Official Data Protection at ra66

Privacy Policy ra66
Our Members' Data Security Comes First

Ra66 is fully committed to protecting the privacy and data security of every member's personal information. This document transparently explains how we collect, use, store, and protect your information.

Effective Date: 1 January 2026  |  Version 2.5
ra66's Commitment: This Privacy Policy complies with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international consumer data protection standards.
1. Introduction and Scope of Privacy Policy

Welcome to the ra66 Privacy Policy. This document is published by ra66 ("we", "Platform", or "ra66") to explain in detail how we handle the personal data of every individual who uses our platform via the website ra66.win or the ra66 mobile app.

Your privacy is more than a legal obligation to us — it is the foundation of trust that defines the relationship between ra66 and millions of members across Malaysia. We believe every member deserves to know exactly what happens to their personal information, which is why we have written this policy in clear, straightforward language.

This Privacy Policy applies to all users of the ra66 platform, including website visitors, new registrants, active members and former members. It covers all ra66 service channels including the website, Android and iOS apps, as well as any communications via email and live chat.

By continuing to use ra66's services, you confirm that you have read and understood this Privacy Policy. If you disagree with any provision herein, please cease using the platform and contact us to close your account.

2. Types of Personal Data We Collect

Ra66 collects your personal data through several methods: directly when you register or fill in your details, automatically while you use the platform, and occasionally through trusted third parties such as payment processors.

Data Category Sample Information Collection Method
Identity Information Full name, date of birth, identification card number, passport Account registration, KYC
Contact Information Email address, phone number, residential address Registration, profile updates
Financial Information Bank account number, bank name, transaction records Deposits, withdrawals, KYC
Technical Data IP address, browser type, operating system, device ID Automatic server logs
Usage Data Betting records, game history, login logs Platform activity
Communication Data Support chat records, emails, feedback Customer support interactions
Location Data Country, state (based on IP) Automatic detection

ra66 never collects sensitive data such as your medical information, religious beliefs, or political affiliations. Financial data such as full credit card numbers is not stored directly on ra66's servers — it is handled by PCI-DSS certified payment processors.

3. Purpose of Using Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. ra66 does not use your data for purposes unrelated to the delivery of platform services without first obtaining your consent. Below is the complete list of data use purposes:

  • Account Management: To process registration, verify your identity through KYC, and manage your account securely.
  • Transaction Processing: To ensure deposits, withdrawals, and bonus payments are processed accurately and efficiently to the correct account.
  • Security and Fraud Prevention: To detect, investigate, and prevent any fraudulent activity, money laundering, or platform abuse.
  • Legal Compliance: To fulfil obligations under the Personal Data Protection Act 2010 (PDPA), anti-money laundering (AML) requirements, and other applicable regulatory rules.
  • Personalized Marketing: To send promotional offers, exclusive bonuses, and relevant notifications aligned with your gaming interests — only if you have given consent to receive marketing communications.
  • Platform Improvements: To analyse aggregated usage patterns in order to improve user experience, platform speed, and service quality.
  • Customer Support: To handle and resolve enquiries, complaints, or assistance requests submitted to our team.
  • Responsible Gaming: To monitor your gaming patterns and identify any signs of excessive play that may require support intervention.

You may withdraw consent to receive marketing communications at any time via your account settings or by contacting ra66 support. Withdrawing this consent will not affect the processing of data required to manage your account and transactions.

4. Sharing Data with Third Parties

Ra66 does not sell, rent, or disclose your personal data to third parties for their own independent marketing purposes. However, in the day-to-day operation of our platform, there are certain situations where we need to share your data with the following parties:

  • Payment Processors: Transaction information is shared with licensed payment gateways such as DuitNow, TNG eWallet, GrabPay, and FPX for the purpose of processing your deposits and withdrawals. All processors comply with PCI-DSS security standards.
  • Game Providers: Data required to run game sessions is shared with providers such as Pragmatic Play, Evolution Gaming and Microgaming in a limited and protected manner.
  • Regulatory Authority: ra66 will disclose required data to regulatory authorities, law enforcement agencies, or government bodies when mandated by law or court order.
  • Identity Verification Service: KYC data is shared with licensed third-party identity verification service providers to ensure the authenticity of submitted documents.
  • Cloud Services and Infrastructure: Data is stored on secure cloud servers operated by certified infrastructure providers bound by strict confidentiality agreements.

All third parties we work with are contractually bound to maintain the confidentiality of your data and to process that information only for the purposes we specify. They are not permitted to use your data for their own needs.

5. Data Encryption and Security Measures

Protecting the personal data security of our members is ra66's highest priority. We continuously invest in the latest security infrastructure to ensure your data is always safeguarded against unauthorized access, loss, or misuse.

256-bit SSL Encryption

All data transmitted between your device and ra66's servers is protected by TLS 1.3 protocol with 256-bit encryption — the same standard used by international banking institutions.

Two-Factor Authentication (2FA)

Ra66 members can enable 2FA for an added layer of security. Every login attempt from a new device requires verification via an OTP code sent to your registered email or phone.

