Privacy Policy RAR88 – Protection of Our Members' Personal Data

1 Introduction and Scope of This Policy

This Privacy Policy describes the personal data management practices of RAR88 in relation to the rar88.app website platform and our official mobile app. It applies to all individuals who register an account, visit the website, or interact with any rar88 services in any capacity.

By using the rar88 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to delete your account.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. Our responsibility goes beyond meeting legal requirements — we believe every member deserves to know exactly what happens to their personal information.

2 Personal Data We Collect

RAR88 collects personal data through several channels across different situations. Below are the main categories of data we collect:

We do not collect data beyond what is required for platform operations. Sensitive information such as passwords is stored in hashed form that is unreadable by anyone, including rar88 staff.

3 How Your Personal Data Is Used

Every piece of data we collect has a clear and lawful purpose. RAR88 uses your personal data for the following purposes:

• Account management: Creating, verifying, and maintaining your member account, including the KYC process to confirm your identity.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions conducted through the rar88 platform securely and accurately.
• Platform security: Detecting suspicious activity and preventing fraud, money laundering, and any form of platform abuse.
• Legal compliance: Fulfilling legal and regulatory obligations imposed by relevant authorities, including AML (Anti-Money Laundering) requirements.
• Service improvements: Analysing usage patterns to improve the interface, platform speed, and overall member experience.
• Service communications: Sending important notices related to your account, security updates, and transaction information.
• Customer support: Resolving member inquiries and complaints more quickly and effectively using prior interaction records.
• Responsible gaming: Monitoring wagering patterns to identify signs of problem gambling and providing appropriate support when needed.

We do not use your data for automated profiling that materially affects you without human review. Any significant decisions relating to your account involve review by our team.

4 Data Sharing and Disclosure

RAR88 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited situations where we may need to share your data with trusted parties:

• Payment providers: Information required to process deposits and withdrawals is shared with licensed payment gateway providers subject to strict confidentiality obligations.
• Game software providers: Minimum technical data required to verify gaming eligibility may be shared with our gaming platform providers.
• Authorities and regulatory bodies: We will disclose data when required by law, court order, or directive from a competent authority.
• Identity verification partners: During the KYC process, identity documents may be verified through recognised third-party services subject to strict data protection agreements.
• Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations may access certain data during legal or financial requirements.

In all of the above data sharing situations, we ensure that recipient parties have adequate data protection measures in place and use the data solely for the specified purposes.

5 Data Security and Protection

Data security is a priority we never compromise on. RAR88 implements multiple layers of technical and organisational safeguards to ensure your personal data remains secure at all times:

• 256-bit SSL encryption: All communications between your device and rar88's servers are fully encrypted using the latest TLS protocol, ensuring no third party can intercept data in transit.
• Static data encryption: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 standards.
• Internal access controls: Access to members' personal data is restricted to staff who require the information to perform their duties only, based on the principle of least privilege.
• 24/7 monitoring: Our automated monitoring system operates around the clock to detect any unauthorised access attempts or suspicious activity.
• Regular security testing: We conduct regular penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.
• Staff training: All rar88 staff who handle personal data undergo regular data protection training.

6 Data Retention Period

RAR88 does not retain your personal data longer than necessary. Retention periods are determined based on operational, legal, and regulatory requirements:

• Active account data: Retained for the duration of your active account and for a reasonable period after account closure to allow resolution of any outstanding issues.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysia's financial and anti-money laundering laws.
• KYC documents: Retained for the duration of the active account and for at least 5 years after account closure in accordance with regulatory requirements.
• Customer support records: Retained for 3 years to allow for historical reference and resolution of any disputes that may arise.
• Technical log data: Retained for 12 months for security and investigation purposes if required.

Once the retention period expires and there is no legal requirement to keep the data, we will securely delete or anonymise your data using recognised methods.

7 Your Rights as a Data Owner

As a rar88 member and owner of your personal data, you have the following rights, which we fully respect:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time. Requests will be processed within 14 business days.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request immediate correction.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that this right may be limited by legal or contractual requirements.
• Right to Restrict Processing: You may request that we restrict how we use your data in certain situations, such as during a dispute over data accuracy.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data for certain purposes, including direct marketing.

To exercise any of the above rights, please contact the rar88 support team via live chat within the platform. We will verify your identity before processing any data-related request.

8 Cookies and Tracking Technologies

The rar88.app website uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as session login, security, and navigation. These cookies cannot be disabled as they are critical to platform operations.
• Performance cookies: Helping us understand how members use the platform so we can improve speed and overall experience.
• Functionality cookies: Saving your preferences such as language and display settings so you do not need to reconfigure them each time you log in.
• Analytics cookies: Used to collect anonymous statistical data on platform usage patterns for product improvement purposes.

You may manage cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the rar88 platform. Please refer to your browser's documentation for instructions on managing cookies.

9 Third-Party Services and Links

The rar88 platform is integrated with several trusted third-party services to deliver a complete wagering experience. These include licensed game providers, recognised payment gateways, and identity verification services. Each third-party partner maintains its own privacy policy and is responsible for data processing within the scope of its services.

RAR88 carefully selects third-party partners, prioritising those with a strong track record in data protection and regulatory compliance. We enter into data processing agreements with all third parties that handle rar88 members' personal data to ensure consistent protection standards are maintained.

10 Child Protection

The rar88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If we discover that a minor's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

If you believe that someone under the age of 18 has registered an account on the rar88 platform, please notify us immediately via live chat so that appropriate action can be taken.

11 Amendments to the Privacy Policy

RAR88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. The "Updated" date at the top of this document indicates the date of the last amendment.

For significant amendments that materially affect members' rights, we will provide clear notice via registered email or an in-platform notification at least 14 days before the changes take effect. Continued use of the rar88 platform after that date constitutes acceptance of the updated Privacy Policy.

12 Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the dedicated privacy team at rar88 is ready to assist you. You may reach us through the following channels:

• Live Chat: Fastest channel — available 24/7 directly within the rar88 platform with a response time of under 2 minutes.
• Support Email: [email protected] — for detailed written enquiries, responses will be provided within 1–2 business days.

We are committed to handling every privacy inquiry with seriousness and professionalism. Your trust is the most valuable asset to rar88, and we will never take any concern you raise lightly.