Privacy Policy Raja9 — Member Data Protection

01 Introduction & Scope of This Policy

Raja9 operates under the official website raja9.onl and our mobile app. As a trusted online betting platform in Malaysia, we understand that member trust is the most valuable asset we have.

This Privacy Policy explains in detail how Raja9 collects, processes, stores, discloses, and protects your personal information when you use our services — whether through our website, mobile app, or other official communication channels.

By registering an account or continuing to use the Raja9 platform, you agree to the data processing practices described in this policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

02 Personal Data We Collect

Raja9 practises the principle of minimum data collection — we only collect information that is strictly necessary to provide, improve, and protect our services. The following are the categories of data we collect:

Data You Provide Directly:

Data Collected Automatically:

• IP address and device information (model, operating system, browser version)
• Access log data — date, time, pages visited, and session duration
• Records of betting activity and financial transactions on the platform
• General geolocation data based on IP address (not precise GPS location)
• Cookies and similar tracking technologies — see Section 5

We do not collect sensitive information such as biometric data, medical records, or credit card details directly — all payments are processed through registered third-party secure payment gateways.

03 How We Use Your Data

Personal data collected by Raja9 is used solely for legitimate and necessary purposes in operating the platform. We do not process your data for any purpose unrelated to Raja9's services.

Primary Purpose of Data Processing:

• Account Management — registering, verifying identity, processing logins, and managing your account settings
• Transaction Processing — verifying deposits, processing withdrawals, and maintaining accurate transaction records
• Legal Compliance — meeting KYC, anti-money laundering (AML), and other regulatory requirements
• Service Communications — sending transaction notifications, account security updates, and important alerts
• Fraud Prevention — detecting and investigating suspicious activity to protect your account
• Platform Enhancement — analyzing aggregated usage patterns to improve the user experience
• Customer Support — understanding the context of your inquiry to provide better and more accurate assistance

04 Data Sharing & Disclosure to Third Parties

Raja9 does not sell, rent, or trade members' personal data. However, there are limited situations where we need to share certain information with trusted third parties to enable the platform to function properly:

• Payment Service Provider — payment gateways used to process deposits and withdrawals. They only receive the data necessary to complete those transactions
• Identity Verification Provider — third-party KYC platforms that help us verify member identities in accordance with compliance requirements
• Cloud Service Provider — server and data storage infrastructure used to operate the raja9 platform securely
• Relevant Authorities — law enforcement bodies or regulatory authorities when required by law

All third-party service providers working with raja9 are required to comply with data protection standards equal to or higher than this policy. Legally binding data protection agreements are signed with every service provider.

05 Use of Cookies & Tracking Technologies

Raja9 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand platform usage patterns. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies — required for core platform functions such as login, session verification, and security. These cookies cannot be disabled as the platform cannot function without them
• Functional Cookies — remembering your preferences such as language, display settings, and game preferences to make your experience more comfortable
• Analytics Cookies — collecting aggregated and anonymized usage data to help us understand how members use the platform and where improvements are needed
• Security Cookies — detecting suspicious login activity, access attempts from unrecognized locations, and patterns associated with fraud

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the Raja9 platform and your overall user experience.

06 Data Security & Protection

Raja9 continually invests in industry-standard security infrastructure to ensure members' personal data is protected at all times. Our security measures cover both technical and organisational aspects:

• 256-bit SSL/TLS encryption for all data communications between browser and server
• Passwords are stored using irreversible one-way hashing algorithms
• Network segmentation and multi-layered firewalls to protect data servers
• Real-time security threat monitoring, 24 hours a day, 7 days a week
• Regular penetration testing by independent security experts
• Mandatory cybersecurity training for all Raja9 staff who handle data
• A clear and tested security incident response procedure

While raja9 takes all reasonable steps to protect your data, no data transmission system over the internet can be guaranteed 100% secure. Should any data breach affecting your personal information occur, raja9 will notify you within the timeframe required by law.

07 Data Retention Period

Raja9 only retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations.

• Active Account Data — retained for as long as your account is active and for a reasonable period after account termination
• Financial Transaction Records — retained for a minimum of 7 years in line with Malaysia's financial and tax regulatory requirements
• KYC Documents — retained for as long as required by applicable anti-money laundering (AML) regulations
• Support Communication Log — retained for 3 years for reference and dispute resolution purposes
• Aggregated Analytics Data — anonymized data that cannot be re-linked to an individual may be retained for a longer period

Once the retention period expires or upon your request for account deletion, Raja9 will securely delete or anonymise your personal data using industry-recognised methods.

08 Your Rights Regarding Personal Data

As a raja9 member and an individual whose data is processed by us, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right to Access — you have the right to request a copy of the personal data we hold about you
• Right to Rectification — you have the right to request correction of any inaccurate, incomplete, or outdated data
• Right to Erasure — in certain circumstances, you have the right to request deletion of your personal data, subject to legal retention requirements
• Right to Object — you have the right to object to the processing of your data for direct marketing purposes at any time
• Right to Restriction — in certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved
• Right to Data Portability — you have the right to receive your personal data in a structured, machine-readable format

To exercise any of the above rights, please contact the raja9 support team via live chat. We will process your request within 30 business days. In complex cases, this period may be extended with notification to you.

09 Children's Privacy & Protection of Young Persons

The raja9 platform is strictly for users aged 18 years and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

If we become aware that a person under the age of 18 has registered an account or provided personal data to us, we will immediately take the following steps:

• Closing the account immediately
• Deleting all personal data associated with the account
• Refunding any deposits made, subject to verification procedures

Parents or guardians who suspect their child has registered with Raja9 are urged to contact our support team immediately. Raja9 takes child protection issues extremely seriously and fully supports efforts to prevent underage access to gambling.

10 Privacy Policy Amendments & Contact Us

Raja9 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or service improvements. The effective date at the top of this document indicates the latest version.

If there are significant amendments to this policy — particularly those that directly affect your privacy rights — raja9 will notify you via:

• In-platform notification on raja9 upon your next login
• Email to the address registered with your account
• A prominent notice on our website's homepage

Continued use of the raja9 platform after receiving a notification of amendments constitutes acceptance of the updated policy. If you disagree with the amendments, you have the right to close your account before the effective date of the changes.