Your privacy is our priority. This document transparently explains how rafa77 collects, stores, uses, and protects your personal information as a user of our platform.
Rafa77 operates under a full commitment to safeguarding and protecting the privacy of every user on our platform. This Privacy Policy clearly explains how we handle your personal information, from the point of collection through to how it is used and stored.
This document applies to all users who register for or use any rafa77 service, including the web platform, mobile app, and any of our official communication channels. By using the rafa77 platform, you agree that your data is processed in accordance with the terms set out in this Privacy Policy.
We take our responsibilities seriously under applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). All data processing we carry out has a legitimate purpose and is conducted in a secure, responsible and transparent manner.
If any part of this Privacy Policy is unclear, you may contact the rafa77 support team via live chat within the platform. We are happy to provide further clarification.
Rafa77 collects your personal information through various means as you use our platform. Below are the categories of information we collect and the purposes they serve:
| Information Categories | Data Examples | Primary Purpose |
|---|---|---|
| Identification Information | Full name, date of birth, IC number | Identity verification (KYC) and age eligibility |
| Contact Information | Phone number, email address | Account communications and notifications |
| Financial Information | Bank account number, account holder name | Deposit and withdrawal processing |
| Usage Data | Game history, bets, login activity | Service analytics and responsible gaming |
| Device Data | IP address, device type, web browser | Account security and fraud detection |
| Cookies and Analytics | Session data, user preferences | User experience improvement |
We only collect information that is strictly necessary for the stated purposes. No additional data is collected without a clear and legitimate reason.
The personal information we collect is used responsibly for the following purposes only:
Your personal identification data is used to verify your identity during registration and the KYC process, ensuring that only eligible individuals — Malaysian citizens aged 18 and above — can access the platform. This process protects you and all other users from account misuse.
Your financial information is required to process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost and bank transfers, and to ensure withdrawals are credited to the correct account in your name. All financial data is processed using 256-bit SSL encryption.
Your device data and usage patterns are analyzed by our security systems to detect and prevent suspicious activity such as unauthorized access, identity fraud, or money laundering attempts. This is done solely to protect your account and funds.
Your game history and betting activity are used to help us identify usage patterns that may require attention. If our system detects signs of excessive use, our team may proactively reach out to offer assistance and responsible gaming resources.
We use your contact information to send important account-related notifications such as transaction confirmations, security alerts and policy updates. Marketing communications will only be sent if you have given explicit consent.
Rafa77 will never use your information for purposes beyond those stated above without first obtaining your renewed consent.
Rafa77 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. However, in certain limited situations, your information may be shared with the following parties:
Every third party working with rafa77 is bound by strict data protection agreements and is not permitted to use your data for any purpose other than what is specified in their contract with us.
All third-party providers we work with undergo a thorough security and compliance review before being permitted to handle any rafa77 user data.
Rafa77 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, leakage, alteration, or destruction.
While no security system can guarantee absolute protection, we are constantly working to stay one step ahead of the latest cyber threats through continuous monitoring and regular system updates.
Rafa77 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal and regulatory requirements.
When data is no longer needed and there is no legal obligation to retain it, Rafa77 will securely and irreversibly delete or anonymize that data.
As a rafa77 user, you have the following rights regarding your personal data, which you may exercise at any time by contacting our team:
To exercise any of the above rights, please contact the rafa77 support team via live chat or submit a written request to [email protected]. We will respond to your request within 14 business days.
Some data deletion requests may not be fully executable where there is a legal obligation to retain that data. We will clearly notify you if this is the case.
The rafa77 platform uses cookies and similar technologies to enhance the user experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit our platform.
You can manage your cookie preferences through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of our platform.
We do not use third-party cookies for advertising purposes or to track your activity on other websites. Our cookies are solely intended to enhance your experience on the rafa77 platform.
In the course of operating the rafa77 platform, some of your personal data may be processed or stored on servers located outside Malaysia. When such data transfers occur, we ensure that protections equivalent to or exceeding the standards set by Malaysia's PDPA apply at all times.
Steps we take for international data transfers include:
While rafa77 implements comprehensive security measures, we acknowledge that no system is completely immune. In the event of a data security breach affecting your personal information, we are committed to:
Breach notifications will be sent to your registered email address. Please ensure your account contact details are always kept up to date so you do not miss any important communications.
Rafa77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any significant updates will be communicated to you via:
The "Updated" date at the top of this page always reflects the latest version of the Privacy Policy. Continued use of the platform after an update is published is considered your acceptance of those changes. If you do not agree with the changes made, you have the right to close your account.
If you have any questions, concerns or complaints regarding how rafa77 handles your personal data, please contact us through the following channels:
Our team will address all privacy-related enquiries seriously and within a reasonable timeframe, not exceeding 14 working days for most standard requests.
For more serious privacy issues or unresolved complaints, you may also contact the Personal Data Protection Department of Malaysia (PDPD) under the Ministry of Communications and Digital Malaysia.
Data protection is more than a promise — it is a system we built from the ground up to ensure your information remains secure at all times.
All data transmitted between your device and rafa77 servers is protected with 256-bit SSL encryption — the same standard used by leading financial institutions in Malaysia.
256-bit SSLRafa77 has never and will never sell your personal information to advertisers, data brokers, or any third party for commercial purposes. Your data belongs entirely to you.
Data ProtectedYou have the right to access, correct, or request deletion of your data at any time. Our team will process your request within 14 business days, no questions asked.
User RightsRafa77's data handling operations are designed and audited to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), providing you with meaningful legal protection.
PDPA 2010Rafa77's data security systems undergo regular audits by independent and impartial third parties, ensuring our data protection standards are consistently maintained and improved.
Independently AuditedIn the event of any security incident affecting your data, we are committed to notifying you within 72 hours with clear information about the situation and the actions taken.
Transparent