rafi88 Official Privacy Policy

Rafi88 Privacy Policy – Personal Data Protection Commitment Malaysian Players

Rafi88 takes the protection of your personal data very seriously. This document clearly outlines how we collect, use, store, and safeguard your information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. Your privacy is not merely a legal obligation for rafi88 — it is a trust we uphold every single day.

Updated: January 2026
Bahasa Malaysia
Malaysia PDPA 2010
Data Protection Summary
256-bit SSL protects all data
Compliant with Malaysia's PDPA 2010
Data is never sold to third parties
You have the right to access & delete your data
Essential cookies only
Users aged 18 and above only

Rafi88's Six Pillars of Data Protection

The core principles that shape how rafi88 handles every Malaysian player's personal data responsibly.

Bank-Grade Data Security
All personal data and financial transactions on rafi88 are protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia. This means that any information you send to rafi88's servers cannot be read by unauthorised parties during transmission.
256-bit SSL · Full Encryption
Full Compliance with Malaysia PDPA 2010
rafi88 is fully compliant with Malaysia's Personal Data Protection Act (PDPA) 2010. This means our data collection is limited to legitimate needs, the purposes for use are clearly stated, and you as the data owner have full rights over the information we hold in the rafi88 system.
PDPA 2010 · Legally Compliant
Data Never Sold to Third Parties
rafi88 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes without your explicit consent. Your data is only shared with a limited set of third parties necessary for platform operations, such as payment providers and game providers, under strict confidentiality agreements.
No Data Selling · Restricted
Your Full Rights Over Your Own Data
As a rafi88 user, you have the right to access, correct, transfer, and request the deletion of your personal data at any time. Data rights requests can be submitted to the rafi88 team by email and will be processed within 14 business days in accordance with PDPA requirements.
Access · Correct · Delete
Reasonable Data Retention Periods
rafi88 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. Active account data is retained for the duration the account remains active. Following account closure, data is kept for the minimum period required by Malaysian law before being securely deleted.
Minimum Retention Period · Secure Deletion
Immediate Notification in the Event of a Breach
In the event of a data security breach that may affect your personal data, rafi88 is committed to notifying affected members and the relevant authorities in accordance with legal requirements within the stipulated timeframe. Transparency remains our commitment even in difficult circumstances.
Instant Notifications · Transparent
Policy Contents

Updated: January 2026
support@rafi88.online

This policy complies with Personal Data Protection Act (PDPA) Malaysia 2010 and its relevant provisions.

Rafi88 Full Privacy Policy

This document outlines rafi88's privacy practices. By using the rafi88 platform, you agree to the collection and use of information as described in this policy.

Important Note: This Privacy Policy should be read together with rafi88 Terms & Conditions. If you have any questions about how we handle your personal data, please do not hesitate to reach out to us at support@rafi88.online before using the platform.

1

Introduction & Scope of Privacy Policy

Rafi88 (referred to as "we", "rafi88" or "the Platform") is an online betting platform operator serving Malaysia through rafi88.online. We are committed to protecting the privacy and personal data security of every user on our platform.

This Privacy Policy clearly explains:

  • The types of personal data we collect from rafi88 platform users.
  • The purposes and legal basis for collecting and processing that data.
  • How we store, protect, and in certain circumstances, share your data.
  • Your rights as a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010.
  • How you can contact us to exercise those rights.

This policy applies to all users of the rafi88 platform — including website visitors, prospective members, and registered members. Continued use of the rafi88 platform after any changes to this policy take effect will be considered acceptance of those changes.

2

Personal Data We Collect

Rafi88 only collects data that is necessary to provide our platform services safely and effectively. The following are the categories of data we collect:

Data Categories Example Information How Collected
Identity Data Full name, MyKad/passport number, date of birth, gender Registration form, KYC verification
Contact Data Malaysian phone number, email address, residential address Registration form, profile updates
Financial Data Payment methods (TNG, DuitNow, GrabPay, FPX), transaction history, account balance Deposit and withdrawal transactions
Gaming Data Betting history, games played, wins and losses, session duration Gaming activity on the platform
Technical Data IP address, device type, operating system, web browser, cookie data Automated server logs, cookies
Communications Data Customer support correspondence, complaints, feedback Live chat, email, WhatsApp

Sensitive Data: rafi88 does not collect sensitive data such as health information, political affiliations, or religious beliefs unless you voluntarily disclose it in the context of a customer support request. Such data will be handled with a higher level of protection.

