Privacy Policy

This Privacy Policy ("Policy") is issued by Rajatoto88 ("the Company", "we", "us", or "our") and applies to all personal data collected from users ("you", "Player", or "User") of the rajatoto88 online gaming platform accessible at rajatoto88.cam and all associated subdomains, mobile interfaces, and applications.

Rajatoto88 is committed to processing personal data in a manner that is transparent, fair, and compliant with applicable international data protection principles. This Policy sets out in clear terms what personal data we collect, the purposes for which it is processed, the lawful basis for such processing, and the rights available to you in respect of your personal data.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, which collectively govern your use of the rajatoto88 platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, payment information, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Data Controller" means Rajatoto88 as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of the Company pursuant to written instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data.
• "KYC" means Know Your Customer — the process by which we verify the identity, age, and eligibility of a Player.
• "Cookie" means a small text file placed on a user's device by a website to store information about their preferences, session, and browsing behaviour.
• "Platform" means the rajatoto88 website, mobile site, and any associated applications through which the Services are delivered.

Rajatoto88 collects Personal Data that is necessary to operate the Platform, provide the Services, and comply with applicable legal obligations. The categories of Personal Data we collect include the following:

3.1 Registration and Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (to verify compliance with the 21+ age requirement)
• Email address and mobile phone number
• Residential address
• Username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of address documentation (e.g., utility bill, bank statement)
• Proof of payment method ownership where required
• Selfie or facial verification image where required for enhanced KYC

3.3 Financial and Transaction Data

• Bank account details and payment method information (e.g., Maybank account number, CIMB account reference, Touch 'n Go eWallet identifier, GrabPay details)
• Deposit and withdrawal transaction records
• Cryptocurrency wallet addresses where applicable
• Transaction amounts, dates, timestamps, and processing status

3.4 Gaming and Activity Data

• Betting and wagering history across all game categories
• Bonus usage and promotional participation records
• Game session timestamps, duration, and frequency data
• Sports betting selections including Liga Super Malaysia, EPL, UFC, and other events
• Responsible gambling tool settings (deposit limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Session identifiers and authentication tokens
• Platform performance and error logs

3.6 Communications Data

• Records of communications with our customer support team
• Email and live chat message histories
• Survey responses and feedback submissions

Rajatoto88 collects Personal Data through the following methods:

Rajatoto88 processes your Personal Data only for legitimate, specified purposes. The table below sets out the primary purposes for which we process your data:

Rajatoto88 processes Personal Data on one or more of the following lawful bases:

• 6.1 Contractual Necessity: Processing is necessary for the performance of the contract between you and Rajatoto88 — specifically, to operate your account, process transactions, and deliver the Services you have requested.
• 6.2 Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML/CTF obligations, KYC requirements, and financial record-keeping duties.
• 6.3 Legitimate Interests: Processing is necessary for the legitimate interests of Rajatoto88, including fraud prevention, platform security, and business analytics, provided such interests are not overridden by your data protection rights.
• 6.4 Consent: Where consent is the lawful basis (such as for marketing communications), we will obtain your explicit consent before processing. You may withdraw consent at any time by contacting our support team or adjusting your account preferences.

Rajatoto88 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your Personal Data with third parties only in the following circumstances:

7.1 Service Providers and Data Processors

We engage third-party service providers who process Personal Data on our behalf under written data processing agreements. These include payment processing partners (including providers that facilitate DuitNow, FPX, and Malaysian e-wallet integrations), KYC and identity verification providers, fraud detection and security service providers, and cloud infrastructure and hosting providers.

7.2 Legal and Regulatory Disclosures

We may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to prevent serious harm, fraud, or criminal activity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Rajatoto88's business, Personal Data held by the Company may be transferred to the acquirer or successor entity. You will be notified of any such transfer and your rights with respect to your data will be preserved.

7.4 Consent-Based Sharing

We will not share your Personal Data with any other third party without your prior explicit consent, except as described in this Policy.

Rajatoto88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in compliance with applicable financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the customer relationship.
• Marketing Data: Retained until you withdraw your consent or request deletion, subject to any legal retention requirements.
• Support Communications: Customer support records are retained for a period of three (3) years from the date of the interaction.

