Privacy Policy raa8 Malaysia Platform

Raa8 values the privacy of every user who entrusts our platform with their personal information. This Privacy Policy ("Policy") was established to comply with Personal Data Protection Act 2010 (PDPA) Malaysia and applicable international standards, and to ensure you fully understand your rights as a raa8 user.

This policy applies to all information collected through the raa8.app website, the raa8 mobile app, and any official communication channels between you and raa8, including email, live chat, and Telegram. By using the raa8 platform, you agree to the collection and use of your information as described in this Policy.

1 Introduction & Scope of Privacy Policy

Raa8 is an online entertainment and gaming platform operating in Malaysia. As a responsible platform operator, we understand that user trust is our most valuable asset. We therefore practise full transparency in how we handle personal data.

This Privacy Policy explains in detail: what types of data we collect, why we need it, how we use it, who we share it with, how long we retain it, and what your rights are regarding that data. We also outline how we protect your data from unauthorized access, loss, or misuse.

The scope of this Policy covers all individuals who interact with raa8, including registered members, guest users browsing the platform without an account, and individuals who contact our support team.

2 Types of Personal Data Collected

Raa8 collects personal data from various sources to ensure the platform operates smoothly, securely, and in line with your needs. Below are the categories of data we collect:

Some data is collected directly when you register an account, complete a KYC form, or contact our support team. Other data is collected automatically while you use the platform, such as server log data and cookies. We do not collect any sensitive personal data such as health information, religious beliefs, or political views unless required by law.

3 How Your Personal Data Is Used

The data we collect is used for legitimate and necessary purposes to enable raa8 to operate efficiently and fulfil its legal obligations. We do not use your data for any purpose other than those stated below:

• Identity Verification & KYC — To verify that you are who you claim to be, meet legal compliance requirements, and prevent identity fraud.
• Financial Transaction Processing — To process deposits, withdrawals, and resolve any financial disputes related to your account.
• Account Security — To detect and prevent unauthorised access, fraudulent activity, money laundering, and platform abuse.
• Customer Support — To resolve enquiries, complaints, and technical issues you report to our team.
• Legal Compliance — To fulfil obligations under PDPA 2010, anti-money laundering legislation (AMLA), and directives from competent authorities.
• Platform Enhancement — To understand how users interact with the platform in order to improve the overall user experience.
• Responsible Gaming — To monitor gaming patterns and identify users who may need assistance related to their playing habits.
• Service Communications — To send important notifications related to your account such as deposit confirmations, withdrawal approvals, and security updates.

If you have given your consent, we may also use your contact details to inform you about raa8 promotions, bonuses, and the latest offers. You may withdraw this consent at any time through your account settings or by contacting our support team.

4 Data Sharing & Disclosure

Raa8 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain limited situations, we may need to share your data with the following parties:

• Payment Service Providers — Authorised and accredited payment processors such as FPX providers, eWallet operators, and crypto payment platforms we use to process your financial transactions. All these providers are bound by strict confidentiality agreements and PCI-DSS security standards.
• KYC Verification Providers — Third-party identity verification technology companies that assist us in verifying documents and user identities. Data shared is minimal and solely for verification purposes.
• Authorities & Law Enforcement Bodies — When required by Malaysian law, a court order, or a lawful request from enforcement agencies such as the Royal Malaysia Police (PDRM) or Bank Negara Malaysia (BNM). raa8 will comply with all lawful requests from authorities.
• Technical Service Providers — Cloud hosting providers, analytics services, and IT infrastructure providers that assist us in operating the platform. All these providers are subject to strict data processing agreements.
• Third-Party Game Providers — Game providers that supply gaming content for the raa8 platform. Minimal data is shared solely for the purpose of verifying eligibility and processing game results.

5 Security & Data Protection

Protecting your personal and financial data is raa8's absolute priority. We continuously invest in industry-grade security infrastructure to keep your data protected from all cyber threats at all times.

