raffi888 is committed to handling your personal data with integrity, transparency, and care. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and protect it, and what rights you hold as a Member.
Six core principles that guide every data decision we make at raffi888.
All data transmitted between your device and raffi888's servers is protected with 256-bit SSL/TLS encryption — the same standard used by major financial institutions across Malaysia.
raffi888 does not sell, rent, trade, or lease your personal information to any unaffiliated third party under any circumstances. Your data belongs to you.
We collect only the personal data that is strictly necessary for operating a secure, compliant gaming platform. If information is not needed, we do not request it.
This policy plainly describes what we collect, why we collect it, who we share it with, and how long we retain it. No hidden clauses, no misleading language.
You may request access to, correction of, or deletion of your personal data at any time by contacting our support team. We will respond to all data requests within a reasonable timeframe.
raffi888 conducts regular security reviews, access audits, and vulnerability assessments to ensure Member data is protected against unauthorised access, alteration, or disclosure.
raffi888 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at https://raffi888.cam and is the data controller responsible for the personal information collected from individuals who register as Members or otherwise interact with the Platform.
This Privacy Policy ("Policy") sets out the basis upon which any personal data we collect from you, or that you provide to us, will be processed. It applies to all users of the raffi888 Platform, including registered Members, visitors browsing the Platform without an account, and individuals who communicate with us via live chat or email.
By registering a Member account on raffi888 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
ℹ️ raffi888 is an English-language platform serving the Malaysian market. All data practices described in this Policy are conducted with reference to the protection of Malaysian users and are designed to align with sound data protection principles applicable in the territory.
For the purposes of this Privacy Policy, the following terms carry the meanings described below:
Any information relating to an identified or identifiable natural person — including but not limited to a name, identification number, location data, IP address, or factors specific to the physical, economic, or social identity of that person.
Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, transmission, erasure, or destruction.
The entity that determines the purposes and means of processing personal data. In the context of this Policy, raffi888 is the Data Controller.
A third party that processes personal data on behalf of the Data Controller, such as payment processors, KYC verification providers, and customer communication platforms.
An individual who has successfully registered a personal account on the raffi888 Platform and agreed to the applicable Terms & Conditions.
The identity verification process conducted by raffi888 to confirm the identity, age, and eligibility of a Member prior to processing certain transactions, including withdrawals.
A subset of personal data requiring heightened protection, including identity document numbers, financial account details, and any data that could expose a Member to significant risk if disclosed without authorisation.
raffi888 collects personal data only to the extent necessary to operate the Platform safely, process transactions, verify identity, and comply with applicable regulatory requirements. The categories of data we may collect are as follows:
When you create a Member account, we collect:
To process withdrawals and comply with anti-money laundering obligations, we may request:
We record details of all deposits and withdrawals processed through the Platform, including payment method type (e.g., Maybank2u, Touch 'n Go eWallet, DuitNow, FPX, CIMB Clicks, GrabPay, Boost), transaction amounts in MYR, transaction timestamps, and reference numbers.
We collect records of all gaming sessions, bet placements, game results, bonus activations, and account balance movements. This data is used for platform integrity, dispute resolution, and responsible gambling monitoring.
When you access the Platform, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session duration, pages visited, and referring URL. This data is used for security monitoring, fraud prevention, and improving platform performance.
Records of communications between you and raffi888 customer support — including live chat transcripts and email correspondence — are retained for service quality, training, and dispute resolution purposes.
raffi888 collects personal data through the following channels:
raffi888 processes your personal data on the following lawful bases:
| Processing Purpose | Lawful Basis |
|---|---|
| Account registration and management | Performance of a contract (our Terms & Conditions) |
| Processing deposits and withdrawals in MYR | Performance of a contract |
| KYC identity and age verification | Legal obligation; legitimate interests (fraud prevention) |
| Responsible gambling monitoring | Legal obligation; legitimate interests (player protection) |
| Fraud detection and security | Legitimate interests (platform integrity) |
| Customer support communications | Performance of a contract; legitimate interests |
| Marketing and promotional communications | Consent (you may withdraw at any time) |
| Platform analytics and improvement | Legitimate interests (service quality) |
| Regulatory reporting obligations | Legal obligation |
raffi888 uses the personal data we collect for the following purposes:
✅ raffi888 does not use automated decision-making processes that produce legal or similarly significant effects on Members without human review. KYC verification outcomes that affect account access are reviewed by our compliance team before any action is taken.
raffi888 does not sell, rent, or lease your personal data to third parties for their own commercial use under any circumstances. We may share your personal data with the following categories of recipients only to the extent necessary and with appropriate safeguards in place:
To process deposits and withdrawals, we transmit necessary financial transaction data to our integrated Malaysian payment processors including Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, GrabPay, Boost, DuitNow, and FPX. These providers receive only the minimum data required to complete the transaction.
Identity documents submitted for KYC verification are processed by third-party identity verification service providers under data processing agreements. These providers are bound by strict confidentiality and data security obligations and may not use your data for any purpose other than completing the verification requested by raffi888.
