. Children and Minors

The ra888 Platform is strictly for adults aged 21 and above. ra888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you believe a minor has registered an account or provided personal data to ra888, please contact our customer support team immediately at [email protected] or via live chat.

13. Changes to This Privacy Policy

ra888 reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Members by email or via an in-platform notification.

Your continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy. We encourage you to review this Policy regularly to stay informed about how ra888 processes your personal data.

14. Contact & Data Enquiries

If you have questions, concerns, or requests relating to this Privacy Policy or the manner in which ra888 handles your personal data, please contact us through the following channels:

• 24/7 Live Chat: Available within your ra888 account dashboard
• Email: [email protected]

ra888 aims to acknowledge privacy-related enquiries within two business days and to resolve them within 30 calendar days of receipt, subject to complexity. For unresolved privacy complaints, you may escalate to ra888's licensing authority as detailed in our Terms and Conditions.