Privacy Policy – ra8888

1. Introduction & Scope

ra8888 ("we", "us", "our") operates the online gaming platform accessible at ra8888.app. This Privacy Policy ("Policy") sets out the basis on which we collect, use, store, disclose, and otherwise process personal data relating to individuals who visit, register on, or otherwise interact with the ra8888 platform ("Members" or "you").

This Policy applies to all personal data processed by ra8888 in connection with the platform, including data collected through the website, mobile-optimised browser interface, customer support channels, and any other ra8888 communication touchpoints. It does not apply to third-party websites or services that may be linked from the platform, each of which operates under its own privacy practices.

By registering an Account or using the ra8888 platform, you acknowledge that you have read and understood this Policy. Where we rely on consent as our lawful basis for processing, your use of the platform following notice of this Policy constitutes that consent.

2. Data We Collect

ra8888 collects the following categories of personal data from Members and platform visitors. We collect only data that is necessary for the purposes described in this Policy.

ra8888 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric identifiers unless strictly required for compliance purposes and only with appropriate safeguards in place.

3. How We Collect Data

ra8888 collects personal data through the following means:

• Direct collection: Information you provide during registration, account verification, support interactions, or promotion participation — including form submissions, document uploads, and live chat transcripts.
• Automated technical collection: Data collected automatically when you access the platform, including IP address, device identifiers, browser fingerprint, and session activity logs.
• Cookies and similar technologies: First-party cookies and session storage used to maintain login state, remember preferences, and support platform functionality. See Section 6 for full details.
• Payment processors: Transaction confirmation data received from payment providers including Touch n Go eWallet, Boost, GrabPay, and FPX banking partners, limited to what is necessary to confirm and reconcile transactions.
• Third-party verification services: Identity and document verification data received from KYC service providers used to fulfil our compliance obligations under applicable gaming licensing requirements.

4. Lawful Basis for Processing

ra8888 processes personal data under one or more of the following lawful bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to provide the ra8888 platform services, operate your Account, process deposits and withdrawals, and settle wagers.
• Legal obligation: Processing required to comply with anti-money laundering obligations, gaming licensing requirements, fraud prevention mandates, and other applicable legal requirements.
• Legitimate interests: Processing necessary for ra8888's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud detection, responsible gaming monitoring, and platform improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, carried out only where you have given clear affirmative consent, which may be withdrawn at any time.

5. How We Use Your Data

ra8888 uses collected personal data for the following purposes:

• Creating and managing your ra8888 Account, including authentication and access control.
• Processing deposits, withdrawals, and the settlement of wagers in Malaysian Ringgit (MYR).
• Verifying your identity and age as required under our international gaming licensing obligations.
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other forms of prohibited activity on the platform.
• Monitoring gameplay patterns for the purposes of responsible gaming intervention and self-exclusion administration.
• Providing customer support and responding to enquiries submitted via live chat or other channels.
• Sending transactional communications including deposit confirmations, withdrawal receipts, and security alerts.
• Sending promotional communications, including details of bonuses and offers, strictly where you have given marketing consent.
• Analysing aggregated platform usage data to improve the ra8888 platform, user experience, and game offering.
• Complying with requests from competent regulatory authorities, law enforcement agencies, or courts where legally required.

6. Cookies & Tracking Technologies

ra8888 uses the following types of cookies and similar technologies on the platform:

• Essential cookies: Required for the platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and previously selected payment methods, to improve your experience on return visits.
• Analytics cookies: First-party analytics used to understand how Members navigate the platform — which pages are visited most, where sessions end, and how features are used — in aggregate and anonymised form only. ra8888 does not use third-party advertising or tracking cookies.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or using core platform features.

