Official Privacy Document

Raya22 Privacy Policy – Player Personal Data Protection

At raya22, your privacy is not merely a legal obligation — it is our commitment to every player who entrusts us with their personal information. This document transparently explains how your data is collected, used, protected, and managed.

Updated: 1 January 2026
SSL 256-bit
Malay
Version 2.4
256-bit SSL Encryption
Data Stored Securely
No Data Sales
Full Player Control
24/7 Support
This policy is effective from 1 January 2026 and applies to all users of the raya22 platform.

1. Introduction & Scope of This Policy

Welcome to the raya22 Privacy Policy. This document is an agreement between you as a player and raya22 as the data controller, regarding how we manage your personal information when you use our online entertainment platform at raya22.vu.

We understand that privacy is deeply personal. When you register and play at raya22, you entrust us with your personal information — and we take that responsibility seriously. Every decision we make about your data is made with your best interests and safety in mind.

This Privacy Policy applies to all services offered by raya22, including the main website, mobile app, online games, integrated payment services, and all communication channels we operate. By using any raya22 service, you agree to the data processing practices described in this document.

If you disagree with any part of this Privacy Policy, please stop using the raya22 platform and contact our support team to help you close your account and process your data deletion request.

2. Types of Personal Data We Collect

Raya22 only collects data that is genuinely necessary to provide a safe, fair service that meets legal requirements. We do not collect excessive or irrelevant information beyond the scope of our service.

Data Category Sample Information Primary Purpose
Identification Data Full name, date of birth, identity card number, passport KYC, age verification, fraud prevention
Contact Data Email address, phone number, mailing address Communications, account verification, notifications
Financial Data Bank account number, account holder name, transaction history Deposit & withdrawal processing, anti-money laundering prevention
Technical Data IP address, device type, web browser, operating system Account security, fraud detection, platform optimisation
Activity Data Game history, betting patterns, active hours, favourite games Personalised experience, responsible gambling, platform analytics
Communication Data Live chat records, support email history, player feedback Service improvement, complaint resolution, quality control

In addition to information you provide directly, raya22 also automatically collects technical data while you use our platform. This includes information about your device and connection, which is necessary to ensure account security and detect suspicious activity.

raya22 never collects credit card numbers directly. All financial transactions are processed through licensed payment providers with their own PCI-DSS security standards. raya22 only stores bank account information for the purpose of processing withdrawals.

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. raya22 uses your personal data on a solid legal basis — whether to fulfil a service contract with you, meet legal obligations, or based on legitimate interests that do not override your rights.

  • Account Management: Processing registration, verifying identity (KYC), managing login, and ensuring the security of your account at all times.
  • Transaction processing: Verifying and processing deposits and withdrawals quickly and accurately. Your financial data is used solely for this purpose.
  • Legal compliance: Meeting the Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements mandated by the relevant regulatory authorities.
  • Platform security: Detecting and preventing fraud, account abuse, unauthorised access, and other illicit activities using our automated monitoring systems.
  • Personalise your experience: Personalising game recommendations, bonus offers, and platform content based on your preferences and gameplay patterns.
  • Service communications: Sending important account-related notifications, security updates, transaction confirmations, and responses to your support inquiries.
  • Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support tools.
  • Platform Enhancement: Analysing usage data in aggregate (without identifying individuals) to improve the performance, interface, and overall experience of the raya22 platform.
raya22 does not use your data to make automated decisions that negatively affect you without human intervention. Any action impacting your account will be reviewed by our team before it is carried out.

4. Data Sharing & Disclosure to Third Parties

Raya22 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. This is our absolute commitment. However, there are limited circumstances where we need to share your data with certain parties to enable our services to function properly.

Parties that may receive your data:

  • Payment service providers: Banking institutions and e-wallet providers that process your financial transactions. They only receive data necessary to process payments and are bound by strict confidentiality agreements.
  • Game Software Providers: Game development companies providing slots, live casino, and other games on the raya22 platform. Data shared is minimal and for technical purposes only.
  • Cloud & infrastructure service providers: Hosting and cybersecurity providers supporting our platform operations, all subject to data processing agreements that comply with international standards.
  • Regulatory bodies & law enforcement: When required by law, court order, or a legitimate request from a competent authority. raya22 will notify you of any such request unless prohibited from doing so by law.
  • Identity verification services: Third-party KYC providers that help us verify your identity and age to meet legal requirements during registration and withdrawal.
All third parties working with raya22 are required to sign data processing agreements that define their responsibilities in protecting your information. raya22 periodically audits these partners to ensure ongoing compliance with our privacy standards.

