Data Protection

RajaPlay Privacy Policy – Member Data Protection Commitment

Your privacy is not a secondary concern for us — it is the foundation of every design decision on the rajaplay platform. This document clearly explains what we collect, why we need it, and how we protect it.

Updated: 1 January 2026

RajaPlay's Six Core Privacy Principles

Before reading the full policy, here are our key commitments to every member on how your data is handled.

Full Data Encryption

All your personal data and financial information is encrypted using 256-bit SSL at all times — whether in transit or stored on our servers.

No Data Sales

RajaPlay does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data belongs to you.

Control in Your Hands

You have the right to request access to, correction of, or deletion of your personal data at any time through our official support channels.

Minimum Collection

We only collect data that is genuinely required to deliver our services. No additional data is collected in the name of unnecessary "analytics".

Restricted & Controlled Access

Only staff who require access to your data for their job functions are authorised. All access is recorded and audited regularly.

Breach Notification

In the event of any security breach affecting your data, we will notify you within 72 hours via your registered email.


1 Introduction & Scope of This Policy

This Privacy Policy is issued by RajaPlay ("we", "Platform") and applies to all users who access or use the website, mobile app and related services operating under the domain rajaplay.vin ("Services").

We take our responsibilities under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws seriously. This policy describes our practices regarding the collection, use, disclosure and protection of your personal information.

By using RajaPlay Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Services.

This document forms part of your overall agreement with RajaPlay, together with Terms and Conditions platform.

2 Types of Personal Data We Collect

RajaPlay collects your personal data through various means — directly when you register or use the platform, and automatically when you browse our services.

Data Category Example Information How It's Collected
Identity Data Full name, date of birth, IC/passport number Registration & KYC
Contact Data Phone number, email address, mailing address Registration form
Financial Data Bank name, account number (partial), transaction records Deposits & withdrawals
Technical Data IP address, device type, web browser, operating system System auto-log
Usage Data Games played, session duration, login frequency Activity on the platform
Communication Data LiveChat conversation records, support emails Communication with support
Our Commitment: Full credit card numbers and complete banking details are not stored on rajaplay servers. Financial transactions are processed through licensed third-party payment gateways that comply with PCI DSS security standards.

3 How We Use Your Data

The personal data we collect is used solely for legitimate purposes necessary for the operation of the RajaPlay platform. The following are the primary purposes for which data is used:

  • Account management: Create, verify, and maintain your member account, including KYC processes required by law.
  • Service delivery: Process deposits, withdrawals, and run games within the platform.
  • Security & fraud prevention: Detect and block suspicious activity, unauthorised access attempts, and financial fraud.
  • Service communications: Send important notifications related to your account, transactions, and platform updates.
  • Customer support: Process and respond to enquiries, complaints, and technical support requests.
  • Legal compliance: Meet reporting and compliance obligations required under Malaysian law.
  • Platform improvements: Analyse usage patterns in aggregate (not individually) to improve the user experience.
We do not use your data for third-party advertising. Any marketing communications from RajaPlay are only sent where you have given explicit consent, and you may unsubscribe at any time.

4 Data Sharing & Disclosure

RajaPlay does not share your personal data with third parties except in the following limited circumstances:

  • Trusted service providers: We share only the minimum necessary data with technical service providers such as payment processors, cloud computing service providers and game providers, under strict confidentiality agreements.
  • Legal requirements: When required by law, court order or direction from a lawful authority, we will disclose the requested information.
  • Fraud prevention: In situations where there is strong evidence of financial fraud, relevant information may be shared with the appropriate authorities.
  • Business transfer: In the event of a merger or acquisition, member data may be transferred — however, this Privacy Policy will continue to apply.
Important: RajaPlay has never sold, rented, or traded your personal data to advertisers, data brokers, or any third party for their own commercial purposes.

5 Data Storage & Security Measures

Your personal data is stored on secure servers located in certified data centres with high physical and digital security standards. We implement multiple layers of security including:

  • 256-bit SSL/TLS encryption for all data transmitted over the network.
  • Encryption of sensitive personal data at rest in the database.
  • Role-based access control — each staff member can only access data required for their job function.
  • Continuous security monitoring and intrusion detection systems.
  • Regular internal and external security audits.
  • Regular data backup procedures to prevent data loss.

