Data Protection

Privacy Policy rajawin — Your Personal Data Protection

At rajawin, your privacy is more than a legal obligation — it is our commitment. We ensure every piece of information you share with us is handled with complete integrity, security, and transparency. Read this policy to understand exactly how your data is used and protected.

Updated: 1 January 2026
256-bit Encryption

All data is protected with the highest-grade SSL encryption.

No Data Sales

Your information is not sold or shared for third-party advertising purposes.

Your Full Control

You have the right to access, correct, or delete your personal data at any time.

PDPA Compliance

Rajawin complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

RajaWin's Privacy Commitment to You

Six core principles that shape our approach to protecting member personal data.

Secure Data Storage

All your personal information is stored on servers protected with AES-256 encryption and a layered access control system to prevent unauthorised access.

Limited Data Use

Your data is used only for agreed purposes — account management, transaction processing, and improving your user experience. Nothing more.

Notification Controls

You can choose the types of communications you wish to receive from rajawin — promotional emails, transaction notifications, or security updates — according to your preferences.

Real-Time Threat Detection

Our security monitoring system operates 24/7 to detect and block any suspicious activity related to your account before it causes harm.

Data Deletion on Request

When you close your account, your personal data will be deleted or anonymised within the period specified in accordance with applicable legal and regulatory requirements.

Full Transparency

We have nothing to hide. This Privacy Policy is written in clear, plain language so every member knows exactly what happens to their data.

This Privacy Policy explains how RajaWin ("we", "the Company") collects, uses, stores and protects your personal information when you use our platform at rajawin.onl. Please read carefully before registering or using any of our services.

1 Information We Collect

Rajawin collects various types of information depending on how you interact with our platform. Generally, there are three main categories of data we collect:

1.1 Information You Provide Directly

  • Full name as stated on your identity document
  • Email address and mobile phone number
  • Date of birth and gender
  • Current residential address
  • Identity card number (MyKad) or passport for the KYC process
  • Payment method details such as registered bank account numbers or e-wallet information

1.2 Information Collected Automatically

  • IP address and approximate location based on IP
  • Device type, operating system, and web browser version
  • Session data and activity logs within the platform
  • Wagering history and financial transactions
  • Login timestamps and gaming session duration

1.3 Information from Third Parties

  • Identity verification data from certified KYC providers
  • Payment verification details from approved payment processors
  • Blacklist screening data from fraud prevention agencies
Data Categories Example Primary Purpose
Identity Name, IC, date of birth Account verification & KYC
Contact Email, phone number Communication & security
Finance Bank account, transaction history Deposit & withdrawal processing
Technical IP, device, activity logs Security & platform improvements
Behaviour Game history and preferences Personalisation of user experience

2 How We Use Your Data

Every piece of data collected is used for a clear and legitimate purpose. rajawin will not use your information for purposes other than those stated here without obtaining your consent first.

  • Account Management: Create, verify, and manage your account including the KYC process required by law.
  • Transaction Processing: Process deposits, withdrawals, and all financial activity securely and accurately.
  • Platform Security: Detect, investigate, and prevent fraud, money laundering, and platform abuse.
  • Customer Support: Resolve enquiries, complaints, and technical issues you report to our support team.
  • Service Communications: Sending important notifications related to your account, security, and policy changes.
  • Marketing (with consent): Send promotional information, bonuses, and exclusive offers — only if you have agreed to receive them.
  • Legal Compliance: Meet legal obligations, regulatory requirements, and directives from relevant authorities.
  • Product Improvement: Analyse usage patterns to improve the platform's design, performance, and overall experience.
Our commitment: We will not sell, rent, or trade your personal information to any third party for their own marketing purposes. Full stop.

3 Information Sharing with Third Parties

Rajawin only shares your personal information in limited and controlled circumstances. We ensure that all third parties receiving your data are bound by the same confidentiality and data protection obligations that meet our standards.

Parties That May Receive Your Data:

  • Payment Providers: Payment processors and financial institutions required to complete your transactions — only the minimum necessary data is shared.
  • KYC Providers: Certified identity verification service providers engaged to meet regulatory compliance requirements.
  • Game Providers: Game studios and content providers that operate games within the rajawin platform — game data only, not full personal information.
  • Authorities: Government agencies, regulatory bodies, or law enforcement authorities when we are legally required to do so.
  • Infrastructure Services: Cloud and hosting service providers that help us operate the platform securely.
In all data sharing cases, we only share the minimum information necessary for the relevant purpose. All third parties working with us are required to sign a strict data protection agreement.

4 Cookies & Tracking Technologies

Rajawin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and account security. These cookies cannot be disabled.
  • Functional Cookies: Store your preferences such as language, display settings, and game choices for a smoother experience.
  • Analytics Cookies: Helps us understand how users interact with our platform for improvement purposes. This data is collected in aggregate and does not identify individuals.
  • Performance Cookies: Optimise load times and platform performance based on real usage patterns.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality and you may be unable to log in or use certain features properly.

rajawin does not use third-party cookies for advertising purposes. We do not allow ad networks to collect data about your browsing behaviour through our platform.

