RA66 Privacy Policy — How We Protect the Personal Data of Malaysian Members

Ra66 collects your personal data in several ways — directly when you register or use our services, and automatically through platform technology as you browse our website.

Data you provide directly:

• Registration Information: Full name, an active Malaysian phone number, email address, and the password you create.
• Identity Verification (KYC) Information: ID card or passport number, date of birth, and sometimes an image of the identity document — these are required to meet legal obligations related to anti-money laundering and age verification.
• Financial Information: Payment method details used for deposits and withdrawals — including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, and FPX bank account numbers (Maybank2u, CIMB Clicks). ra66 does not store credit or debit card numbers directly.
• Support Communications: The content of any enquiries, complaints, or communications you submit to the ra66 support team via email or live chat.

Automatically collected data:

Ra66 uses the personal data it collects solely for legitimate, clearly stated purposes. Below is a full list of how your data is used on the ra66 platform:

• Account Management: Creating and managing your ra66 account, verifying your identity at login, and keeping your account secure from unauthorised access.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other methods, as well as handling your withdrawal requests securely and on time.
• Game Operation & Betting: Recording bets, calculating winnings, updating account balances, and managing bonus usage across all game categories at ra66 — from Live Casino baccarat and roulette to Sports Betting on the Malaysia Super League and EPL, virtual sports, and slots.
• Legal Compliance & Fraud Prevention: Fulfilling legal obligations related to anti-money laundering, age verification, and KYC requirements. Monitoring transactions and suspicious activity to protect all members.
• Customer Support: Providing relevant and effective assistance whenever you reach out to the ra66 support team via live chat or email.
• Account-Related Communications: Sending you important account notifications — including deposit confirmations, withdrawal status updates, changes to terms, and security alerts.
• Platform Improvements: Analysing aggregated usage data (without identifying individuals) to improve platform performance, the user interface, and the overall gaming experience at ra66.
• Responsible Gaming Programme: Monitoring gameplay activity patterns to identify signs of problem gambling and provide timely intervention, in line with ra66's commitment to responsible gambling.

Ra66 does not sell, rent, disclose, or transfer members' personal data to third parties for their own marketing purposes. This is an absolute, unwavering commitment.

There are, however, limited situations where ra66 needs to share data with certain parties in order to operate the platform properly:

• Payment Service Providers: Transaction information that must be shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, or Malaysian banks via FPX to process your deposits and withdrawals. These providers receive only the data necessary to complete the relevant transaction.
• Game Providers: Data required by third-party game providers operating under the ra66 platform — limited strictly to what is necessary for running games and ensuring the accuracy of results.
• Authorities: Data required by Malaysian government authorities or law enforcement agencies when mandated by a valid court order, warrant, or legal obligation. ra66 will notify members of such requests unless prohibited by law from doing so.
• Identity Verification Services: Authorised third-party KYC service providers that assist ra66 in verifying members' identity and age in accordance with anti-money laundering legal requirements.
• Technical Infrastructure Services: Cloud computing and technical infrastructure service providers required to operate the ra66 platform — all bound by strict data protection agreements.

Ra66 invests seriously in security infrastructure to protect every member's personal data. Below are the security layers we have in place:

• 256-bit SSL Encryption: All communication between your browser and ra66's servers is encrypted using TLS protocol with 256-bit keys. This ensures that data in transit — including login credentials and payment details — cannot be read by anyone who intercepts the connection.
• Stored Data Encryption: Sensitive data stored in ra66's databases — including passwords and financial details — is encrypted using industry-standard algorithms. Passwords are never stored in plain text; we store a hash that cannot be decrypted.
• Internal Access Controls: Only ra66 staff with a legitimate business need are permitted to access members' personal data. All access is logged and continuously monitored. Staff who violate internal privacy policies will face disciplinary action.
• Continuous Threat Monitoring: ra66's security monitoring system operates 24/7 to detect any suspicious activity — including unauthorised access attempts, brute force attacks, and anomalies in transaction patterns.
• Two-Factor Authentication (2FA): ra66 supports two-factor authentication for account access, providing an additional layer of security that ensures only you can log in to your account — even if your password is compromised.
• Regular Security Testing: The ra66 platform undergoes regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities before they can be exploited.

Ra66 uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better experience for members. The following are the types of cookies we use:

• Essential Cookies: These cookies are essential for the core functionality of the ra66 platform — including maintaining your login session, remembering your language preferences, and securing transactions. The platform cannot function without them.
• Performance Cookies: These cookies help ra66 understand how members use the platform — which pages are visited most frequently, where technical issues occur, and how long pages take to load. This data is used in aggregate to improve platform performance.
• Functional Cookies: These cookies remember the preferences you've set — such as display settings, favourite games, and account configurations — so you don't have to reconfigure them each time you log in to ra66.
• Device Identifier: ra66 uses device identifiers to detect login attempts from new or unrecognised devices, helping to protect your account from unauthorised access.

Managing Cookies: You can manage cookie usage through your browser settings. Please note, however, that disabling essential cookies will significantly affect the functionality of the ra66 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

As an ra66 member in Malaysia, you have the following rights regarding your personal data held by our platform. ra66 respects and facilitates the exercise of all these rights:

To exercise any of the above rights, please contact the ra66 privacy team by email at support@ra66.asia clearly stating the right you wish to exercise and providing the information needed to verify your identity. Your request will be validated and processed within a reasonable timeframe.

Ra66 does not retain your personal data indefinitely. Retention periods depend on the type of data and the purpose for which it is held. The following are the general retention guidelines we follow:

• Active Account Information: Retained for the duration your account remains active with ra66, plus any additional period required after account closure for legal compliance.
• Financial Transaction Records: Retained for a minimum of 5 years after the transaction date, in accordance with Malaysian financial regulations and anti-money laundering requirements.
• KYC Records (Identity Verification): Retained for a minimum of 5 years after the account closure date or the end of the business relationship, in accordance with applicable legal requirements.
• Support Communication Logs: Retained for 2 years after a support case is resolved, to allow for reference in the event of any subsequent disputes.
• Technical Log Data: Retained for 12 months for security purposes and technical troubleshooting, after which it is deleted or anonymised.
• Aggregated Analytics Data: Data that has been fully anonymised (and cannot be linked to any individual) may be retained indefinitely for platform improvement purposes.

Privacy Policy Amendments: ra66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or the services we offer. When significant changes occur, we will notify members via their registered email or an in-platform notification at least 7 days before the changes take effect.

It is your responsibility to review this page periodically to stay informed of the latest terms of ra66's Privacy Policy. Continued use of the ra66 platform after any amendments take effect will be considered acceptance of the revised policy.

Privacy-Related Complaints: If you have a complaint about how ra66 handles your personal data, please contact us first through the channels below. We are committed to addressing every privacy complaint seriously and within a reasonable timeframe.

The effective date of this Privacy Policy is January 2026. The latest version will always be available on this page. ra66 is committed to being transparent about our privacy practices and to respecting the privacy rights of every Malaysian member who uses our platform.