Privacy Policy RA88 Club — Personal Data Protection for Malaysian Members

Welcome to the RA88 Club Privacy Policy. This document explains in detail how RA88 Club ("we", "the Platform", or "RA88 Club") collects, processes, uses, stores, and protects the personal data of registered members and visitors to our platform at ra88club.best.

This Privacy Policy applies to all individuals who use the RA88 Club platform, including registered members, users browsing the site without an account, and anyone who interacts with our platform in any capacity. By registering an account or using any RA88 Club service, you agree to the terms set out in this Privacy Policy.

RA88 Club is fully committed to handling your personal data in a responsible, transparent, and secure manner. We respect the privacy of every individual and believe that member trust is our platform's most valuable asset. Data protection is therefore not merely a legal obligation — it is a core value embedded in the DNA of RA88 Club.

If you have any questions or concerns about how we handle your personal data, you can reach us at any time by email at support@ra88club.best or via live chat within the platform. Our team is available in Bahasa Melayu, 24 hours a day.

RA88 Club collects personal data in several ways — directly when you provide it to us, automatically as you use the platform, and in certain cases from legitimate third-party sources. Below is a full breakdown of the types of data we collect:

RA88 Club not collects Malaysian identity card numbers, passport numbers, full bank account numbers, or other sensitive information only when specifically required for mandatory identity verification processes and solely with your explicit consent.

RA88 Club uses collected personal data solely for legitimate purposes directly relevant to the provision of platform services. Below is a complete list of the purposes for which your personal data is used:

• Account Management: Creating and managing your RA88 Club account, including login verification, password recovery, and profile information updates.
• Transaction Processing: Processing deposits and withdrawals in MYR via your chosen payment method, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Gaming Services Provision: Operating casino games, live casino, Sports Betting (badminton, cricket, Malaysia Super League football, EPL) and all other products available on RA88 Club.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account misuse, and other security threats.
• Responsible Gaming: Monitoring gaming patterns to identify members who may need Responsible Gaming support and enforcing self-imposed limits set by members.
• Customer Support: Responding to enquiries, resolving issues, and providing assistance to members across various communication channels.
• Platform Improvements: Analysing usage data in aggregate form (without identifying individuals) to understand usage patterns and improve the overall user experience.
• Legal Compliance: Complying with legal obligations, regulations, and lawful requests from authorities in Malaysia.
• Marketing Communications (optional): Sending information about RA88 Club promotions, bonuses, and special offers — only where you have given consent to receive such communications.

RA88 Club does not sell, rent, or distribute members' personal data to third parties for their own commercial purposes — this is a commitment we will never compromise on. However, there are limited situations where we may need to share data with certain parties in order to deliver our services or comply with applicable laws:

• Payment Service Providers: To process your transactions, we are required to share the necessary information with payment processors such as Touch 'n Go, GrabPay, DuitNow, and FPX networks. This sharing is limited strictly to information needed to complete the transaction, and all such providers adhere to stringent data security standards.
• Game Providers: Some gameplay session data may be shared with third-party game providers that supply slots, live casino, and other products on our platform. This data does not include any personally identifiable information.
• Malaysian Authorities: RA88 Club will disclose personal data to Malaysian authorities when required by law, court order, or direction from a legitimate regulatory body. We have no discretion in such situations but will take reasonable steps to safeguard your interests.
• Technical Service Providers: Technical infrastructure providers and cloud computing service providers that help us operate the platform may have access to data in a technical capacity. All such providers are bound by strict confidentiality agreements.

In all data sharing cases described above, RA88 Club ensures that all recipient parties comply with data protection standards equal to or higher than those we uphold ourselves. We do not permit any third party to use shared data for their own purposes beyond what has been specified.

Protecting the personal data of RA88 Club members is our highest security priority. We continually invest in the latest security infrastructure to ensure your data remains safe at all times.

