Privacy Policy

This Privacy Policy ("Policy") is issued by RA66 ("Platform", "We", "Us", "Our") and applies to all personal data collected from individuals ("User", "Member", "You") who access or use the website located at ra66.cam, including its associated mobile-optimised interface, account services, and customer support channels.

RA66 is an online gaming and sports betting platform serving Members across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. We recognise that the privacy and security of your personal data is a fundamental concern, and this Policy has been drafted to give you full transparency over our data practices.

This Policy should be read alongside our Terms & Conditions, which govern the broader relationship between RA66 and its Members. By registering an account, continuing to use our platform, or submitting any information to us, you acknowledge that you have read and accepted this Privacy Policy in full.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

RA66 collects only the personal data that is necessary for the provision of our services, fulfilment of regulatory obligations, and continuous platform improvement. The categories of data we collect are as follows:

a) Registration and Account Data

• Full legal name and preferred username
• Date of birth (to verify the mandatory 21+ age requirement)
• Email address and contact phone number
• Residential address (country, state, city — e.g., Kuala Lumpur, Penang, Johor Bahru)
• Chosen security credentials (passwords are stored in hashed form only; RA66 staff cannot access plaintext passwords)

b) Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Selfie photograph for liveness verification
• Proof of payment method ownership (e.g., bank statement header, e-wallet account screenshot)
• Source-of-funds documentation where required for large withdrawals or anti-money laundering compliance

c) Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods used (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, ETH, USDT TRC20)
• Wallet balance history and transaction reference numbers
• Cryptocurrency wallet addresses where applicable

d) Gaming and Betting Activity Data

• Game sessions, bet histories, wagering records, and outcomes
• Sports betting selections, odds accepted, and settlement records
• Bonus usage, promotional participation, and wagering requirement progress

e) Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and clickstream data
• Cookie identifiers and session tokens

f) Communications Data

• Records of live chat, email, and support ticket interactions
• Feedback, complaints, and dispute correspondence
• Marketing preference records and opt-out status

RA66 collects personal data through the following methods:

1. Direct Submission: Information you actively provide during registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional claim forms.
2. Automated Collection: Technical and behavioural data collected automatically when you access ra66.cam, including via cookies, session trackers, and server log files.
3. Third-Party Payment Processors: Transaction confirmation data received from payment gateway partners when you complete a deposit or withdrawal via e-wallet, FPX, or bank transfer.
4. Identity Verification Partners: Data returned by third-party KYC service providers following document verification, where such services are engaged by RA66.
5. Fraud and Risk Detection Systems: Automated risk-scoring outputs generated when your account activity is assessed against fraud detection models and anti-money laundering screening databases.

RA66 processes your personal data for the following clearly defined purposes:

RA66 processes personal data only where a valid legal basis exists. Depending on the purpose of processing, the applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform the Member agreement — including account creation, game service delivery, and payment processing. Without this processing, RA66 cannot provide its services.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC obligations under licensing requirements, and data retention mandates. RA66 has no discretion to opt out of such processing.
• Legitimate Interests: Processing carried out where RA66 has a legitimate business interest — such as fraud detection, platform security, and aggregate analytics — provided that such interests do not override the fundamental rights and freedoms of Members.
• Consent: Processing that relies on your freely given, informed consent — primarily for direct marketing communications. You may withdraw consent at any time by updating your communication preferences or contacting our support team.

RA66 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Personal data is shared only in the following limited and controlled circumstances:

• Payment Processors: Transaction data is shared with payment gateway providers — including Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay) and banking partners (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX) — solely to process your deposit and withdrawal requests.
• KYC & Identity Verification Partners: Identity documents may be processed by third-party KYC providers engaged by RA66. These providers are contractually bound to process data only for verification purposes and may not use it for any other purpose.
• Game Studio Providers: Where you access third-party game software embedded within ra66.cam, limited technical session data (such as bet amount and game outcome) is exchanged with the game studio's server infrastructure to facilitate gameplay.
• Fraud and Risk Analytics Services: Anonymised or pseudonymised behavioural data may be processed by third-party fraud detection systems to identify suspicious patterns across the platform.
• Regulatory and Law Enforcement Authorities: RA66 will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by a valid legal order, court directive, or regulatory mandate. RA66 will notify affected Members where legally permitted to do so.
• Business Succession: In the event of a merger, acquisition, or transfer of business operations, personal data may be transferred to the acquiring entity, who will be bound to treat data in accordance with this Policy or a materially equivalent standard.

