ra888 Privacy Policy

1. Introduction

ra888 ("ra888", "we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors who use the ra888 platform at ra888.co ("the Platform", "the Services"). This Privacy Policy ("Policy") describes our data practices in plain terms so that you understand exactly what information we collect, why we collect it, how long we keep it, and what rights you have over it.

This Policy applies to all personal data processed in connection with your use of the ra888 website, mobile interface, live chat support, and any other channel through which you interact with ra888. It should be read alongside our Terms & Conditions, which govern the overall relationship between ra888 and registered players.

By creating an ra888 account or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood its contents and consent to the data practices described herein. If you do not agree, you should discontinue use of the Services and may request account closure.

2. Data Controller

For the purposes of applicable data protection legislation, ra888 acts as the data controller in respect of personal data collected through the Platform. ra888 determines the purposes for which and the means by which your personal data is processed.

Enquiries relating to this Policy or to the exercise of your data rights should be directed to our Data Protection team. Contact details are provided in Section 14 of this Policy.

3. Information We Collect

ra888 collects personal information in several ways — directly from you when you register or use our Services, automatically when you browse the Platform, and from third parties where permitted by law. The categories of information we collect include:

• Identity Data: Full legal name, date of birth, nationality, and a copy of government-issued identity documentation provided during Know Your Customer ("KYC") verification.
• Contact Data: Email address, mobile phone number, and residential address in Malaysia or elsewhere.
• Account Data: Username, password (stored in hashed form), account preferences, and communication settings.
• Financial Data: Payment method details, transaction history, deposit and withdrawal records, and wallet balance information. ra888 does not store full card numbers; payment processing is handled by third-party certified payment processors.
• Transaction & Betting Data: Records of all bets placed, games played, promotional offers claimed, and outcomes on the ra888 platform.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, referral URL, and pages visited on the Platform.
• Usage Data: Session duration, click paths, feature interactions, and in-platform communication records including live chat transcripts.
• Responsible Gaming Data: Self-imposed limits, cooling-off periods, and self-exclusion records where applicable.

4. How We Use Your Data

ra888 uses your personal data only for legitimate purposes directly connected to the operation of the Platform and the delivery of our Services. The primary purposes for which we process your data are:

• To create, manage, and maintain your ra888 account, including identity verification and KYC compliance.
• To process deposits and withdrawals through Malaysian payment methods including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and GrabPay.
• To enable participation in sports betting, live casino, and slot games on the ra888 platform.
• To communicate with you regarding account activity, promotions, security alerts, and support queries.
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited activity.
• To comply with anti-money laundering ("AML"), responsible gaming, and other applicable regulatory obligations.
• To enforce our Terms & Conditions and protect the legal rights of ra888 and its players.
• To improve and personalise the Platform based on usage patterns and player feedback.
• To administer responsible gaming tools, including the application of player-initiated deposit limits, session restrictions, and self-exclusion periods.

ra888 does not sell, rent, or trade your personal data to third-party marketing organisations. Your information is not used to serve advertising from unrelated third parties.

5. Legal Basis for Processing

ra888 processes your personal data on one or more of the following legal bases depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between ra888 and you as a registered player — including account creation, bet processing, and payment transactions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML obligations, and responsible gaming mandates.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Where you have provided explicit consent for a specific processing activity, such as receiving marketing communications. You may withdraw consent at any time.

6. Data Sharing & Disclosure

ra888 shares your personal data only with parties who have a legitimate need for it in connection with the delivery of our Services or compliance with legal obligations. Recipients may include:

• Payment Processors: Third-party payment service providers operating Malaysian payment infrastructure (such as Touch n Go, GrabPay, and banking partners) who process financial transactions on our behalf.
• Identity Verification Providers: KYC and AML screening services that assist ra888 in verifying player identity documents and screening against sanctions and PEP lists.
• Technology Partners: Game content providers, platform infrastructure operators, and cybersecurity vendors engaged under data processing agreements that require them to protect your data.
• Regulatory Authorities: Law enforcement agencies, gaming regulators, or other governmental bodies where disclosure is required by applicable law or court order.
• Professional Advisors: Legal, accounting, and audit firms acting under professional confidentiality obligations.

All third parties with whom ra888 shares personal data are required to handle it in accordance with applicable data protection standards. ra888 does not authorise third parties to use your data for their own independent purposes.

7. Cookies & Tracking Technologies

ra888 uses cookies and similar tracking technologies on the Platform to ensure functionality, analyse usage, and maintain session security. The categories of cookies we use are:

• Essential Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to understand how players navigate the Platform — which pages are visited, how long sessions last, and where users encounter difficulties. Data is aggregated and anonymised where possible.
• Preference Cookies: Store your language, display, and notification preferences across sessions.

You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from logging in to or using certain features of the ra888 platform.

8. Data Retention

ra888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods are as follows:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• Transaction and betting records are retained for a minimum of five (5) years.
• Customer support communications are retained for two (2) years.
• Technical and usage data is typically retained for up to twelve (12) months from collection.
• Self-exclusion records are retained permanently to prevent re-registration in breach of an active exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ra888's data disposal procedures.

9. Your Rights

Subject to applicable data protection laws, you have the following rights in respect of your personal data held by ra888:

• Right of Access: Request a copy of the personal data ra888 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations that may prevent full erasure.
• Right to Restriction: Request that ra888 restrict the processing of your data in certain circumstances.
• Right to Data Portability: Receive a structured, machine-readable copy of data you have provided to ra888 where processing is based on consent or contract.
• Right to Object: Object to processing based on legitimate interests, including profiling for fraud prevention purposes.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact ra888 using the details in Section 14. We will respond to all legitimate requests within 30 days. Identity verification may be required before we can process your request.

10. Data Security

ra888 implements technical and organisational security measures proportionate to the risk of processing your personal data. These measures include 256-bit SSL encryption for all data in transit, hashed credential storage, role-based internal access controls, and regular security assessments.

While ra888 employs industry-standard security practices, no system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights, ra888 will notify affected players without undue delay in accordance with applicable notification obligations.

11. Children & Minors

The ra888 platform is strictly restricted to individuals who are 21 years of age or older. ra888 does not knowingly collect or process personal data from persons under the age of 21. If we become aware that a person under 21 has registered an account, that account will be immediately suspended and all associated personal data will be securely deleted in accordance with our data disposal procedures.

If you believe that a minor has accessed the ra888 platform, please notify us immediately via the contact details provided in Section 14.

12. Third-Party Links

The ra888 platform may, from time to time, contain references or links to third-party websites or services. This Privacy Policy applies solely to data processed by ra888. ra888 has no control over and accepts no responsibility for the data practices of third-party websites. We encourage you to review the privacy policies of any third-party services you access independently.

13. Amendments to This Policy

ra888 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via in-platform notification or email. The "Last Updated" date at the top of this page reflects when the Policy was most recently revised. Continued use of the ra888 platform after the publication of any amendment constitutes your acceptance of the updated Policy.

14. Contact Us

For data protection enquiries, to exercise your rights under this Policy, or to raise a concern about ra888's data practices, please contact our team via live chat on the Platform (available 24/7) or by email at: [email protected]

We aim to respond to all data-related enquiries within 30 days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

This Privacy Policy was last updated on 1 June 2026. Prior versions are available upon request.