🔒 OFFICIAL RAJAWIN DOCUMENT

Rajawin Privacy Policy – How We Protect the Personal Data of Malaysian Players

At Rajawin, your privacy is more than a legal obligation — it is a responsibility we take seriously. This document clearly explains how we collect, use, protect, and handle your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA).

Updated: January 2026 Malaysia PDPA Bahasa Malaysia

Rajawin's Six Privacy Commitments to You

The core principles that shape how we handle every Malaysian player's personal data

🚫

No Data Sales to Advertisers

Rajawin has never and will never sell, rent, or share your personal data with advertisers or third-party marketing companies for their own commercial purposes. Your data belongs to you, and we only use it to deliver the services you request from us.

👁️

Full Control Is in Your Hands

As a player Rajawin, you have the right to access, correct, delete, or transfer your personal data. You may also withdraw marketing consent at any time through your account settings or by contacting our support team.

🔔

Immediate Notification in the Event of a Breach

In the event of any data security incident involving your information, Rajawin committed to notifying you within the timeframe required by law. We will not withhold information that is material to the security of your account.

📋

Policy Written in Plain Language

We believe a privacy policy should be understandable to everyone, not just lawyers. That is why the Rajawin written in clear, plain English without confusing legal jargon — so you truly understand your rights.

This Privacy Policy applies to all information collected by Rajawin through our website, mobile app, and all communication channels. By using Rajawin, you agree to the collection and use of data as described in this document.

📥 SECTION 01 Personal Data We Collect

Rajawin collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

Data You Provide Directly to Us

  • Identity Information: Full name, date of birth, Malaysian identity card number (NRIC), gender
  • Contact Information: Email address, mobile phone number, residential address in Malaysia
  • Account Information: Username, password (stored in encrypted hash form), security questions
  • Financial Information: Digital wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), bank account numbers for DuitNow or FPX, deposit and withdrawal transaction history
  • Verification Documents: Copies of identification, utility bills, or other documents submitted during the KYC process

Automatically Collected Data

  • Technical Data: IP address, browser type and version, operating system, screen resolution, device information
  • Usage Data: Pages visited, time spent, in-platform actions, betting and game history
  • Location Data: General location based on IP address (state/city within Malaysia only)
  • Cookie Data: Please refer to Section 06 for full details on cookies

Rajawin does not collect data beyond what is necessary. Every type of data we collect has a clear purpose, as stated in this Privacy Policy. We do not collect your biometric data, health data, or religious/belief information.

Data Type Primary Purpose Legal Basis
Identity Information Account verification, KYC/AML compliance Legal & contractual requirements
Financial Information Processing deposits & withdrawals Contract performance
Platform Usage Data Service improvement, fraud detection Legitimate interest & security
Technical Data Security, platform performance optimisation Legitimate interest
Marketing Cookies Relevant promotional communications Consent (withdrawable)
⚙️ SECTION 02 How We Use Your Personal Data

Rajawin uses your personal data for the following purposes, all of which are categorised according to the requirements of providing a safe and quality online betting service to Malaysian players:

Account Operations & Services

  • Creating and managing your account Rajawin yours, including a secure login process
  • Processing deposits and withdrawals via your chosen Malaysian payment method
  • Processing betting transactions and calculating winnings accurately
  • Providing effective customer support whenever you need assistance
  • Sending important notifications related to your account, transactions, and policy updates

Security & Compliance

  • Conducting identity verification (KYC) and anti-money laundering (AML) monitoring as required by law
  • Detecting and preventing fraud, multiple account usage, and activities that violate our Terms & Conditions
  • Enforcing age restrictions — only players aged 21 and above are permitted to use Rajawin
  • Complying with lawful requests from Malaysian authorities

Service Improvements

  • Analyzing usage patterns to improve platform design and user experience
  • Identifying the games and features most popular among Malaysian players to expand relevant options
  • Measuring the effectiveness of promotional campaigns and improving future offers
  • Running A/B tests for continuous interface improvement Rajawin

Marketing Communications

With your consent, Rajawin may send marketing communications about relevant promotions, bonuses, and new offers via email or in-app notifications. You can opt out of marketing communications at any time through the unsubscribe link in any email or via your account settings.

Rajawin will not use your data to make fully automated decisions that produce legal or significant effects on you without human involvement. Any important decisions relating to your account will be reviewed by our team.

