Privacy Policy – raya88

raya88 ("raya88", "we", "us", "our") operates the online gaming and sports betting platform accessible at raya88.asia. This Privacy Policy explains in plain terms what personal data raya88 collects from users and registered players, the purposes for which that data is processed, how it is protected, and the rights available to you in relation to your personal information.

By registering an account with raya88 or by continuing to use the raya88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or use raya88 Services.

This Policy applies to all players accessing raya88 from Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations — as well as to any individual interacting with the raya88 platform regardless of geographic location.

For the purposes of applicable data protection law, raya88 is the data controller in respect of personal data collected through the raya88 platform. As data controller, raya88 determines the purposes and means by which personal data is processed. Where raya88 engages third-party service providers to process data on its behalf, those providers act as data processors subject to written data processing agreements that bind them to confidentiality and security obligations no less stringent than those applied by raya88 itself.

When you create a raya88 account, we collect:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (for age verification — raya88 is strictly 21+)
• Email address
• Malaysian mobile phone number
• Preferred currency (MYR by default)
• Username and encrypted password

Prior to processing any withdrawal, raya88 requires KYC verification. This requires you to submit:

• A copy of a valid government-issued photo identification (Malaysian MyKad, passport, or equivalent)
• Proof of address (utility bill, bank statement, or equivalent document dated within 3 months)
• Proof of payment method ownership (where applicable)

We record all financial transactions associated with your raya88 account, including deposit amounts, withdrawal requests, payment method identifiers (masked), bonus credits, and betting activity. This data is retained to fulfil our AML and regulatory obligations.

When you access the raya88 platform, we automatically collect certain technical information, including: IP address, browser type and version, device type and operating system, referring URL, session duration, pages visited, and in-game actions. This data is used for fraud detection, platform optimisation, and compliance purposes.

We retain records of communications between you and the raya88 support team, including live chat transcripts and email correspondence. This data is used for quality assurance, dispute resolution, and regulatory record-keeping.

raya88 processes your personal data for the following purposes:

1. Account administration: Creating and managing your raya88 account, verifying your identity, and providing access to platform Services.
2. Transaction processing: Handling deposits, withdrawals, bonus credits, and associated financial operations in MYR.
3. Regulatory compliance: Meeting KYC, AML, and gaming regulatory requirements, including record retention obligations.
4. Fraud prevention and security: Detecting and investigating suspicious activity, protecting accounts from unauthorised access, and identifying multi-accounting.
5. Platform improvement: Analysing usage patterns to improve game selection, interface design, payment flow, and support quality.
6. Customer support: Responding to enquiries, resolving disputes, and providing technical assistance.
7. Marketing communications: Sending promotional offers and platform updates to players who have opted in. You may opt out at any time.
8. Responsible gaming: Monitoring gaming behaviour to identify indicators of problem gambling and to administer self-exclusion and deposit limit requests.

raya88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the account agreement between raya88 and the player (account creation, deposits, withdrawals, gameplay access).
• Legal obligation: Processing required to comply with applicable gaming regulations, AML legislation, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

raya88 does not sell your personal data to third parties. We may share data in the following limited circumstances:

1. Payment processors: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT TRC20 providers. These processors receive only the minimum data necessary to process the transaction.
2. Identity verification providers: Third-party KYC and AML screening services used to verify player identity and conduct sanctions screening.
3. Game providers: Game studios (such as Pragmatic Play, PG Soft, Evolution, and others) may receive anonymised session data required for game operation and fairness certification.
4. Regulatory authorities: Disclosures required by our gaming licence obligations or court order. raya88 will notify affected players of such disclosures to the extent permitted by law.
5. Business transfers: In the event of a merger, acquisition, or sale of raya88 assets, player data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party data processors engaged by raya88 are contractually bound to process data only for the purposes specified by raya88, to maintain appropriate security measures, and to return or delete data upon termination of the service relationship.

raya88 uses cookies and similar technologies (including local storage and session tokens) for the following purposes:

• Essential cookies: Required for platform functionality — session authentication, login state persistence, and security tokens. These cannot be disabled without affecting platform access.
• Analytical cookies: Used to understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data is aggregated and anonymised.
• Preference cookies: Store your language, display, and notification preferences across sessions.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may impact the functionality of your raya88 session. raya88 does not use third-party advertising or retargeting cookies.

raya88 retains personal data for as long as your account remains active and for a period thereafter as required by applicable regulations. Specifically:

• Account registration and KYC documents: Retained for a minimum of 5 years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the interaction.
• Technical/usage data: Retained in aggregated form for up to 2 years for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Subject to applicable law, you have the following rights in relation to your personal data held by raya88:

1. Right of access: You may request a copy of the personal data raya88 holds about you.
2. Right to rectification: You may request correction of inaccurate or incomplete personal data.
3. Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations. Erasure requests cannot override mandatory AML retention periods.
4. Right to restriction: You may request that we restrict processing of your data in certain circumstances (e.g., while the accuracy of data is disputed).
5. Right to data portability: You may request a machine-readable copy of the personal data you have provided to raya88 directly.
6. Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
7. Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact raya88 support via live chat or at [email protected] (plain text — not a clickable link). We will respond within 30 days. Identity verification will be required before fulfilling any data access or erasure request.

raya88 Services are strictly restricted to individuals aged 21 years and above. raya88 does not knowingly collect personal data from anyone under the age of 21. If we become aware that an account has been registered by or on behalf of a minor, the account will be immediately suspended, all data deleted (subject to mandatory legal retention obligations), and any deposited funds returned to the originating payment method. If you believe a minor has registered an raya88 account, please notify our support team immediately.

raya88 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed. These include:

• SSL/TLS encryption for all data transmitted between your device and raya88 servers.
• Encrypted storage of passwords using industry-standard hashing algorithms — raya88 staff cannot view your password in plain text.
• Access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the raya88 platform.
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

Notwithstanding these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your raya88 login credentials and for notifying us immediately if you suspect unauthorised access to your account.

raya88 may transfer personal data to third-party service providers located outside Malaysia in connection with payment processing, KYC verification, or game provision services. Where such transfers occur, raya88 ensures that appropriate safeguards are in place — including contractual protections equivalent to those required under applicable data protection law — to maintain the security and integrity of your personal data throughout the transfer and processing lifecycle.

raya88 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform Services. Material changes will be communicated to registered players via email or a prominent notice on the raya88 platform prior to taking effect. The effective date of the current version is displayed at the top of this page. Continued use of the raya88 platform following any update constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to raya88's handling of your personal data, please contact our Data Protection team via:

• Live chat on the raya88 platform — available 24/7
• Email: [email protected] (plain text — not a clickable link)

We aim to respond to all privacy-related enquiries within 5 business days and to resolve data subject requests within 30 days of receipt of a verified request.