Technical data including IP addresses and device fingerprints may be shared with fraud detection service providers to identify and mitigate risks to the Platform and its Members.
raffi888 may disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by law or where we reasonably believe such disclosure is necessary to investigate, prevent, or respond to suspected illegal activity, including financial crime and money laundering.
⚠️ raffi888 will never disclose your personal data to any third party for advertising, profiling, or data brokerage purposes. Disclosure is limited strictly to the categories above and only where there is a lawful basis for doing so.
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device across pages and sessions, enabling functionality, improving performance, and supporting analytics.
The raffi888 Platform uses the following categories of cookies:
You may configure your browser to refuse non-essential cookies or to alert you when cookies are being placed. Note that disabling essential cookies will impair your ability to log in and use the Platform. Browser-level cookie settings are typically accessible via the browser's privacy or settings menu. For most mobile browsers used in Malaysia including Chrome for Android and Safari for iOS, cookie preferences can be managed in the browser settings application.
raffi888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation; dispute resolution |
| KYC documents | 5 years from submission or account closure | Anti-money laundering legal obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay and wagering records | 3 years from session date | Dispute resolution; responsible gambling |
| Customer support transcripts | 3 years from interaction date | Service quality; dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent management compliance |
| Technical/device logs | 12 months from collection date | Security monitoring; fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in such a manner that re-identification is not possible.
raffi888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
ℹ️ While we maintain robust security measures, no online platform can guarantee absolute security. Members are responsible for maintaining the confidentiality of their own login credentials and should notify us immediately if they suspect unauthorised account access.
As a Member of raffi888 and a person whose personal data we process, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting our support team via live chat or email:
Request a copy of the personal data raffi888 holds about you, along with information about how it is being used and with whom it has been shared.
Request correction of any inaccurate or incomplete personal data held on your account. You may update basic account details directly via your account settings.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Request that we limit our use of your personal data in certain circumstances — for example while the accuracy of data is being disputed.
Request that we provide your personal data in a structured, machine-readable format so you may transfer it to another service provider.
Object to the processing of your personal data for direct marketing purposes or processing based on our legitimate interests where you believe those interests are overridden by your rights.
We will respond to all data rights requests within a reasonable period and no later than 30 days of receipt. If a request is complex or voluminous, we may extend this period by a further 30 days with prior notice. We will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.
With your consent, raffi888 may send you promotional communications regarding bonuses, new games, platform updates, and special events via email or SMS. These communications are sent based on your account preferences and the consent provided at the time of registration or subsequently updated in your account settings.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent will not affect your ability to receive essential transactional notifications such as deposit confirmations, withdrawal updates, and security alerts — these are sent as part of the service and are not subject to marketing opt-out.
raffi888 is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under this age. If we become aware that personal data has been collected from a person who has not met the 21+ age requirement, we will immediately close the associated account and delete or anonymise all data collected in connection with that account.
If you have reason to believe that a minor has registered on raffi888, please contact our support team via live chat immediately so we may investigate and take appropriate action.
⚠️ Underage gambling is illegal and harmful. raffi888 takes its age verification obligations seriously and will not knowingly facilitate gaming activity by individuals under 21 years of age.
The raffi888 Platform may contain references to Malaysian payment services (such as Maybank2u, Touch 'n Go eWallet, and GrabPay) and payment infrastructure (such as DuitNow and FPX). These are described for informational purposes. Where the Platform facilitates a redirect to a payment provider's interface to complete a transaction, that interaction is governed by the relevant payment provider's own privacy policy.
raffi888 is not responsible for the data practices of external payment providers or any other third-party services. We recommend reviewing the privacy policies of any third-party services you interact with independently of the raffi888 Platform.
raffi888 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we provide. We will notify registered Members of material changes by posting a prominent notice on the Platform and/or by sending a notification to the registered email address.
The effective date at the top of this page will be updated whenever a revision is made. Continued use of the Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any update to this Policy, you should cease using the Platform and may request account closure by contacting our support team.
ℹ️ We recommend reviewing this Privacy Policy periodically to stay informed about how raffi888 handles your personal data. This Policy was last reviewed and updated on 1 January 2026.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by raffi888, please contact us through the following channels:
For requests to exercise your data rights (access, rectification, erasure, portability, objection), please contact us via live chat or email with the subject line "Data Rights Request" and provide your registered account email address so we may locate your records and process your request efficiently.
We take all privacy-related enquiries seriously and aim to acknowledge all requests within 3 business days. Resolution of complex data rights requests may take up to 30 days from the date of receipt.
Related Policies
For information on your rights and obligations as a Member of raffi888, please also review our Terms & Conditions. For information on responsible gambling tools, deposit limits, and self-exclusion, please visit our Responsible Gambling page.
Now that you understand how we protect your personal data, you can enjoy everything raffi888 has to offer — live casino games, sports betting on Liga Super Malaysia and EPL, high-RTP slots, and instant MYR payments — all secured by bank-grade encryption.
For players aged 21 and above only. Please gamble responsibly and within your means.