Privacy Policy RAI88 –
Our Commitment to Protecting Your Data

RAI88 is an online entertainment and betting platform operating exclusively for the Malaysian market, offering Live Casino, table games, slots, Sports Betting — including Malaysia Super League and EPL football, badminton, and e-sports — to registered members. In the course of our operations, we collect and process various types of personal data for the purposes set out in this policy.

We are committed to ensuring that the privacy of every rai88 member is respected and protected at all times. This Privacy Policy transparently explains what data we collect, why we collect it, how we use it, how long we retain it, and what your rights are as a data subject under Malaysian law.

This policy is formulated in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and international best practices in data protection. If you have any questions about how rai88 handles your data, we encourage you to contact our team as outlined in Section 12.

RAI88 collects various categories of personal data depending on how you interact with our platform. The table below provides a full breakdown of each data category, along with examples and the purpose of collection:

RAI88 collects your personal data through various channels throughout your interactions with our platform. Below is an overview of each data collection method:

RAI88 uses your personal data only for legitimate, specific purposes. We do not use your data beyond the following without obtaining your additional consent:

• Account management: Creating, verifying, and managing your rai88 account, including login processing, session tracking, and password management.
• Transaction processing: Processing deposits via your preferred Malaysian payment method (TNG, DuitNow, GrabPay, FPX and others) as well as your winnings withdrawals.
• Identity verification (KYC): To fulfil legal compliance obligations, including the Anti-Money Laundering Act 2001 and related regulatory requirements.
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-account usage, and any misuse of the rai88 platform.
• Platform improvement: Analysing usage patterns in aggregated form to improve rai88 platform features, performance and user experience.
• Service communications: Sending account-related notifications, transaction confirmations, security alerts, and important terms updates.
• Customer support: To enable rai88's Malay-speaking support team to provide you with effective and consistent assistance.
• Responsible gaming: Monitoring gameplay patterns to identify members who may benefit from responsible gaming support, in line with rai88's commitment in this area.

RAI88 maintains a strict policy against sharing members' personal data. We do not sell, rent, or trade your data to any party for their own purposes. Your data may only be shared in the following limited circumstances:

• Payment service providers: Payment gateway providers such as Touch 'n Go, DuitNow, and FPX process the transaction information required to handle your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Game software providers: Game software developers may receive limited game session data for technical maintenance purposes. No personal identity data is shared unless technically required.
• Statutory authorities: rai88 will disclose data where required by Malaysian law, court order, or direction from a lawful authority such as Bank Negara Malaysia or law enforcement agencies.
• Auditors and legal counsel: Professionals involved in audits, compliance, or legal advisory may access relevant data, subject to their professional confidentiality obligations.

In all of the above data sharing scenarios, rai88 ensures that recipients are bound by adequate data protection obligations before any data is shared.

Protecting your personal data is rai88's top technical priority. We continuously invest in security infrastructure and procedures to safeguard your information against unauthorized access, loss, or disclosure:

• Data encryption in transit: All communications between your device and rai88's servers are protected by TLS 1.3 protocol with 256-bit SSL encryption.
• Data encryption at rest: Sensitive data including financial account information and KYC documents is encrypted at rest within the rai88 database.
• Layered access controls: Only rai88 staff who require access to specific data to perform their duties will be granted such access. All access is logged and monitored.
• Two-factor authentication (2FA): Available to all member accounts and mandatory for rai88 internal administration accounts.
• Continuous security monitoring: Intrusion detection systems and anomaly monitoring operate 24/7 to identify and respond to security threats in real time.
• Staff training: All rai88 staff who handle personal data undergo regular data protection training.

RAI88 does not retain your personal data indefinitely. We adhere to the principle of data minimisation, keeping information only for as long as necessary for the stated purpose or as required under Malaysian law:

Once the retention period has lapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding personal data processed by rai88. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, please submit a written request to support@rai88.click with the subject line "PDPA Rights Request". We will respond within 21 working days as required under Malaysian law.

The rai88 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following types of cookies are in use:

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the rai88 platform.

In certain circumstances, your personal data may be transferred outside Malaysia — for example, when we use cloud computing services or work with international game software providers.

RAI88 ensures that any cross-border data transfers are carried out with adequate safeguards — including through data transfer agreements that comply with PDPA requirements — and that receiving parties provide a level of data protection equivalent to that required under Malaysian law.

The rai88 platform is not suitable for, nor intended to be used by, individuals under the age of 21. We do not knowingly collect personal data from children or minors.

If we discover that personal data belonging to someone under the age of 21 has been collected, we will take immediate steps to delete that data and close the associated account. If you believe that an underage individual has registered on rai88, please contact us immediately at support@rai88.click.

Parents and guardians concerned about minors under their care accessing betting platforms may use parental control software to restrict access to such websites.

If you have any questions, concerns, or complaints about how rai88 handles your personal data, or if you wish to exercise your rights under PDPA 2010, please contact us through the following channels:

• Email (PDPA Enquiries): Send an email to support@rai88.click with the subject line "Privacy Data / PDPA Inquiry" for any data privacy-related enquiries.
• Live Chat: Available 24/7 directly from the rai88 platform for general enquiries. Average response time is under 2 minutes in Bahasa Malaysia.
• Response time: We are committed to responding to all privacy-related enquiries within 21 business days, as required under PDPA 2010.

If you are unsatisfied with rai88's response to your privacy inquiry, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (JPDP), the statutory regulatory body for PDPA matters in Malaysia.