Rajawali55 Privacy Policy – Malaysian Player Data Protection

1Introduction & Scope of Privacy Policy

Rajawali55 respects the privacy of every individual who uses our platform. This Privacy Policy applies to all personal information collected through the rajawali55 website, mobile application (where applicable), and any interaction you have with our platform — including account registration, deposits and withdrawals, game activity, and communications with our customer support team.

This document clearly outlines:

• What types of personal data we collect and where it comes from
• How we use that data and for what purposes
• Who your data may be shared with and under what circumstances
• How long we retain your data
• Security measures we take to protect your data
• Your rights regarding your personal data and how to exercise them

This policy forms part of the overall agreement between you and rajawali55, together with Terms & Conditions us. In the event of any conflict between these documents concerning privacy, this Privacy Policy shall prevail.

2Personal Data We Collect

Rajawali55 collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect:

a) Data You Provide Directly:

• Identity information: Full name, identity card number (MyKad) or passport number, date of birth, gender
• Contact information: Email address, Malaysian mobile number, residential address
• Account information: Username, password (stored in hashed form), security questions
• Financial information: Payment method details used (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX), bank account number for withdrawals
• KYC verification documents: A copy of your MyKad, passport or other identity document requested during account verification

b) Automatically Collected Data:

• Platform usage data: Game records, betting history, total deposits and withdrawals, account balance
• Technical data: IP address, browser type, operating system, device type, screen resolution
• Location data: Approximate location based on IP address (not precise GPS)
• Cookie and session data: Login session information, functional cookies and analytics cookies (see Section 8)
• Interaction logs: Communication logs with customer support, including live chat records and emails

3How We Use Your Personal Data

Rajawali55 uses the personal data collected for the following purposes:

• Service provision: To create and manage your account, process deposits and withdrawals, and provide access to all games and features on the rajawali55 platform.
• Identity verification (KYC): Verifying your identity to comply with anti-money laundering (AML) legal requirements and to prevent fraud.
• Account security: Detecting and preventing unauthorised access, fraudulent activity, bot usage, or any security breaches related to your account.
• Transaction processing: Verifying and processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling withdrawal of winnings.
• Customer support: Responding to enquiries, resolving technical issues, handling complaints, and providing assistance to members via live chat and email.
• Platform improvement: Analysing usage patterns on an aggregate (not individual) basis to improve platform performance, user interface and overall gameplay experience.
• Marketing communications: Sending information about promotions, bonuses, and the latest offers to members who have consented to receive such communications. You may unsubscribe at any time.
• Legal compliance: To comply with applicable legal obligations, including Malaysia's PDPA, AML regulations, and any court orders or directives from competent authorities.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), rajawali55 processes your personal data on the following lawful bases:

• Contract fulfilment: Processing that is necessary to provide the services you have requested — including account management, processing of deposits and withdrawals, and provision of access to games.
• Legal obligation: Processing required to comply with applicable laws, including KYC and AML procedures mandated by Malaysian authorities.
• Legitimate interests: Processing for platform security, fraud prevention, service improvement, and risk management purposes — where our interests do not override your fundamental rights.
• Consent: For marketing communications and non-essential cookies, we rely on your consent. You may withdraw that consent at any time without affecting our core services.

5Data Sharing & Disclosure

Rajawali55 does not sell or rent members' personal data to third parties. However, we may share your personal data in the following limited circumstances:

• Payment service providers: Transaction information that must be shared with the payment processors handling your deposits and withdrawals — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX. All of these providers are bound by strict confidentiality agreements and security standards.
• Game software providers: Only the minimum data required to run a game (such as player ID and account balance) is shared with game providers. This does not include your full identity information.
• Competent authorities: We will disclose personal data to government authorities, law enforcement, or regulatory bodies when required by law, court order, or a valid official investigation.
• Audits and assessments: Independent auditors conducting compliance audits or security assessments of the rajawali55 platform may require access to certain data — all subject to strict confidentiality agreements.

6Data Storage & Retention Period

Rajawali55 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law.

In general, our data retention policy is as follows:

• Active account data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and AML regulatory requirements.
• KYC Documents: Retained for a minimum of 5 years after the verification date or account closure date, whichever is later.
• Support communication logs: Retained for 2 years from the date of communication, for dispute resolution purposes.
• Cookie data: Depends on the type of cookie — from the current session (session cookies) to a maximum of 12 months (persistent cookies).

Once the retention period ends, data will be securely deleted or anonymised so it can no longer be linked to any individual.

7Technical & Organisational Security Measures

Rajawali55 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction:

Technical Measures:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest on our servers
• Passwords are stored using a strong one-way cryptographic hash function (bcrypt)
• Two-factor authentication (2FA) support for all member accounts
• Firewall and intrusion detection systems (IDS) active at all times
• Continuous 24/7 monitoring for suspicious activity and security threats
• Regular security testing and audits by independent parties
• Secure data backup systems and a disaster recovery plan

Organisational Measures:

• Access to members' personal data is strictly limited to staff with a legitimate operational need
• All staff who handle personal data are bound by confidentiality agreements
• Data security awareness training is conducted regularly for all staff

8Cookies & Tracking Technologies

Rajawali55 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential cookies (required): Required for core platform functions such as login session management, security and basic functionality. These cookies cannot be disabled as the platform will not function properly without them.
• Functional cookies: Saves your preferences such as language, display settings and game preferences so you do not have to reconfigure them each time you log in.
• Analytics cookies: Collects aggregated, anonymised information about how you use the platform — pages visited, time spent, features used — to help us improve our services.
• Security cookies: Helping detect and prevent fraudulent activity by identifying suspicious access patterns.

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect the platform's functionality. For more information on managing cookies, refer to your browser's help guide (Chrome, Firefox, Safari, Edge).

9Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a member rajawali55 have the following rights regarding your personal data:

• Right of Access: You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 21 working days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. Inaccurate data will be updated within a reasonable timeframe.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances — for example, if the data is no longer needed for its original purpose or if you withdraw your consent. This right is subject to our legal obligations to retain certain records.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while we verify the accuracy of data you have disputed.
• Right to Object to Marketing: You may object to the use of your data for direct marketing purposes at any time, without giving a reason. Click "Unsubscribe" in any of our marketing emails or contact customer support.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to the date of withdrawal.

To submit any data rights request, contact the support team at rajawali55 via live chat or email at support@rajawali55.biz. We may need to verify your identity before processing the request.

10Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or the way rajawali55 handling your personal data, please contact us through the following channels:

• Email: support@rajawali55.biz
• Live Chat: Available directly on the rajawali55 platform — 24 hours a day, 7 days a week

We are committed to responding to all privacy-related enquiries within 5 business days. For formal requests relating to data access or deletion rights, processing may take up to 21 business days.

Rajawali55 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or new legal requirements. Any material changes will be communicated to members via email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after such notice constitutes acceptance of the updated policy.