Privacy Policy raa8 — Your Data Protection

Information We Collect

To deliver the best possible service and ensure platform security, raa8 collects several categories of information from members. We only collect what is strictly necessary — nothing more.

Information is collected through three main channels: account registration (information you provide directly), platform usage (data automatically generated when you use our services) and trusted third-party sources trusted parties such as licensed identity verification providers.

How We Use Your Personal Data

Data collected by raa8 is used responsibly and only for legitimate purposes. The following are the primary uses of member personal data:

• Account Management: Creating and maintaining your account, processing registration, and managing login and session security.
• Transaction Processing: Verifying and securely processing all your deposits and fund withdrawals accurately.
• Identity Verification (KYC): Complying with Malaysian legal requirements relating to Anti-Money Laundering (AML) and age verification.
• Customer Support: Identifying you when you contact our support team and resolving issues more efficiently.
• Platform Security: Detecting suspicious activity, preventing fraud, and protecting the integrity of the raa8 platform for all members.
• Responsible Gaming: Monitoring betting patterns to identify members who may need support or betting limits.
• Marketing Communications: Sending promotional offers and updates — only if you have given explicit consent to receive them.
• Service Improvements: Analysing platform usage patterns in aggregate (without identifying individuals) to improve the user experience.

Sharing Information with Third Parties

Raa8 values your privacy. We do not sell or commercialise member personal data. However, in certain limited situations, we may share information with the following parties:

• Payment Provider: Required transaction details are shared with payment service providers such as DuitNow, FPX, and e-wallet providers licensed in Malaysia, solely for the purpose of processing your transactions.
• KYC Provider: Identity data is shared with licensed and registered identity verification partners for AML compliance and PDPA requirements.
• Game Provider: Usernames and betting activity records are shared with third-party game software providers operating under the raa8 platform, solely for the technical requirements of game operation.
• Legal Authorities: Where required by Malaysian law, court order, or investigation by a competent authority, raa8 will disclose the necessary information in accordance with applicable legal standards.
• Cloud Services: Data is stored on secure cloud infrastructure under strict data protection agreements to ensure the confidentiality of your information.

Data Security & Protection Measures

Raa8 continuously invests in enterprise-grade cybersecurity infrastructure to keep members' personal data safe at all times. The security measures we employ include:

• 256-bit SSL Encryption: All communications between the platform and your device are encrypted using the latest TLS protocol — your data cannot be intercepted in transit.
• Stored Data Encryption: Sensitive data such as banking information and identification documents are encrypted at rest using AES-256 standards.
• Two-Factor Authentication (2FA): An additional security layer is available to all members to protect accounts from unauthorised access.
• 24/7 Security Monitoring: An intrusion detection system (IDS) operates around the clock to automatically detect and block any threats.
• Internal Access Controls: Only specifically authorised raa8 staff may access member data, and all such access is logged and regularly audited.
• Regular Penetration Testing: The raa8 platform undergoes regular security testing by independent experts to identify and patch any vulnerabilities before they can be exploited.

Use of Cookies & Tracking Technologies

The raa8 platform uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Below are the types of cookies we use:

These cookies are required for basic platform operations — including login authentication, session security, and language preferences. Without them, the raa8 platform cannot function properly. This type of cookie cannot be disabled.

We use analytics cookies to understand how members use the platform — which pages are most visited, how long sessions last, and common navigation paths. All analytics data is anonymised and cannot be traced back to any individual.

Marketing cookies are used to display more relevant promotions and offers based on your interests and activity on the platform. You can opt out of these cookies via your browser settings or the cookie management page in your raa8 account settings, without affecting your use of the platform.

Your Rights as a Member Under PDPA

As a registered raa8 member in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA). raa8 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact our privacy team via Live Chat on the platform or by email at [email protected]. We will verify your identity before processing any request to ensure the security of your data.

Data Retention and Deletion Period

Raa8 does not retain member personal data longer than necessary. Retention periods are determined based on service requirements and legal obligations:

• Active Account Data: Retained for the duration of the active account and 7 years after account closure, in line with Malaysian financial legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Anti-Money Laundering Act requirements and financial audit obligations.
• Security Logs: Retained for 12 months for security incident investigation and fraud detection purposes.
• Marketing Data: Deleted within 30 days after you withdraw consent to receive marketing communications.
• Anonymous Analytics Data: May be retained indefinitely as it contains no personally identifiable information.

When data is no longer needed, it is securely deleted using methods that ensure it cannot be recovered — not simply removed in the ordinary sense. This secure deletion process is regularly audited by our internal security team.

Third-Party Links & Services

The raa8 platform integrates certain third-party services to deliver a better experience — including game providers, payment processors, and identity verification systems. It is important that you understand the limits of our responsibility in this context:

• Each third-party service provider has its own privacy policy governing how they handle data shared with them.
• Raa8 only shares the minimum data necessary for each integration — we do not grant any third party full access to member profiles.
• All third-party providers used by raa8 have undergone security and privacy compliance reviews before their integration is approved.

Children's Privacy and Protection of Minors

Raa8 takes its responsibility to protect minors extremely seriously. The raa8 platform is strictly for individuals aged 18 and above only. We have a clear policy and strict procedures in this regard:

• The raa8 registration process requires strict age verification — including date of birth checks and MyKad verification during the KYC process.
• Raa8 does not intentionally collect any personal data from individuals under the age of 18.
• If we discover that information has been collected from a minor without our knowledge, the account will be closed immediately and all associated data will be securely deleted.
• Parents or guardians who discover that a minor in their care has registered on the raa8 platform are urged to contact our support team immediately for prompt action.

Amendments to This Privacy Policy

Raa8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. When material changes are made, we will:

• Updating the "Last Updated" date shown at the top of this document.
• Displaying a clear notice on the platform's home page at least 14 days before changes take effect.
• Sending in-platform notifications to all active members when significant changes are made to how we handle personal data.

Continued use of the raa8 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this document periodically to stay informed about how we protect your privacy.

Contact the raa8 Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the raa8 privacy team is here to help:

• Live Chat: The fastest way — available 24/7 directly within the raa8 platform for real-time responses.
• Privacy Email: [email protected] — for detailed privacy enquiries or formal data rights requests. We will respond within 3 business days.
• Help Centre: Visit page FAQ us for answers to frequently asked questions about privacy and account security.

For privacy complaints that cannot be resolved internally, you also have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner under the PDPA 2010. However, we strongly encourage you to contact us first — most issues can be resolved quickly and satisfactorily through our support channels.