Privacy Policy RA888 – Malaysian Player Data Protection

1Personal Data We Collect

To provide you with the RA888 platform's services, we need to collect several categories of personal data. Below is a full breakdown of the types of data ra888 collects and why each is required:

RA888 does not collect sensitive data such as health information, biometric data, or religious information unless you voluntarily provide it in a specific context. Any medical or health data you voluntarily share with the ra888 Responsible Gaming team will be handled with the highest level of confidentiality.

2How We Collect Your Data

RA888 collects your personal data through a number of different channels. Understanding these channels helps you know when and how your data enters the ra888 system:

• During Account Registration – When you register a new RA888 account, you provide your phone number, username and password. Additional information such as your full name and identification details is collected during the KYC verification process.
• During Financial Transactions – When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks), transaction-related information is recorded by RA888's system and the respective payment providers.
• During Platform Use – Your activity on the ra888 platform – including the types of games played, bet amounts, playing time and interactions with platform features – is automatically recorded for account management and security purposes.
• Via Cookies and Tracking Technologies – The RA888 platform uses cookies and similar technologies to remember your preferences, maintain your login session, and analyse how users interact with the platform for improvement purposes.
• Through Customer Support Interactions – When you reach out to the ra888 support team via Live Chat or email, those communication records are retained for quality control and historical reference purposes.
• From Third-Party Sources – In certain cases, such as identity verification and fraud prevention, RA888 may receive information about you from licensed identity verification service providers or fraud prevention agencies.

3How Your Personal Data Is Used

RA888 uses the personal data collected solely for legitimate purposes directly related to the provision of platform services. The following are the primary purposes for which ra888 uses your data:

• Account Management – Creating, verifying and managing your RA888 account, including processing deposits and withdrawals in MYR (RM), and managing your balance and transaction history.
• Security and Fraud Prevention – Detecting and preventing fraudulent activity, unauthorised access, money laundering, and misuse of the ra888 platform that could harm you or other members.
• Legal & Regulatory Compliance – Fulfilling legal obligations related to identity verification (KYC), anti-money laundering (AML) and reporting requirements associated with the operation of an online betting platform.
• Service Improvements – Analysing aggregated platform usage patterns to better understand the needs of Malaysian players and make relevant improvements to ra888's interface, game selection and overall experience.
• Service Communications – Sending important notices relating to your account, such as transaction confirmations, security alerts, policy updates, and promotional information that you have agreed to receive.
• Responsible Gambling – Monitoring gameplay patterns to identify signs of potential problem gambling and providing appropriate support through RA888's Responsible Gaming programme.
• Dispute Resolution – Maintaining records of transactions and activity for the purpose of resolving any disputes or complaints that may arise between members and the ra888 platform.

RA888 will not use your data for any purpose beyond those stated above without first obtaining your explicit consent. If we intend to use your data for a new purpose not covered in this policy, you will be informed and given the choice to agree or decline.

4Data Sharing with Third Parties

RA888 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are certain situations where we need to share information with trusted parties to enable the ra888 platform to operate effectively:

• Payment Providers – Transaction information that must be shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, DuitNow, ShopeePay) and online banking services (FPX, Maybank2u, CIMB Clicks) to process deposits and withdrawals in MYR. These providers are bound by strict confidentiality agreements.
• Game Providers – Usernames and session information that must be shared with Live Casino game providers such as Evolution Gaming, Pragmatic Play Live, and other licensed slots providers to enable gameplay within the ra888 platform.
• Identity Verification Service Providers – Identity verification (KYC) information is shared with licensed KYC service providers to verify your identity in accordance with anti-money laundering legal requirements.
• Lawful Authorities – RA888 will disclose information to legitimate authorities (such as law enforcement agencies) when required by court order or applicable law.
• Professional Advisor – Lawyers, accountants and auditors bound by professional confidentiality obligations, in the context of providing professional services to RA888.

5RA888 Data Security Measures

Protecting your personal data from unauthorised access, loss or misuse is a top priority for RA888. The ra888 platform implements multiple layers of security controls designed in accordance with leading information security standards:

• 256-bit SSL/TLS Encryption for all data communications between your device and RA888 servers – no sensitive data is transmitted in plain text over the internet.
• Data Encryption at Rest – Personal and financial data stored on ra888 servers is encrypted using industry-standard encryption algorithms for additional protection, even in the event of a physical access attempt.
• Layered Access Control – Only RA888 staff with a legitimate operational need are permitted to access members' personal data, and every instance of access is audited and logged.
• Two-Factor Authentication (2FA) – Available to all ra888 member accounts as an added layer of protection against unauthorised access.
• 24/7 Security Monitoring – A continuously operating threat detection and intrusion prevention system that proactively identifies and neutralises cybersecurity threats.
• Independent Security Audits – RA888 conducts regular security audits by qualified independent third parties to verify the effectiveness of its implemented security controls.
• Incident Response Plan – RA888 has clear procedures in place to respond to any data security incidents, including member notification protocols in the event of a serious data breach.