Stored Data Encryption

Sensitive data stored in ra66's database — including banking information and KYC documents — is encrypted using AES-256 so it remains unreadable even to internal staff without authorisation.

24/7 Monitoring

Ra66's security system monitors platform activity around the clock to detect any intrusion attempts, unusual access, or suspicious activity in real time.

Regular Security Audits

The ra66 platform undergoes regular penetration testing and independent security audits conducted by certified third-party cybersecurity firms.

Data Backup and Recovery

Member data is automatically backed up to redundant data centres every 24 hours. Tested data recovery procedures ensure service continuity under any circumstances.

While ra66 takes all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. You are also responsible for keeping your password and account login credentials confidential.

6. Cookies, Pixels and Tracking Technologies

Ra66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse the ra66 website.

The types of cookies used by ra66 are as follows:

  • Essential Cookies: Required for core platform functions such as login session management and account security. These cookies cannot be disabled.
  • Performance Cookies: Anonymously collects information on how you use the platform to help us improve site speed and functionality.
  • Functional Cookies: Remembers your preferences such as language, display settings, and login details for your convenience.
  • Marketing Cookies: Used to display ads more relevant to your interests. You can decline these cookies through your browser settings.

You can manage your cookie settings through your internet browser at any time. Disabling certain cookies may affect the functionality and user experience of the ra66 platform.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ra66's policies, you have the following rights regarding your personal data. ra66 is committed to processing all requests related to these rights within a reasonable timeframe:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data.

Right to Erasure

Under certain circumstances, you may request that your personal data be deleted from our systems.

Right to Restriction

You may request that we restrict the processing of your data in certain circumstances as defined by law.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another provider.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without penalty.

To exercise any of the rights above, please contact the ra66 Data Protection team by email at [email protected] or via our platform's live chat. We will process your request within 14 working days.

8. Data Retention Period

Ra66 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. General retention period guidelines are as follows:

Data Type Retention Period Reason
Active Account Data Throughout active account + 7 years Regulatory and audit requirements
Transaction Records 7 years AML and tax compliance requirements
KYC Documents 5 years after account closure Anti-money laundering obligations
Communication Logs 3 years Dispute resolution and support
Technical/Log Data 12 months Security and performance analysis
Marketing Data Until consent is withdrawn Based on member consent

Upon expiry of the applicable retention period, data will be securely deleted or anonymised so that it can no longer be linked to your identity.

9. Third-Party Links and Services

The ra66 platform may contain links or integrations to third-party services such as game providers and payment processors. This Privacy Policy applies solely to the ra66 platform.

Ra66 is not responsible for the privacy practices or content of third-party websites or services. We encourage you to read their respective Privacy Policies before providing any personal information to them. All third-party providers integrated with the ra66 platform have undergone a security review process and are bound by strict data protection agreements.

10. Protection of Children

The ra66 platform is exclusively for users aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18.

All account applicants are required to verify their age during the registration and KYC process. Should we discover that personal data of an underage individual has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

If you believe a child has registered an account on ra66 or has provided us with their personal data, please contact our support team immediately so we can take the appropriate action.

11. Amendments to Privacy Policy

Ra66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. All amendments will be published on this page with the latest effective date.

For amendments involving significant changes to how we handle your personal data, ra66 will notify you via in-platform notifications or email at least 14 calendar days before the amendments take effect. Your continued use of the ra66 platform after amendments take effect will be deemed as your acceptance of the updated policy.

It is your responsibility to review this page periodically. We recommend checking this Privacy Policy once every few months to ensure you are always aware of how we protect your data.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ra66 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

  • Official Email: [email protected]
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the ra66 platform.
  • Response Time: We aim to respond to all privacy-related inquiries within 3 working days.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or the relevant regulatory authority in your jurisdiction.

Your privacy is our priority. ra66 values the trust you place in us and we are committed to continuously raising our data protection standards for the safety of every member who plays with us.

Why Your Data Safe at ra66

We don't just comply with the law — we go further to ensure every piece of your data is protected with the best available technology.

Bank-Level Encryption

TLS 1.3 protocol with 256-bit SSL encryption protects every communication between your device and ra66's servers — the same standard used by Malaysia's leading commercial banks.

Secure & Trusted KYC

Ra66's identity verification process uses a secure digital KYC system. Your documents are processed by a system that complies with Malaysia's AML requirements and remains encrypted at all times.

No Data Sales

Ra66 has never and will never sell members' personal data to any party for marketing purposes. Your data is used solely to enhance your experience on our platform.

Malaysia PDPA Compliance

Ra66's data policies and practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international consumer data protection standards.

Full Control in Your Hands

Through your ra66 account settings, you can manage your privacy preferences, withdraw marketing consent, and easily request access to or deletion of your personal data.

24/7 Privacy Support

The ra66 support team is available at all times to assist with any privacy or personal data inquiries — via live chat or the platform's official email.

Join ra66 Today

Play with Secure and Trusted

Your data is protected, your privacy is respected. Register a ra66 account today and enjoy a wagering experience in a safe, fair and responsible environment.

256-bit SSL PDPA Compliant Secure Data Secure KYC 24/7 Support
Bahasa Melayu