Rafi99 Privacy Policy — Member Personal Data Protection

1 Introduction

Rafi99 values the privacy of every member who uses our platform. We understand that your personal data is a trust we must handle with full responsibility. This Privacy Policy is established to clearly and transparently explain how we manage your personal information from start to finish.

This policy applies to all services provided by rafi99, including the main website, mobile app, all online games, customer support services and any communications related to your account. We uphold the principle that your personal data is only collected when necessary, used solely for the stated purposes, and protected to the fullest extent of the technology available to us.

2 Types of Personal Data We Collect

Rafi99 collects various types of personal data depending on how you interact with our platform. The following is a summary table of the data collected:

We only collect data that is genuinely necessary for legitimate operational purposes. You are not required to provide information beyond what is needed for basic registration; however, additional information may be required for certain features such as withdrawals or bonus claims.

3 How We Use Your Data

The personal data we collect is used exclusively for the following purposes:

• Account management: Create and maintain your member account, including the required KYC identity verification process.
• Transaction processing: Handle deposits, withdrawals and all financial transactions securely and efficiently.
• Service provision: Provides access to all games and features of the rafi99 platform that you use.
• Platform security: Detect and prevent fraud, money laundering, multiple account usage and any suspicious activity.
• Service communications: Send important notifications relating to your account, transactions, security updates and policy changes.
• Customer support: Process enquiries, complaints and assistance requests more effectively using your account records.
• Platform improvements: Analyse usage patterns in aggregate (without identifying individuals) to improve the user experience.
• Legal compliance: Fulfil regulatory obligations, anti-money laundering (AML) requirements and mandatory reporting.
• Marketing communications (with your consent only): To notify you about the latest promotions, bonuses and offers from rafi99.

4 Data Sharing with Third Parties

Rafi99 understands the importance of your data confidentiality. We only share personal data in the following situations and with strict limitations:

• Payment providers: Information required to process transactions is shared with trusted payment providers such as FPX, DuitNow and e-wallet providers. They are subject to their own privacy policies and confidentiality obligations.
• Game software providers: Minimum technical data required to operate games is shared with our licensed game providers.
• Regulatory authorities: We will disclose information when required by law, court order or direction from a lawful authority.
• Anti-fraud services: Certain data may be shared with licensed third-party identity verification and fraud prevention services.
• Business transfers: In the event of a merger, acquisition, or asset transfer, member data may be transferred to the new entity, subject to appropriate notification.

5 Cookies & Tracking Technologies

The rafi99 platform uses cookies and similar tracking technologies to enhance user experience and ensure platform security. The following are the types of cookies we use:

• Essential cookies (required): Required for core platform functions such as login, session management and security. Cannot be disabled.
• Performance cookies: Collect information on how pages are used to help us improve platform speed and performance.
• Functionality cookies: Remember your preferences such as language, display settings and login details for your convenience.
• Analytics cookies: Helps us understand overall usage patterns, including the most frequently visited pages and time spent.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the rafi99 platform. Session cookies are deleted automatically when you close your browser, while persistent cookies expire according to a set schedule.

6 Data Storage & Security

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rafi99 servers.
• Encryption of sensitive data stored on servers, including passwords and financial information.
• Role-based access control — only authorised staff may access member data, and only to the extent required for their duties.
• Continuous security monitoring 24 hours a day, 7 days a week to detect and respond to any threats.
• Regular security audits by independent parties to identify and address any system vulnerabilities.
• A tested incident response plan to ensure a swift and orderly response in the event of any data breach.

7 Your Rights as a Rafi99 Member

As a rafi99 member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the rafi99 customer support team. We will process your request within 30 business days from the date of receipt.

8 Child Data Protection

The rafi99 platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. If you believe someone underage has registered on our platform, please contact us immediately.

9 Links to Third-Party Sites

The rafi99 platform may contain links or references to third-party websites or services such as payment providers and game providers. This Privacy Policy applies to the rafi99 platform only.

Rafi99 is not responsible for the privacy practices of any third-party websites. We encourage you to read the privacy policy of each website you visit. Please note that payment providers such as DuitNow and Touch 'n Go have their own privacy policies governing how they handle your transaction information.

10 Data Retention Period

We retain your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by law. Our general data retention principles are as follows:

• Active account data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in compliance with anti-money laundering (AML) regulatory requirements.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• KYC Data: Retained for the period specified by applicable regulatory requirements, typically no less than 5 years.
• Technical log data: Retained for no more than 12 months unless required for an ongoing security investigation.

Once the retention period has expired, your data will be securely deleted or permanently anonymised so that it can no longer be associated with you.

11 Amendments to the Privacy Policy

Rafi99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any significant changes will be communicated to members via:

• Notice displayed on the platform home page for at least 14 days before the changes take effect.
• Email notification to all active members via their registered email address.
• In-account notice displayed during the member's next login session.

The latest version of this Privacy Policy is always available on this page, and the last updated date will be clearly shown. Continued use of the rafi99 platform after the effective date of any amendment is considered acceptance of the updated terms.

12 Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, our team is ready to assist.

You can reach us through the following channels:

• Live chat: Available 24 hours a day, 7 days a week via the live chat icon at the bottom corner of the platform.
• Email: [email protected] — we will respond within 2 business days.
• Help centre: Visit page FAQ us for answers to frequently asked questions about privacy and account security.