While RA888 takes all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. We encourage you to play your part in keeping your account safe by using a strong password, not sharing your login credentials, and reporting any suspicious activity to ra888 support immediately.

6Cookies and Tracking Technologies

The RA888 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. Below is an explanation of the types of cookies used and how you can manage them:

• Essential Cookies – Required for core ra888 platform functions such as maintaining your login session and processing transactions. These cookies cannot be disabled, as the platform will not function without them.
• Preference Cookies – Remembering your preferences and settings such as language (Bahasa Melayu), display settings and login information to make your experience on the ra888 platform more convenient on future visits.
• Analytics Cookies – Collects aggregated, anonymised information about how users interact with the RA888 platform. This data helps us identify popular features and areas that need improvement.
• Security Cookies – Used to detect suspicious activity, prevent fraud and protect the security of your account on the ra888 platform.

You can manage cookie settings through your browser's preferences. However, disabling essential cookies may affect the functionality of the RA888 platform. For guidance on managing cookies in popular browsers such as Chrome, Safari, or Firefox, please refer to your browser's help settings.

7Your Rights Over Personal Data

As an RA888 member, you have clearly defined rights regarding your personal data held in the ra888 system. We respect these rights and provide straightforward ways for you to exercise them:

• Right of Access – You have the right to request a copy of the personal data we hold about you. RA888 will provide a complete data report within a reasonable timeframe upon receipt of a valid request.
• Right to Rectification – If personal data held about you in the ra888 system is inaccurate or out of date, you have the right to request a correction. Some information, such as your phone number, can be updated directly through your account profile settings.
• Right to Erasure ("Right to be Forgotten") – You may request the deletion of your personal data from the RA888 system under certain circumstances – for example, when the data is no longer needed for the purpose it was collected, or when your account is closed. However, certain data may need to be retained to fulfil legal obligations.
• Right to Restrict Processing – In certain circumstances, you may request that RA888 restrict how we process your data while a dispute or review is pending.
• Right to Object – You have the right to object to the processing of your personal data for specific purposes such as receiving marketing communications. To opt out of marketing communications, use the unsubscribe link in the relevant email or contact ra888 support.
• Data Portability Rights – You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service, where applicable.

To exercise any of the rights above, contact the RA888 privacy team by email at support@ra888.biz stating the specific right you wish to exercise and your account details. RA888 will respond within 30 calendar days of receiving a complete request.

8Data Retention & Transfer Period

RA888 retains your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable laws and regulations:

• Active Account Data – For as long as your account remains active on the RA888 platform, your core account data is retained to ensure uninterrupted service operations.
• Financial Transaction Data – Deposit and withdrawal transaction records in RM are retained for a minimum of 7 years, as required by anti-money laundering regulations and accounting requirements.
• Gaming History Data – Betting activity records are retained for 5 years for dispute resolution, Responsible Gaming programme, and regulatory compliance purposes.
• Communication Data – Communication records with ra888 customer support are retained for 3 years for quality control and historical reference purposes.
• After Account Closure – Upon account closure, RA888 retains data necessary to fulfil legal obligations. Data that is no longer required is securely deleted in accordance with standard procedures.

RA888 members' personal data is processed and stored on servers located in regions with adequate data protection standards. Where cross-border data transfers requiring additional safeguards are necessary, RA888 will ensure that appropriate protection mechanisms are implemented in line with applicable international standards.

9Children's Privacy and Age Restrictions

RA888 services are strictly for individuals aged 18 and above only. The ra888 platform is not designed for, and does not collect data from, anyone under the age of 18.

RA888 takes the following steps to prevent access by minors:

• Age verification during the new account registration process.
• Identity verification (KYC) confirms the applicant's age before the first deposit is processed.
• Proactive monitoring to identify accounts that may be used by underage individuals.

If RA888 discovers or is notified that personal data collected belongs to an individual under the age of 18, we will take immediate action to delete that data and close the account in question. If you believe a child has registered an account on the ra888 platform, please contact us immediately at support@ra888.biz.

10Privacy Policy Amendments & How to Contact Us

RA888 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or changes to the ra888 platform's operations. When material changes occur, we will:

• Displaying a clear notice on the RA888 platform's main page regarding upcoming changes.
• Sending notification emails to all registered ra888 members with details of important changes.
• Updating the "Last Updated" date at the top of this document.
• In cases of highly material changes, seeking fresh consent from members before the changes take effect.

This current version of the Privacy Policy is the official version and supersedes all previous versions. We encourage you to review this page periodically.

For any enquiries, complaints, or requests regarding your privacy and personal data at RA888, you can reach us via:

• Privacy Email: support@ra888.biz – include "Privacy Enquiry" in the subject line of your email.
• Live Chat 24/7: Via the in-platform chat function on ra888 – our Bahasa Malaysia-speaking agents are ready to assist.

RA888 is committed to responding to all privacy enquiries within 30 calendar days from the date a complete request is received. For more urgent matters relating to account security, please contact ra888 Live Chat for an immediate response.