Raja99 Privacy Policy – Data Protection for Malaysian Players

Raja99 understands how sensitive your personal information is in the context of an online casino and Sports Betting platform. You entrust us with details that are deeply personal — your name, phone number, payment information — and we do not take that trust lightly.

This Privacy Policy explains exactly what happens to your information from the moment you register through to the day you decide to close your account. It covers data collected actively (information you provide to us), data collected passively (information our systems record as you use the platform), and how both types of data are used, stored, and protected.

This Policy applies to all your interactions with Raja99, including account registration, slots, Live Casino, baccarat, roulette, poker, e-sports, and Sports Betting activity, all deposit and withdrawal transactions, communications with our customer support team, and receipt of marketing communications (where you have given consent).

Raja99 collects your personal data in two main ways: information you provide directly, and information collected automatically as you use our platform.

Data You Provide Directly

• Registration information: Full name, Malaysian phone number, email address, date of birth, and encrypted password.
• Identity verification (KYC) information: A copy of your Malaysian identity card (MyKad), a copy of your passport (if applicable), and proof of current address. These are required to process withdrawals and to comply with anti-money laundering regulations.
• Financial information: E-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), linked FPX account details, and deposit and withdrawal transaction history in Ringgit Malaysia (RM).
• Additional profile information: Language preferences, self-imposed betting limits you have set, and any other information you choose to share with us.
• Support communications: Any messages, complaints, or enquiries you send to the Raja99 customer support team via live chat or email.

Automatically Collected Data

• Log and technical data: IP address, browser type, device operating system, screen resolution, and the time and date of access.
• Gaming activity data: Games played, session duration, bet amounts, wins and losses, and overall gameplay patterns.
• Cookie data: Session cookies, preference cookies, and performance cookies that help us deliver a better experience. See Section 6 for full details.
• Geolocation data: General location data based on IP address to verify access from Malaysia and ensure compliance with legal requirements.

Raja99 uses your personal data only for legitimate purposes directly related to the provision of our platform services. The following are the primary purposes for which your data is used:

• Account management: Creating and maintaining your Raja99 account, verifying your identity at login, and processing password reset requests.
• Transaction processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, as well as handling withdrawals of your winnings in Malaysian Ringgit (RM).
• Provision of gaming services: Access and play over 500 games on Raja99, including slots, Live Casino, baccarat, roulette, poker, e-sports, and cricket as well as other Sports Betting.
• Fraud prevention and security: Monitoring suspicious activity, preventing money laundering, and maintaining platform integrity to protect all Raja99 members.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate interventions in line with Raja99's commitment to member well-being.
• Customer support: Handling enquiries, complaints, and requests for assistance submitted to the Raja99 support team.
• Legal compliance: Complying with applicable Malaysian legal requirements, including PDPA 2010, anti-money laundering (AML) obligations, and directives from relevant authorities.
• Marketing communications (with your consent): Sending you information about Raja99 promotions, bonuses, and new offers, provided you consented to receive them during registration or subsequently through your account settings.

Raja99 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, there are specific situations where we may need to share your data with designated parties:

• Payment providers: When you make a deposit or withdrawal, the required transaction details are shared with the relevant payment provider (such as DuitNow, FPX, or e-wallet platforms) to process the transaction. These providers maintain their own privacy policies and are bound by data protection agreements with Raja99.
• Game software providers: Raja99's game provider partners, such as Pragmatic Play, Evolution Gaming, and others, receive the session data required to run their games on our platform. This data is limited strictly to what is necessary for technical purposes.
• Legal authorities: Raja99 will disclose your personal data to Malaysian authorities where required by law, court order, or a valid enforcement directive. In all such cases, we will endeavour to notify you in advance unless prohibited by law.
• Technical service providers: Companies that provide technical services to Raja99 — such as cloud computing, security monitoring, and analytics — may process your data as data processors on our behalf. All such providers are bound by strict data processing agreements.

In all data-sharing scenarios described above, raja99 ensures your data is protected to a standard equal to or higher than what we provide directly. We do not permit any third party to use your data for their own purposes beyond what is necessary to deliver services to raja99.

Raja99 continually invests in security infrastructure to ensure your personal data remains protected at all times. The following are the security layers we have in place:

• 256-bit SSL/TLS Encryption: All communications between your device and Raja99's servers are encrypted using the latest SSL/TLS protocols. This means that even if someone were to intercept data in transit, they would not be able to read it.
• Hashed password storage: Your password is never stored in plain text. We use modern cryptographic hashing algorithms that ensure no one — including Raja99 staff — can ever view your password.
• Internal access controls: Only Raja99 staff with a legitimate business need are permitted to access your personal data. Access is role-based and fully monitored.
• Real-time threat monitoring: Our systems actively monitor for unauthorised access attempts, cyberattacks, and suspicious activity around the clock. Any threats are responded to automatically and escalated to our security team immediately.
• Regular penetration testing: Raja99 conducts regular security penetration testing by independent security experts to identify and remediate vulnerabilities before they can be exploited.
• Secure data backup: Data is regularly backed up to secure, encrypted locations to ensure service continuity in the event of a system failure or unexpected incident.