7. Data Sharing & Disclosure

ra8888 does not sell or rent your personal data. We share personal data only in the following limited circumstances:

• Payment service providers: Financial data is shared with payment processors (Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank) solely to the extent required to process transactions. These providers are bound by their own data protection obligations.
• KYC and identity verification providers: Identity and document data is shared with licensed third-party KYC service providers to fulfil our verification obligations. These providers process data exclusively on ra8888's behalf.
• Game providers: Anonymised or pseudonymised gameplay data may be shared with licensed game providers for the purpose of game performance analytics and responsible gaming compliance.
• Regulatory and legal authorities: Where required by applicable law, court order, or licensing authority direction, ra8888 will disclose personal data to competent authorities. We will notify affected Members of such disclosures where legally permissible.
• Business transfers: In the event of a merger, acquisition, or sale of ra8888's operating business, personal data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained by the acquiring entity.

8. International Data Transfers

ra8888 operates under international gaming licensing, and certain data processing activities — including cloud storage, KYC verification, and game server operations — may involve the transfer of personal data to servers or service providers located outside Malaysia. Where such transfers occur, ra8888 implements appropriate safeguards including standard contractual clauses, data processing agreements, and, where applicable, adequacy assessments to ensure that transferred data receives a level of protection consistent with this Policy.

By using the ra8888 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy.

9. Data Retention

ra8888 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention principles apply:

• Active Account data: Retained for the duration of Account activity and for a minimum of five (5) years following Account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction data is retained for a minimum of seven (7) years following the date of each transaction.
• KYC documents: Identity verification documents are retained for five (5) years following Account closure or the conclusion of any ongoing compliance investigation.
• Marketing data: Communication preference records and consent logs are retained until withdrawal of consent and for a period of two (2) years thereafter as evidence of consent management.
• Technical/usage data: Retained in anonymised or aggregated form for platform analytics purposes without a fixed retention limit.

10. Your Rights

As an ra8888 Member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact ra8888 support via live chat or the email address in the platform footer, providing sufficient information to verify your identity.

• Right of Access: You may request a copy of the personal data ra8888 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your Account.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing, at any time.

ra8888 will respond to verified data rights requests within thirty (30) days. Where a request cannot be fulfilled — for example, because retention is required for legal compliance — we will explain the reasons in writing.

11. Children's Privacy

The ra8888 platform is strictly for individuals aged 21 and above. ra8888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual below this age threshold, we will take immediate steps to delete that data and close the associated Account.

If you believe that a minor has registered an Account on the ra8888 platform, please contact ra8888 support immediately so that we can investigate and take appropriate action.

12. Security Measures

ra8888 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ra8888 platform.
• AES-256 encryption for data stored at rest on ra8888 servers.
• Two-factor authentication available to all Members as an additional login security layer.
• Real-time anomaly detection systems that flag unusual login activity — including access from new locations or devices — and trigger additional verification.
• Regular penetration testing and security audits conducted by qualified independent security professionals.
• Strict internal access controls limiting personal data access to personnel with a documented operational need.
• Incident response procedures in place to detect, contain, and notify affected parties of any data breach within a timeframe consistent with applicable legal requirements.

While ra8888 employs industry-standard security practices, no system is impenetrable. Members are encouraged to use strong, unique passwords, enable two-factor authentication, and access the platform only on trusted, personal devices to maximise account security.

13. Changes to This Privacy Policy

ra8888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify active Members via email or in-platform notification at least fourteen (14) days prior to the effective date of the updated Policy. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the ra8888 platform following the effective date of any update constitutes acceptance of the revised Policy. If you disagree with any change, you may close your Account by contacting ra8888 support, and we will process the closure in accordance with these Terms.

14. Contact Us

For any enquiries, requests, or complaints relating to this Privacy Policy or the handling of your personal data by ra8888, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 from within your ra8888 Account dashboard — the fastest way to reach us.
• Email: [email protected] (plain text — not a clickable link)

We will acknowledge your enquiry within two (2) business days and aim to provide a substantive response within fourteen (14) days. For complex requests — such as full data subject access requests — the response period may be extended to thirty (30) days, and we will notify you if this applies.