ra66 Privacy Policy

1. Data Controller

Ra66 (operating at ra66.app) is the data controller responsible for the personal data of Players and visitors collected through the Platform. Ra66 determines the purposes and means of processing personal data in connection with the provision of its online casino, sportsbook, and related services to Malaysian and international players.

For all data protection enquiries, please contact ra66 via the contact details provided in Section 14 of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a ra66 account, we collect the information you provide, which includes:

• Full name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address and mobile phone number.
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor).
• Preferred currency (Malaysian Ringgit, MYR).
• Username and encrypted password credentials.

2.2 KYC & Identity Verification Data

Prior to processing withdrawals or as part of ongoing compliance obligations, ra66 may request:

• A copy of your MyKad, passport, or other government-issued photo identification.
• Proof of address documents (e.g., utility bill, bank statement not older than three months).
• A selfie photograph for liveness verification, which may be compared against submitted identity documents.
• Source of funds documentation in cases involving large transactions or where required by applicable regulations.

2.3 Financial Transaction Data

Ra66 records all financial transactions including deposits, withdrawals, bonus credits and debits, and wager and game result history. Payment method details — such as e-wallet account references, FPX bank references, or masked card numbers — are recorded to the extent necessary to process and reconcile transactions.

2.4 Technical & Usage Data

Ra66 automatically collects certain technical data when you access the Platform, including:

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, and browser version.
• Session timestamps, page navigation data, and feature interaction logs.
• Game play logs, bet history, and session duration records.

2.5 Communications Data

If you contact ra66 via live chat, email, or any other channel, we retain records of those communications, including the content of your messages and our responses, for customer service quality assurance and dispute resolution purposes.

3. How We Use Your Personal Data

Ra66 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your ra66 account, verifying your identity, and providing access to Platform services.
• Transaction processing: Processing deposits, withdrawals, and accounting for all financial activity on your account.
• KYC and AML compliance: Fulfilling know-your-customer and anti-money laundering obligations under applicable regulatory requirements.
• Age verification: Confirming that you are 21 years of age or older prior to granting access to real-money gaming services.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance with account or gaming issues.
• Responsible gaming: Monitoring gaming activity to identify and respond to patterns consistent with problem gambling, and administering self-exclusion, deposit limits, and other responsible gaming tools.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised access, and other prohibited conduct on the Platform.
• Service communications: Sending transactional notifications, account security alerts, and essential service updates.
• Marketing communications: Where you have provided explicit consent, sending promotional offers, bonus notifications, and news about ra66. You may withdraw this consent at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the functionality, performance, and design of the Platform.
• Legal compliance: Complying with applicable laws, regulations, court orders, and lawful requests from regulatory authorities.

4. Legal Basis for Processing

Ra66 processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have contracted for by registering a ra66 account and agreeing to the Terms and Conditions.
• Legal obligation: Processing required to comply with applicable regulatory requirements, including KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving our services, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

Ra66 does not sell your personal data. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors and e-wallet providers: Touch 'n Go eWallet, Boost, FPX partner banks, Visa, Mastercard, and other payment facilitators, to the extent necessary to process your transactions.
• Identity verification and KYC service providers: Third-party providers who perform identity document verification and liveness checks as part of our regulatory compliance programme.
• Game software providers: Licensed gaming studios and platform providers who supply game content hosted on ra66, who may receive anonymised session data necessary to operate their games.
• IT infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who process data on ra66's behalf under binding data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, regulation, court order, or a lawful request from a competent authority, ra66 will disclose relevant data without notice to the affected Player where legally required or permitted.
• Successor entities: In the event of a merger, acquisition, or asset sale involving ra66, Player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers who process personal data on behalf of ra66 are bound by contractual data processing terms that require them to process data only on ra66's documented instructions and to maintain appropriate security measures.

6. Cookies and Tracking Technologies

Ra66.app uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Store your preferences such as language settings and display options to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how Players use the Platform to help ra66 identify and address performance issues and improve usability.
• Responsible gaming cookies: Track session duration and activity frequency to support the delivery of responsible gaming alerts and tools.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. Ra66 does not use cookies for the purpose of serving third-party advertising on ra66.app.

7. Data Security

Ra66 implements and maintains appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ra66.app.
• Encryption of sensitive personal data and financial information at rest.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented operational need.
• Regular security assessments, penetration testing, and vulnerability management.
• Two-factor authentication availability for all Player accounts.
• Continuous monitoring for suspicious access patterns and anomalous activity.

Notwithstanding ra66's security measures, no transmission of data over the internet and no data storage system is entirely immune to risk. Players are responsible for maintaining the security of their account credentials and for accessing ra66 only from trusted devices and networks.

8. Data Retention

Ra66 retains personal data for the following periods, or longer where required by applicable law or regulation:

• Active account data: Retained for the duration of your account's existence on ra66.
• Closed account data: Player records including KYC documentation, transaction history, and correspondence are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering and gaming regulatory requirements.
• Marketing consent records: Retained for the duration of consent and for three (3) years following withdrawal of consent, for compliance documentation purposes.
• Support communications: Retained for three (3) years following resolution of the relevant matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to your personal data held by ra66:

• Right of access: Request a copy of the personal data ra66 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where ra66 no longer has a lawful basis to retain it, subject to overriding legal and regulatory retention obligations.
• Right to restrict processing: Request that ra66 restricts the processing of your personal data in certain circumstances.
• Right to data portability: Request a structured, machine-readable copy of personal data you have provided to ra66, where technically feasible.
• Right to withdraw consent: Withdraw any consent you have given to ra66 for marketing or non-essential data processing at any time without detriment.
• Right to object: Object to processing of your personal data where ra66 relies on legitimate interests as its legal basis, subject to ra66 demonstrating overriding legitimate grounds.

To exercise any of these rights, submit a written request to ra66 via email at [email protected]. Ra66 will respond within thirty (30) calendar days of receipt of a verifiable request. Ra66 may require identity verification before processing a data rights request.

10. International Data Transfers

Ra66 operates using infrastructure and service providers that may be located outside of Malaysia. Where personal data is transferred to recipients in other jurisdictions, ra66 ensures that appropriate safeguards are in place, including contractual data transfer mechanisms, to ensure that your data receives a level of protection consistent with the standards described in this Policy.

11. Children's Privacy

Ra66 does not knowingly collect personal data from individuals under the age of 21. The Platform is intended exclusively for adults aged 21 and over. If ra66 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and any associated account will be permanently closed. If you have reason to believe a minor has registered an account on ra66, please notify us immediately at [email protected].

12. Third-Party Links

Ra66.app may contain links to third-party websites or services. This Privacy Policy applies solely to data collected by ra66 through ra66.app. Ra66 is not responsible for the privacy practices or content of any third-party website and encourages Players to review the privacy policies of any external sites they visit.

13. Amendments to This Policy

Ra66 reserves the right to update this Privacy Policy at any time. Where changes are material — affecting how we collect, use, or share your personal data — ra66 will provide advance notice via email to your registered address and/or a prominent notification on the Platform. The "Last updated" date at the top of this Policy reflects when the most recent revision came into effect. Continued use of ra66.app following publication of an updated Policy constitutes acknowledgement of the revised terms.

14. Contact & Data Protection Enquiries

For questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ra66, please contact:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on ra66.app

Ra66 is committed to resolving privacy-related enquiries promptly and in good faith. If you believe your privacy rights have not been adequately addressed, you may also seek recourse through the relevant data protection authority or regulatory body in your jurisdiction.