Last Updated: 1 January 2026

Raya88 Privacy Policy – Your Personal Data Protection

Your privacy is our priority. This document transparently explains how raya88 collects, uses, stores, and protects member personal information in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

1 Introduction

Raya88 values the privacy of every member and user on our platform. This Privacy Policy is designed to provide full transparency on how your personal information is handled when you use our website. raya88.fun, the raya88 mobile app, or any of the services we offer.

As an online entertainment platform operating in Malaysia, raya88 is committed to complying with the Personal Data Protection Act 2010 (PDPA) and all relevant legal provisions. We believe that member trust is our most valuable asset, and that trust begins with transparent and responsible data management.

This Privacy Policy applies to all individuals who register an account, browse the website, use the mobile app, or interact with any official raya88 channel. By using our platform, you agree to the data protection practices described in this document.

Important Note: If you are under 18 years of age, you are not permitted to use the raya88 platform and we do not knowingly collect personal data from minors. Should we discover that such data has been collected, it will be deleted immediately.

2 Personal Data We Collect

Raya88 collects various types of personal information depending on how you interact with our platform. Below is a detailed breakdown of each category of data we collect:

Data Category Example Information Primary Purpose
Identity Information Full name, IC/passport number, date of birth, gender Identity verification (KYC), legal compliance
Contact Information Phone number, email address, residential address Account communications, transaction notifications
Financial Information Bank account number, bank name, credit/debit card number (encrypted) Deposit and withdrawal processing
Usage Data Login records, betting history, games played, account balance Account management, fraud detection, reporting
Technical Data IP address, device type, operating system, web browser, approximate location Account security, unauthorized access detection
Communication Data Support chat content, emails, complaints, and feedback Issue resolution, service improvements

Your data is collected through several channels: the account registration form, the KYC verification process, interactions with the platform during gameplay, communications with our customer support team, and automated technologies such as cookies and server logs.

Raya88 will never ask for your password via email, WhatsApp, Telegram, or any other support channel. Any such request is a fraudulent attempt by an external party and does not come from raya88.

3 How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. raya88 uses your personal data for the following purposes:

  1. Account management and maintenance — Creating, verifying, and maintaining your member account so you can access all platform features seamlessly.
  2. Financial transaction processing — Managing deposits, withdrawals, and bonus payments securely and accurately in accordance with your instructions.
  3. Identity verification (KYC) — Meeting legal compliance requirements for verifying member identity and preventing money laundering.
  4. Security and fraud prevention — Monitoring account activity to detect suspicious transactions, unauthorised access attempts, or system abuse.
  5. Platform improvements — Analysing aggregated usage patterns to improve the performance, design, and user experience of the raya88 platform.
  6. Service communications — Sending important notifications related to your account, transactions, policy changes, and security updates.
  7. Promotions and marketing — Sending bonus offers, promotions, and new game information to members who have consented to receive marketing communications.
  8. Customer support — Resolving complaints, answering enquiries, and providing effective technical assistance to members.

Data Minimisation Principle: raya88 only collects data that is strictly necessary for the stated purposes. We do not collect excess data and periodically review our data retention requirements.

4 Data Sharing with Third Parties

Raya88 does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. However, in the course of operating the platform, we may share your data with certain parties under limited and controlled circumstances:

  • Payment providers: Banks, e-wallet providers (such as Touch 'n Go eWallet, Boost, GrabPay) and other payment processors required to carry out your financial transactions. Data shared is kept to a minimum and limited only to what is necessary to complete the transaction.
  • Technical service providers: Cloud computing, server infrastructure, and cybersecurity service providers that support the operation of the raya88 platform. All such providers are bound by strict data protection agreements.
  • Game software providers: Slot game, Live Casino, and Sports Betting developers that provide game content to the raya88 platform. Data shared is limited to the session information required.
  • Competent authorities: Law enforcement agencies, regulatory bodies, or courts when required by Malaysian law or a valid court order.
  • Identity verification services: Third-party KYC service providers that assist us in verifying member identities for compliance purposes.

In all cases of data sharing, raya88 ensures that the receiving party maintains data protection standards equal to or higher than those we uphold ourselves.

