Rafi88 Privacy Policy

Rafi88 ("we", "our platform") deeply values the trust you place in us when sharing personal information during registration and use of our online casino and Sports Betting platform. This Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal information.

This policy applies to all users of the rafi88 platform, including website visitors, registered members, and any individuals who interact with our platform through any channel — whether via the website at rafi88.onl, the rafi88 mobile app, or our official communication channels such as email and live chat.

We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant legal provisions. Any processing of personal data by rafi88 is carried out on the basis of legitimate necessity, consent provided by you, or legal requirements mandated by the relevant authorities.

Rafi88 collects your personal information through several methods depending on how you interact with the platform. The following are the categories of information we collect:

We do not collect sensitive information such as medical data, political views, or religious beliefs unless specifically required to fulfil certain legal obligations.

The personal information you provide to rafi88 is used for legitimate and necessary purposes in operating this platform. We ensure that every use of your data is proportionate to its intended purpose:

• Account Management: Registering your account, verifying your identity, processing deposits and withdrawals, and providing access to games and services on the rafi88 platform.
• Security and Fraud Prevention: Detecting and preventing unauthorized access, fraudulent activity, money laundering, and multiple-account usage that violates our terms of service.
• Service Communications: Sending you important account notifications, security alerts, terms updates, and financial transaction details.
• Legal Compliance: Meeting legal and regulatory obligations, including anti-money laundering (AML) reporting requirements and identity verification mandated by the relevant authorities.
• Platform Improvement: Analyzing usage patterns to improve the performance, user interface, and overall service quality of rafi88.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming assistance or support.

Rafi88 does not sell or transfer your personal data to third parties for their own commercial or marketing purposes. However, in certain limited situations, we may share your personal information with the following parties:

• Payment Processor: Financial information that must be shared with the payment service providers used to process your deposits and withdrawals, including FPX, Touch 'n Go eWallet, GrabPay, and Boost. All payment processors are bound by strict confidentiality agreements.
• Game Software Provider: Minimum required information may be shared with third-party game platform providers that supply slot games, Live Casino, and Sports Betting content on the rafi88 platform.
• Legal Authority: Where required by law, rafi88 will disclose personal information to government authorities, law enforcement agencies, or relevant regulatory bodies. Such disclosure may be made without prior notice to the member if doing so would hinder an ongoing investigation.
• Technical and Infrastructure Services: Cloud service, IT infrastructure, and cybersecurity providers that help us operate the platform securely. All providers are bound by strict data protection terms.

When we share data with any third party, we ensure they adhere to data protection standards equivalent to or stricter than our own.

Rafi88 retains your personal data only for as long as necessary for the purposes stated in this privacy policy or as required by applicable law.

• Active account data is retained for the duration that your account remains active and in use.
• After an account is closed, financial transaction records and KYC data are retained for a minimum of 6 years to comply with anti-money laundering regulations and financial reporting requirements.
• Technical logs and session data are retained for a maximum of 12 months for security and troubleshooting purposes.
• Customer support communications are retained for 3 years for service record purposes.

All data is stored on secure servers with strict physical and digital access controls. We apply encryption at rest to ensure your data remains protected even when inactive.

As a rafi88 member and the owner of your own personal data, you have the following rights, which you may exercise at any time:

To exercise any of the above rights, please contact the rafi88 support team via in-app live chat or by email at [email protected]. We will process your request within 14 business days.

The rafi88 website and app use cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly.

• Essential Cookies: These cookies are required for core platform functions such as login authentication, session security, and language preferences. They cannot be disabled.
• Performance Cookies: Helping us understand how members use the platform — which pages are visited most, time spent per session, and technical issues that need to be addressed.
• Functional Cookies: Saving your preferences such as display settings, game preferences, and communication choices so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used to analyse traffic and usage patterns in aggregate to help us make better decisions in improving the platform.

You may manage or block cookies through your browser settings. Please note that blocking essential cookies may affect the functionality of the rafi88 platform and your overall gaming experience.

Rafi88 continuously invests in security infrastructure to ensure your personal data remains protected at all times. The key security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communications between your device and rafi88 servers are fully encrypted using the latest security protocols.
• Two-Factor Authentication (2FA): An extra security layer that requires verification via a one-time password (OTP) sent to your registered mobile number when logging in from a new device.
• 24/7 Security Monitoring: An automated monitoring system that detects suspicious activity, unauthorised login attempts, and transaction anomalies in real time.
• Internal Access Control: Access to members' personal data among rafi88 staff is restricted on a need-to-know basis, and all access is regularly audited.
• Regular Security Testing: The rafi88 platform undergoes regular independent penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

Rafi88 reserves the right to amend this privacy policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we operate. The latest version of this policy is always available on this page.

For any material amendments that significantly affect your rights, we will provide advance notice via your registered email or in-app notification on rafi88 at least 7 days before the changes take effect.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, you may contact the rafi88 Data Protection Officer (DPO) via:

• Live Chat: Available 24 hours a day, 7 days a week in the rafi88 app
• Email: [email protected]

We are committed to responding to all privacy-related enquiries within 14 business days after receiving your request.