Privacy Policy Raja99 — Our Commitment to Protecting Malaysian Members' Personal Data

Raja99 ("we", "our platform") is fully committed to protecting the privacy of every individual who uses our online betting platform. This Privacy Policy explains how we manage the personal information we collect from you when you register, use, or interact with Raja99 via the website at raja99.bid or any other channel associated with our platform.

This policy applies to all registered members, website visitors, and any individual who communicates with the Raja99 support team. By using the Raja99 platform, you agree to the collection and use of information as described in this Privacy Policy.

Raja99 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. We take this compliance responsibility seriously and continually update our data management practices to ensure alignment with the latest legal requirements.

Raja99 only collects the information necessary to provide and improve our services. The information we collect falls into several categories:

Information you provide directly:

• Registration information: Full name, email address, phone number, date of birth, and password when you register a Raja99 account.
• Identity verification (KYC) information: A copy of your Malaysian identity card (MyKad), bank statement, or other identity verification documents requested during the KYC process.
• Financial information: Bank account numbers, e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), and other information required to process deposits and withdrawals.
• Support communications: Live chat conversation records, emails you have sent to the Raja99 support team, and any information you provided when contacting us.

Automatically collected information:

Raja99 does not collect sensitive information such as plain-text passwords, health information, or political affiliations. All passwords are stored in encrypted form using strong hashing algorithms.

Raja99 uses the information we collect solely for the following purposes, and nothing beyond that:

• Service provision: Processing account registration, verifying member identity, handling deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX and other Malaysian payment methods, as well as processing Sports Betting and casino game wagers.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other conduct that violates Raja99's terms of service or applicable Malaysian law.
• Legal compliance: Complying with the Personal Data Protection Act 2010, Anti-Money Laundering requirements, and directives issued by relevant authorities.
• Platform improvements: Analysing usage patterns in aggregate and anonymised form to improve the user experience, identify technical issues, and develop new features that members need.
• Service communications: Sending important notifications related to your account, updates to our terms or privacy policy, and responses to support enquiries you have submitted.
• Personalised promotions and offers: Keeping you informed about Raja99's latest promotions, seasonal bonuses tied to Malaysian festivities, or offers related to your favourite games — only if you have consented to receive marketing communications.
• Responsible gambling: Monitoring betting patterns to identify early signs of problem gambling and providing appropriate assistance or self-management tools.

Raja99 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where we need to share certain information with other parties in order to provide our services to you:

• Payment processors: To process your deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, the required transaction information will be shared with the respective payment service providers. All payment providers that partner with Raja99 are required to comply with stringent data security standards.
• Game software providers: Integrated Live Casino and slots game providers within the Raja99 platform may receive the technical information necessary to process your gameplay. These providers are bound by strict confidentiality agreements with Raja99.
• Legal authority: Raja99 will disclose member information to Malaysian authorities when required by law, court order, or valid legal process. We will notify you of any such disclosure if we are permitted to do so under applicable law.
• Independent security auditors: To maintain platform security, Raja99 may engage accredited third-party cybersecurity firms to conduct audits. These firms are bound by strict confidentiality agreements and may not use your data for any other purpose.

In all of the above cases, we share only the minimum information necessary for the stated purpose. We do not share any unnecessary information and always ensure that parties receiving your data have adequate security controls in place.

The security of our members' personal data is Raja99's highest priority. We invest continuously in the latest security infrastructure to ensure your data remains protected at all times. Our security measures include:

• Data-in-transit encryption: All communications between your browser or app and Raja99's servers are protected with 256-bit TLS/SSL encryption. This means any data transmitted — including passwords, bank account details, and betting records — cannot be read by unauthorised parties, even if they manage to intercept the communication.
• Data-at-rest encryption: Sensitive data stored in Raja99's databases — including identity information, financial details, and hashed passwords — is stored in encrypted form using the latest industry-standard encryption.
• Internal access controls: Access to member data within Raja99's internal systems follows a least-privilege principle — each staff member can only access the data necessary to perform their specific role. All access is logged and monitored.
• Two-factor authentication: Raja99's internal systems containing member data are protected with multi-factor authentication. We also encourage members to enable two-factor authentication on their accounts.
• Regular security audits: Raja99 conducts regular penetration testing and security audits with accredited independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited.
• 24/7 Monitoring: The Raja99 technical security team monitors our platform around the clock to detect any suspicious activity or unauthorized access attempts in real time.

Raja99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit raja99.bid.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session, saving language preferences, and ensuring security features operate correctly. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting aggregated, anonymised information about how visitors use our platform — which pages are visited most frequently, time spent in each section, and any error messages encountered. This data is used solely to improve the platform.
• Functionality cookies: Remembering the preferences you set while using the platform — such as your odds display preference, favourite sports, and other personal settings — to deliver a more personalised experience.
• Session cookies: Temporary cookies that are automatically deleted when you close your browser. These are used to manage your active session on the platform.

You can manage or delete cookies through your web browser settings at any time. However, disabling certain cookies may affect your experience on Raja99 or prevent some features from functioning properly. For guidance on managing cookies in your browser, refer to the relevant browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 and Raja99's commitment to privacy, you have the following rights regarding your personal data:

Raja99 does not retain your personal data for longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:

Once the applicable retention period has lapsed, data will be securely deleted or anonymised so it can no longer be linked to you as an individual. The data deletion process runs automatically via an established data management system that is audited on a regular basis.

The Raja99 platform may contain information or references related to Malaysian payment providers such as Touch 'n Go, GrabPay, DuitNow, and local banks that partner with us via FPX. When you access these third-party payment portals to complete a transaction, you are leaving the Raja99 platform environment.

Raja99 is not responsible for the privacy practices or content of such third-party websites or applications. We recommend reading the privacy policy of whichever payment provider you use to understand how they handle your data during transaction processing.

In the context of casino games, third-party game software providers integrated within the Raja99 platform have their own privacy policies. However, their integration with Raja99 is governed by strict data confidentiality agreements ensuring they use any shared data solely for game processing purposes.

Raja99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. When we make material changes to this policy:

• We will update the "Last Updated" date at the top of this page.
• We will send a notification to your registered email address for any significant changes.
• We will display a clear notice on the Raja99 platform when you log in.
• For material changes, at least 14 days' notice will be given before the effective date.

We encourage you to review this page periodically to stay informed about how Raja99 protects your information. Your continued use of the Raja99 platform after any policy changes take effect constitutes your acceptance of the updated policy.

If you do not agree with any changes made, you have the right to close your account and request the deletion of your data in accordance with the procedures outlined in Sections 7 and 8 above. Any questions regarding changes to this policy may be directed to our support team.

If you have any questions, concerns, or complaints about how Raja99 handles your personal data, we encourage you to reach out to us directly. Our team will respond within 48 hours for general enquiries and within 24 hours for urgent complaints.

When contacting us regarding a privacy matter, please provide your full name, registered Raja99 account number, and a detailed description of your enquiry or concern. This information allows us to verify your identity and provide an accurate, helpful response.