5 Personal Data Security

Protecting your personal data from unauthorized access, loss, or misuse is raya88's top priority. We implement comprehensive technical and organizational security layers to ensure maximum protection:

  • 256-bit SSL Encryption: All data transmitted between your device and raya88's servers is protected with the same industry-grade encryption used by banking institutions.
  • Two-Factor Authentication (2FA): An additional security layer that ensures only you can access your account, even if your password is compromised.
  • 24/7 Monitoring: raya88's cybersecurity team monitors server and account activity around the clock to detect and respond to security threats swiftly.
  • Internal Access Control: Member personal data is only accessible by raya88 staff with a legitimate business need, and all access is logged for audit purposes.
  • Regular security testing: The raya88 platform undergoes regular penetration testing and independent security audits to identify and patch system vulnerabilities.
  • Segregated data storage: Sensitive financial data is stored in a separately isolated and specifically protected environment, distinct from general profile data.

While raya88 takes all reasonable precautions, no online system can be guaranteed 100% secure. You also play an important role in protecting your account by using a strong password, enabling 2FA, and not sharing your login credentials.

6 Cookies & Tracking Technologies

Raya88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

There are several types of cookies we use:

  • Essential Cookies: Required for basic platform functions such as login sessions, language preferences, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting statistical information on how users interact with the platform to help us identify technical issues and improve performance.
  • Functional Cookies: Saving your personal preferences such as display settings, favourite games, and notification choices so you don't need to reset them every time you log in.
  • Analytics Cookies: Used to understand platform usage patterns in an aggregated and anonymised form for product improvement purposes.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality or experience of using the raya88 platform.

7 Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by raya88:

Right of Access

You have the right to request and receive a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to correct any inaccurate or outdated personal information in your account profile.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data, subject to legal data retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time by contacting our team.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain situations while a dispute or review is being resolved.

To exercise any of the above rights, please contact the raya88 Data Protection team via our support email. We will process your request within 21 business days from the date it is received.

8 Data Retention & Deletion

Raya88 retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

Data retention periods by category are as follows:

  • Active account data: Retained throughout the period your account is active and for up to 7 years after account closure for legal and tax compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years in line with anti-money laundering and tax reporting legal requirements.
  • KYC documents: Retained for 6 years after the business relationship ends, or longer if required by authorities.
  • Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
  • Technical log data: Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, personal data will be securely deleted or anonymised in a form that cannot be linked to any individual. The deletion process follows established standard procedures and is audited on a regular basis.

Deletion Exceptions: Even if you request account deletion, raya88 may need to retain certain data if there are ongoing investigations, unresolved disputes, or binding legal obligations that prevent immediate deletion.

9 Changes to This Privacy Policy

Raya88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements in how we protect your data.

When material changes are made to this Privacy Policy, we will:

  • Updating the "Last Updated" date shown at the top of this page.
  • Sending notifications to members via their registered email or in-platform notifications at least 14 days before changes take effect.
  • Displaying a clear notice on the platform's home page for a minimum period of 30 days.

Continued use of the raya88 platform after any Privacy Policy changes take effect is considered your acceptance of the updated version. If you do not agree with the changes, please stop using the platform and contact us to close your account.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how raya88 handles your personal data, please contact our Data Protection team through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 via the live chat icon on the platform
  • Telegram & WhatsApp: Through official raya88 support channels

Our team is committed to responding to all privacy-related inquiries within 3 business days. For more complex complaints or data rights requests, the full response period is 21 business days from the date the request is received.

Complaints to Authorities: If you believe raya88 has violated your data protection rights and are dissatisfied with our response, you have the right to lodge a formal complaint with the Department of Personal Data Protection (JPDP) Malaysia.


Your Data, Our Responsibility

Raya88 upholds the highest data protection standards so you can play with peace of mind, without worrying about the security of your personal information.

Bank-Grade Encryption

The same 256-bit SSL technology used by Malaysia's major banks protects all data transmitted between your device and raya88's servers, including financial information and login details.

Malaysia PDPA Compliance

All data handling practices at raya88 are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), providing you with concrete legal protection.

Full Data Control

You have full control over your personal data — from access and correction rights to deletion requests. Our team processes all requests transparently and in a timely manner.

Data Minimisation

Raya88 only collects data that is strictly necessary to operate our services. No excess data, no hidden collection — every piece of information we store has a clear purpose.

Independent Security Audit

The raya88 platform undergoes regular security testing and independent audits by third-party experts to ensure our data protection systems are always at the highest standard.

Data Breach Notification

In the event of any security incident involving members' personal data, raya88 is committed to notifying affected members within 72 hours, in line with industry best practices.


Bahasa Melayu