RajaCuan Privacy Policy – Malaysian Player Data Protection

1. Introduction

RajaCuan takes the privacy and personal data protection of Malaysian players very seriously. This Privacy Policy has been drawn up in accordance with the requirements of Personal Data Protection Act 2010 (PDPA Malaysia) and global industry best practice standards for online casino platforms.

We understand that when you entrust your personal information to RajaCuan, you trust us to handle it responsibly. That is why we have written this policy in plain, straightforward language — free of confusing legal jargon — so you know exactly what happens to your data from start to finish.

This policy applies to all users who access the website, register an account, make a deposit, play games, or interact with any aspect of the RajaCuan. It covers all game types, including video slots, live casino, table games, baccarat, roulette, and Sports Betting such as Malaysia Super League football and the EPL.

2. Types of Data We Collect

RajaCuan collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect:

2.1 Personal Identification Data

• Full name as shown on your identification document (MyKad/Passport);
• Date of birth;
• National ID number or passport number;
• Photo of your identification document (for the KYC process);
• Selfie or facial photograph (if required for further verification).

2.2 Contact Data

• Mobile phone number;
• Email address;
• Residential address (if required for verification).

2.3 Financial Data

• Bank account number or e-wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay);
• Records of deposit and withdrawal transactions in Malaysian Ringgit (MYR);
• Your preferred payment method (DuitNow, FPX via Maybank2u or CIMB Clicks);
• Game and betting history.

2.4 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser used;
• Activity logs — pages visited, session duration, games played;
• Cookie data and session identifiers.

3. How We Collect Data

RajaCuan collects personal data through several key channels:

• Directly from You: When you register an account, complete a KYC form, make a deposit, contact customer support, or fill in one of our surveys;
• Automatically: Through cookie technology, server logs, and analytics tools when you browse the RajaCuan platform — this information is collected automatically without any action on your part;
• From Third Parties: Payment providers (Touch 'n Go, GrabPay, FPX, etc.) may share transaction information necessary to verify and process your payments;
• From the Certification Authority: To meet AML (Anti-Money Laundering) compliance requirements, we may verify your information through recognised third-party verification databases.

We do not collect sensitive data such as medical information, religious beliefs, or political views. If you provide information that we have not requested, we will delete it as soon as possible.

4. How We Use Your Data

RajaCuan uses your personal data only for legitimate purposes as stated below. We do not use your data for any other purpose without your consent or a valid legal basis:

• Service Provision: Managing your account, processing deposits and withdrawals in MYR, and enabling you to play games on RajaCuan;
• Identity Verification (KYC): Verifying that you meet the age and identity eligibility requirements before accessing RajaCuan's full range of services;
• Legal Compliance: Fulfilling obligations under Malaysia's PDPA, anti-money laundering (AML) laws, and directives from enforcement authorities;
• Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, multi-account ownership, and other security threats to the RajaCuan platform;
• Service Communications: Sending important account notifications, transaction confirmations, and security updates;
• Marketing (with consent): Sending information on RajaCuan promotions, bonuses, and exclusive offers — only where you have given explicit consent, and you may unsubscribe at any time;
• Platform Improvement: Analysing usage patterns to improve the user experience, technical performance, and game selection on RajaCuan.

5. Data Sharing with Third Parties

RajaCuan does not sell, rent, or trade players' personal data to third parties for their own marketing purposes. However, we may share data in the following limited circumstances:

5.1 Required Service Providers

We work with third-party service providers necessary for RajaCuan's operations, including:

• Payment gateway providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks via FPX);
• Casino game providers (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, and others);
• Cloud service and server infrastructure providers;
• Identity verification service providers for the KYC process.

All of these third-party providers are contractually obligated to protect your data and use it solely for the agreed purposes.

5.2 Legal Requirements

RajaCuan will disclose personal data if required by Malaysian law or upon a lawful directive from an enforcement authority, tribunal, or court with the relevant jurisdiction.

5.3 Protection of Legitimate Interests

In cases involving a serious threat to platform security, suspected fraud, or a financial crime investigation, RajaCuan reserves the right to share the necessary information with the relevant authorities.

6. Data Security Measures

RajaCuan continually invests in security infrastructure to ensure your data remains protected at all times. The key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser and RajaCuan's servers are encrypted using the same technology employed by banks in Malaysia;
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms;
• Strict Access Controls: Only staff with a legitimate operational need are granted access to player data, and all such access is logged and monitored;
• Regular Security Audits: We conduct regular penetration testing and security audits carried out by independent cybersecurity experts;
• 24/7 Monitoring: An active intrusion detection system (IDS) monitors suspicious activity in real time;
• Two-Factor Authentication (2FA): Available to all RajaCuan accounts as an additional layer of protection.

While we take all reasonable precautions, no system is 100% breach-proof. In the event of a material data breach, we will notify affected players within the timeframe required by Malaysian law.

7. Cookie Policy

RajaCuan uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

You can manage or decline cookies through your browser settings at any time. Please note, however, that declining essential cookies may affect the functionality of the RajaCuan platform, including your ability to log in or play games.

8. Your Rights as a RajaCuan Player

Under Malaysia's PDPA and international privacy principles, you have the following rights regarding your personal data at RajaCuan:

To exercise any of the rights above, please contact our Data Protection Officer (DPO) at privacy@rajacuan.ws. We will respond within the timeframe stipulated by Malaysia's PDPA.

9. Data Retention & Deletion

RajaCuan retains your personal data only for as long as necessary for the stated purposes or as required under Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your RajaCuan account remains active;
• Data After Account Closure: Minimum 5 years as required under Malaysia's AML and PDPA regulations;
• Financial Transaction Records: Minimum 7 years as required by Malaysian tax and financial regulations;
• Customer Support Log: 3 years from the date of last interaction;
• Technical Log Data: 90 days for standard access logs; up to 2 years for logs related to security investigations.

Once the stipulated retention period has lapsed, your data will be securely deleted using methods that ensure it cannot be recovered.

10. Child Protection

RajaCuan's services are NOT APPLICABLE for individuals under the age of 18, and we do not knowingly collect personal data from such individuals.

If you are a parent or guardian and believe your child has provided personal information to RajaCuan, please contact us immediately at privacy@rajacuan.ws. We will take prompt action to delete the information and close the associated account.

RajaCuan employs an age verification process during registration and may request identification documents to verify the age of players suspected to be underage.

11. Changes to the Privacy Policy

RajaCuan reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use.

When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page;
• Displaying a notice within the RajaCuan platform after you log in;
• Sending notification emails to all registered members with an active email address;
• In the event of significant changes, we will request your consent again before you continue using the platform.

We encourage you to review this page periodically. Your continued use of RajaCuan following the publication of any changes to the Privacy Policy constitutes your acceptance of the updated version.

12. Contact Our Data Protection Officer

For any questions, concerns, or requests regarding your privacy and personal data protection at RajaCuan, please contact our Data Protection Officer (DPO):

• Dedicated Privacy Email: privacy@rajacuan.ws
• General Support Email: support@rajacuan.ws
• Live Chat: Available on the platform, 24/7
• Support Language: Malay and English

When contacting our DPO, please provide:

• Your full name and RajaCuan account number;
• Type of request (access, correction, deletion, complaint, etc.);
• A brief description of the matter you would like to resolve.