🤝 SECTION 03 Disclosure of Data to Third Parties

Rajawin does not sell, rent, or disclose your personal data to third parties for their marketing purposes. However, there are limited circumstances where we need to share your data with specific parties in order to operate our services:

Payment Service Providers

To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u and CIMB Clicks, the minimum transaction information required will be shared with the relevant payment provider. These providers are bound by strict confidentiality agreements and have their own obligations under Malaysia's PDPA.

Game Providers

Live casino games and slots at Rajawin powered by leading software providers. Necessary game data (such as player IDs, without full names) may be shared with these providers for technical purposes only, and they are not permitted to use it for any other purpose.

Legal Authorities

We may be legally required to disclose personal data to Malaysian authorities (such as the police, courts, or regulatory bodies) upon receipt of a valid request. In such circumstances, Rajawin will disclose only the information that is necessary and nothing more.

If any third party receiving your data is based outside Malaysia, Rajawin ensure that any such data transfer is carried out with protections equal to or exceeding Malaysia's PDPA standards through appropriate data transfer agreements.

🔒 SECTION 04 Security & Data Protection

Rajawin continuously invests in security infrastructure to ensure your personal data is always protected. The technical and organisational measures we have in place include:

Technical Measures

  • 256-bit SSL/TLS Encryption for all communications between the server and users
  • Passwords are stored in hashed form using the bcrypt algorithm — no one at Rajawin who can view your actual password
  • Encrypted databases with strict role-based access controls
  • 24/7 security monitoring by automated intrusion detection systems
  • Regular penetration testing by independent security experts
  • Secure data backups and a comprehensive disaster recovery plan

Organisational Measures

  • Only authorised personnel with a clear job-related need are permitted to access player data
  • All access to sensitive data is logged and audited on a regular basis
  • Mandatory information security training for all staff Rajawin
  • Background screening process for staff who handle sensitive data

While Rajawin takes all reasonable steps to protect your data, no system is 100% immune to cyber threats. You also play an important role by keeping your password secure, enabling two-factor authentication, and notifying us promptly if you suspect any suspicious activity on your account.

⚖️ SECTION 05 Your Rights as a Data Subject

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by Rajawin. We respect and facilitate the exercise of all these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction via your account settings or through customer support.

Right to Erasure

You may request the deletion of your personal data, subject to any applicable legal retention obligations.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format for portability purposes if required.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, and we will honour your preference.

To exercise any of the above rights, contact the Data Protection Officer Rajawin via email at support@rajawin.best stating the right you wish to exercise and your account details. We will respond within 21 business days. No charges apply for reasonable requests.

🍪 SECTION 06 Cookies & Tracking Technologies

Rajawin uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

Necessary Cookies (Required)

These cookies are required for the platform's core functionality Rajawin and cannot be disabled without affecting platform operations. These include login session cookies, CSRF security tokens, and language preference cookies. These cookies do not collect your personal information for marketing purposes.

Performance & Analytics Cookies

These cookies help us understand how players interact with Rajawin — the most frequently visited pages, time spent in each section, and any technical errors that need to be addressed. This information is used to improve the quality of our services. Data collected is aggregated and does not directly identify individuals.

Functional Cookies

These cookies remember your preferences on the platform Rajawin such as your preferred language, betting limits, and display settings. This allows us to deliver a more personalized experience every time you visit.

Marketing Cookies

With your consent, marketing cookies help us display promotions Rajawin that are more relevant based on the games you enjoy — whether that's Malaysian Super League football betting, badminton, or slots. You may decline these cookies without affecting the core functionality of the platform.

You can manage cookies through your browser settings or via the cookie management panel available at the bottom of the website Rajawin. Disabling certain cookies may affect the functionality of some parts of the platform.

🗄️ SECTION 07 Data Retention & Deletion

Rajawin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law.

Specific Retention Periods

  • Active account data: For as long as your account remains active with Rajawin
  • Financial transaction records: Minimum 7 years following the transaction, as required under Malaysian financial law
  • KYC Documents: Minimum 5 years after account closure or the date of the last transaction
  • Security logs: 12 months for security incident detection and investigation
  • Customer support communications: 2 years after the last communication
  • Analytics cookie data: Maximum 13 months from the date of collection

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you. Deletion is carried out using methods that ensure the data cannot be recovered.

