ra66 Privacy Policy

1. Introduction

1.1 ra66 ("ra66," "we," "us," "our") operates the online casino and sports betting platform accessible at ra66.net. We are committed to protecting the privacy and personal data of all players ("you," "your") who register and use our services.

1.2 This Privacy Policy explains what personal data ra66 collects, why we collect it, how it is used, who it may be shared with, and the rights you have over your personal information. It applies to all personal data collected through ra66.net, our mobile browser platform, customer support communications, and any other touchpoints between you and ra66.

1.3 This Policy should be read in conjunction with ra66's Terms & Conditions. Capitalised terms used in this Policy but not defined here have the meanings given to them in the ra66 Terms & Conditions.

2. Data Controller

2.1 ra66 is the data controller in respect of personal data collected through ra66.net and associated services. As data controller, ra66 determines the purposes and means by which personal data is processed.

2.2 For all data-related enquiries, corrections, or deletion requests, players may contact ra66 at: [email protected]. ra66 aims to acknowledge all data-related correspondence within 5 business days and to provide a substantive response within 21 calendar days.

3. Personal Data We Collect

3.1 ra66 collects the following categories of personal data from players:

Identity Data:

• Full legal name as per your Malaysian IC (MyKad) or equivalent identity document;
• Date of birth;
• Identity document number (IC number, passport number);
• Copies of identity documents submitted for KYC verification.

Contact Data:

• Email address;
• Malaysian mobile phone number;
• Residential address (city, postcode, state — e.g., Kuala Lumpur, Penang, Johor Bahru, Selangor).

Financial Data:

• Payment method details (FPX bank account reference, e-wallet account identifiers, USDT wallet addresses);
• Deposit and withdrawal transaction records;
• Account balance history.

Account & Activity Data:

• Username and encrypted password;
• Login history including timestamps and device identifiers;
• Betting and gaming history (game played, stakes, outcomes, session duration);
• Bonus usage and wagering records;
• Responsible gaming tool settings and usage (deposit limits, self-exclusion status).

Technical Data:

• IP address at time of registration and subsequent logins;
• Device type, operating system, and browser type;
• Geolocation data (derived from IP address);
• Cookie identifiers and session tokens (see Section 8).

Communications Data:

• Records of correspondence with ra66 support via email, live chat, or any other channel;
• Marketing communication preferences and opt-out records.

4. How We Collect Your Data

4.1 Directly from you: The majority of data ra66 holds about you is provided directly by you at registration, during KYC verification, when making deposits or withdrawals, when contacting support, or when using account settings and responsible gaming tools.

4.2 Automatically: When you access ra66.net, ra66's systems automatically collect certain technical data including your IP address, browser type, device identifier, and session activity data. This collection is enabled by cookies and similar tracking technologies (see Section 8).

4.3 From third parties: ra66 may receive data from third-party KYC and identity verification service providers used to confirm your identity and age. ra66 may also receive data from payment processors to reconcile deposit and withdrawal transactions.

5. How We Use Your Personal Data

5.1 ra66 uses personal data collected from players for the following purposes:

• Account creation and management: To register your account, verify your identity and age (21+), manage your login credentials, and maintain your account in good standing.
• Service delivery: To enable you to play games, place bets, and access all ra66 platform features in accordance with the Terms & Conditions.
• Payment processing: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and USDT, and to maintain accurate financial records.
• KYC and AML compliance: To verify your identity as required under anti-money laundering obligations and to report suspicious transactions to relevant authorities where legally required.
• Responsible gaming: To implement and monitor deposit limits, session alerts, self-exclusion, and other responsible gaming tools, and to identify patterns of play that may indicate problem gambling.
• Customer support: To respond to enquiries, resolve disputes, and communicate with you regarding your ra66 account.
• Security and fraud prevention: To detect and prevent unauthorised account access, payment fraud, bonus abuse, and other prohibited activities.
• Marketing communications: To send promotional information about ra66 bonuses, new games, and platform updates, where you have not opted out of such communications.
• Platform improvement: To analyse aggregate usage patterns and improve the ra66 platform, game selection, and user experience — using anonymised or pseudonymised data where practicable.
• Legal compliance: To comply with applicable legal obligations, respond to regulatory inquiries, and enforce the ra66 Terms & Conditions.

6. Legal Basis for Processing

6.1 ra66 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to register your account, deliver gaming services, and process payments pursuant to the ra66 Terms & Conditions;
• Legal obligation: Processing required to comply with KYC, AML, responsible gaming, and other applicable legal and regulatory obligations;
• Legitimate interests: Processing for security, fraud prevention, platform improvement, and responsible gaming monitoring, where ra66's interests do not override your fundamental privacy rights;
• Consent: Processing for marketing communications, where consent has been given and may be withdrawn at any time.

7. Data Sharing & Disclosure

7.1 ra66 does not sell, rent, or trade your personal data to third parties for commercial purposes.

