Privacy Policy rafa77 – Our Commitment to Protecting Your Personal Data

Rafa77 ("we", "Platform" or "Company") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, process, store and protect your personal information when you use the rafa77 platform.

This policy has been prepared in compliance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection standards. We want you to fully understand what happens to your data — without overly technical or vague language.

This policy applies to all personal data collected through the rafa77 website, mobile app, customer support, and any other interactions with our platform. If you disagree with any part of this policy, please discontinue use of our platform.

Rafa77 only collects data that is strictly necessary to deliver quality services and meet regulatory requirements. The following are the categories of data we collect:

We do not collect sensitive data such as health information, political views, or religious beliefs unless required by law. All data collection is carried out directly from you or automatically through technologies used within the platform.

Rafa77 uses your personal data for legitimate and transparent purposes. We will not use your data for any other purpose without obtaining your consent first. The primary purposes for which we use your data are as follows:

• Account Management: Creating, verifying and managing your account on the rafa77 platform, including required KYC processes.
• Transaction Processing: Processing all deposits, withdrawals and other financial activity quickly and securely.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and other criminal activity that could harm the platform and other players.
• Service Communications: Sending important notifications related to your account, transactions, security updates and policy changes.
• Legal Compliance: Meeting reporting obligations to regulatory bodies and relevant authorities under Malaysian law.
• Service Improvement: Analysing aggregated platform usage patterns to improve the gaming experience and develop new features.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.

Rafa77 does not sell or disclose your personal data to third parties for commercial purposes. However, there are certain situations where we need to share your data with the following parties:

• Payment Providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions. They receive only the minimum data necessary to complete each transaction.
• Game Providers: Third-party game providers that supply gaming content on the rafa77 platform are required to receive minimum session data to ensure games function correctly.
• Identity Verification Providers: Certified third-party KYC services are used to verify your identity in compliance with anti-money laundering (AML) regulatory requirements.
• Legal Authorities: rafa77 is required to disclose data when mandated by a court order, authority investigation or other valid legal requirement.
• Cloud and Infrastructure Services: Technical infrastructure providers supporting platform operations, subject to strict data protection agreements.

All third parties receiving your data are bound by confidentiality and data protection agreements. We ensure they adhere to security standards equal to or higher than those we hold ourselves to.

Rafa77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our platform.

• Essential Cookies: Required for core platform functions such as login authentication, session security, and basic preference settings. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent and errors encountered — to help us improve our service.
• Functional Cookies: Allowing the platform to remember your preferences such as language, display settings and login details for ease of use.
• Analytics Cookies: Used to understand overall platform usage patterns in aggregate and anonymised form for service improvement purposes.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of the platform. rafa77 uses cookie data responsibly and does not share individual tracking data with external advertisers.

Rafa77 stores your personal data in secure, internationally certified data centers. The following are the data retention periods and key security measures we implement:

• Retention Period: Active account data is retained for the duration of your membership plus 7 years after account closure, in order to meet Malaysia's financial record-keeping and legal requirements.
• Data Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Access Control: A least-privilege access principle is applied — staff can only access data necessary for their role.
• Continuous Monitoring: A 24/7 security monitoring system detects any unauthorised access attempts or anomalies in real time.
• Data Backup: Regular data backups are performed to geographically separate secure locations to ensure service continuity.
• Penetration Testing: Security audits and penetration testing are conducted periodically by independent third parties.

Under Malaysia's PDPA and rafa77's privacy policy, you have the following rights regarding your personal data. All requests can be submitted via live chat within the platform or by email to our data protection team:

The rafa77 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from minors. If we discover that a child's data has been collected without our knowledge, we will take immediate action to delete that data and close the account in question.

Parents or guardians who discover that their minor child has registered on the rafa77 platform are urged to contact our support team immediately. We will prioritise resolving such cases within 24 hours.

Rafa77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements in data protection technology.

• Material changes to this policy will be communicated to you via in-platform notifications and email, at least 14 days before the changes take effect.
• Minor changes such as spelling corrections or language clarifications do not require separate notification.
• The "Last Updated" date at the top of this document will always reflect the latest version of the policy.
• Continued use of the rafa77 platform after the effective date of any changes constitutes acceptance of the amended policy.

We encourage you to review this Privacy Policy periodically to ensure you are always informed about how we handle your data.

If you have any questions, concerns, or complaints regarding how rafa77 handles your personal data, we encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist you.

• Live Chat: The fastest way — available 24/7 via the chat icon within the rafa77 platform.
• Email: [email protected] — For written inquiries requiring formal documentation.
• Response Time: General enquiries are answered within 24 hours; formal data rights requests are resolved within 30 days.

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body under PDPA 2010.

This Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions. This document is written in Bahasa Melayu as the official version; any translation is for convenience only.