5. Technical & Organisational Security Measures

Protecting your personal data from unauthorised access, loss, misuse, or disclosure is raya22's top priority. We continuously invest in the latest security infrastructure to ensure your information remains protected at all times.

  • End-to-end encryption: All data transmitted between your device and raya22 servers is protected by 256-bit SSL/TLS encryption — the same standard used by leading financial institutions worldwide.
  • Data encryption at rest: Sensitive data stored in our databases — including financial information and identification documents — is encrypted using the industry-recognised AES-256 algorithm.
  • Tiered access control: Access to player data by raya22 staff is restricted on a need-to-know basis. Only personnel who genuinely require access to perform their duties are permitted, and all access is automatically logged.
  • Two-factor authentication (2FA): Available and strongly recommended for all player accounts to add an extra layer of security.
  • 24/7 Monitoring: Automated monitoring systems operate 24/7 to detect and respond to any security threats or suspicious activity in real time.
  • Regular security testing: raya22 conducts regular penetration testing and security audits by independent parties to identify and address any vulnerabilities before they can be exploited.
  • Secure data backup: Your data is regularly backed up to a secure, separate location, ensuring it can be recovered in the event of a technical failure.
While no system can guarantee 100% absolute security, raya22 is committed to employing all reasonable technical and organisational measures to protect your data. In the event of any data breach that affects you, we will notify you within the timeframe required by the relevant law.

6. Cookies, Tracking Technologies & Analytics

Like most modern online platforms, raya22 uses cookies and similar tracking technologies to enhance the user experience, ensure security, and understand how our platform is used. This section explains in detail what we use and why.

Types of cookies used by raya22:

  • Essential cookies: Non-negotiable Required for core platform functions such as login, session management, and security. Without these cookies, the platform cannot function properly.
  • Performance & analytics cookies: Objectable Helping us understand how players use the platform — which pages are visited most often, where players encounter issues, and how we can improve the overall experience.
  • Functional cookies: Objectable Remembering your preferences such as language, display settings, and platform preferences so you don't have to reconfigure them each time.
  • Security cookies: Non-negotiable Used to detect and prevent fraudulent activity, verify your identity, and protect your account from unauthorised access.

You can manage your cookie settings at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the raya22 platform. For more information on managing cookies, refer to your web browser's documentation.

7. Data Retention Period

Raya22 does not retain your personal data longer than is necessary for the stated purpose or as required by law. Our data retention policy is designed to balance operational needs, legal obligations, and your privacy rights.

Data Type Retention Period Justification
Active account data Throughout active account period Required for ongoing service operations
Financial transaction records 7 years after transaction AML and tax legal requirements
KYC Documents 5 years after account closure Compliance with identity verification requirements
Support communication logs 3 years Complaint resolution and service improvement
Technical data & security logs 12 months Fraud detection and security incident analysis
Analytics cookie data 13 months Annual usage trend analysis

Once the defined retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be identified. Our deletion process complies with industry standards to ensure deleted data cannot be recovered.

8. Your Rights Regarding Personal Data

As a raya22 player, you have specific rights regarding your personal data. raya22 is committed to making it easy for you to exercise these rights in a straightforward and timely manner. Data rights requests can be submitted to our support team via Live Chat or support email.

Right of Access

You may request a copy of all personal data we hold about you at any time. We will provide this information in a readable format within 30 days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request that we update it. You can update basic information directly in your account profile settings.

Right to Erasure

You may request the deletion of your personal data. Please note that certain data may need to be retained to fulfil legal obligations even after account closure.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. This request will be actioned immediately with no impact on your core services.

Right to Data Portability

You may request your data in a structured, machine-readable format (such as JSON or CSV) for transfer to another service of your choice.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data — for example, while you are disputing the accuracy of data we hold.

9. Child Protection

Raya22 services are strictly for adults aged 18 and above. raya22 does not knowingly collect or process personal data from individuals under the age of 18. We take active steps to prevent minors from accessing the platform.

  • All registrations require age verification through a strict KYC process, including submission of valid identification documents.
  • Our systems have detection mechanisms to identify registration attempts by underage individuals.
  • Should we find that we have inadvertently collected data from minors, we will immediately delete that data and close the account in question.
  • If you believe we may have collected information from a child, please contact our support team immediately.
Parents and guardians concerned about children who may be accessing online gambling platforms are encouraged to use appropriate parental control software and to have open conversations with their children about the risks of gambling. Visit the page Responsible Gaming us for additional resources.

