Privacy Policy Raja99 — We Protect Your Data Like Our Own

01 Information We Collect From You

Raja99 only collects information that is genuinely necessary to provide you, as a Malaysian player, with a safe, fair, and quality service. No data is collected excessively or without a clear purpose.

Information you provide directly:

• Registration information: Your full name, Malaysian phone number, email address, and date of birth as provided when registering your Raja99 account.
• Identity verification information: Malaysian identity card number (MyKad) or passport number when we require KYC (Know Your Customer) verification to process withdrawals above a certain threshold or to meet compliance requirements.
• Financial information: Bank account details, e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), or FPX information required to process your deposits and withdrawals on Raja99.
• Communicating with us: The contents of correspondence, live chat logs, and support tickets you submit to the Raja99 team through any available communication channel.

Information collected automatically when you use Raja99:

• Login data: IP address, device type, operating system, web browser used, and the date and time of each login to your Raja99 account.
• Gaming activity data: Your game history, bet amounts, game results, and account balance — required to process payments accurately and resolve any disputes.
• Transaction data: A complete record of all deposits and withdrawals, including payment method, amount, and the time each transaction was processed through the Raja99 platform.
• Cookie and session data: Session information required to maintain your login, save your language preferences, and ensure the security of your Raja99 account.

02 How We Use Your Personal Data

Every piece of data Raja99 collects has a clear and legitimate purpose. We do not use your data for anything unrelated to the delivery of Raja99 platform services to you.

• Account management: Creating and managing your Raja99 account, processing your registration, verifying your identity, and keeping your account secure from unauthorized access.
• Financial transaction processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, and handling withdrawals to your bank account or e-wallet accurately and securely.
• Gaming service provision: Giving you access to all games on Raja99 — slots, jackpots, poker, Sports Betting on the Malaysia Super League and EPL, BWF badminton, virtual sports and Live Casino — with a seamless and personalised experience.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-account abuse, money laundering, and any other security threats that could compromise the integrity of the Raja99 platform and the safety of other players.
• Legal compliance: To fulfil legal obligations imposed on Raja99 by applicable Malaysian legislation, including KYC and AML (Anti-Money Laundering) requirements.
• Customer support: Resolving your inquiries, complaints, and requests more efficiently when the Raja99 support team has relevant context about your account and activity history.
• Platform improvements: Analyzing usage patterns in aggregate (without identifying you individually) to help us improve the design, functionality, and user experience of Raja99 over time.
• Promotional communications: Sending you information about Raja99 promotions, bonuses and new offers that may be relevant to you — subject to the communication preferences you have set in your account. You may opt out of promotional communications at any time.

03 Legal Basis for Processing Your Data

Raja99 processes your personal data on a lawful basis. Below are the grounds applied to each category of data processing:

04 Sharing Your Data with Third Parties

Raja99 does not sell your personal data to any third party under any circumstances. However, there are limited situations where we may need to share your data with other parties in order to provide Raja99 services to you:

• Payment service providers: Raja99 works with approved payment service providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay to process your financial transactions. These providers only receive the data necessary to process the relevant transaction and are bound by strict confidentiality agreements with Raja99.
• Game providers: For certain games such as live casino, session data may be shared with third-party game providers that partner with Raja99. These providers do not receive any personally identifiable information that could be used to identify you directly.
• Competent authorities: Raja99 will disclose player data to the police, courts, Bank Negara Malaysia, or any authorized Malaysian government agency when required to do so by law, court order, or a valid official investigation. We have no discretion to refuse such requests where they are legally binding.
• Professional advisors: External lawyers, accountants, and auditors engaged by Raja99 may require limited access to certain data in the course of their duties — and all are bound by strict professional confidentiality obligations.

05 Security Measures We Take to Protect Your Data

Data protection is a core technical and organisational priority at Raja99. We continuously invest in our security infrastructure to ensure your data remains safe from every conceivable threat.

• Data encryption in transit: All communications between your device and Raja99's servers are protected by TLS 1.3 with 256-bit SSL encryption — ensuring every bit of data travelling across the network remains secure.
• Encryption of data at rest: Sensitive data stored in Raja99's databases — including passwords, identification numbers, and financial details — is encrypted using robust hashing algorithms. Your password is never stored in a readable form by anyone, including Raja99 staff.
• Role-based access control: Access to Raja99's internal systems containing player data is restricted strictly to staff with a legitimate business need. All access is automatically logged for audit and monitoring purposes.
• 24/7 security monitoring: Raja99's systems are continuously monitored by our cybersecurity team to detect any intrusion attempts, suspicious activity, or usage anomalies that may indicate a threat to player data.
• Periodic penetration testing: Raja99 conducts regular security assessments (penetration testing) through independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited by malicious parties.
• Two-factor authentication: We offer two-factor authentication for all Raja99 accounts — and we strongly encourage every player in Malaysia to enable this feature for an added layer of protection on their account.

