Privacy Policy raya22 – How We Protect Your Personal Information

1Introduction & Our Commitment

Raya22 ("we", "our platform") is an online gaming platform operating under a valid licence and committed to complying with all applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of personal data we collect from you when you use the raya22 platform. We believe transparency is the foundation of trust, which is why we want you to understand exactly what we do with your information.

By using the raya22 platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, we encourage you to discontinue use of our platform and contact our support team for further discussion.

2Personal Data We Collect

We only collect data that is strictly necessary to provide a safe, seamless, and responsible raya22 service. The following are the categories of data we collect:

We do not collect any health data, biometric data for facial recognition purposes, or any other sensitive data beyond what is necessary for the operation of our gaming platform.

3How We Collect Your Data

Raya22 collects your personal data through several different channels, depending on how you interact with our platform:

• Account Registration: When you register a new account at raya22, we collect the identity and contact information you provide directly through the registration form.
• KYC Process: During identity verification (Know Your Customer), you will need to upload the required documents. These documents are processed securely and stored in a strictly controlled environment.
• Financial Transactions: Every time you make a deposit or request a withdrawal, our system automatically records the transaction details for accountability and security purposes.
• Gaming Activity: The raya22 system automatically records your gaming activity, including bets placed, game outcomes, and the duration of each session, to ensure game integrity and support our responsible gaming programme.
• Cookie Technology: The raya22 website and app use cookies and similar tracking technologies to collect usage data and enhance your experience.
• Support Communications: When you contact our support team via live chat or email, those conversations are recorded for training and service quality improvement purposes.

4Personal Data Usage Purposes

Raya22 uses collected personal data solely for legitimate and necessary purposes in the operation of our platform. We do not use your data for any other purpose without prior notice. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and managing your account on the raya22 platform, including registration processing, secure login, and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions efficiently and securely through supported payment methods such as DuitNow QR, FPX, and digital wallets.
• Fraud Prevention & AML: Detecting, investigating, and preventing fraudulent activity, money laundering, terrorism financing, and any other illegal activities that may occur through our platform.
• Legal Compliance: Fulfilling our legal and regulatory obligations, including reporting requirements to the relevant authorities when required by law.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and taking appropriate preventive action to protect at-risk members.
• Marketing Communications: Sending information about raya22 promotions, bonuses, and the latest offers — but only if you have given explicit consent to receive such communications.
• Service Improvement: Analysing platform usage patterns in aggregate and anonymised form to improve user experience, technical performance, and the game selection we offer.
• Customer Support: Resolving your inquiries, complaints, and support requests more effectively using the history of your interactions with our platform.

5Data Sharing with Third Parties

Raya22 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating our platform, there are limited situations where we need to share your data with certain parties:

• Game Providers: Third-party gaming software providers (such as slot, Live Casino, and table game providers) may receive the minimum session data required to deliver games to you. All such providers are bound by strict confidentiality agreements.
• Payment Processors: The payment providers we use (such as local banks, FPX providers, and digital wallet processors) receive the financial information required to process your transactions securely.
• Regulatory Authority: We may be required to disclose data to government authorities, law enforcement agencies, or regulatory bodies when mandated by law, court order, or to protect the public interest.
• Technical Service Providers: Companies providing the cloud infrastructure, cybersecurity, and identity verification services required for our platform's operations may have limited access to certain data within the scope of their duties.

6Data Security Measures

Protecting your personal data is the highest technical and operational priority at raya22. We continuously invest in the latest security infrastructure to ensure your data remains safe from both internal and external threats:

• End-to-End Data Encryption: All data in transit is protected using TLS 1.3 protocol with AES-256 encryption. Stored data is also encrypted to the highest industry security standards.
• Two-Factor Authentication (2FA): raya22 offers and encourages the use of two-factor authentication for all member accounts as an additional layer of protection against unauthorised access.
• 24/7 Secure Monitoring: The raya22 cybersecurity team monitors our systems around the clock to detect any suspicious activity, intrusion attempts, or anomalies that may indicate a security threat.
• Regular Security Audits: We conduct regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.
• Internal Access Controls: Access to user data among raya22 staff is strictly limited on a "need-to-know" basis. All access is logged and automatically audited.
• Incident Response Plan: raya22 has a comprehensive incident response procedure. In the event of a data breach, we will notify affected users and the relevant authorities within the timeframe required by law.

7Cookies & Tracking Technologies

Raya22 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use our platform (pages visited, time spent, errors encountered) to help us improve performance and usability.
• Functional Cookies: Saving your preferences such as language, display settings, and login information to provide a more personalised and comfortable experience.
• Analytics Cookies: Used to understand aggregated usage patterns for product planning and marketing purposes. Analytics data is collected anonymously.

You can manage cookie settings through your internet browser. However, disabling certain cookies may affect your experience on the raya22 platform. Visit the privacy settings section in your account for more detailed cookie controls.

8Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by raya22. We fully respect these rights:

9Data Retention Period

Raya22 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy, or beyond the period required by applicable laws and regulations. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account is active at raya22, plus the minimum period required by law after account closure.
• Financial Transaction Records: Retained for a minimum of seven years in line with accounting and anti-money laundering (AML) legal requirements set by Bank Negara Malaysia.
• KYC Documents: Retained for a minimum of five years from the date of last verification or account closure, whichever is later.
• Activity & Security Logs: Retained for 12 months for security and incident investigation purposes. Logs related to active cases may be retained longer.
• Marketing Data: Retained until you withdraw your consent, or three years from the last interaction, whichever comes first.

When data is no longer needed and there is no legal obligation to retain it, raya22 will securely delete or anonymise that data in accordance with established data disposal procedures.

10Changes to This Privacy Policy

Raya22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other legitimate operational reasons. We are committed to informing you of any material changes through the following means:

• Displaying clear notices on the raya22.vin homepage whenever important updates are made.
• Sending notification emails to your registered email address at least seven days before material changes take effect.
• Updating the "Last Updated" date displayed at the top of this document.

We encourage you to review this Privacy Policy page periodically to ensure you are always aware of the latest version. Continued use of the raya22 platform after changes take effect will be considered acceptance of the updated policy.

11Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the raya22 Data Protection Officer (DPO) is here to help:

• Live Chat 24/7: The fastest way to get an immediate response — available directly from raya22.vin at all times.
• Privacy Email: [email protected] — for formal written requests relating to privacy rights, data deletion, or complaints. All emails are responded to within 72 hours.
• Help Centre: Visit the page FAQ for answers to frequently asked questions about privacy and data security.

We take every privacy-related inquiry and complaint seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant data protection authority in your jurisdiction.