Regarding retention periods, active account data is kept for the duration your account remains active and up to 7 years after account closure to meet legal compliance requirements. Technical data and system logs are retained between 90 days and 2 years depending on the data category.

6 Cookies & Tracking Technologies

The rajaplay website and app use cookies and similar tracking technologies to keep the platform running smoothly and deliver a better experience for you.

  • Essential cookies: Required for core platform functions such as maintaining your login session and language preferences. Cannot be disabled.
  • Performance cookies: Helps us understand how users interact with the platform — data is collected in aggregate and does not identify individuals.
  • Functional cookies: Save your preferences such as display settings and frequently accessed game options.
  • Security cookies: Used to detect and prevent fraudulent activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect platform functionality.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 and international best practices, you have the following rights regarding the personal data we hold:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data under circumstances permitted by law.

Right to Object

Object to the processing of your data for marketing purposes at any time.

Right to Data Portability

Request your data in a machine-readable format for transfer.

Right to Restriction

Request restrictions on the processing of your data under certain circumstances.

To exercise any of the above rights, contact our privacy team via LiveChat on the platform or by email at [email protected]. We will respond to your request within 14 business days.

8 Child Data Protection

RajaPlay is a platform that for users aged 18 and above only. We do not intentionally collect, store or process any personal data relating to individuals under the age of 18.

If we discover that a child's personal data has been collected unintentionally, we will immediately take steps to delete it and close the account in question. If you believe a child has registered on our platform, please contact us immediately.

Parents and guardians are responsible for monitoring their children's online activity. RajaPlay encourages the use of parental controls on shared devices.

9 Third-Party Links & Services

The rajaplay platform may contain links to third-party services such as game providers and payment gateways. When you leave our platform and use these third-party services, their separate privacy policies will apply.

RajaPlay is not responsible for the privacy practices of any third-party websites or services. We encourage you to read the privacy policy of any third party before sharing your personal data with them.

Game providers integrated with rajaplay adhere to the data protection standards set out in our partnership agreements — they are not permitted to use rajaplay member data for their own purposes outside the scope of delivering gaming services.

10 Amendments to This Privacy Policy

RajaPlay reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to members via:

  • In-platform notification upon next login.
  • Email notification to your registered address.
  • Update the "Last Updated" date at the top of this document.

Continued use of the platform after changes take effect constitutes your acceptance of the latest version of the Privacy Policy. We recommend reviewing this page periodically.

11 How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, our privacy team is ready to assist:

Privacy Email: [email protected]
LiveChat: Available on the platform 24/7 after Login
Response Time: Within 14 business days for data-related requests

For urgent security issues such as suspected data breaches or unauthorised access, please contact us via LiveChat for a faster response.


Frequently Asked Questions About Privacy at RajaPlay

No, absolutely not. RajaPlay does not sell, rent, or trade member personal data to any third party for advertising or marketing purposes. Your data is used solely to operate the platform's services and fulfil legal compliance requirements. This is our unwavering commitment to all members.

Yes, you may submit a data deletion request. However, there are certain categories of data we are required to retain for periods specified by Malaysian law — such as financial transaction records that must be kept for 7 years under the Anti-Money Laundering Act. We will clearly inform you which data can be deleted and which cannot, along with the reasons.

Your financial information is protected through multiple layers of security. Full credit card numbers are never stored in our system — transactions are processed via licensed payment gateways that comply with PCI DSS. Stored bank account data is retained in masked format only. All financial data communications use 256-bit SSL encryption.

Access to member personal data is strictly limited. Only staff who require access to perform their job duties — such as the customer support team, KYC compliance team and security team — are authorised. All access is recorded in system logs and audited regularly. Staff who violate the data access policy are subject to serious disciplinary action.

Play with Peace of Mind — Your Data is Safe with RajaPlay

Over 500,000 Malaysian members have trusted rajaplay with their personal data. Register today and enjoy a safe, fair, and convenient gaming experience.

Bahasa Melayu