RA66 Privacy Policy – Personal Data Protection for Malaysian Players

1Personal Data We Collect

Ra66 collects personal data from you in several ways – directly when you register and use the platform, automatically through tracking technologies, and occasionally via legitimate third parties such as payment service providers.

Data you provide directly to ra66:

• Registration information including your full name, email address, Malaysian phone number, date of birth, and the password you set.
• Identity verification (KYC) information, including your IC number or passport and any supporting documents requested during the account verification process.
• Financial information required to process deposit and withdrawal transactions via Malaysian local payment methods such as DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost and ShopeePay.
• Any communications you send to the ra66 customer support team via live chat or email, including your enquiries and complaints.
• Feedback, surveys, or suggestions you voluntarily provide to ra66.

Data collected automatically during use of the ra66 platform:

• Technical log data including IP address, web browser type, device type, operating system, and screen resolution.
• Platform activity records including pages visited, time spent, actions taken, sports betting history, casino game records and transaction history.
• General location data derived from your IP address, used for eligibility verification and legal compliance purposes.
• Session data and cookies used to maintain your login session and enhance your experience on the ra66 platform.

2How We Use Your Personal Data

Ra66 uses the personal data we collect for legitimate purposes directly related to delivering our services to you. Below are the primary purposes for which ra66 uses your data:

• Account management: Creating and maintaining your ra66 account, verifying your identity at login, and processing requests related to your account.
• Transaction processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, as well as handling your winnings withdrawals quickly and securely to the same payment methods.
• Know Your Customer (KYC) verification: Verifying that you meet the minimum age requirement of 18 years and other eligibility criteria for using the ra66 platform in accordance with applicable regulatory requirements.
• Fraud prevention: Detecting and preventing fraudulent activity, money laundering, multi-accounting and any other misuse of the ra66 platform.
• Service improvement: Analyzing platform usage patterns in aggregate and anonymized form to better understand the needs of Malaysian players and improve ra66's features.
• Service communications: Sending important notifications related to your account, transactions, changes to our terms, and relevant security updates.
• Customer support: Processing and responding to your inquiries, complaints, and support requests via live chat or email in Bahasa Melayu.
• Legal compliance: To fulfill legal and regulatory obligations, including the reporting and record-retention requirements set by the relevant Malaysian authorities.

Ra66 will not use your personal data for third-party marketing purposes without your explicit consent. If you agreed to receive marketing communications from ra66 during registration, you may withdraw that consent at any time through your account settings or by contacting the ra66 support team.

3Data Sharing with Third Parties

Ra66 does not sell or trade members' personal data to third parties. However, there are specific situations where ra66 may need to share data with certain parties in order to deliver our services effectively and meet legal requirements:

• Payment service providers: Data required to process your deposit and withdrawal transactions is shared with providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay operators. This sharing is limited strictly to information necessary to complete the transaction in question.
• Technology service providers: Ra66 works with trusted third-party service providers for specific functions such as server infrastructure, platform analytics, and cybersecurity services. All such providers are bound by strict data confidentiality agreements with ra66.
• Law enforcement authorities: ra66 may be required by law to disclose certain data to the relevant Malaysian authorities when lawfully requested through proper legal process, such as in the course of a criminal investigation or AML compliance requirements.
• Fraud investigation: In cases involving suspected fraud or illegal activity, ra66 may share the necessary data with law enforcement agencies or relevant financial institutions for investigation purposes.

4Data Security Measures at RA66

Ra66 continuously invests in security infrastructure to ensure every member's personal and financial data is protected to the highest standard. Below are the key security measures we have in place:

• Transit encryption: All communications between your device and ra66's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
• Storage encryption: Sensitive data stored in ra66's databases is encrypted to industry standards. Your password is never stored in plain text – it is hashed using a strong algorithm before being saved.
• Two-factor authentication (2FA): Ra66 offers 2FA on all accounts as an added layer of security at login, particularly for sensitive operations such as withdrawals.
• 24/7 security monitoring: An intrusion detection system and suspicious activity monitoring operate automatically around the clock to identify and respond to any security threats promptly.
• Regular security audits: Ra66 conducts periodic independent security assessments by third-party experts to identify vulnerabilities and ensure that security best practices are consistently upheld.
• Internal access controls: Access to members' personal data within the ra66 organisation is strictly limited to staff who require it to perform their duties, and all such access is logged and monitored.

