Privacy Policy Raja9 — Your Personal Data Protection

1. Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes the data protection practices of raja9 ("we", "Platform") in relation to personal information collected through the raja9.pro website, the official raja9 mobile app, and all related services we offer.

This Policy applies to all users of the raja9 platform, including website visitors, registered members, and former members who still have active records in our system. By using raja9 services, you agree to the data processing practices described in this Policy.

Raja9 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations. We appoint a Data Protection Officer responsible for ensuring ongoing compliance with all privacy-related legal requirements.

If you have any questions about this Policy or how we handle your personal data, please contact our team at [email protected] and we will respond within 3 business days.

2. Personal Data We Collect

Raja9 collects your personal data from several sources, depending on how you interact with our platform. Below is a full description of the types of data we collect:

3. How We Use Your Data

The personal data we collect is used for the following purposes only, and we will not use it for any other purpose without your consent:

• Account management: Creating and maintaining your member account, including secure login and the identity verification (KYC) process required under anti-money laundering regulations.
• Transaction processing: Processing deposits and withdrawals efficiently, and verifying that all financial transactions are legitimate and free from fraudulent activity.
• Service provision: Enabling you to access all games, promotions and raja9 platform features that you are entitled to enjoy as a registered member.
• Service communications: Sending important account-related notifications, security updates, transaction confirmations and relevant promotional information (where you have given your consent).
• Platform improvement: Analysing usage patterns in aggregate (not individually) to improve the user experience, identify technical issues and develop new features.
• Legal compliance: Fulfilling our obligations under applicable Malaysian laws, including anti-money laundering requirements and reporting obligations to the relevant authorities.
• Fraud detection: Identifying and preventing fraudulent activity, account abuse and security breaches that could affect other members.

The legal basis for processing your data is: (a) performance of the contract between you and raja9; (b) legal obligations; (c) our legitimate interests in operating a secure platform; and (d) your consent for marketing communications.

4. Data Sharing & Disclosure

Raja9 respects your privacy and does not share your personal data arbitrarily. However, there are limited situations where data sharing is necessary:

• Payment service providers: Required information is shared with authorised payment processors to facilitate your deposits and withdrawals. All such providers are bound by strict data protection agreements.
• Game software providers: Minimum necessary data is shared with third-party game providers solely for technical purposes to enable access to their games.
• Legal authorities: Raja9 will disclose data when required by court order, request from law enforcement agencies, or regulatory bodies with jurisdiction over our operations.
• Identity verification services: KYC information is shared with trusted identity verification service providers to fulfil anti-money laundering legal requirements.

5. Data Security & Protection

Raja9 continuously invests in the latest security infrastructure to ensure your data is always protected. The technical and organisational measures we implement include:

• 256-bit SSL/TLS data encryption for all data transmissions between your browser and our servers.
• Data-at-rest encryption using AES-256 standards for all sensitive data stored in our databases.
• Network segregation and role-based access controls ensuring each staff member can only access the data required for their specific duties.
• Round-the-clock security monitoring, 24 hours a day, 7 days a week, by our cybersecurity team to detect and respond to any threats promptly.
• Regular penetration testing by independent security firms to identify and remediate any vulnerabilities before they can be exploited.
• Automatic data backup to a separate, geographically secure location to ensure service continuity.

While we take all reasonable measures, no system can be guaranteed 100% secure. In the event of a data breach involving your information, we will notify you within 72 hours of becoming aware, in line with industry best practices.

You also play an important role in keeping your account secure. Please ensure your password is strong and unique, enable two-factor authentication (2FA), and never share your login credentials with anyone.

6. Cookies & Tracking Technologies

Raja9 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance cookies: Collecting information about how you use our platform, such as the most frequently visited pages. This data is used in aggregate form to improve website performance.
• Functional cookies: Storing your preferences such as preferred language, geographic location and display settings to provide a more personalised experience.
• Analytics cookies: Helping us understand how users interact with the raja9 platform as a whole. This information is used solely for internal purposes and service improvement.

You can manage your cookie settings through your internet browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the raja9 platform.

7. Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and raja9's internal policies, you have the following rights regarding your personal data:

• Right of access: You have the right to obtain a copy of the personal data we hold about you. Requests can be submitted via our support email.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request a correction. You may also update certain information directly through your account profile settings.
• Right to restriction of processing: In certain circumstances, you have the right to request that we restrict how we process your data while a dispute is being resolved.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time, without providing a reason.
• Right to erasure: You may request deletion of your personal data, subject to legally mandated record retention obligations (typically 7 years for financial records).
• Right to data portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.

To exercise any of the above rights, please contact our data protection team at [email protected]. We will process your request within 30 business days. No fee is charged for reasonable data rights requests.

8. Data Retention & Deletion

Raja9 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

• Active account data: Retained for the duration of your active account and for a period of 7 years after account closure to meet financial and anti-money laundering legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical data and system logs: Retained for 12 months for security and cyber threat detection purposes.
• KYC Records: Retained for the duration of the active account and 7 years after account closure in accordance with anti-money laundering compliance requirements.

Once the retention period expires, your data will be securely deleted or converted into an anonymised format that can no longer be linked back to you.

9. Changes to This Privacy Policy

Raja9 reserves the right to amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or member feedback.

When we make significant changes to this Policy, we will:

• Publishing the latest version on this page with an updated "Last Updated" date.
• Sending notifications to your registered email address for material changes.
• Displaying a prominent notice on the raja9 homepage for at least 14 days before the changes take effect.

Continued use of the raja9 platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you may close your account by contacting our support team.

10. Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding how raja9 handles your personal data, or if you wish to exercise any of the privacy rights stated in this Policy, please contact us through the following channels: