ra888 Privacy Policy for Malaysian Players

Introduction and Scope

This Privacy Policy applies to personal data processed by ra888 in connection with the ra888 website, mobile interfaces, account services, casino games, sports markets, promotions, payment functions, security procedures, and customer support. It applies when a person browses ra888, registers an account, completes identity checks, funds an account, requests a withdrawal, claims a promotion, or contacts the support team.

By using ra888, a user acknowledges that personal data will be handled as described in this policy. This document should be read together with the Terms & Conditions and Responsible Gambling information. If a user does not agree with the described processing, they should not register or continue using the platform.

References to “personal data” mean information relating to an identified or reasonably identifiable individual. Aggregated or anonymised information that cannot reasonably identify a person may be used for statistical, security, product, and operational purposes outside the scope of personal data requirements.

Information ra888 May Collect

The type of data collected depends on how a person interacts with ra888. Information may include:

• Identity information: full name, date of birth, nationality, gender where relevant, MyKad or passport details, and identity verification images.
• Contact information: residential address, email address, Malaysian phone number, and preferred support language.
• Account information: username, encrypted password data, account status, communication preferences, security settings, and verification history.
• Financial information: selected payment method, masked bank or eWallet details, transaction references, MYR deposit and withdrawal records, and relevant source-of-funds information.
• Gaming information: casino rounds, sports wagers, stakes, winnings, losses, bonuses, cashback, wagering progress, and account limits.
• Technical information: IP address, device type, browser, operating system, login time, approximate location, language settings, cookies, and security logs.
• Support information: messages, complaint details, uploaded evidence, account notes, and records of action taken by ra888 support.

Users should provide accurate and current information. A failure to provide information required for identity verification, payment processing, fraud prevention, or account security may prevent ra888 from providing part or all of the requested service.

How Information Is Collected

ra888 receives information directly when a user enters registration details, uploads verification documents, selects an offer, deposits MYR, requests a withdrawal, sets an account limit, or communicates with support. Direct collection helps ra888 establish account ownership and respond to specific requests.

Information is also generated automatically through normal platform use. For example, ra888 records logins, devices, page activity, casino rounds, Liga Super Malaysia or EPL wagers, transaction attempts, and security events. These records are necessary to maintain balances, settle activity, investigate errors, and detect suspicious behaviour.

Subject to applicable requirements, ra888 may receive information from payment providers, identity verification services, banks, eWallet operators, game providers, sports data suppliers, security vendors, and other parties involved in delivering the service. Data received from such sources may be compared with information supplied by the user.

Purposes and Grounds for Data Processing

ra888 processes personal data where it is necessary to provide requested services, administer the user agreement, meet applicable obligations, protect legitimate business and security interests, or act with valid consent where consent is required.

Processing purposes may include:

• creating, authenticating, maintaining, suspending, or closing a ra888 account;
• confirming that a player is aged 21 or above and verifying identity;
• processing deposits, withdrawals, refunds, bonus credits, and transaction corrections;
• providing casino games, sports betting markets, account histories, and customer support;
• detecting fraud, duplicate accounts, payment abuse, collusion, money laundering indicators, or unauthorised access;
• applying deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls;
• improving ra888 performance, navigation, game discovery, payment reliability, and service quality;
• communicating important account, security, payment, policy, or service information; and
• maintaining records and responding to valid legal, regulatory, audit, or dispute-related requirements.

Where ra888 relies on consent for optional communication or another specific purpose, that consent may generally be withdrawn for future processing. Withdrawal does not affect processing already completed lawfully or information that ra888 must retain for another valid reason.

Payments, Verification, and Financial Data

Malaysian players may use available methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, or RHB Bank. When a user selects one of these options, ra888 may exchange transaction references and verification details with the relevant payment provider.

ra888 does not require users to send full passwords, one-time banking codes, or complete payment credentials to customer support. Users should never disclose such information in live chat or email. Depending on the payment route, sensitive payment data may be entered directly into a protected provider interface rather than stored by ra888.

Identity and source-of-funds checks may require documents showing a person's name, address, payment ownership, or transaction history. Documents should be complete enough for the stated review. ra888 limits internal access to personnel or service providers who require the information for verification, security, payment, compliance, or dispute handling.