06 How Long We Retain Your Data

Raja99 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: For as long as your Raja99 account remains active and open, we will retain your personal data to ensure you have full access to all platform services.
• Data after account closure: After your Raja99 account is closed at your request, we will retain required records for a specified period as prescribed by Malaysian law — typically between 5 to 7 years for financial and transaction records, in line with standard compliance requirements.
• Support communication data: Live chat conversation logs, support tickets, and email correspondence are retained for 2 years after the last interaction for reference purposes and to resolve any disputes that may arise.
• Security log data: System access logs and security data are retained for 12 months to enable investigation in the event of a security incident involving your Raja99 account.

Once the retention period has elapsed, Raja99 will delete or anonymise your personal data in a secure and irreversible manner — ensuring there is no risk of unnecessary data exposure after the prescribed retention period.

07 Your Rights as a Raja99 Player

As a Raja99 player, you have certain rights regarding your personal data. Raja99 is committed to respecting and facilitating the exercise of these rights in a straightforward and hassle-free manner.

08 Cookies and Tracking Technologies at Raja99

Raja99 uses cookies and similar technologies to keep the platform running properly and to enhance your experience. Below is a clear explanation of the types of cookies we use and their purposes:

• Strictly necessary session cookies: These cookies are essential to the basic operation of the Raja99 platform. They store your login session authentication token so you do not need to re-enter your password each time you navigate between pages. Without these cookies, Raja99 cannot function properly and you will not be able to play.
• User preference cookies: Cookies that store your preferences such as language (Bahasa Melayu), time zone (MYT), and display settings you have chosen, so Raja99 remembers your preferences in future sessions.
• Security cookies: Used to recognise devices you use repeatedly and to detect any suspicious login attempts from unrecognised devices on your Raja99 account.
• Aggregate analytics cookies: Raja99 uses anonymised analytics data that cannot be used to identify you individually — solely to understand how players use our platform as a whole, so we can make meaningful improvements.

You can manage your cookie settings through your web browser. Please note that disabling strictly necessary cookies will affect core Raja99 platform functionality and may prevent you from logging in or playing normally.

09 Child Data Protection

Raja99 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store or process any personal data from individuals under the age of 18 under any circumstances.

All new Raja99 registrants are required to confirm that they are aged 18 or above during the registration process, and Raja99 reserves the right to request age verification via an identity document (MyKad or passport) at any time if there is any doubt about a player's age.

If you discover that someone under the age of 18 has successfully registered for or accessed the raja99 platform, please notify us immediately at support@raja99.run. We will take prompt action to close the account and permanently delete all associated data without delay.

10 Cross-Border Data Transfers

Raja99 player data is stored primarily on servers located in the Asia region. In certain operational situations, some data may be processed by third-party service providers operating in other countries.

When this occurs, Raja99 ensures that such data transfers are carried out with adequate safeguards through:

• Binding data processing agreements with all third-party service providers involved, requiring them to protect your data to a standard at least equivalent to that which Raja99 applies itself.
• Use of internationally recognised standard contractual clauses for cross-border data transfers where applicable.
• Regular audits of all third-party service providers that handle Raja99 player data to ensure ongoing compliance with the data protection standards we have set.

11 Amendments to This Privacy Policy

Raja99 reserves the right to update or amend this Privacy Policy from time to time as needed — whether due to changes in our business practices, new legal requirements, or to reflect new ways we use player data that you have consented to.

When we make significant changes to this Privacy Policy, we will notify you via an in-platform notification on Raja99 or to your registered email address — at least 14 days before the changes take effect, unless the changes are immediately required due to legal obligations.

The "Updated on" date displayed at the top of this document reflects when the most recent revision was made. Continued use of the Raja99 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

12 How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding Raja99's Privacy Policy or your personal data, we'd love to hear from you. Here's how to get in touch:

• Data protection email: support@raja99.run — please include the subject line "Privacy Enquiry" and your Raja99 account number for faster processing.
• In-platform live chat: Available 24/7 in Bahasa Malaysia — ideal for general privacy inquiries or to initiate a data rights request.
• WhatsApp: The number can be found in the Support section once you have logged in to your Raja99 account.

Raja99 is committed to responding to all privacy-related inquiries within 14 working days. For more urgent matters relating to account security or a suspected data breach, please contact us via live chat and your issue will be escalated to our security team immediately.