If you close your Rajawin account and request data deletion, we will delete all data we are permitted to remove. However, data subject to legal retention obligations (such as financial transaction records) must be retained until the mandatory retention period has expired, even after account closure.

📞 SECTION 08 Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your privacy rights regarding how Rajawin handling your personal data, please contact our Data Protection Officer through the following channels:

✉️

Privacy Officer Email

For privacy enquiries, data access requests, or complaints: support@rajawin.best
Please include "Privacy Inquiry" in your email subject line.

💬

In-Platform Live Chat

For urgent enquiries regarding your privacy and account security, the Rajawin available 24/7 via Live Chat on the platform.

We are committed to responding to all privacy inquiries within 14 working days. For more complex complaints requiring a thorough investigation, we will keep you informed of the progress within the specified timeframe.

👶 SECTION 09 Child Protection

Rajawin is an online betting platform strictly for adults aged 21 years of age and above. We do not knowingly collect or process the personal data of any individual under the age of 21.

If we discover that personal data belonging to an individual below the minimum age has been collected, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered at Rajawin should contact us immediately by email at support@rajawin.best.

Rajawin applies a rigorous identity verification (KYC) process, including government-issued ID checks, to ensure only individuals who meet the minimum age requirement can access our platform. Protecting minors is a non-negotiable priority.

📝 SECTION 10 Amendments to This Privacy Policy

Rajawin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. You will be notified of any significant amendments through:

  • In-platform notifications Rajawin the next time you log in
  • Notification email to the address registered on your account
  • Update the "Last Updated" date at the top of this page

Continued use of the platform Rajawin after the amendment's effective date means you accept the updated version of the Privacy Policy. If you disagree with the changes made, you may close your account by following the procedure outlined in Terms & Conditions us.

This current version of the Privacy Policy takes effect from January 2026 and supersedes all previous versions. For any questions about this Privacy Policy or Rajawin's data handling practices, please contact us at support@rajawin.best.

By using the platform Rajawin, you confirm that you have read and understood this Privacy Policy. We are committed to handling your personal data responsibly, transparently, and in accordance with Malaysia's PDPA. Your trust is the foundation of everything we do at Rajawin.

FAQ – Rajawin Privacy Policy

The most frequently asked questions by Malaysian players about how we handle data

No. Rajawin does not sell, rent, or share your personal data with any third-party companies for their own marketing purposes. Your data is used solely for operational purposes Rajawin — processing transactions, improving services, maintaining security, and sending account-related and promotional communications Rajawin only. The third-party service providers we work with (such as Touch 'n Go, GrabPay, and other payment providers) receive only the minimum data necessary to perform their functions and are bound by strict confidentiality agreements.

To request a copy of your personal data at Rajawin, send an email to support@rajawin.best with the subject line "Data Access Request" and include your account number along with a copy of your identification for identity verification purposes. We will process your request within 21 working days and deliver the data in a readable format (typically PDF or CSV) to your registered email address. No fee is charged for the first data access request made within a year.

When you close your account Rajawin, we will initiate the data deletion process. Data not subject to legal retention obligations will be deleted within 30 days. However, financial transaction records must be retained for a minimum of 7 years and KYC documents for a minimum of 5 years following account closure, as required under Malaysian financial law. Once these mandatory retention periods have lapsed, all data will be securely deleted or fully anonymised.

Rajawin does not store your full bank card details or digital wallet account numbers directly in our systems. All transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u and CIMB Clicks are handled through payment providers certified to PCI DSS security standards. We only retain the information necessary for verification and compliance purposes (such as the wallet provider name and transaction ID) — not your full financial account details.

Yes, you can withdraw your marketing consent at any time. There are several ways to do so: (1) Click the "Unsubscribe" link at the bottom of any marketing email you receive from Rajawin; (2) Log in to your account and go to Settings → Communication Preferences to turn off marketing notifications; (3) Contact our support team via Live Chat or email at support@rajawin.best and state your request. Changes will take effect within 5 business days. Withdrawing your marketing consent does not affect important operational communications such as transaction notifications and account security information.

Your Data Is Safe with Rajawin

Over 200,000 Malaysian players trust Rajawin not just for our wide selection of games — but also because we take your security and privacy seriously, every single day. Register today and enjoy a safe, transparent, and responsible betting experience.

256-bit SSL Protected. Compliant with Malaysia's PDPA. Age limit: 21 and above.

Bahasa Melayu