3

Purpose of Personal Data Use

Rafi88 uses your personal data only for the following purposes, which are lawful under Malaysia's PDPA:

  • Account management: Creating, verifying, and maintaining your rafi88 account, including the login process, identity verification, and password management.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), and handling your winnings withdrawals securely and efficiently.
  • Provision of gaming services: Giving you access to all games on rafi88, including slots, football, badminton, poker, jackpot, and Live Casino.
  • Customer support: Handling your enquiries, complaints, and support requests via live chat, email, or WhatsApp.
  • Security & fraud prevention: Detecting and preventing fraudulent activity, money laundering, multiple account ownership, and violations of our terms of use.
  • Legal compliance: Fulfilling reporting and compliance obligations required under Malaysian law, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
  • Platform improvements: Analysing aggregated, anonymised usage patterns to improve the user experience, enhance platform performance, and develop new features.
  • Service communications: Sending important notifications relating to your account, changes to our terms, security updates, and promotional information that you have consented to receive.

Rafi88 will not use your data for any purpose not stated above without first obtaining your explicit consent.

4

Data Sharing with Third Parties

Rafi88 does not sell, rent, or disclose your personal data for third-party marketing purposes. In limited and necessary circumstances, rafi88 may share your data with the following categories of third parties, all under strict confidentiality agreements:

  • Payment service providers: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX providers (including Maybank2u and CIMB Clicks) to process your financial transactions. Only data necessary for transaction processing is shared.
  • Game providers: Pragmatic Play, NetEnt, Playtech, Play'n GO, Microgaming, and other providers required to deliver games to you. Data shared is limited to what is necessary for the technical operation of the games.
  • Technology service providers: Companies that provide technical infrastructure, cloud services, and security systems for the rafi88 platform's operations, all bound by strict data processing agreements.
  • Malaysian authorities: rafi88 will disclose data to Malaysian authorities where required by law or court order — including the Personal Data Protection Department, Bank Negara Malaysia, or other law enforcement agencies.

International Data Transfers: Some of rafi88's technical service providers may operate outside Malaysia. In such cases, rafi88 ensures that any data transfers are carried out with protections equivalent to Malaysia's PDPA standards, including through appropriate data transfer agreements.

5

Data Security & Protection Measures

Rafi88 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or unlawful disclosure:

  • 256-bit SSL encryption: All communications between your device and rafi88's servers are encrypted using TLS protocol with 256-bit keys — the highest standard used in the banking industry.
  • Database-level data encryption: Sensitive data such as passwords and financial information is stored in encrypted form within rafi88's databases — even if an unauthorised party were to gain access to the database, the data would remain unreadable.
  • Two-factor authentication (2FA): 2FA is available on all rafi88 accounts, adding an extra layer of security beyond your password.
  • 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity and any unauthorised access attempts.
  • Internal access controls: rafi88 staff only have access to the data necessary to perform their duties. All access to player data is logged and audited on a regular basis.
  • Regular security assessments: rafi88 conducts regular penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system is completely impenetrable. You also play an important role in keeping your data safe by keeping your rafi88 account password and login details confidential.

6

Your Rights Under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a data subject have the following rights regarding the personal data held by rafi88:

Right to Access
You have the right to request a copy of the personal data we hold about you. rafi88 will provide this information within 14 business days from the date the request is received.
Right to Correction
If the personal data held about you in rafi88's systems is inaccurate or incomplete, you have the right to request a correction. Most information can be updated directly in your account settings.
Right to Erasure
You may request the deletion of your personal data. However, this right is subject to Malaysian legal data retention obligations, which may require us to retain certain data for a prescribed minimum period.
Right to Object
You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing. You may withdraw your consent to marketing communications at any time through your account settings.
Data Portability Rights
You have the right to receive the personal data you have provided to us in a machine-readable format and to transfer it to another data controller where technically feasible.
Right to Restrict Processing
In certain circumstances, you have the right to request a restriction on the processing of your data — for example, while you are disputing the accuracy of your data or objecting to processing while we are reviewing your request.

To exercise any of the above rights, contact us at support@rafi88.online, stating the right you wish to exercise along with your account details for identity verification. We will process your request within 14 business days and inform you of the action taken.

7

Cookie & Tracking Technology Policy

Rafi88 uses cookies and similar technologies to enhance the user experience and ensure the platform functions correctly. The following types of cookies are used on rafi88:

  • Essential Cookies (Required): These cookies are essential for the basic operation of the rafi88 platform — including login authentication, session security, and critical platform functions. They cannot be disabled without affecting the core functionality of the platform.
  • Performance & Analytics Cookies: These cookies help us understand how players use the rafi88 platform — which pages are visited most, time spent on each section, and any errors encountered. This information is used in aggregated, anonymised form to improve the platform.
  • Preference Cookies: These cookies remember your preferences — such as language, favourite game type, and display settings — so you do not have to reconfigure them each time you use the rafi88 platform.
  • Security Cookies: Cookies used to detect and prevent fraudulent activity, including suspicious login attempts and system manipulation attempts.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the rafi88 platform. For more information on managing cookies, refer to your web browser's help documentation.