Cookies, Analytics, and Device Information

ra888 may use cookies and similar storage technologies to maintain sessions, remember settings, protect logins, measure page performance, identify technical problems, and understand how users navigate the platform. Some cookies are necessary for essential account and security functions.

Functional technologies may remember language, interface, or game preferences. Analytics information may help ra888 determine whether pages load correctly on Android, iOS, desktop, or tablet devices and whether users can locate account and payment tools. Security technologies may help detect unusual login patterns, automated traffic, or attempts to bypass account restrictions.

Browser controls may allow a user to delete or block certain cookies. Blocking essential cookies can prevent ra888 from maintaining a secure login or providing parts of the service. Cookie availability and controls may vary by device and browser.

When Personal Data May Be Shared

ra888 may share limited personal data with vetted service providers where necessary to operate the platform. These recipients may include hosting providers, identity verification services, payment processors, Malaysian banks and eWallet operators, fraud prevention specialists, game suppliers, sports settlement providers, communication services, professional advisers, and security vendors.

Service providers are expected to process information for authorised purposes and apply appropriate confidentiality and security measures. The information disclosed depends on the service. For example, a payment provider may receive transaction and account-holder details, while a game provider may receive a technical player reference rather than full identity data.

ra888 may disclose information where reasonably required to investigate fraud, protect users, enforce the Terms & Conditions, respond to a lawful request, establish or defend legal rights, or support a business reorganisation. If control of the business changes, relevant data may transfer subject to suitable confidentiality and privacy safeguards.

International Processing

Some technology, security, payment, game, or support providers used by ra888 may process information outside Malaysia. Privacy and data protection standards can differ between locations. Where personal data is transferred internationally, ra888 seeks to use appropriate contractual, organisational, or technical safeguards relevant to the circumstances.

International processing may be necessary to deliver live casino games, settle sports markets, maintain secure infrastructure, or provide round-the-clock support. ra888 aims to limit transferred data to what the recipient reasonably requires for the authorised task.

Information Security and Retention

ra888 applies technical and organisational safeguards designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Measures may include encrypted connections, access controls, monitoring, verification procedures, staff confidentiality requirements, segmented systems, backup processes, and incident response procedures.

No internet service can guarantee absolute security. Users contribute to account protection by choosing a strong and unique password, securing their phone and email account, logging out of shared devices, and reporting suspicious activity promptly. ra888 will never ask a user to disclose a complete password or one-time banking code.

Information is retained for as long as reasonably necessary to operate an account, process payments, settle disputes, prevent fraud, support responsible gambling restrictions, and meet applicable legal or record-keeping requirements. Retention periods vary according to the data category and purpose. After a retention period ends, ra888 may securely delete, anonymise, or isolate the relevant information.

Closing an account does not always result in immediate deletion. Transaction, verification, self-exclusion, security, and dispute records may need to remain available for a defined period. Anonymised statistics may be retained where they no longer identify the user.

User Rights and Privacy Choices

Age Restriction and Responsible Gambling Data

ra888 services are intended only for players aged 21 and above. ra888 does not knowingly permit an underage person to maintain a gambling account. If information indicates that an account holder may be under 21, the account may be restricted while age and identity are reviewed.

Responsible gambling information may include deposit limits, session reminders, cooling-off periods, self-exclusion requests, interaction notes, and account activity reviewed for potential harm. ra888 processes this information to apply player-selected controls, identify relevant risk indicators, and support safer account management.

Self-exclusion records may be retained after account closure so ra888 can continue enforcing the restriction and prevent attempts to reopen access through duplicate details. This processing is intended to protect the user and preserve the effectiveness of responsible gambling measures.

Policy Changes and Contact Us

ra888 may revise this Privacy Policy to reflect changes in services, security practices, payment methods, legal requirements, or data processing activities. The effective date at the top of this page indicates when the current version took effect. Material updates may also be communicated through an account notice or another appropriate channel.

Continued use of ra888 after an update means that the user has had an opportunity to review the revised policy. Where a change requires consent, ra888 will request that consent through an appropriate process rather than relying only on continued use.

Privacy questions, correction requests, access requests, or complaints may be directed to ra888 customer support. The support email appears as plain text in the footer. Users should provide enough information to identify the relevant account and describe the request, but must not disclose a password, one-time code, or complete banking credential.

ra888 will review valid privacy enquiries and respond within a reasonable period, taking account of identity verification, request complexity, record availability, and any applicable legal obligations.