While ra66 takes all reasonable steps to protect your data, no security system can be guaranteed 100% safe against all increasingly sophisticated cyber threats. ra66 encourages you to take personal security measures such as using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

5Cookies & Tracking Technologies

Ra66 uses cookies and similar tracking technologies to improve the user experience, maintain your login session, and understand how our platform is used. The following are the types of cookies we use:

• Essential Cookies: These cookies are essential for core ra66 platform functions, such as maintaining your login session and ensuring platform security. Disabling them will directly impact the platform's ability to function.
• Preference Cookies: Cookies that remember your preferences — such as language, display settings, and other customizations — so you don't have to reconfigure them every time you visit ra66.
• Analytics Cookies: Cookies that help ra66 understand how users interact with the platform – which pages are visited most, average time on platform and general navigation patterns. This information is used in aggregate, anonymised form for platform improvements.
• Security Cookies: Cookies that help ra66's security systems detect suspicious activity and protect your account from unauthorised access attempts.

You can manage your cookie settings through your web browser's preferences. Keep in mind that disabling certain cookies may affect the functionality or your overall experience on the ra66 platform. For guidance on managing cookies in your specific browser, refer to that browser's help documentation.

6Data Retention & Deletion

Ra66 retains your personal data only for as long as necessary for the purpose it was collected, or as required under applicable Malaysian law. The general principles we follow are:

• Active account data: For as long as your account remains active on ra66, we retain all data necessary to provide our services and meet regulatory requirements.
• Data after account closure: After your account is closed, ra66 may retain certain data for a period stipulated by Malaysian law, generally between five and seven years, for legal compliance purposes, resolution of any potential claims, and financial reporting requirements.
• Financial transaction data: Records of deposits, withdrawals, and other financial activity are retained for the periods required under Malaysia's applicable tax laws and financial regulations.
• Log and security data: Technical logs and security data are typically retained for three to twelve months depending on the type, unless a longer period is required for an ongoing security investigation.

Once the designated retention period has elapsed, your data will be securely deleted or anonymised using methods that ensure it can no longer be linked back to you as an individual. ra66 does not retain your personal data for longer than necessary.

7Your Rights Over Personal Data at RA66

As an ra66 platform user, you have important rights regarding your personal data. ra66 is committed to respecting and facilitating the exercise of these rights:

8Children & Minors

The ra66 platform is strictly for individuals aged 18 and above. Ra66 does not knowingly collect personal data from children or minors, and we do not permit anyone under the age of 18 to use the platform.

Should ra66 discover that personal data has been collected from a minor, we will take the following steps immediately:

• Immediately closing the account in question and blocking all access to the ra66 platform.
• Deleting all collected personal data within a reasonable timeframe in accordance with ra66's secure deletion procedures.
• Returning any financial balance to the lawful guardian of the individual concerned upon proper identity verification.

If you are a parent or guardian who believes your child or ward has registered at ra66 without your knowledge, please contact the ra66 support team immediately via live chat or email at support@ra66.click. We will treat this matter with the utmost priority.

9Amendments to This Privacy Policy

Ra66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data. The latest version will always be published on this page.

• Any significant changes to this Privacy Policy will be communicated to ra66 members via email or in-platform notification at least 14 days before the changes take effect.
• The "Updated" date at the top of this page will reflect the date of the most recent changes to ra66's Privacy Policy.
• Your continued use of the ra66 platform after any amendments are published and take effect will be considered acceptance of the updated policy.
• If you disagree with any changes made, you have the right to close your account and request the deletion of your data, subject to applicable legal retention requirements.

10Contact Us About Privacy

If you have any questions, concerns, or requests regarding ra66's Privacy Policy or how we handle your personal data, we encourage you to reach out to us through the following channels:

• Live Chat: The fastest way to get help — chat directly with the ra66 support team in Bahasa Melayu, available 24 hours a day, seven days a week, including Malaysian public holidays.
• Email: Send your privacy enquiry to support@ra66.click. We will respond within 24 hours for general enquiries and within 30 working days for formal data rights requests.

For formal data rights requests such as access, correction, or deletion requests, please clearly state the following in your message: your full name, the email address registered with ra66, the type of request you wish to make, and any other relevant information that will help us process your request efficiently.