Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how Raja404 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access and use the Raja404 online casino and sports betting platform available at raja404.cam.

Raja404 is committed to protecting your privacy and handling your personal data responsibly and transparently. This Policy is intended to inform you clearly about our data practices so that you can make informed decisions about the information you provide when registering and using our Platform.

By creating an account on Raja404 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means by which Personal Data is processed. Raja404 is the Data Controller for Personal Data collected via the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller pursuant to written instructions.
• "Sensitive Personal Data" means Personal Data that reveals racial or ethnic origin, political opinions, religious beliefs, health information, financial account details, or biometric data used for identification.
• "Cookie" means a small text file placed on your device by a web server when you visit a website, used to recognise your device on subsequent visits and to facilitate platform functionality.
• "KYC" means Know Your Customer — the identity and age verification process required for all Raja404 account holders prior to withdrawal.

Data Controller

Raja404 is the Data Controller responsible for the Personal Data collected and processed through the raja404.cam Platform. As Data Controller, Raja404 determines the purposes for which your Personal Data is collected and the means by which it is processed.

Where Raja404 engages third-party service providers to process Personal Data on its behalf — such as payment processors, identity verification providers, or analytical services — those providers act as Data Processors under written data processing agreements that impose obligations consistent with this Privacy Policy.

Personal Data We Collect

Raja404 collects the following categories of Personal Data from Players and Platform visitors. We collect only the minimum data necessary for the purposes described in this Policy.

How We Collect Your Data

Raja404 collects Personal Data through the following channels and mechanisms:

5.1 Directly From You

• When you complete the account registration form, providing your name, email address, date of birth, and contact details.
• When you submit KYC documentation through the secure upload portal within your account settings.
• When you initiate deposit or withdrawal transactions via Malaysian payment methods (Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, GrabPay, Boost, Public Bank, Hong Leong Connect) or cryptocurrency.
• When you contact our customer support team via live chat, email, or ticket submission.
• When you interact with promotional offers, loyalty programme features, or VIP tier applications.

5.2 Automatically During Platform Use

• Technical Data (IP address, device fingerprint, session data) is collected automatically via server logs and session management systems each time you access the Platform.
• Cookies and similar tracking technologies collect analytical data about how you navigate and use the Platform. See Section 8 for full cookie details.
• Behavioural Data relating to your gaming activity, bet history, and responsible gambling tool usage is recorded automatically by the Platform's game engine and account management system.

5.3 From Third-Party Sources

• Identity verification providers may supplement the information you provide with publicly available records to assist in confirming your identity during KYC.
• Payment processors may pass transaction reference data and verification outcomes to Raja404 in connection with deposit and withdrawal processing.
• Fraud prevention and AML screening services may provide risk signals based on data they hold about patterns associated with your IP address or device, without disclosing any underlying personal records from other platforms.

Purposes of Processing & Legal Bases

Raja404 processes your Personal Data only where a valid legal basis exists. The following table sets out the primary purposes for which we process Personal Data and the corresponding legal basis for each purpose.

Raja404 does not use your Personal Data for any purpose that is incompatible with the purposes listed above. Where we intend to process your data for a materially new purpose, we will notify you in advance and, where required, seek your consent.

Data Sharing & Disclosure

Raja404 does not sell, rent, or trade your Personal Data to third parties. We may share your Personal Data with the following categories of recipients only where strictly necessary and subject to appropriate safeguards:

7.1 Payment Processors

To process your deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency rails, Raja404 shares the minimum transaction data necessary with each payment processor. All payment processors engaged by Raja404 are contractually obligated to handle transaction data in accordance with applicable financial data security standards.

7.2 Identity Verification Providers

KYC document data is shared with licensed identity verification providers solely for the purpose of confirming your identity and age. These providers act as Data Processors under binding data processing agreements and are prohibited from using your KYC data for any purpose other than verification.

7.3 Regulatory and Law Enforcement Authorities

Raja404 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive. We will, to the extent permitted by law, notify you of any such disclosure unless prohibited from doing so.