10. Privacy Policy Amendments & Contact Us

Raya22 reserves the right to update or modify this Privacy Policy at any time in response to changes in law, industry practices, or our business operations. Whenever the Privacy Policy is updated, the "Updated" date at the top of this document will be changed to reflect the date of the latest amendment.

For significant amendments that affect how we process your data, raya22 will notify you via email or in-platform notification at least 14 days before the amendment takes effect. Continued use of the platform after the amendment takes effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise any of your data privacy rights, please contact our Data Protection Officer:

  • Email: [email protected]
  • Live Chat: Available 24/7 via the raya22 platform
  • Response time: We are committed to responding to all privacy-related inquiries within 72 working hours.
Your privacy is our priority. The raya22 support team is always ready to help you understand your rights and ensure your personal data is handled the way you expect.

Why Your Privacy Is Safe with raya22

We don't just comply with the law — we go further to ensure every aspect of your data is handled with full integrity and transparency.

Continuous Encryption

All data moving between your device and raya22 servers is protected by 256-bit SSL/TLS encryption protocols. Sensitive information in our database is also encrypted using AES-256 — no one can read your data without the correct encryption key.

Strict & Fair KYC

Our identity verification process is designed to protect you, not inconvenience you. KYC ensures no third party can use your name or access your funds. Documents you submit are stored in an encrypted environment and accessed only by authorised staff.

No Data Sales

Raya22 has never and will never sell your personal information to advertisers, data brokers, or any third party for commercial purposes. Your data is used solely to provide and improve raya22 services directly to you.

24/7 Security Monitoring

Raya22's security systems operate around the clock, monitoring every login activity, transaction, and account usage to detect any signs of suspicious activity. Should we detect anything unusual, our team will act immediately to protect your account.

Full Control in Your Hands

Through your account settings, you can update personal information, manage communication preferences, and request data access or deletion at any time. raya22 provides a clear and straightforward process for every privacy-related request, with no unnecessary bureaucratic obstacles.

Regular Audit & Compliance

Raya22 undergoes regular security and privacy compliance audits by qualified independent parties. The results of these audits are used to identify areas for improvement and ensure our data management practices consistently meet the latest standards and current legal requirements.

Raya22 Privacy FAQ

Answers to the most frequently asked questions from our players regarding data protection and privacy.

Yes, your banking information is protected with 256-bit SSL/TLS encryption during transmission and stored in an environment encrypted using AES-256. raya22 does not store credit card numbers directly — all transactions are processed through licensed payment providers with their own PCI-DSS security standards. Access to your financial information by raya22 staff is also restricted and automatically logged.

Yes, you may submit a data deletion request to our support team. Please note, however, that certain data such as financial transaction records and KYC documents must be retained for a specified period to fulfil legal obligations (such as AML requirements). Data not subject to legal obligations will be deleted within 30 days from the date your request is received. We will inform you in detail about which data can be deleted and which must be retained, along with the applicable timeframes.

Absolutely not. raya22 does not sell, rent, or share your personal data with third parties for marketing purposes. We only share data with parties genuinely required for the operation of our services — such as payment providers and game providers — and only the minimum information necessary for those purposes. All such parties are required to sign strict confidentiality agreements.

raya22 sends automatic email notifications whenever there is a new login to your account, particularly from an unrecognised device or location. You can also review your login history in your account settings. If you notice any suspicious activity, change your password immediately and contact our support team. We strongly recommend enabling two-factor authentication (2FA) for an added layer of security.

raya22 is committed to responding to all privacy-related requests within 72 working hours from the date the request is received. For more complex requests such as full data access applications or account deletion, the full process will be completed within 30 calendar days. You will receive regular updates on the status of your request via email throughout the process.

When you close your raya22 account, your personal data will not be deleted immediately, as legal obligations require us to retain certain records. Financial transaction records will be kept for 7 years, KYC documents for 5 years, and support communication logs for 3 years — all in accordance with Malaysian legal requirements. Other data not subject to legal obligations will be deleted within 30 days. You may request a full list of data to be retained and the respective retention periods from our support team.
Malaysia Players' Trusted Platform

Join raya22 — Your Data is Protected, Your Privacy is Respected

You now understand how raya22 protects your personal information. Register today and enjoy a safe, fair, and responsible online entertainment experience.

Bahasa Melayu