raya24 Privacy Policy – How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how raya24 ("raya24", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with your use of the raya24 website at raya24.win and all associated services, games, and features ("Platform").

raya24 operates within international gaming authority licensing frameworks and complies with applicable data protection laws and standards in the jurisdictions in which we operate. By registering an account with raya24 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

raya24 collects personal data from you in several ways: directly when you interact with the Platform, automatically when you use our services, and in some cases from third parties as part of our verification and compliance processes.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, gender, nationality, residential address, email address, and mobile number;
• Identity verification documents: Government-issued photo identification (e.g., MyKad, passport), proof of address, and source-of-funds documentation where required under KYC/AML obligations;
• Payment data: Bank account details, eWallet identifiers (Touch n Go eWallet, Boost), and transaction records. raya24 does not store full payment card numbers on its systems;
• Communications: Content of messages you send to raya24 via live chat, email ([email protected]), or any other support channel.

2.2 Data Collected Automatically

• IP address, device type, operating system, and browser information;
• Geolocation data at the time of login (country and region level);
• Session duration, pages visited, games played, bet history, and in-platform navigation patterns;
• Cookies and similar tracking technologies (see Section 6).

2.3 Data from Third Parties

raya24 may receive personal data from identity verification service providers, fraud detection partners, and payment processors as part of our compliance and security processes. Such data is used solely for the purposes described in this Policy.

3. How We Use Your Personal Data

raya24 uses the personal data we collect for the following purposes:

4. Legal Basis for Processing

raya24 processes your personal data on the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing required to perform our obligations under the raya24 Terms and Conditions, including account management, service delivery, and payment processing;
• Legal obligation: Processing required to comply with KYC, AML, and gaming licensing regulatory requirements applicable to raya24;
• Legitimate interests: Processing for fraud prevention, Platform security, and analytics, where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for direct marketing communications, where you have provided express consent. You may withdraw this consent at any time by contacting our support team.

5. Data Sharing and Disclosure

raya24 does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: Banks and eWallet providers (including Maybank, CIMB, Public Bank, Touch n Go eWallet, and Boost) to process deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML service providers for age and identity verification;
• Game providers: Licensed game studios whose products are available on the raya24 Platform, to the extent necessary to deliver game services and handle disputes;
• Fraud prevention partners: Specialised service providers assisting raya24 in detecting and preventing fraudulent account activity;
• Regulatory and law enforcement authorities: Where raya24 is required by law, court order, or regulatory direction to disclose your data.

All third-party service providers engaged by raya24 are contractually bound to process personal data only as directed by raya24 and in compliance with applicable data protection standards.

6. Cookies and Tracking Technologies

raya24 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for Platform operation — authentication sessions, security tokens, and load balancing. These cannot be disabled without impairing core Platform functionality;
• Performance cookies: Aggregate analytics on how users navigate the Platform, which pages are visited most, and where errors occur. Data collected is anonymised or pseudonymised;
• Functionality cookies: Remembering your language preferences, display settings, and game history for a more personalised experience;
• Marketing cookies: Used to display relevant promotional content within the Platform, based on your activity. These require your consent and may be disabled via your account settings.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of parts of the raya24 Platform.

7. Data Retention

raya24 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account registration and identity verification data: retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements;
• Transaction and bet history: retained for a minimum of five (5) years following the transaction date;
• Support communications: retained for a minimum of two (2) years from the date of the communication;
• Marketing consent records: retained for the duration of the consent period plus two (2) years thereafter.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with raya24's data disposal procedures.

8. Data Security

raya24 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and raya24's servers;
• Encryption of sensitive data fields (including identity document data and payment information) at rest;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular internal security audits and penetration testing by qualified third parties;
• Two-factor authentication (2FA) available for all raya24 player accounts.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. raya24 will notify affected users and relevant regulatory authorities of any confirmed data breach in accordance with applicable notification obligations.

9. Your Data Protection Rights

Subject to applicable law and our legitimate interests and legal obligations, you have the following rights in respect of your personal data held by raya24:

• Right of access: You may request a copy of the personal data raya24 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restrict processing: You may request that raya24 restrict the processing of your data in certain circumstances;
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact raya24 via live chat or by email (see Section 13). raya24 will respond to all verified data subject requests within thirty (30) days of receipt.

10. Children's Privacy

The raya24 Platform is strictly restricted to persons aged 21 years and above. raya24 does not knowingly collect, use, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process.

If raya24 becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately deleted from our systems and the associated account will be closed. If you have reason to believe that a minor has registered on the raya24 Platform, please notify us immediately via our support channels so we can investigate and take appropriate action.

11. International Data Transfers

raya24 operates infrastructure across multiple jurisdictions. Your personal data may be transferred to and processed in countries outside Malaysia in connection with the services described in this Policy. Where such transfers occur, raya24 ensures that appropriate safeguards are in place — including contractual data protection clauses with our service providers — to protect your personal data to a standard equivalent to that applicable in the original jurisdiction of collection.

12. Updates to This Privacy Policy

raya24 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our Platform services. Where amendments are material, we will provide reasonable notice via the email address registered to your account or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how raya24 handles your personal data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way raya24 processes your personal data, please contact our support team through the live chat feature on the Platform, which is available 24 hours a day, 7 days a week.

Written enquiries may also be directed to our support team at the following address (plain text — not a clickable link): [email protected]

raya24 aims to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) days of receipt of a verified request.