While Raja99 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a security incident affecting your data, we are committed to notifying you and the relevant authorities within the timeframe required under Malaysian law.

Raja99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. Below are the types of cookies we use:

You can manage your cookie settings through your web browser. Most browsers allow you to view, delete, and block cookies. However, disabling essential cookies will affect core raja99 platform functionality and may prevent you from logging in or playing.

Raja99 does not use third-party cookies for marketing or advertising purposes that track you across other websites outside our platform.

Raja99 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required under Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for as long as your account remains active with Raja99. If your account has been inactive for 24 consecutive months, we will contact you before taking any action regarding your data.
• Financial transaction data: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's tax and anti-money laundering legal requirements.
• KYC data (identity verification): Retained for 5 years after account closure, in compliance with Malaysia's AMLA (Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act) requirements.
• Customer support communication logs: Retained for 2 years for service quality and dispute resolution purposes.
• Technical log data: Retained for 90 days for security and fraud detection purposes.

Once the defined retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. Our deletion process complies with recognised security standards to ensure data cannot be recovered after it has been removed.

If you voluntarily close your raja99 account, any data that is not required to be retained by law will be deleted within 30 days of closure. You will receive an email confirmation once the deletion process is complete.

Your financial information receives the highest level of protection within the Raja99 system. This is our most sensitive category of data, and we treat it accordingly. Here is how we safeguard your financial information:

• Raja99 never stores credit or debit card numbers directly on our servers. All card transactions (where applicable) are processed entirely through payment gateways that hold PCI-DSS certification.
• Your e-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and FPX account information (Maybank2u, CIMB Clicks) are encrypted and stored securely. We only retain the information necessary to process the transactions you request.
• Every deposit and withdrawal transaction on Raja99 in Ringgit Malaysia (RM) is recorded with a complete audit trail for security and legal compliance purposes.
• Raja99 employs a real-time fraud detection system that screens every transaction for unusual patterns. This protects you in the event someone attempts to access your account without authorisation.
• Withdrawals are only permitted to the same payment method used for the deposit, or to an account registered in your own name. This is an important layer of protection against fraud.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and Raja99's commitment to user privacy, you have the following rights regarding your personal data:

To exercise any of the rights above, contact the Raja99 support team via live chat or email at support@raja99.wine. Please clearly state the right you wish to exercise and provide sufficient information for us to verify your identity before we process your request.

As an online platform, some of raja99's technical service providers may operate or store data outside Malaysia. When your data is transferred overseas, raja99 ensures that adequate protection measures are in place:

• All international data transfers are governed by data processing agreements that require recipients to uphold data protection standards equivalent to Malaysia's PDPA.
• Raja99 only works with service providers located in countries or territories with recognised data protection laws, or those that have agreed to adequate contractual safeguards.
• The most sensitive financial data and identity information is processed and stored on servers located in the Asian region, in compliance with strict data protection standards.

If you would like to know more about international data transfers involving your data, please contact the raja99 support team and we will provide the relevant information in accordance with applicable legal requirements.

Raja99 strictly prohibits the use of our platform by individuals under the age of 18. We do not knowingly collect personal data from underage children or minors. The following measures are in place to prevent access by underage individuals:

• The raja99 registration process requires age verification through your date of birth and Malaysian phone number, and we reserve the right to request age verification documents (MyKad) at any time.
• Should we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will immediately delete that data and close the account in question.
• Parents or guardians who believe their child has registered a Raja99 account are encouraged to contact us immediately at support@raja99.wine so that prompt action can be taken.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Raja99 handles your personal data, we are here to help. Here is how to reach us:

• Live chat: The fastest way to get an immediate response. Click the live chat icon at the bottom-right corner of the raja99 platform. Our Bahasa Malaysia support team is available 24 hours a day, 7 days a week.
• Email: Send your written enquiry to support@raja99.wine. For privacy-related enquiries that require investigation, please use the email subject line "Data Privacy Enquiry — [Your Username]". We will respond within 5 business days.

For formal requests relating to your rights under Malaysia's PDPA 2010 (such as data access, correction, or deletion requests), please submit your request via email with a clear subject line. We will acknowledge receipt within 48 hours and fulfil the request within 30 calendar days.

This Privacy Policy was last updated on 1 January 2026. Any material changes to this Policy will be communicated to members via email at least 14 days before taking effect. Your continued use of Raja99 after the effective date of any changes constitutes your acceptance of the updated Policy.