8

Data Storage & Retention Period

Rafi88 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under applicable Malaysian law:

  • Active account data: Retained for as long as your account remains active on rafi88. This data is required to continuously provide platform services to you.
  • Data after account closure: After account closure, rafi88 retains financial transaction records, game history, and identity verification documents for the minimum period required under Malaysian law — typically between 5 and 7 years for financial records, in compliance with AML regulations and tax requirements.
  • Support communication logs: Retained for 2 years after the last interaction for reference and service quality management purposes.
  • Technical data and server logs: Retained for 90 days for technical diagnostics and security purposes.

Once the relevant retention period has ended, your data will be securely deleted using methods that ensure it cannot be recovered. rafi88 conducts regular data retention reviews to ensure we do not hold data longer than necessary.

9

Child Protection & Age Restriction

The rafi88 platform is for users aged 18 and above only. rafi88 does not knowingly collect any personal data from individuals under the age of 18.

If we discover that personal data belonging to a minor (under 18 years of age) has been collected without our knowledge, we will immediately take the following steps:

  • Closing the associated account immediately.
  • Deleting all such children's personal data from our systems.
  • Returning any remaining account balance to the original deposit source where identifiable.
  • Reporting the incident to the relevant authorities where required.

If you suspect that a minor has registered or is using the rafi88 platform, please contact us immediately at support@rafi88.online so we can take the appropriate action.

Parental Responsibility: Parents and guardians are responsible for ensuring that their underage children do not access the rafi88 platform. rafi88 encourages the use of parental control software on devices shared with children.

10

Changes to This Privacy Policy

Rafi88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or platform improvements. When material changes are made to this policy, we will:

  • Updating the "Last Updated" date at the top of this policy.
  • Sending email notifications to all registered rafi88 members affected by the changes.
  • Displaying a clear notification banner on the rafi88 platform upon login.
  • For highly significant changes, we may request your renewed consent before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how rafi88 protects your information. Continued use of the platform after changes take effect will be considered acceptance of the updated policy.

11

Contact Us About Data Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rafi88 handles your personal data, we encourage you to reach out to us directly:

  • Privacy Email: support@rafi88.online — please include "Privacy Enquiry" in the subject line of your email to ensure it reaches the right team.
  • 24/7 Live Chat: Available directly on the rafi88 platform for immediate enquiries regarding your data privacy.
  • WhatsApp: Number available after logging in to your rafi88 account.

Rafi88 will endeavour to respond to all privacy-related enquiries within 3 working days and resolve data rights requests within 14 working days.

If you are not satisfied with our response, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP) through their official channels. However, we encourage you to contact rafi88 first so we have the opportunity to address your concerns directly.

Why Data Privacy Matters to rafi88 & Malaysian Players

In today's online betting landscape, trust is the most valuable currency there is. Malaysian players who choose rafi88 as their betting platform are not only entrusting us with their money — they are also entrusting us with highly sensitive personal data. Identity information, phone numbers, transaction history, gameplay patterns — all of this is data that, if not properly protected, can cause serious harm to the individuals concerned.

That is why rafi88 has never treated data protection as a mere compliance requirement. For us, it is a concrete expression of the respect and responsibility we hold towards every player who trusts this platform. When a player in Kuala Lumpur makes a deposit via Touch 'n Go eWallet, or a player in Johor Bahru withdraws slots winnings through DuitNow, that transaction data must be protected to an uncompromising standard of security — and that is exactly what rafi88 does, every moment, every day.

Malaysia's Personal Data Protection Act (PDPA) 2010 provides an important legal framework for data protection in Malaysia. rafi88 complies fully with the provisions of the PDPA — not out of fear of enforcement, but because we believe these standards reflect best practices in responsible data management. PDPA principles such as purpose limitation, data quality, data security, and the rights of data subjects all align with the core values that guide rafi88's operations.

One of the most important aspects of rafi88's privacy policy is being transparent about what we do not do with your data. rafi88 does not sell players' personal data to third parties for marketing purposes. You will never receive unexpected calls from unknown companies offering financial products because they purchased your data from rafi88. This does not happen at rafi88, and it never will for as long as we operate — because it goes against the core values of trust that form the foundation of our relationship with Malaysian players.

Rafi88's technical data security is built on a defence-in-depth approach. 256-bit SSL encryption at the transport layer ensures that data travelling between your device and our servers cannot be intercepted. Database-level encryption protects stored data even in the event of a serious security breach. Strict internal access controls ensure that only staff with a legitimate operational need can access specific data categories. 24/7 security monitoring ensures suspicious activity is detected and addressed promptly.

