Raja328 Privacy Policy — Malaysia Player Data Protection

1Information We Collect

In operating the raja328 service, we collect several categories of personal information from you. This is done carefully and only when genuinely necessary for legitimate purposes.

2How We Collect Your Data

Raja328 collects your personal data through several transparent and lawful methods :

• Account Registration — Information you provide directly when opening a new account at raja328.
• KYC Verification — Identity documents and proof of address submitted during the account verification process.
• Financial Transactions — Data automatically generated each time you make a deposit or withdrawal through our platform.
• Platform Usage — Technical information automatically collected through cookies, log files, and similar tracking technologies when you browse the website or use the raja328 app.
• Direct Communication — Records of conversations you initiate with our support team via live chat or email.
• Authorized Third Parties — In certain cases, we may receive information from registered payment service providers or identity verification agencies for KYC purposes.

3How We Use Your Data

Every piece of information we collect is used for clear and legitimate purposes. We do not use your data for anything beyond what is stated below:

• Managing and verifying player accounts, including mandatory KYC processes.
• Processing deposits, withdrawals, and all financial transactions in your account.
• Providing responsive and effective customer support services.
• Sending important notifications related to your account, promotions, and service updates — only to users who have consented to receive them.
• Monitoring platform activity to detect and prevent fraud, money laundering, and unauthorized access.
• Complying with legal and regulatory obligations applicable to platform operations.
• Enhancing user experience through aggregated and anonymized data analysis.
• Implementing responsible gaming programs and identifying players who may need assistance.

4Information Sharing with Third Parties

Raja328 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your information is only shared under limited circumstances and with strict controls:

• Payment Service Providers — Required financial information is shared with registered payment processors to facilitate deposit and withdrawal transactions securely.
• Technology Providers — Our technical partners (such as cloud and security services) may access portions of your data for platform operations, subject to strict confidentiality agreements.
• Identity Verification Agency — KYC information is shared with recognized third-party verification services for the purpose of confirming your identity.
• Legal Requirements — We may be required to disclose your information to government authorities or law enforcement when mandated by a court order or legal provision.
• Business Transfer — In the event of a business merger or acquisition, user data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties who receive your data are required to comply with strict data protection standards and are not permitted to use that information for any other purpose.

5Security & Data Protection

Raja328 invests seriously in security infrastructure to ensure your personal data is always protected. The technical and organizational measures we implement include:

• End-to-end data encryption using 256-bit SSL/TLS protocols for all communications between your device and raja328 servers.
• Passwords are stored using irreversible hashing methods, ensuring that no one — including our staff — can view your original password.
• Two-factor authentication (2FA) is available for all player accounts as an additional layer of protection.
• 24/7 security monitoring using automated threat detection systems that identify and block suspicious access in real time.
• Regular penetration testing by independent security experts to identify and close any system vulnerabilities.
• Strict internal access controls — only staff with specific authorisation may access players' personal data, and every access is logged for audit purposes.

While we take all reasonable steps to protect your data, no system is completely immune. We encourage you to also play your part in keeping your account secure by using a strong password and not sharing your login credentials.

6Cookies & Tracking Technologies

Raja328 uses cookies and similar tracking technologies to enhance the user experience and analyze platform performance. The types of cookies we use are as follows:

• Essential Cookies — Required for core platform functions such as session login and security. These cookies cannot be disabled.
• Preference Cookies — Saves your preferences such as language, display theme, and account settings for a smoother experience on future visits.
• Analytics Cookies — Helps us understand how players use the platform so we can make meaningful improvements. This data is collected in aggregate and does not identify individuals.
• Marketing Cookies — Used to display relevant promotions and offers to you based on your interests and activity on the platform.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. For more information, refer to your web browser's documentation.

7Your Rights Over Personal Data

As a raja328 player, you have clear and enforceable rights over your personal data. We fully respect these rights and provide mechanisms for you to exercise them:

To exercise any of the above rights, contact our privacy team via Live Chat or email. We may need to verify your identity before processing your request to ensure account security.

8Data Retention Period

Raja328 does not retain your personal data longer than necessary for the stated purposes or as required by law. Our general data retention guidelines are as follows:

• Active account data is retained for as long as your account remains active and for a reasonable period following account closure.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian legal and financial regulatory requirements.
• KYC documents are retained for a minimum of 5 years after account closure for legal compliance purposes.
• Customer support communication records are retained for 2 years for reference and service improvement purposes.
• Anonymised analytics data may be retained for a longer period as it cannot be used to identify any individual.

Once the retention period expires, your data will be securely deleted or anonymised in an irreversible manner.

9Changes to This Privacy Policy

Raja328 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or service improvements. When significant changes are made, we will:

• Publishing the updated version on this page with a clear update date.
• Displaying a prominent notice on the platform for at least 7 days after changes are published.
• Sending email notifications to registered players for significant and material changes.

Continued use of the raja328 platform after changes are published will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

10Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we welcome you to reach out through the following channels:

• Live Chat — The fastest way to get a response. Our support team operates 24 hours a day, 7 days a week.
• Email — Send your privacy enquiries to [email protected] and we will respond within 2 business days.

We are committed to addressing every privacy enquiry seriously and providing a clear, accurate, and helpful response within the stipulated timeframe.