5 Your Data Security

Rajawin takes infrastructure security seriously to ensure your personal data is protected at all times. The security measures we implement cover both technical and organisational safeguards.

Technical Security Measures:

  • 256-bit SSL/TLS encryption for all data in transit between your device and our servers
  • AES-256 encryption for sensitive data stored in our databases
  • Two-factor authentication (2FA) for account and admin panel access
  • Intrusion detection system (IDS) and next-generation firewall
  • Periodic security vulnerability scanning by independent experts
  • Encrypted data backups stored at separate locations

Organisational Security Measures:

  • Access to member personal data is granted only to staff who require it for their duties
  • All staff undergo regular data protection training
  • A clear and tested security incident management procedure is in place
  • Internal security audits are conducted every quarter
While we take every measure to protect your data, no system is 100% secure. If you suspect that your account has been accessed without authorization, please contact our support team immediately.

6 Your Rights under PDPA

As a data subject under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding the personal information we hold about you:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct any inaccurate or incomplete information.

Right to Erasure

Request deletion of your data under certain circumstances provided by law.

Right to Restriction

Request that we restrict the processing of your data in certain situations.

Right to Object

Object to the processing of your data for direct marketing purposes.

Right to Portability

Receive your data in a structured, machine-readable format.

To exercise any of the rights above, please contact our Data Protection Officer (DPO) team via email [email protected] or via the platform's live chat. We will process your request within 30 calendar days from the date of receipt.

In some cases, we may need to verify your identity before processing data-related requests to ensure the security of your information.

7 International Data Transfers

As an online platform, some of your data may be processed or stored outside Malaysia — specifically by cloud service providers, game providers, and international payment processors that we work with.

In all cases of cross-border data transfers, rajawin ensures that:

  • The recipient country or entity provides a level of data protection equivalent to or higher than that required by Malaysia's PDPA
  • Legally binding data transfer agreements have been signed with all recipients
  • Additional protection mechanisms such as end-to-end encryption are applied during data transfers
  • Only the minimum necessary data is transferred, in line with the data minimisation principle
International data transfers occur solely for operational purposes and do not involve the sale or commercial sharing of your data with foreign entities.

8 Data Retention Period

Rajawin does not retain your personal data longer than necessary. Retention periods are determined based on the purpose of data collection and applicable legal requirements.

Data Type Retention Period Reason
Active Account Information Throughout the active account period Service operations
Financial Transaction Records 7 years after account closure Financial regulatory compliance
KYC Documents 5 years after account closure Anti-money laundering requirements
Security Logs 2 years Fraud detection & investigation
Marketing Data Until you withdraw consent Based on consent
Analytics Cookie Data 13 months Platform performance analytics

Once the retention period expires, your data will be permanently deleted or anonymised so it can no longer be linked to you as an individual.

9 Children's Privacy

Rajawin services are intended solely for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

If we discover that personal information has been collected from someone under the age of 18 without proper age verification, we will immediately take the following steps:

  • Suspending the relevant account immediately while an investigation is conducted
  • Deleting all personal information of the individual concerned from our systems
  • Refunding any deposits made in accordance with established procedures
  • Reporting the incident to the relevant authorities if required
If you are a parent or guardian and suspect that a child under your care has registered on our platform, please contact us immediately at [email protected] so that we may take the appropriate action.

10 Privacy Policy Amendments

Rajawin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or newly introduced service features.

When we make material changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Displaying a prominent notice on the platform's home page for a minimum period of 14 days
  • Sending email notifications to your registered address for significant amendments
  • In cases where amendments require new consent, we will request your explicit consent before the changes take effect

Continued use of the rajawin platform after the effective date of any amendment is considered acceptance of the new terms. If you do not agree with the changes, you have the right to close your account.

11 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our data protection team is ready to assist.

  • Privacy Email: [email protected]
  • General Support: [email protected]
  • Live Chat: Available 24/7 via the chat icon on the platform
  • Response Time: Within 2 business days for general enquiries; 30 calendar days for formal data rights requests

For formal complaints that cannot be resolved by our team, you have the right to refer the matter to the Personal Data Protection Department (JPDP) Malaysia as the relevant regulatory authority.

We encourage you to contact us first before filing a formal complaint — most issues can be resolved quickly through our responsive support channels.
Join rajawin

Your Data is Secure, Your Entertainment is Guaranteed

With top-tier data protection and a full commitment to your privacy, rajawin is a platform you can trust completely for online entertainment.

256-bit SSL Encryption Malaysia PDPA Compliance 24/7 Privacy Support
Bahasa Melayu