Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how rajabotak ("Company", "we", "us", "our") — operator of the online gaming and sports betting platform accessible at rajabotak.cam — collects, uses, stores, discloses, and protects the personal data of individuals ("Members", "Users", "you") who access or use the Platform.

Rajabotak is committed to handling your personal data responsibly, lawfully, and transparently. We recognise that data privacy is a fundamental right, and we have designed our data practices to respect that right at every point — from registration through to account closure.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. By registering an account or continuing to use the Platform after this Policy is published, you acknowledge that you have read and understood its contents.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings specified below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living individual, whether directly or in combination with other available information.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. Rajabotak is the Data Controller in respect of Member personal data collected through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller, under contractual obligation and instruction.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" — Know Your Customer; the identity verification process through which Members submit documentary proof of identity, age, and address.
• "Cookies" — Small data files stored on a user's device by a web browser upon visiting the Platform, used to facilitate session management, analytics, and personalisation.

Data We Collect

Rajabotak collects the minimum personal data necessary to provide gaming services, process financial transactions, verify identity, and comply with regulatory requirements. The categories of personal data we collect include:

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) unless strictly required by applicable regulatory obligations and with your explicit consent where required.

How We Collect Data

Rajabotak collects personal data through the following means:

• Direct Interactions: When you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automated Technical Means: When you access and navigate the Platform, our servers automatically collect technical and usage data including IP addresses, device information, and session activity logs.
• Cookies and Similar Technologies: As described in Section 8of this Policy, we use cookies and similar tracking technologies to facilitate session management, remember preferences, and analyse Platform usage patterns.
• Third-Party Service Providers: We may receive identity verification data from our KYC and payment processing partners, solely for the purposes of verifying your identity and processing transactions.
• Responsible Gambling Monitoring: Our responsible gambling systems may generate data points based on your usage patterns, for the purpose of identifying and flaging potential problem gambling behaviour in accordance with ourResponsible Gambling Policy.

Legal Basis for Processing

Rajabotak processes your personal data only where a valid legal basis exists to do so. The legal bases we rely upon are:

• Contractual Necessity: Processing is necessary to fulfil our obligations under the Terms & Conditions you agree to upon registration — including account management, payment processing, and customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) rules, Know Your Customer (KYC) regulations, and responsible gambling requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service quality improvement, provided that such interests are not overridden by your rights and interests.
• Consent: Where we send you marketing or promotional communications, we do so only with your prior consent. You may withdraw consent at any time by updating your Account preferences or contacting our support team.

How We Use Your Data

Rajabotak uses the personal data we collect for the following purposes:

• To create, manage, and maintain your Account on the Platform.
• To process deposits and withdrawals via your chosen payment method — including Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and cryptocurrency channels.
• To verify your identity and age in compliance with KYC requirements, ensuring that only eligible individuals aged 21 and above hold Accounts.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited activities.
• To monitor for responsible gambling indicators and apply protective measures where appropriate, including account restrictions or self-exclusion.
• To provide customer support and respond to your queries, complaints, and service requests.
• To send you transactional notifications related to your Account, including deposit confirmations, withdrawal updates, and security alerts.
• To send you promotional and marketing communications regarding rajabotak offers, bonuses, and VIP programme updates — but only where you have provided consent to receive such communications.
• To analyse and improve the Platform's features, performance, and user experience, using aggregated and anonymised usage data where possible.
• To comply with legal obligations, including responding to regulatory inquiries, court orders, or law enforcement requests.

Data Sharing & Disclosure

Rajabotak does not sell, rent, or trade your personal data to third parties. We may, however, share personal data with the following categories of recipients in the circumstances described:

• Payment Service Providers: Personal data necessary to process transactions is shared with our payment partners — including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking networks (Maybank, CIMB, Public Bank, Hong Leong via FPX/DuitNow), and cryptocurrency processors — solely to facilitate your deposits and withdrawals.
• KYC and Identity Verification Partners: Document data submitted during the KYC process may be shared with certified third-party identity verification service providers engaged by rajabotak to verify your identity.
• Technology and Hosting Providers: Our Platform is hosted on secure server infrastructure provided by third-party cloud and technology providers, who process data on our behalf under contractual data processing agreements.
• Game Content Providers: Where rajabotak integrates third-party game content (e.g., live casino providers and slot game suppliers), limited technical data such as session tokens may be shared with those providers to operate the games.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law, legal process, or regulatory instruction.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of the Company's assets, personal data held by rajabotak may be transferred to the acquirer, subject to equivalent data protection obligations.