The key security measures we practise are as follows:

• 256-bit SSL/TLS Encryption — All data transmitted between your browser and raa8 servers is encrypted using the latest SSL/TLS protocols, making the data unreadable to unauthorised parties.
• Encryption at Rest — Data stored in our databases is also encrypted using AES-256, ensuring layered protection even in the event of any compromise at the infrastructure level.
• Two-Factor Authentication (2FA) — Two-factor authentication is available for user accounts to prevent unauthorised access even if your password is compromised.
• 24/7 Security Monitoring — Our cybersecurity team continuously monitors systems to detect and respond to any suspicious activity in real time.
• Restricted Access Control — Only authorised personnel who require access to perform their duties may access users' personal data. All access is logged and audited.
• Regular Penetration Testing — raa8 conducts regular security testing by independent third parties to identify and remediate any vulnerabilities before they can be exploited.

6 Cookies, Pixels & Tracking Technologies

Raa8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.

We use the following types of cookies:

• Strictly Necessary Cookies — Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled as the platform will not function without them.
• Preference Cookies — Stores your preferences such as language, display theme, and other personal settings so you do not need to reconfigure them on each visit.
• Analytics Cookies — Collects anonymised data on how users interact with our platform to help us understand usage patterns and improve our services.
• Security Cookies — Used to detect abnormal activity, prevent fraud, and protect your account from suspicious access.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the raa8 platform. For the best experience, we recommend allowing essential cookies.

7 User Rights Regarding Personal Data

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by raa8. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact our privacy team via email at [email protected] or via live chat within the raa8 app. We will process your request within 30 calendar days from the date of receipt. In complex cases, this period may be extended by up to 60 days with prior notice to you.

Please note that these rights are not absolute — there are situations where we may be unable to fulfil your request in full, such as when retaining data is required by law or necessary to defend legal claims. In such cases, we will explain the reason for the refusal or restriction to you.

8 Data Retention Period

Raa8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by Malaysian law. Below are the general guidelines for our data retention periods:

• Active Account Data — Retained for the duration of your active account and for a minimum of 7 years after account closure to meet financial compliance and AMLA requirements.
• Financial Transaction Records — Retained for a minimum of 7 years from the transaction date in accordance with Malaysian accounting and tax legislation.
• KYC Documents — Retained for the duration of the active account and 5 years after account closure, or longer if required by compliance obligations.
• Support Communication Logs — Retained for 3 years to allow historical reference for customer service and dispute resolution.
• Technical & Security Log Data — Retained for between 90 days and 2 years depending on the type of log and security investigation requirements.

Once the applicable retention period has ended, your data will be securely deleted or anonymised so it can no longer be linked to your identity. The deletion process is carried out systematically and guaranteed using recognised methods.

9 Cross-Border Data Transfers

In operating the raa8 platform, some of your personal data may be processed or stored on servers located outside Malaysia by the cloud and technology service providers we use. Such data transfers are carried out solely for legitimate operational purposes.

Raa8 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• We only work with service providers that comply with internationally recognized security standards.
• Establishing comprehensive Data Processing Agreements with all vendors.
• Ensuring that the recipient country or region maintains a level of data protection equivalent to or higher than Malaysia.
• Applying safeguard mechanisms such as Standard Contractual Clauses where applicable.

10 Amendments to This Privacy Policy

Raa8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or how we handle data. All amendments will be published on this page with a clear effective date.

For significant and material amendments — meaning changes that meaningfully affect your rights or how your data is used — raa8 will provide active notice at least 14 days before the amendment takes effect through:

• In-app or raa8 platform notifications upon login.
• Email to your registered address.
• A clear notice on the raa8.app homepage.

Continued use of the raa8 platform after the amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you may contact us to discuss your options, including account closure if necessary.

11 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way raa8 handles your personal data, please do not hesitate to contact us. Our privacy team is ready to assist and will respond within a reasonable timeframe.

We aim to respond to all privacy-related enquiries within 3 working days. For more complex cases requiring in-depth investigation, we will notify you within the same timeframe regarding the expected resolution timeline.