All third-party Data Processors engaged by RA66 are subject to written data processing agreements that restrict their use of personal data to the defined processing purpose only, and mandate appropriate security standards.

RA66 operates with infrastructure and third-party service providers that may be located in jurisdictions outside of Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection, RA66 ensures that appropriate safeguards are in place prior to any such transfer.

Safeguards employed by RA66 for international data transfers include:

• Standard Contractual Clauses (SCCs) or equivalent data transfer agreements with receiving entities;
• Binding Corporate Rules where applicable within affiliated group entities;
• Verification that the receiving jurisdiction provides an adequate level of protection as recognised under applicable data protection frameworks.

RA66 retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

RA66 uses cookies and similar tracking technologies to operate and improve the platform experience. A cookie is a small text file stored on your device by your browser when you access ra66.cam. Cookies do not contain executable code and cannot access other files on your device.

The categories of cookies used by RA66 are as follows:

• Essential Cookies: Strictly necessary for the platform to function — including session authentication tokens, load-balancing identifiers, and security cookies. These cannot be disabled without impairing your ability to use ra66.cam.
• Functional Cookies: Used to remember your preferences such as language settings, interface layout choices, and notification preferences across sessions.
• Analytics Cookies: Used to collect aggregate, anonymised data about how Members navigate and interact with ra66.cam. This data is used exclusively for platform improvement purposes and is not linked to individual identities.
• Security & Fraud Detection Cookies: Used to identify and flag suspicious login behaviour, unusual session patterns, and potential bot activity to protect the integrity of the platform.

Subject to applicable laws and certain regulatory constraints, you have the following rights in respect of your personal data held by RA66. To exercise any of these rights, please contact our support team at [email protected].

RA66 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified of the extension and reason within the initial 30-day window.

ra66.cam is strictly an adults-only platform. Access is prohibited to any person under the age of 21. RA66 does not knowingly collect, process, or retain personal data from individuals under this age threshold.

If RA66 becomes aware — through KYC verification, account investigation, or any other means — that a Minor has registered or used an account, that account will be immediately suspended, all data associated with the minor will be deleted, and any deposited funds will be returned via the original payment method following verification.

RA66 employs a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your browser and ra66.cam is encrypted using TLS 1.2 or higher with 256-bit cipher strength.
• Password Hashing: Account passwords are never stored in plaintext. RA66 uses a strong one-way hashing algorithm with individual salts to store password credentials securely.
• Access Controls: Access to personal data within RA66's systems is restricted on a role-based, need-to-know basis. All internal access events are logged and monitored.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts for an additional layer of login security. RA66 internal systems require 2FA for all privileged access.
• Intrusion Detection & Monitoring: RA66's infrastructure is continuously monitored for anomalous activity, with automated alerts and incident response protocols in place for potential security events.
• Secure Document Storage: KYC documents and identity data are stored in encrypted, access-controlled storage environments separate from general platform databases.

While RA66 employs industry-standard security measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and freedoms, RA66 will notify affected Members and relevant supervisory authorities in accordance with applicable notification obligations.

ra66.cam may contain references to or integrations with third-party services, including game studio software, payment gateways, and customer support platforms. This Privacy Policy applies solely to data processed by RA66 and does not extend to any third-party entity's data practices.

RA66 cannot be held responsible for the privacy practices of third-party services. Where you interact with a third-party interface embedded within ra66.cam — such as a live game studio environment — that interaction may be governed by the third party's own privacy policy. We encourage you to review the applicable policies of any third party whose services you use.

RA66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. The date of the most recent revision is displayed prominently at the top of this page.

Where material changes are made to this Policy — particularly changes that affect how we use your personal data or the rights available to you — RA66 will notify active Members via their registered email address or through a prominent in-platform notification at least 7 days prior to the changes taking effect, where reasonably practicable.

Your continued use of ra66.cam following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any changes, you must cease using the platform and may request account closure in accordance with the procedure set out in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the data rights described in Section 11, please contact the RA66 data team through the following channel:

For general platform enquiries, technical support, or account assistance, you may also use the live chat feature available directly on ra66.cam at any time.

For enquiries related to responsible gambling, self-exclusion, or deposit limit tools, please visit our dedicated Responsible Gambling page. For the full terms governing your use of RA66, please refer to our Terms & Conditions.