At the end of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that makes it impossible to link to any identified individual.

Rajatoto88 uses cookies and similar tracking technologies on the Platform to enhance functionality, improve user experience, and support our security and analytics operations. The types of cookies we use are described below:

9.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core features such as session management, authentication, and security. You cannot opt out of essential cookies without affecting the Platform's functionality.

9.2 Functional Cookies

These cookies allow the Platform to remember your preferences and settings, such as language selection, display preferences, and previously entered information, to provide a more personalised experience.

9.3 Analytics Cookies

We use analytics cookies to collect aggregated, anonymised data about how users interact with the Platform. This information helps us understand user behaviour, identify areas for improvement, and optimise platform performance. Analytics cookies do not identify you personally.

9.4 Security Cookies

Security cookies assist in detecting and preventing fraudulent activity, verifying your identity during sessions, and maintaining the integrity of your account.

9.5 Cookie Management

You may manage your cookie preferences through your browser settings. Note that disabling certain types of cookies may affect the functionality of the Platform. Essential cookies cannot be disabled without impacting your ability to use the Services.

Rajatoto88 implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmissions between your device and the Platform are encrypted using industry-standard Secure Sockets Layer / Transport Layer Security (SSL/TLS) protocols.
• At-Rest Encryption: Sensitive personal data stored on our servers, including payment information and KYC documents, is encrypted at rest.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to binding confidentiality obligations.
• Two-Factor Authentication: Account access is protected by optional two-factor authentication (2FA), and we strongly encourage all players to enable this feature.
• Regular Security Audits: Our platform undergoes regular security testing and vulnerability assessments conducted by qualified security professionals.
• Fraud Monitoring: Automated fraud detection systems continuously monitor transactions and account activity for suspicious patterns.

Subject to applicable data protection law and certain legal limitations, you have the following rights in respect of your Personal Data held by Rajatoto88:

To exercise any of the above rights, please contact our support team via live chat or by emailing us at the address provided in Section 16. We will respond to all verifiable data requests within 30 days of receipt. We may need to verify your identity before processing any data rights request.

Please note that certain rights are subject to exceptions — for example, we are not able to delete data that we are legally required to retain under AML/CTF or financial record-keeping obligations.

We enforce the 21+ age requirement through identity verification (KYC) procedures. If we become aware that we have collected Personal Data from a person under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has provided Personal Data to Rajatoto88, please contact our support team immediately so that we can take appropriate action.

The Platform may contain references to third-party payment processors and service providers (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank) that operate under their own privacy policies and terms of service. Rajatoto88 is not responsible for the privacy practices of these third-party services.

When you initiate a deposit or withdrawal via a third-party payment method, you are also subject to that payment provider's privacy policy. We encourage you to review the privacy terms of any third-party service you use in connection with the Platform.

Rajatoto88 operates as an international online gaming platform. Your Personal Data may be transferred to, stored in, and processed in countries outside of Malaysia where our servers, service providers, or operational teams are located.

Where Personal Data is transferred outside the jurisdiction in which it was collected, Rajatoto88 takes appropriate steps to ensure that such transfers are subject to appropriate safeguards, including the use of standard contractual clauses, data processing agreements, and the application of equivalent data protection standards to those described in this Policy.

By using the Platform and providing your Personal Data, you acknowledge and consent to the potential transfer of your data to locations outside Malaysia for the purposes described in this Policy.

Rajatoto88 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform operations. The "Last Updated" date at the top of this document will be revised accordingly.

Material changes to this Policy will be communicated to registered Players via email or via a prominent notice on the Platform before the changes take effect. Your continued use of the Platform following notification of any material changes constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the Rajatoto88 data team through the following channels:

• Live Chat: Available 24/7 directly within the Platform — the fastest way to reach our team for immediate queries.
• Email (plain text — not a link): [email protected]

For formal data rights requests (access, rectification, erasure, portability, or objection), please submit your request in writing via email with sufficient information to allow us to verify your identity. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

For matters relating to responsible gambling, self-exclusion, or account restrictions, please refer to our Responsible Gambling page, which sets out the full range of tools and support resources available to you.