Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes the practices of Raja88JP ("we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal data belonging to users ("Player", "you", "your") of the Raja88JP platform accessible at raja88jp.cam.

Raja88JP operates an online casino and sports betting platform designed for adult players aged 21 and above in Malaysia. In the course of providing our services, we collect and process certain personal data as described in this Policy. We handle all such data with care, discretion, and full respect for your privacy rights.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy. Where there is any conflict between this Policy and another document, this Policy shall govern all matters relating to data privacy and personal information handling.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable individual, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — Raja88JP, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third-party service provider that processes personal data on behalf of Raja88JP under a binding data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "Cookies" — small text files placed on your device by the Platform to enable functionality, remember preferences, and collect usage analytics.
• "KYC" — Know Your Customer verification documents and processes used to confirm a player's identity and eligibility.
• "Sensitive Data" — a subset of personal data warranting heightened protection, including government-issued identification numbers, financial account details, and source-of-funds documentation.

3. Data We Collect

Raja88JP collects personal data through multiple channels — directly from you during registration and account use, automatically through your interaction with the Platform, and in some cases from third-party service providers involved in payment processing or fraud prevention.

3.1 Data You Provide Directly

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — players must be aged 21 or above)
• Malaysian mobile phone number and email address
• Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
• MyKad or passport number submitted during KYC verification
• Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), or FPX-linked account information used for deposits and withdrawals
• Source-of-funds documentation where required for large transactions
• Communications you send to our support team, including live chat transcripts and emails

3.2 Data Collected Automatically

• IP address and approximate geolocation at the time of login and transaction
• Device type, operating system, browser version, and screen resolution
• Session duration, pages visited, games played, and betting activity logs
• Login timestamps and access frequency
• Cookie identifiers and session tokens (see Section 7 for full cookie details)

3.3 Data Received from Third Parties

• Payment verification data from Malaysian banking partners (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect) and e-wallet providers
• Identity verification outcomes from KYC service providers
• Fraud risk scores from anti-fraud and anti-money-laundering screening services
• Self-exclusion registry data from responsible gambling databases where applicable

4. Data Processing

Raja88JP processes your personal data for the following specific purposes. We do not process your data for any purpose incompatible with those listed below without first obtaining your explicit consent or establishing a separate lawful basis.

5. Legal Basis for Processing

Raja88JP processes personal data only where a lawful basis exists. The primary legal bases we rely upon are as follows:

• Contract Performance: Processing is necessary to fulfil our obligations under the account agreement — including operating your account, processing wagers, and managing deposits and withdrawals.
• Legal Obligation: We are required by applicable laws — including anti-money laundering regulations, age verification requirements, and financial reporting obligations — to collect and retain certain data.
• Legitimate Interests: We process certain data to protect the security and integrity of the Platform, detect fraud, prevent abuse, and improve our services — provided these interests do not override your fundamental privacy rights.
• Consent: For optional activities such as receiving promotional emails or SMS offers, we rely on your explicit consent. You may withdraw consent at any time by contacting our support team.

6. Data Sharing & Disclosure

Raja88JP does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and always subject to appropriate data protection safeguards.

6.1 Service Providers (Data Processors)

We engage third-party service providers to perform functions on our behalf, including payment processing (banking partners and e-wallet operators), KYC verification, fraud detection, data hosting, and customer support tooling. These providers operate under binding data processing agreements and are prohibited from using your data for any purpose other than performing services for Raja88JP.

6.2 Legal and Regulatory Authorities

We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, court order, or regulatory direction. This includes obligations under anti-money laundering legislation and gaming compliance requirements.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our business assets, player data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy. We will notify affected players of any such transfer where required by applicable law.

7. Cookies & Tracking Technologies

Raja88JP uses cookies and similar tracking technologies to ensure the Platform functions correctly, remember your preferences, maintain session security, and collect anonymised analytics to improve user experience.

Essential cookies cannot be disabled as they are necessary for the Platform to operate. For non-essential cookies, you may manage your preferences through your browser settings. Note that disabling certain cookies may affect the functionality of parts of the Platform.

8. Data Retention

Raja88JP retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations.

• Active Accounts: Personal data is retained throughout the duration of your account relationship with Raja88JP.
• Closed Accounts: Following account closure, we retain core account and transaction records for a minimum period of five (5) years to comply with anti-money laundering and financial regulatory requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, or longer where required by law.
• Support Communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the interaction.
• Marketing Data: Where you have consented to receive promotional communications, your contact details for this purpose are retained until you withdraw consent or request deletion.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle procedures.

9. Data Security

Raja88JP implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure.

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform
• Encrypted storage of all personal data and sensitive account information at rest
• Role-based access controls ensuring that only authorised personnel can access player data, subject to documented need-to-know restrictions
• Regular third-party security audits and penetration testing of the Platform infrastructure
• Multi-factor authentication options for player account login
• Automated intrusion detection and real-time monitoring of Platform systems
• Staff data protection training and binding confidentiality obligations for all personnel with access to player data

10. Your Data Rights

As a data subject, you hold a number of rights over your personal data held by Raja88JP. We are committed to honouring these rights promptly and without undue burden. All requests will be acknowledged within 7 business days and fulfilled within 30 days, subject to identity verification.