Your rights under Malaysia's PDPA are something rafi88 treats as an active obligation, not merely rights that exist on paper. If you want to know what data we hold about you, you can request it and we will provide it within 14 working days. If you find any inaccurate information, we will correct it promptly. If you decide to close your account and request data deletion, we will do so within the period permitted by our legal obligations.

Rafi88 believes the era in which digital companies could collect data without limits, use it however they pleased, and remain unaccountable to their users is over. Malaysian players today are increasingly aware of their data rights, and they deserve a platform that respects those rights. rafi88 is committed to remaining a trusted platform — not only in terms of fair play and payout speed, but also in the careful and responsible protection of personal data.

Your Rights at a Glance

A summary of your personal data rights as a rafi88 player under Malaysia's PDPA 2010.

Right to Know
You have the right to know what data we hold about you. Submit a request to support@rafi88.online and we will provide it within 14 working days.
Right to Rectification
If any of your information is incorrect, you can update it directly in your rafi88 account settings, or contact our support team for corrections that require verification.
Right to Request Erasure
You may request the deletion of your personal data, subject to minimum legal retention obligations under Malaysian law.
Right to Object
You may object to your data being used for direct marketing purposes. Unsubscribe from rafi88 marketing communications at any time via email or your account settings.
Data Portability Rights
Request your data in a machine-readable format for transfer to another platform, where it is technically feasible and practical.
Right to Lodge a Complaint with the JPDP
If you are not satisfied with rafi88's response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPA) through their official channels.

Related rafi88 Documents

This Privacy Policy should be read alongside rafi88's other policy documents for a complete picture.

Terms & Conditions
Full terms of use for the rafi88 platform — registration, deposits, withdrawals, bonuses, and game rules.
Read Terms & Conditions
Responsible Gaming
Self-limit tools, self-exclusion options, and support resources to keep betting fun and in control.
Learn More
Frequently Asked Questions
Answers to the most frequently asked questions about accounts, deposits via TNG & DuitNow, withdrawals, and rafi88 games.
View All FAQs
About Us
Get to know rafi88 better — our history, mission, values, and commitment to over 250,000 Malaysian players.
About rafi88

FAQ — rafi88 Data Privacy

The most frequently asked questions from Malaysian players about personal data protection at rafi88.

No. rafi88 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes. Your data is only shared in strictly limited circumstances necessary for platform operations — such as with payment providers (TNG, DuitNow, GrabPay, FPX) to process your transactions, and with game providers to deliver gaming services. All such third parties are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

To request a copy of the personal data rafi88 holds about you, send an email to support@rafi88.online with the subject line "Data Access Request — [your full name]". Please include your rafi88 account number and a copy of your identity document (MyKad or passport) for security verification purposes. rafi88 will process your request and provide the requested information within 14 business days. Data will be sent securely to your registered email address.

Following account closure, rafi88 will retain your personal data for the minimum period required by Malaysian law — typically between 5 and 7 years for financial records, to meet AML compliance and tax requirements. This is a legal obligation that cannot be waived. Data that is no longer required for legal purposes will be securely deleted once the minimum retention period has expired. If you would like to know more about what happens to your specific data after account closure, please contact support@rafi88.online.

Yes. You can unsubscribe from rafi88 marketing communications at any time in one of two ways: click the "unsubscribe" link found at the bottom of any marketing email you receive from rafi88, or log in to your rafi88 account and update your communication preferences in your account settings. Unsubscribe requests will be processed within 3 business days. Please note that unsubscribing from marketing emails will not stop essential operational emails related to your account, such as transaction confirmations, security notices, and customer support communications.

Your betting history and gaming activity on rafi88 are confidential and will not be shared with any third party for commercial purposes. This information may only be shared in the following limited circumstances: with relevant game providers for technical and dispute resolution purposes, with Malaysian authorities where required by law or court order, or as aggregated and anonymised data in industry reports that cannot be used to identify any individual. The privacy of your gaming history is strictly protected by rafi88.

If you suspect your rafi88 account has been accessed without authorisation, take the following steps immediately: First, log in to your account and change your password right away to a strong, unique one. Second, enable two-factor authentication (2FA) in your account settings if you have not already done so. Third, review your login history and account activity to identify any unauthorised transactions or actions. Fourth, contact rafi88 customer support immediately via live chat or email at support@rafi88.online to report the incident. The rafi88 security team will investigate and take the necessary steps to protect your account and funds.

Your Data Is Safe at rafi88 — Join Us Today

Register your rafi88 account with complete confidence. Your data is protected by 256-bit SSL encryption, compliant with Malaysia's PDPA, and never sold to any third party. Deposits from RM 10 via TNG or DuitNow.

256-bit SSL protected data · PDPA Malaysia compliant · No data sold · 18+ only

Bahasa Melayu