Technical Security Measures We Practise:

• 256-bit SSL Encryption: All communications between your device and RA88 Club's servers are encrypted using 256-bit TLS/SSL — the standard adopted by Malaysia's major financial institutions.
• Secure Password Storage: Member passwords are never stored in plain text. We use strong cryptographic hashing algorithms with a unique salt for each account.
• Firewall & 24/7 Monitoring: RA88 Club's server infrastructure is protected by multiple layers of firewalls and is continuously monitored by our cybersecurity team to detect any threats or suspicious activity.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication for an additional layer of account security.
• Internal Access Controls: Access to member personal data within RA88 Club's internal systems is restricted to staff who require it for their specific job functions only, in accordance with the principle of least privilege.
• Regular Data Backups: Member data is regularly backed up to a secure, separate location to ensure service continuity in the event of any technical incident.

RA88 Club uses cookies and similar tracking technologies to enhance your experience on our platform, ensure that platform functions operate correctly, and understand how members interact with our products.

Types of Cookies Used:

• Essential Cookies: These cookies are required for core platform functions such as login authentication, session management, and security. Without them, the platform will not function properly and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences, such as display language and account settings, to provide a more personalised and seamless experience.
• Analytics Cookies: These cookies help us understand how members use the platform — which pages are visited most often, how long users spend on the platform, and similar insights. This data is collected in aggregate and does not identify any individual personally.
• Security Cookies: These cookies help our systems detect suspicious activity such as unauthorised login attempts and protect your account from unauthorised access.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect the functionality of the RA88 Club platform. For more information on managing cookies in your browser, please refer to your web browser's documentation.

RA88 Club retains members' personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. We do not keep data longer than required.

General Retention Period:

• Active Account Data: Retained for as long as your account remains active with RA88 Club.
• Closed Account Data: Following account closure, core data and transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Security Logs: Access logs and security logs are retained for 12 months for digital forensics purposes if required.
• Customer Support Records: Customer support interaction records are retained for 3 years after the issue is resolved.
• Aggregate Analytics Data: Anonymised platform usage data may be retained for a longer period for research and product improvement purposes.

Once the retention period expires, or upon your request for data deletion where no legal obligation prevents it, RA88 Club will securely delete or anonymise your data using methods appropriate to the sensitivity of that data.

As an RA88 Club member whose personal data we process, you have the following rights, which we are committed to respecting and facilitating:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a clear, easy-to-understand format.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request a correction. You may also update certain information directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Such requests will be processed taking into account any legal obligations that may require us to retain certain data.
• Right to Restriction of Processing: You may request that we restrict how we process your personal data in certain circumstances, for example while you are disputing the accuracy of your data.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes, and we will honour that objection promptly.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service if you so choose.

To exercise any of the rights above, please contact the RA88 Club team at support@ra88club.best clearly stating your request. We will process personal data-related requests within 14 working days from the date of receipt of a complete request. No charges are applied for reasonable requests.

RA88 Club is a digital entertainment platform restricted to users aged 18 and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

Should we discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate action to delete that data and close the account in question. If you are a parent or guardian who has found that your minor child has registered an account with RA88 Club, please contact us immediately at support@ra88club.best so that we may take the appropriate action.

RA88 Club reserves the right to update, modify, or amend this Privacy Policy from time to time to reflect changes in our practices, developments in Malaysian data protection law, or operational requirements.

When material changes are made to this Privacy Policy, RA88 Club will:

• Publishing an updated version on this page with a new "Last Updated" date
• Displaying in-platform notices to inform members of the changes
• Sending email notifications to registered members for highly material changes

We encourage you to review this Privacy Policy page periodically. Continued use of the RA88 Club platform after any changes take effect will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how RA88 Club handles your personal data, please do not hesitate to reach out to us. We always welcome feedback and are committed to addressing any privacy concerns seriously and promptly.

• Email: support@ra88club.best — response within 2 hours during operating hours
• Live Chat: Available within the RA88 Club platform, 24 hours a day, 7 days a week
• Language of Communication: Bahasa Melayu and English

For requests relating to personal data rights (access, correction, deletion), please clearly state the type of request and include your registered phone number for identity verification. All requests will be processed within 14 business days.