Raya999 Privacy Policy – Malaysian Player Data Protection

Raya999 takes the privacy of Malaysian players very seriously. We understand that when you register and play on our platform, you are entrusting us with sensitive personal information — including identity details, financial information, and your gaming habits. That trust is not something we take lightly.

This Privacy Policy is written in clear, plain language so you genuinely understand what happens to your data — not just a legal document packed with hard-to-parse jargon. We believe transparency is the foundation of a good relationship between Raya999 and our players.

Raya999 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and upholds internationally recognised data protection principles. As a platform serving players from across Malaysia — from Kuala Lumpur, Selangor, Johor, Penang to Sabah and Sarawak — we ensure that your data is handled to the highest standards in line with local legal requirements.

Raya999 collects your personal information through several channels, depending on the nature of your interaction with the platform. Below are the main categories of data we collect:

There is also information we do not collect: Raya999 does not store your credit or debit card numbers directly. All payments are processed through secure third-party payment gateways such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay — each of which has its own privacy policy governing that payment information.

Raya999 uses your personal information only for lawful and transparent purposes. We do not use your data for anything unrelated to providing the betting services you use. Below are the primary purposes for which your data is used:

• Account Management — registering your account, verifying your identity, enabling secure login, and managing your profile.
• Transaction Processing — processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as managing withdrawal of winnings to your bank account or e-wallet.
• Gaming Services Provision — operating slots games, Sports Betting on the Malaysia Super League and EPL, Live Casino, e-sports, and all other games available on the Raya999 platform.
• Security & Fraud Prevention — detecting and preventing fraudulent activity, multi-account usage, bonus abuse, and any conduct that violates Raya999's Terms & Conditions.
• Legal Compliance — meeting anti-money laundering (AML) requirements, know your customer (KYC) obligations, and any other applicable legal duties.
• Customer Support — responding to enquiries, resolving complaints, and providing technical assistance to Raya999 players.
• Promotional Communications — sending information about new bonuses, promotions, and exclusive Raya999 offers (only if you have consented to receive them).
• Platform Enhancement — analyses aggregated usage data to improve the design, performance, and user experience of the Raya999 platform.
• Responsible Gambling — monitors gameplay behaviour to identify signs of problem gambling and reaches out to players who may need support.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), Raya999 processes your personal data on valid legal grounds. Data processing at Raya999 is carried out on the following bases:

• Consent — By registering an account with Raya999, you consent to our processing of your personal information for the purposes set out in this Privacy Policy. You may withdraw this consent at any time, though doing so may mean you are no longer able to use Raya999's services.
• Contract Performance — Data processing is necessary for Raya999 to fulfil our contractual obligations to you — including processing deposits, paying out winnings, and providing access to games.
• Legitimate Interest — We process certain data on the basis of legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests do not override your fundamental rights and freedoms.
• Legal Compliance — In certain circumstances, we process data because it is required under Malaysian law, including anti-money laundering reporting requirements and financial record-keeping obligations.

Raya999 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties in order to provide our services:

• Payment Providers — Payment gateways that process DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay transactions receive only the information necessary to complete those transactions. These providers are bound by their own confidentiality agreements and privacy policies.
• Game Software Providers — Third-party gaming platforms such as PG Soft, Pragmatic Play, and Habanero may receive the minimum session data required to run the games. No full identity information is shared with these providers.
• Technology Infrastructure Providers — Companies providing cloud computing, cybersecurity, and analytics services to Raya999 may have limited access to your data in a strictly technical capacity, subject to rigorous data protection agreements.
• Legal Authority — Raya999 will disclose personal information when required to do so by Malaysian law or a valid court order, or when we believe such disclosure is necessary to protect our rights or the safety of others.

Raya999 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.

Key security measures we use at Raya999:

• 256-bit SSL/TLS encryption for all communications between the Raya999 platform and your device.
• Data-at-rest encryption for all personal and financial information stored in our databases.
• Two-factor authentication (2FA) for player accounts and all internal access by Raya999 staff.
• Firewalls and intrusion detection systems (IDS) operating 24/7 to monitor and prevent unauthorised access.
• Regular security audits conducted by independent third parties to assess and test our security systems.
• Role-based access control (RBAC) ensuring that Raya999 staff can only access data necessary for their specific responsibilities.
• Password encryption using strong hashing algorithms — we never store your password in plain text.
• Regular, tested data backups to ensure swift data recovery in the event of any technical disruption.

Raya999 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by Malaysian law. Once the purpose for retention is no longer applicable and there is no legal obligation to keep it, your data will be securely deleted or anonymised.

General data retention periods at Raya999:

• Active account data — retained for as long as your account remains active on the Raya999 platform.
• Financial transaction records — retained for a minimum of 7 years from the transaction date, in accordance with Malaysian financial regulatory requirements.
• Identity verification data (KYC) — retained for 5 years following account closure, in line with anti-money laundering requirements.
• Customer support communication records — retained for 3 years for reference and dispute resolution purposes.
• Technical log data — retained for 90 days for security purposes and technical troubleshooting.
• Marketing data (where consent has been given) — retained until you withdraw your consent to receive marketing communications.

Once the retention period expires, data will be permanently deleted from Raya999's systems or fully anonymised so it can no longer be linked to you. You may request details of the specific data we hold about you by contacting us through the channels set out in Section 12.

Raya999 uses cookies and similar tracking technologies to enhance your experience on the platform, ensure proper functionality, and understand how players interact with our platform. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — collects information about how you use the Raya999 platform (pages visited, time spent, errors encountered) to help us improve the user experience. All data is aggregated and anonymised.
• Functional Cookies — saves your preferences such as display settings, last balance, and favourite games to deliver a more personalised experience on your next visit.
• Security Cookies — used to detect and prevent fraudulent activity, monitor suspicious login attempts, and protect your account from unauthorised access.

You can manage or disable cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality and your overall experience on the Raya999 platform. For more information on managing cookies, please refer to the help documentation for your browser.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by Raya999. Below is a summary of those rights and how to exercise them:

The Raya999 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you believe a minor has registered an account on Raya999 or has provided us with their personal information, please contact us immediately at support@raya999.best.

Should we discover that we have collected personal data from an individual under the age of 18, we will take immediate steps to delete that information and close the associated account. Any remaining funds traceable to a legitimate source will be processed for return to the rightful guardian.

Raya999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or changes in the technology we use. The "Last updated" date shown at the top of this page indicates when the Policy was last revised.

For material amendments — that is, significant changes to how we collect, use, or share your personal data — we will provide at least 30 days' notice before the amendment takes effect, via:

• Prominent notifications within the Raya999 platform when you log in.
• Email sent to the address registered to your account.
• Notice on the homepage of raya999.best.

For non-material amendments such as correcting typographical errors or clarifying existing practices, we may update this Policy without prior notice. It is your responsibility to review this page periodically. Your continued use of the Raya999 platform after any amendment takes effect will be considered acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, how Raya999 handles your personal data, or to exercise any of your privacy rights, please reach out to us through the following channels:

• Privacy Email — support@raya999.best (use the subject line "Privacy Enquiry" or "Privacy Rights Request"). All privacy enquiries will be responded to within 3 business days.
• Live Chat — Available 24/7 on the Raya999 platform for general privacy enquiries. For formal data rights requests, please use email to maintain a written record.

For complaints that cannot be resolved directly with Raya999, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia under the Ministry of Communications and Digital.