Privacy Policy Raze88 – Protecting Your Personal Data

This Privacy Policy ("Policy") is published by Raze88 ("we", "our platform") and describes the personal data processing practices we carry out in connection with the website raze88.best, all mobile applications and related services we operate for users in Malaysia.

Raze88 is a responsible data controller committed to processing your personal data in a lawful, fair and transparent manner, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This Policy applies to all individuals who interact with our platform, including registered members, website visitors and any party who contacts us through our customer support channels.

We update this Privacy Policy from time to time when there are changes to our data processing practices or to applicable law. The date of the most recent update is always displayed at the top of this document. We encourage you to review this page periodically to stay informed.

Raze88 collects only the personal data necessary to provide and improve our services to you. Below are the categories of data we process:

Raze88 collects personal data through lawful and transparent means. We ensure you are always aware when data collection takes place:

• Account Registration: When you register a Raze88 account, you directly provide the identity and contact information required to create and verify your account.
• KYC (Know Your Customer) Process: When you submit identity verification documents — such as a photo of your Malaysian identity card or a selfie for verification purposes — the data contained in those documents will be processed by our KYC team.
• Financial Transactions: Every time you make a deposit or withdrawal via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX, the relevant transaction details are automatically recorded in our system.
• Gaming Activity: All wagering activity on the Raze88 platform — including Malaysia Super League and EPL football betting, live casino games, jackpot slots, poker, badminton, e-sports, and lottery — is recorded for account management, dispute resolution, and legal compliance purposes.
• Cookies and Tracking Technologies: The Raze88 website uses cookies and similar tracking technologies to enhance user experience and collect analytical data. See Section 8 for more details on our cookie policy.
• Customer Support Interactions: When you contact our support team via live chat, email, Telegram or WhatsApp, conversations are recorded for service quality and issue resolution purposes.

Raze88 processes your personal data only for legitimate, specific purposes that are consistent with the original reason the data was collected. Below are the primary purposes for which Raze88 uses your data:

• Account Management: Creating and maintaining your Raze88 account, processing logins, verifying your identity, and enabling access to all platform services.
• Financial Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your preferred Malaysian payment methods, and maintaining accurate financial records.
• Legal Compliance & Fraud Prevention: Fulfilling legal obligations under the Anti-Money Laundering, Anti-Terrorism Financing & Proceeds of Unlawful Activities Act 2001 (AMLA), including conducting KYC checks and reporting suspicious transactions to the relevant Malaysian authorities.
• Platform Security: Detecting and preventing fraud, abuse, collusion, and other unlawful activities on the platform Raze88 to protect the interests of all members.
• Customer Support: Processing member enquiries, complaints and support requests, and providing accurate and helpful responses.
• Product Improvement: We analyse platform usage patterns on an aggregated and anonymised basis to better understand the needs of Malaysian members and to improve raze88's features and user experience.
• Service Communications: Sending important notifications about your account, transactions, terms updates, promotions, and information related to the Raze88 services you are registered for.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and providing appropriate support to members who may need assistance.

Raze88 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your data with certain parties in order to provide our services to you:

• Payment Service Providers: To process your financial transactions, the necessary information is shared with approved payment service providers, including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX banks. These providers are bound by strict data protection agreements.
• Game Software Providers: Third-party game providers that supply content such as live casino games and slots may receive the minimum technical data necessary to deliver a seamless gaming experience. These providers do not receive personally identifiable information that could be used to contact you directly.
• Malaysian Authorities: raze88 will disclose personal data to the relevant Malaysian authorities — including Bank Negara Malaysia, the Royal Malaysia Police or the Department of Personal Data Protection — when required to do so by law, court order or in the course of a financial crime investigation.
• Technical Service Providers: Technology infrastructure providers, such as cloud computing and cybersecurity services, may process your data in their capacity as data processors on behalf of Raze88. All such providers are bound by strict data processing terms and are not permitted to use your data for their own purposes.

Raze88 implements multiple layers of technical and administrative safeguards to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure. Below are some of the key security measures we have in place:

• Data Encryption in Transit: All communications between your device and Raze88's servers are protected by 256-bit TLS/SSL protocols. You can verify this by looking for the padlock icon in your browser's address bar when accessing raze88.best.
• Encryption of Stored Data: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using industry-approved encryption standards.
• Multi-Factor Authentication (MFA): Raze88's internal systems that store and process member data require multi-factor authentication for all staff access. This ensures that even if a staff member's login credentials are compromised, unauthorized access cannot occur without a second authentication factor.
• Regular Security Audits: Raze88 undergoes periodic independent security audits conducted by qualified third parties to identify and address any vulnerabilities in our systems before they can be exploited.
• 24/7 Threat Monitoring: The raze88 cybersecurity team monitors our systems continuously, 24 hours a day, 7 days a week, to detect any suspicious activity or intrusion attempts.
• Incident Response Procedure: Raze88 has a comprehensive incident response procedure in place to address any data security breaches promptly and effectively, including notification procedures for affected members and relevant authorities.

