Privacy Policy

1. Introduction

This Privacy Policy ("Policy") issued by RA88 ("RA88", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who access or use the RA88 online gaming and sports betting platform atra88.buzz, including any associated sub-domains, mobile interfaces, and related services (collectively, the "Platform").

RA88 is committed to handling your personal data with care, transparency, and integrity. We recognise that Malaysian players entrust us with sensitive information when they register, deposit, and play on our platform — and we take that responsibility seriously. This Policy describes exactly what data we collect, why we collect it, how we use it, who we may share it with, and the rights you have with respect to your own data.

By accessing the RA88 Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must cease using the Platform immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably identify you as an individual, including your name, email address, identification number, financial details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" means RA88, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" means any third party engaged by RA88 to process Personal Data on RA88's behalf and in accordance with RA88's written instructions.
• "KYC Data" means identity verification documents and information submitted by Players to satisfyRA88's Know Your Customer requirements, including but not limited to government-issued identification documents, selfies or biometric verification, and proof of address.
• "Transaction Data" means records of all financial activity associated with a Player's Account, including deposits, withdrawals, wagers placed, and winnings.
• "Cookies" means small text files placed on your device by theRA88 Platform to facilitate functionality, analytics, and personalisation.

3. Data We Collect

RA88 collects the following categories of personal data from Players:

3.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify the21+ age requirement);
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya);
• Email address;
• Mobile phone number;
• Preferred username.

3.2 KYC & Verification Data

• Malaysian Identity Card (MyKad) number or passport number;
• Scanned copies or photographs of government-issued identification documents;
• Proof of residential address (e.g., utility bill, bank statement);
• Source of funds documentation, where applicable.

3.3 Financial & Transaction Data

• Deposit and withdrawal history in MYR;
• Payment method details (e.g., Touch 'n Go eWallet account identifier, Maybank or CIMB account details, DuitNow QR identifiers, FPX transaction references);
• Cryptocurrency wallet addresses (for USDT TRC20 transactions);
• Betting and gaming transaction records.

3.4 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Session duration, pages visited, and interaction logs;
• Cookie and similar tracking technology data.

3.5 Communications Data

• Records of communications between you and the RA88 support team via live chat or email;
• Feedback, complaints, and dispute records.

4. How We Collect Your Data

RA88 collects Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion;
• Automatically — through cookies, server logs, and analytics tools as you navigate and interact with the Platform;
• From third parties — including payment processors (such as FPX, Touch 'n Go eWallet, Boost, and GrabPay operators), identity verification service providers, fraud detection partners, and analytics providers, where such third parties are engaged by RA88 and process data under appropriate data processing agreements.

5. Data Processing & Legal Basis

RA88 processes Personal Data on the following legal bases:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract
KYC identity and age verification	Legal obligation; legitimate interests
Processing deposits and withdrawals	Performance of contract
Anti-money laundering (AML) compliance	Legal obligation
Fraud detection and prevention	Legitimate interests
Customer support and dispute resolution	Performance of contract; legitimate interests
Responsible gambling monitoring	Legitimate interests; legal obligation
Marketing and promotional communications	Consent (where given); legitimate interests
Platform analytics and improvement	Legitimate interests
Legal and regulatory compliance	Legal obligation

6. How We Use Your Data

RA88 uses collected Personal Data for the following purposes:

• To create, verify, and manage your RA88 Account;
• To process deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB FPX, Public Bank FPX, Hong Leong Bank FPX, DuitNow, and USDT TRC20;
• To verify your age (21+) and identity in compliance with KYC requirements;
• To detect and prevent fraud, money laundering, and other prohibited activities;
• To provide customer support and resolve disputes;
• To send transactional communications relating to your Account (e.g., deposit confirmations, withdrawal notifications);
• To send promotional and marketing communications where you have consented or where we have a legitimate interest in doing so;
• To monitor your gaming behaviour for responsible gambling purposes, including identifying patterns that may indicate problem gambling;
• To analyse Platform usage and improve our products, features, and user experience;
• To comply with applicable laws, regulations, and lawful orders from competent authorities.

7. Data Sharing & Disclosure

RA88 does not sell, rent, or trade your Personal Data to unafiliated third parties for commercial gain. However, we may share your data with the following categories of recipients in the course of operating the Platform:

• Payment Processors: Including operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency settlement providers — solely to facilitate the processing of your financial transactions;
• KYC & Identity Verification Providers: Third-party identity verification services engaged to validate the authenticity of documents and confirm player identity;
• Fraud Prevention & AML Partners: Service providers that assistRA88 in detecting suspicious transactions, preventing fraud, and meeting anti-money laundering compliance obligations;
• Technology & Infrastructure Providers: Cloud hosting providers, content delivery networks, and platform maintenance partners — all operating under appropriate data processing agreements;
• Analytics Providers: Third-party analytics tools used to measure Platform performance and improve user experience (data is typically anonymised or aggregated);
• Regulatory & Law Enforcement Authorities: Where RA88 is required to disclose data by applicable law, court order, or lawful request from a government or regulatory authority;
• Affiliated Entities: Companies within the RA88 corporate group, where relevant to the operation of your Account or for shared compliance purposes.

8. Data Retention

RA88 retains Personal Data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. Our general retention standards are as follows:

• Account and Registration Data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping obligations;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of Account closure, whichever is later;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Communication Records: Retained for two (2) years from the date of the last communication, or longer where a dispute or legal proceding is outstanding;
• Marketing Data: Retained until you withdraw your consent to marketing communications, after which marketing data is deleted or anonymised within thirty (30) days.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to any individual.

9. Data Security

RA88 implements a comprehensive set of technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• 256-bit Secure Socket Layer (SSL) encryption for all data transmitted between your device and the RA88 Platform;
• Encrypted storage of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access Personal Data;
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform;
• Multi-factor authentication requirements for administrative access to data systems;
• Incident response procedures designed to contain and mitigate data breach events promptly.

While RA88 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data security incident that poses a risk to your rights, RA88 will notify affected Players without undue delay in accordance with applicable legal requirements.

10. Cookies & Tracking Technologies

10.1 Types of Cookies Used

RA88 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core features such as user authentication, session management, and security functions. They cannot be disabled without rendering the Platform unusable;
• Functional Cookies: Enable the Platform to remember your preferences (such as language settings and logged-in status) to provide a more personalised experience;
• Performance & Analytics Cookies: Collect anonymised data about how Players interact with the Platform, helping us identify areas for improvement and measure the effectiveness of features;
• Marketing Cookies: Used to track the effectiveness of our promotional campaigns. Where applicable, these cookies require your prior consent before being activated.

10.2 Managing Cookies

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the RA88 Platform. Instructions for managing cookies vary by browser and are typically found in the browser's "Settings" or "Privacy" menu.

11. Your Rights as a Data Subject

Subject to applicable law andRA88's legitimate interests, you hold the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data RA88 holds about you at any time. We will respond to verified access requests within thirty (30) days;
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it;
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records;
• Right to Restrict Processing: In certain circumstances, you may request that we limit the processing of your Personal Data while a dispute or correction request is being resolved;
• Right to Data Portability: Where technically feasible and where processing is based on your consent or a contract, you may request that we provide your Personal Data in a structured, machine-readable format;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal;
• Right to Object: You may object to processing based on RA88's legitimate interests, including the use of your data for direct marketing purposes.

To exercise any of the above rights, please contact our Data Privacy team at [email protected]. We may require you to verify your identity before actioning any data request.RA88 will respond to all valid requests within thirty (30) days and will notify you if an extension is required.

12. Minors & Age Verification

The RA88 Platform is strictly intended for individuals aged21 years and above. RA88 does not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and we take all reasonable steps to confirm that applicants meet this requirement before an Account is activated.

If RA88 becomes aware that it has inadvertently collected Personal Data from an individual under 21, we will take immediate steps to delete that data and close the associated Account. If you believe that we may hold data relating to a minor, please contact us immediately at [email protected].

13. International Data Transfers

RA88 operates internationally and may transfer your Personal Data to servers, Data Processors, or affiliated entities located outside Malaysia. In all cases where such transfers occur, RA88 takes reasonable steps to ensure that your data continues to be handled with the same level of protection as required under this Policy and applicable data protection laws.

Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, RA88 will implement appropriate safeguards, which may include contractual clauses, data processing agreements, or other legally recognised transfer mechanisms.

14. Policy Amendments

RA88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered Players by email or through a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the RA88 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any changes, you must cease using the Platform and may request closure of your Account.

15. Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please reach out to the RA88 support team through the channels below:

• Live Chat: Available 24 hours a day, 7 days a week, via the RA88 Platform — typically the fastest response channel
• Email: [email protected] — for formal data requests and privacy concerns

All data subject requests will be acknowledged within five (5) business days and actioned within thirty (30) days of receipt of a verified request. RA88 is committed to resolving all privacy matters fairly and transparently.