Privacy Policy Raffi88 — Personal Data Protection for Malaysian Members

1Introduction

Raffi88 ("we", "our platform") takes member privacy and data security very seriously. We understand that your personal information is a trust that must be handled with the highest responsibility, and we are committed to protecting it in the most effective way.

This Privacy Policy was established to comply with Malaysia Personal Data Protection Act 2010 (PDPA) and international standards on data protection. It transparently explains what information we collect, why we need it, how we use it, and what rights you hold over your personal data.

We encourage you to read this document carefully. If there are any sections you do not understand or would like further clarification on, the raffi88 support team is ready to assist you via live chat, available 24/7 on our platform.

2Types of Personal Data Collected

Raffi88 collects various categories of personal information depending on the context of your interaction with our platform. Below is a summary of the data we collect:

Raffi88 only collects data that strictly necessary to provide services to you. We do not collect sensitive data categories such as medical information, political views, or religious beliefs.

3Data Collection Method

Your personal data is collected through the following channels:

• Account Registration — information you provide when completing the registration form on raffi88.
• KYC Process — identity verification documents you upload to complete account verification.
• Financial Transactions — information associated with the deposits and withdrawals you make.
• Platform Usage — activity data automatically collected while you browse and play on raffi88.
• Support Communications — information you share when contacting our customer support team.
• Cookies and Tracking Technology — data automatically collected via cookies and similar technologies when you visit the raffi88 platform.

4Purpose of Personal Data Use

Raffi88 uses your personal data solely for lawful and transparent purposes. The following are the primary purposes for which your data is used:

• Account Management — creating, verifying, and managing your member account on raffi88.
• Transaction Processing — processing deposits, withdrawals, and other financial transactions related to your account.
• Identity Verification (KYC) — verifying that you meet age and eligibility requirements, and preventing fraud and money laundering.
• Platform Security — identifying and preventing suspicious activity, fraud, hacking, and other security threats.
• Customer Support — processing and resolving enquiries, complaints, and support requests you submit.
• Legal Compliance — fulfilling the regulatory reporting and compliance obligations imposed on raffi88.
• Service Improvement — analysing usage patterns to improve the overall gaming experience and platform features.
• Marketing Communications — sending you information about relevant raffi88 promotions, offers, and updates (you may unsubscribe at any time).

5Data Sharing with Third Parties

Raffi88 does not sell members' personal data to any third party. However, in certain limited and lawful circumstances, we may share your data with:

• Payment Providers — to securely process your deposit and withdrawal transactions. They only receive the data necessary to complete the transaction.
• Game Providers — the minimum technical data required to enable games to function on the raffi88 platform.
• IT Service Providers — hosting companies, cybersecurity firms, and technical infrastructure providers that support raffi88 operations under strict confidentiality agreements.
• Regulatory Authority — when required by law, court order, or a relevant enforcement authority.
• Auditors & Legal Experts — for compliance, audit, and legal advisory purposes related to raffi88 operations.

All third parties that receive data from raffi88 are bound by strict data protection agreements and are only permitted to use that data for the specified purposes.

6Data Security

Raffi88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or unlawful disclosure:

• 256-bit SSL Encryption for all data transmitted between your device and raffi88 servers.
• Data encryption at rest for all sensitive information stored in our databases.
• Role-based access control — only authorised personnel may access member data for legitimate purposes.
• Two-factor authentication (2FA) available and encouraged for all raffi88 member accounts.
• Continuous security monitoring 24/7 by our cybersecurity team.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• Incident Response Plan to ensure a fast and effective response in the event of any security incident.

7Cookies and Tracking Technology

Raffi88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies — collecting data on how you use the platform to help us identify and resolve technical issues.
• Functional Cookies — saving your preferences such as language, theme, and platform settings to make your experience more comfortable.
• Analytics Cookies — helping us understand aggregated and anonymised usage patterns for service improvement purposes.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the raffi88 platform on your device.

8Your Rights Regarding Personal Data

As a raffi88 member, you have the following rights regarding your personal data under Malaysia's PDPA and our privacy policy:

• Right of Access — you have the right to request a copy of the personal data we hold about you.
• Right to Rectification — you have the right to request that we correct any inaccurate or incomplete data.
• Right to Erasure — in certain circumstances, you have the right to request that we delete your personal data.
• Right to Object — you may object to the use of your data for direct marketing purposes at any time.
• Right to Data Portability — you have the right to receive your data in a machine-readable format for transfer to another party.
• Right to Restrict Processing — you may request that we restrict the processing of your data in certain circumstances.

To exercise any of the above rights, contact the raffi88 privacy team at [email protected]. We will respond within 30 working days from the date your request is received.

9Data Retention Period

Raffi88 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this policy. Specific retention periods are as follows:

• Active Account Data — retained for as long as your account remains active on raffi88.
• KYC and Identity Data — retained for a minimum of 7 years after account closure in accordance with anti-money laundering legal requirements.
• Financial Transaction Records — retained for 7 years in accordance with accounting and regulatory requirements.
• Support Communication Log — retained for 3 years for dispute resolution purposes.
• Technical Data and Logs — retained for 90 days for security and technical troubleshooting purposes.

Once the relevant retention period has expired and there is no longer a legal basis to retain the data, raffi88 will securely delete or anonymise it.

10Child Protection

Raffi88 is a platform strictly restricted to users aged 18 years and above. We do not intentionally collect or process any personal data from individuals under the age of 18.

If we discover or are informed that data has been collected from someone under the age of 18, we will take immediate steps to:

• Suspend the relevant account immediately.
• Delete all related personal data as promptly as possible.
• Withdraw all valid balances in accordance with established procedures.

11Amendments to the Privacy Policy

Raffi88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements in how we protect your data.

You will be notified of any significant amendments through:

• An in-platform notification will appear the next time you log in.
• Email sent to the address registered in your account at least 14 days before the amendments take effect.
• A clear notice on the raffi88 homepage throughout the notification period.

The "Updated" date at the top of this document will always reflect the latest version of the raffi88 Privacy Policy. Continued use of our platform after any amendments take effect constitutes acceptance of the revised terms.

12Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the raffi88 Data Protection Officer (DPO):

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the raffi88 platform
• Target Response Time: Within 5 working days for privacy inquiries

For issues relating to platform terms of use, please refer to Terms and Conditions ours. For information on responsible gaming and self-exclusion, please visit the Responsible Gaming ours.