While Raze88 implements extensive security measures, no security system can guarantee absolute protection. We encourage you to take personal precautions as well — such as using a strong, unique password for your Raze88 account, enabling two-factor authentication where available, and never sharing your login credentials with anyone.

Raze88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. The following are general guidelines for our retention periods:

• Active Account Data: For as long as your account remains active with Raze88, the relevant personal data will be retained to allow you to use all platform services without interruption.
• Financial Transaction Records: As required under Malaysian law, including AMLA and accounting requirements, financial transaction records are retained for a minimum of 7 years from the date of the transaction.
• KYC & Identity Records: Identity verification documents and KYC records are retained for a minimum of 5 years after the account closure date, as required by compliance law.
• Customer Support Records: Customer support interaction records are retained for 3 years for quality management, reference, and dispute resolution purposes.
• Marketing Data: If you have consented to marketing communications, the relevant data is retained until you withdraw that consent, or earlier if your account has been inactive for more than 3 years.
• Inactive Accounts: For accounts that have been inactive for more than 24 months with no remaining balance, data may be anonymized or deleted following an appropriate notification process.

Raze88 uses cookies and similar tracking technologies to enhance the functionality and user experience of our platform. Cookies are small text files stored on your device when you visit our website. Below are the types of cookies we use:

You can control and limit the use of cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain features of the Raze88 platform. Please refer to your browser's documentation for instructions on managing cookie settings.

The Raze88 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from anyone under the age of 18.

• If we discover that we have inadvertently collected personal data from anyone under the age of 18, we will take immediate steps to delete that data and close the associated account.
• Parents or guardians who believe a child under their care may have registered a raze88 account are encouraged to contact us immediately at support@raze88.best so that appropriate action can be taken.
• Raze88 carries out age verification procedures during registration and reserves the right to request proof of age at any time to ensure compliance with the minimum age requirement.

In the course of operating the Raze88 platform, there are situations where your personal data may be processed or stored outside Malaysia, particularly in connection with cloud computing services and international gaming software providers.

• Raze88 ensures that any cross-border data transfers are carried out in compliance with Malaysia's PDPA 2010, which requires adequate protection for personal data transferred overseas.
• Before transferring data to service providers in other countries, Raze88 ensures that appropriate safeguards are in place, such as standard contractual clauses or data protection terms equivalent to Malaysian standards.
• International service providers engaged by Raze88 are selected based on high security and privacy standards, and are bound by data processing agreements that require them to protect your data to a standard no less stringent than that prescribed by Malaysia's PDPA.
• Your data is not transferred to countries or territories that lack adequate data protection laws without appropriate additional safeguards in place.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have specific rights regarding the personal data processed by Raze88. Here is how you can exercise those rights:

• Requesting Access to Your Data: Send a written request to support@raze88.best with the subject line "Data Access Request". Include your Raze88 account number and a copy of your identity card for verification purposes. We will process your request within 21 business days.
• Correcting Inaccurate Data: Log in to your Raze88 account to update basic information, or contact our customer support team for data corrections that require additional verification.
• Opting Out of Marketing Processing: Click the unsubscribe link in any marketing email from Raze88, or contact us directly to request that your name be removed from our marketing communications list.
• Requesting Data Deletion: Contact us by email with your data deletion request. Please note that we may not be able to fully comply with such requests where there are ongoing legal retention requirements or legitimate dispute resolution needs.
• Filing a Complaint with the Authorities: If you are not satisfied with how we have handled your privacy request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia at www.pdp.gov.my.

• Raze88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the technologies we use.
• The date of the most recent update is always displayed prominently at the top of this page. We encourage you to review this page from time to time, especially before making any new transactions.
• For material changes that significantly affect your privacy rights, Raze88 will send a notification via email or display an in-platform notice at least 14 days before those changes take effect.
• Your continued use of the Raze88 platform after any changes take effect will be deemed acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Raze88, please contact us through the following channels:

• Privacy Email: support@raze88.best — include "Privacy Inquiry" in your email subject line. Response within 3 business days.
• Live Chat: Available 24 hours a day, 7 days a week in Bahasa Malaysia. For basic inquiries about privacy and your account data.
• Telegram: @raze88support — for general privacy and data security enquiries.
• WhatsApp: Available 24 hours a day for urgent enquiries relating to account security and data protection.

Raze88's privacy and data protection team is made up of Malaysian professionals trained in local data protection law. All privacy-related requests are handled in strict confidence and within the prescribed timeframes. We regard the trust you place in us with your personal data as a responsibility we take very seriously.