7.4 Fraud Prevention and AML Screening Services

To protect the integrity of the Platform and comply with anti-money laundering obligations, Raja404 may share relevant transaction and identity indicators with licensed fraud prevention and AML screening services. Any data shared for this purpose is subject to strict contractual restrictions on use and further disclosure.

Cookies & Tracking Technologies

Raja404 uses cookies and similar browser-based storage technologies to facilitate Platform functionality, maintain your login session, and collect analytical data that helps us improve the user experience for Malaysian players.

You may manage cookie preferences through your browser settings. Disabling essential and security cookies will impair or prevent access to the Platform. Disabling analytical and preference cookies will not affect your ability to use core Platform features but may result in a less personalised experience.

Data Security

Raja404 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:

• Transport Encryption: All data transmitted between your device and Raja404 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all Platform pages, API calls, and payment flows.
• Data-at-Rest Encryption: Personal Data stored on Raja404 servers — including KYC documents, financial records, and account data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised Raja404 personnel who require it to perform their designated functions. Role-based access controls and audit logging are enforced across all internal systems.
• Infrastructure Security: Raja404 servers are hosted in secure data centres with physical access controls, redundant network architecture, and continuous intrusion detection monitoring.
• Penetration Testing: Raja404 commissions periodic independent security assessments and penetration testing to identify and remediate vulnerabilities.

Notwithstanding the measures described above, no data transmission or storage system can guarantee absolute security. In the event of a Personal Data breach that poses a risk to your rights and interests, Raja404 will notify affected individuals and relevant authorities in accordance with applicable legal obligations.

Data Retention

Raja404 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes and enforce agreements. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account with Raja404 and for a period of up to five (5) years following account closure, to satisfy legal and regulatory record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping regulations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer where a dispute or formal complaint remains open.
• Analytical Data: Aggregated and anonymised within 24 months of collection and retained in anonymised form indefinitely for platform improvement purposes.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. KYC documents are shredded or cryptographically destroyed upon the expiry of the mandatory retention period.

Your Rights as a Data Subject

Subject to applicable law, you have the following rights with respect to your Personal Data held by Raja404. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the Personal Data Raja404 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. For account-level data (name, address, contact details), you may also update records directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request the deletion of your Personal Data. This right is subject to legal retention obligations — we may be required to retain certain records even following an erasure request.
• Right to Restriction of Processing: You may request that Raja404 limit the processing of your Personal Data in certain circumstances, for example while the accuracy of data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case we will assess whether our legitimate interests are overridden by your rights and interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

Third-Party Services

The Raja404 Platform may contain references to third-party services including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect, as well as game content providers. When you interact with these third-party services, their own privacy policies govern the collection and use of any data they receive.

Raja404 does not accept responsibility for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party providers whose services you use in connection with your Raja404 account. Our selection of payment and game partners is based in part on their commitment to maintaining appropriate data security standards.

Children's Privacy — 21+ Only

Raja404 is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect or process Personal Data from any individual under the age of 21. The Platform's minimum age requirement is enforced through mandatory KYC age verification during the account registration process.

If Raja404 becomes aware that Personal Data has been collected from an individual under the age of 21, that account will be closed immediately, all associated data will be deleted in accordance with our Data Retention Policy, and any deposited funds will be returned to the verified payment method after completing appropriate AML checks.

Amendments to This Privacy Policy

Raja404 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory guidance. Where a material change is made to this Policy, Raja404 will provide reasonable advance notice to registered Players via email to the address on file, or via a prominent notice on the Platform.

The "Last updated" date at the top of this page will be revised each time the Policy is modified. We encourage you to review this Policy periodically to stay informed about how Raja404 protects your Personal Data. Your continued use of the Platform following any update to this Policy constitutes your acknowledgement of the revised terms.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which Raja404 handles your Personal Data, please contact our Privacy Team using the details below. All privacy-related enquiries will be handled by a designated privacy officer.

For information about responsible gambling tools, self-exclusion options, or deposit limit settings, please visit our Responsible Gambling page. For a full description of your account terms and betting rules, please see our Terms & Conditions.