7.2 ra66 may share your personal data with the following categories of recipients, solely to the extent necessary for the purposes described in Section 5:

• KYC and identity verification providers: Third-party services engaged to verify identity documents and confirm age compliance;
• Payment processors: FPX network operators, e-wallet providers (TNG, Boost, GrabPay), and cryptocurrency processing services necessary to execute your deposit and withdrawal instructions;
• IT and hosting service providers: Cloud hosting, database, and security service providers who process data on ra66's behalf under binding data processing agreements;
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory direction, ra66 may disclose personal data to the relevant Malaysian or international authority without prior notice to the account holder;
• Professional advisers: Lawyers, auditors, and accountants engaged in the course of ra66's legal, financial, or regulatory affairs, under binding confidentiality obligations.

7.3 All third-party service providers who process data on ra66's behalf are required to implement appropriate security measures and to process such data only for the specific purposes for which it was shared.

8. Cookies & Tracking Technologies

8.1 ra66.net uses cookies and similar technologies (local storage, session tokens) to operate the platform and to improve the player experience. The following types of cookies are used by ra66:

• Strictly necessary cookies: Required for the platform to function — session authentication, login state, and security tokens. These cannot be disabled without preventing access to ra66.
• Functional cookies: Store preferences such as language settings, game lobby filters, and responsible gaming tool configurations.
• Analytics cookies: Aggregate, anonymised data on page visit patterns and game usage — used internally to improve platform performance and user experience. No individual player data is shared externally via analytics cookies.

8.2 You may manage cookie settings through your browser. Note that disabling strictly necessary cookies will prevent access to the ra66 platform. ra66 does not currently deploy advertising or cross-site tracking cookies.

9. Data Security

9.1 ra66 implements technical and organisational security measures appropriate to the risk posed by the personal data we hold. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and ra66's servers;
• Encrypted storage of passwords (bcrypt hashing — passwords are never stored in plaintext);
• Encrypted storage of identity documents and sensitive financial data at rest;
• Access controls limiting internal access to personal data to authorised personnel with a documented need;
• Regular security assessments and penetration testing;
• Two-factor authentication for administrative access to data systems.

9.2 In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ra66 will notify you and the relevant regulatory authority as required by applicable law, without undue delay.

9.3 No data transmission over the internet or electronic storage system is perfectly secure. ra66 cannot guarantee absolute security, but we maintain commercially reasonable measures to protect your data and will respond promptly to any identified security incident.

10. Data Retention

10.1 ra66 retains personal data only as long as necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

10.2 Retention periods applicable to specific categories of data:

• Account and identity data: Retained for a minimum of 5 years following account closure, as required for AML compliance;
• Transaction and financial records: Retained for a minimum of 7 years following the transaction date for financial record-keeping purposes;
• Betting and gaming activity logs: Retained for a minimum of 3 years from the date of the activity;
• Customer support communications: Retained for 2 years from the date of the communication, or longer where related to an unresolved dispute;
• Marketing communication records: Opt-in and opt-out records retained for 3 years from the date of the consent or withdrawal event.

10.3 On expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

11. Your Data Rights

11.1 Subject to applicable law, you have the following rights in respect of personal data held by ra66:

• Right of access: You may request a copy of the personal data ra66 holds about you;
• Right to correction: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of personal data, subject to ra66's legal and regulatory retention obligations;
• Right to restrict processing: You may request that ra66 restrict processing of your data in certain circumstances;
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, subject to ra66's overriding legitimate grounds;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of the rights above, submit a written request to [email protected]. ra66 will respond within 21 calendar days. ra66 may require identity verification before processing a data rights request.

11.3 If you are dissatisfied with how ra66 handles your personal data or responds to a rights request, you may lodge a complaint with the relevant data protection authority in Malaysia.

12. Children's Privacy

12.1 ra66 is strictly restricted to persons aged 21 and above. ra66 does not knowingly collect personal data from persons under the age of 21. If ra66 discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all data will be deleted, and any funds will be returned through the original payment method where possible.

12.2 If you believe a minor may have registered an account with ra66, please contact [email protected] immediately.

13. International Data Transfers

13.1 ra66's primary data processing operations are conducted in the jurisdiction in which ra66 is licensed. Where personal data is transferred to third-party service providers located outside Malaysia (for example, cloud hosting or KYC verification services), ra66 ensures that appropriate data transfer safeguards are in place, including contractual clauses that require the recipient to protect personal data to a standard equivalent to Malaysian PDPA requirements.

13.2 ra66 does not transfer personal data to jurisdictions without adequate data protection frameworks unless protected by the contractual safeguards described above.

14. Changes to This Privacy Policy

14.1 ra66 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent revision is displayed at the top of this page.

14.2 Material changes to this Policy will be communicated via a notice on ra66.net and, where practicable, by email to registered account holders prior to the changes taking effect.

14.3 Continued use of ra66's services following the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any revised terms, you should close your ra66 account and cease using ra66's services.

15. Contact Us

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data ra66 holds about you, please contact ra66 using the following channels:

• Email: [email protected]
• Live Chat: Available 9 AM – 2 AM MYT (UTC+8) daily from your logged-in ra66 account dashboard

15.2 ra66 aims to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 21 calendar days of receipt.