Cookies & Tracking Technologies

Rajabotak uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device by your browser when you visit the Platform. They do not contain executable code and cannot access other files on your device.

The categories of cookies we use include:

• Strictly Necessary Cookies: Required for core Platform functionality, including session authentication and security. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences — such as language and display settings — to provide a more personalised experience on return visits.
• Analytics Cookies: Used to collect anonymised and aggregated data about how Members interact with the Platform, helping us identify areas for improvement and optimise performance.
• Security and Fraud Prevention Cookies: Used to identify and prevent fraudulent login attempts, account takeover activities, and other security threats.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Rajabotak does not use third-party advertising or behavioural profiling cookies.

Data Retention

Rajabotak retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, in accordance with applicable anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, as required by financial regulatory obligations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the verification process or Account closure, whichever is later.
• Customer Support Correspondence: Retained for three (3) years following the resolution of the relevant query or complaint.
• Technical and Usage Data: Typically retained in identifiable form for up to twelve (12) months, after which it is aggregated or anonymised for analytical purposes.
• Marketing Consent Records: Retained for as long as you maintain an Account, or until you withdraw consent, and for a further three (3) years thereafter as evidence of consent.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised in manner that prevents re-identification.

Data Security

Rajabotak implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive personal data, including KYC documents and financial records, at rest.
• Access controls limiting personal data access to authorised rajabotak personnel who have a legitimate need to process it in the course of their duties.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available to all Members to protect Account access.
• Staff training on data protection obligations and secure data handling practices.
• Incident response procedures in place to detect, contain, and notify affected parties of data security incidents in a timely manner.

Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by rajabotak. You may exercise any of these rights by contacting our Data Protection team at the email address set out in Section 15:

Rajabotak will respond to data rights requests within thirty (30) calendar days of receipt. We may request proof of identity before processing a request to ensure data is not disclosed to an unauthorised party.

Minors & Age Restriction

The rajabotak Platform is strictly for individuals aged21 (twenty-one) years and above. We do not knowingly collect, process, or retain personal data from individuals who are under the age of 21. The minimum age requirement is enforced through our KYC identity verification process.

If rajabotak discovers or is notified that personal data has been collected from an individual who is under 21 years of age, we will immediately close the relevant Account, return any deposited funds (if applicable), and permanently delete all associated personal data from our systems without delay.

If you are a parent or guardian and believe that a minor has registered an Account on the Platform using false age information, please contact our support team at the contact details provided in Section 15 of this Policy.

Third-Party Services & Links

The rajabotak Platform integrates third-party game content, payment gateway services, and analytics tools operated by independent service providers. While we select our third-party partners carefully and require them to comply with appropriate data protection standards, this Privacy Policy does not extend to the independent data practices of those third parties.

Specifically, where you interact with third-party game content — such as live dealer tables or slot games provided by external suppliers — those game sessions may involve the limited transfer of technical session data (such as anonymised player identifiers and game round data) to the respective game provider's servers, as required to operate the games.

Rajabotak does not control the privacy practices of third-party game providers or payment processors and is not responsible for their handling of personal data beyond our contractual requirements. We encourage you to review the privacy policies of any third-party service with which you interact independently of the Platform.

Policy Amendments

Rajabotak reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

Where amendments are material — meaning they significantly affect how we process your personal data or your rights in relation to it — we will provide you with advance notice through a notification posted on the Platform or via email to your registered address, allowing you a reasonable period to review the changes.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree with any amendment, you may exercise your rights as described in Section 11 or request Account closure by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact rajabotak's Data Protection and Support team through any of the following channels:

• Email: [email protected] — Please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24 hours a day, 7 days a week, directly through the Platform interface.
• Response Timeframe: General privacy enquiries will be acknowledged within 5 business days. Formal data rights requests will be responded to within 30 calendar days.