Official Privacy Policy

Privacy Policy rafi99 – Commitment Protection Your Data

Rafi99 takes seriously its responsibility to protect every piece of personal information you share with us. This page transparently explains how your data is collected, used, and safeguarded.

Updated: 1 January 2026

Rafi99's Six Pillars of Privacy Protection

Your privacy is not merely a legal obligation to rafi99 — it is a core value that shapes every technical and operational decision on our platform.

128-bit SSL Encryption

All data transmitted between your device and rafi99's servers is protected by 128-bit SSL encryption. This means your login credentials, payment details, and personal data cannot be intercepted or read by any third party during transmission.

Secure Data Storage

Rafi99 member personal data is stored in data centres protected by strict physical and digital access controls. Only authorised personnel may access this data, and every access is logged for internal security audit purposes.

No Third-Party Data Sales

Rafi99 has never and will never sell, rent, or disclose member personal information to advertisers or unrelated third parties for marketing purposes without your explicit prior consent.

Member Data Controls

You have the full right to access, correct, download, or request deletion of your personal data. All data-related requests are processed within the timeframes set by applicable data protection laws in Malaysia.

Transparent Cookie Management

Rafi99 uses cookies to improve user experience and analyse website traffic. You can manage your cookie settings at any time through your web browser settings without affecting the core functionality of the platform.

Rapid Incident Response

Rafi99 has a clear security incident response procedure. In the event of any data breach affecting your personal information, we will notify you and the relevant authorities within the timeframe prescribed by law.

1. Introduction

This Privacy Policy explains how Rafi99 ("we", "Platform", or "Rafi99") collects, uses, stores, and protects your personal information when you use our website, mobile app, or any services we offer. This Policy applies to all registered members, website visitors, and any individuals who interact with the Rafi99 platform.

As an online entertainment platform operating in Malaysia, rafi99 is committed to ensuring that all data processing activities comply with the provisions of the Personal Data Protection Act 2010 (PDPA) and relevant international standards. We believe transparency is the foundation of trust, and this Privacy Policy is written in plain language so you know exactly what happens to your data.

Note: By registering for or using the Rafi99 platform, you consent to the processing of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform.

2. Personal Information We Collect

Rafi99 only collects information that is strictly necessary to provide our services safely and efficiently. The information we collect falls into several main categories:

Registration & Identity Information

  • Full name as it appears on a valid identity document
  • Date of birth to verify that you meet the minimum age requirement of 18 years
  • Active email address for account communications
  • Mobile phone number for two-factor authentication (2FA)
  • Current residential address

Verification Documents (KYC)

  • Copy of valid identity card (MyKad) or passport
  • Recent proof of address such as a utility bill or bank statement (not older than three months)
  • Payment method documents such as bank statements or digital wallet screenshots when required

Financial & Transaction Information

  • Bank account or digital wallet details used for deposits and withdrawals
  • Records of all deposit, withdrawal, and wagering transactions
  • Game activity history and bonus usage

Technical & Usage Data

  • IP address and approximate geolocation data
  • Device type, operating system, and web browser version
  • Cookie data and session identifiers
  • Access logs, pages visited, and session duration
Data Category Example Requirements
Identity Name, date of birth, MyKad Mandatory – KYC & age verification
Contact Email, phone number Mandatory – account communications
Financial Bank account, transaction records Mandatory – payment processing
Technical IP address, cookies, session logs Automatic – security & analytics
Communication Support chat records Option – complaint resolution

3. How We Use Your Data

Every piece of information we collect is used for pre-defined and legitimate purposes. rafi99 does not use your data for any purpose unrelated to the provision of our services. The following are the primary purposes for which your data is used:

  • Identity and eligibility verification: Ensuring you meet the minimum age requirement and verifying your identity through the KYC process before your first withdrawal is approved.
  • Processing deposits and withdrawals: Processing all financial transactions securely and accurately, including payment method verification.
  • Customer support: Providing effective assistance when you contact our support team via live chat or email.
  • Platform security: Detecting and preventing fraud, money laundering, account abuse, and other unlawful activities.
  • Legal compliance: Meeting reporting and compliance obligations set by the relevant authorities.
  • Marketing (with consent): Sending promotional information, bonus offers, and platform updates if you have opted in to receive marketing communications.
  • Service improvement: Analysing usage patterns to enhance user experience and platform performance.
Marketing: You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by updating your communication preferences in your Rafi99 account settings.

4. Data Sharing & Disclosure

Rafi99 does not sell or trade your personal data to any third party. However, under certain limited and legitimate circumstances, we may share your data with the following parties:

Third-Party Service Providers

We work with trusted service providers to handle key functions such as payment processing, identity verification (KYC), customer support, and platform analytics. All providers are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

Authorities & Regulatory Bodies

Rafi99 will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required by law, court order, or in the context of a legitimate investigation into unlawful activity.

Game Providers

A limited amount of technical data, such as player identifiers and game history, may be shared with third-party game providers that supply game content on the rafi99 platform. This sharing is necessary to ensure game integrity and the resolution of any game outcome disputes.

International Transfers: If your data is processed outside Malaysia, rafi99 ensures that protection equivalent to Malaysia's PDPA is upheld by all receiving parties through appropriate contractual safeguard mechanisms.

5. Cookies & Tracking Technologies

Rafi99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use the platform.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Collecting aggregated data on how visitors use our website to help us improve performance and user experience.
  • Functional Cookies: Saving your preferences such as language, currency denomination, and display settings for a more personalised experience.
  • Analytics Cookies: We use analytics tools to understand usage patterns and improve platform content. This data is processed in aggregated form without identifying individuals.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some platform features. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help section.

6. Data Security Measures

Protecting your personal data is the absolute priority of rafi99. We implement a range of technical and organisational security measures to safeguard your information against unauthorised access, disclosure, alteration, or destruction.

  • 128-bit SSL encryption for all data transmission between your device and our servers
  • Encryption of sensitive data such as passwords and financial details in the database using industry-standard encryption algorithms
  • Role-based access control (RBAC) ensuring staff only access data relevant to their responsibilities
  • 24/7 security monitoring with automated intrusion detection systems
  • Regular penetration testing by independent security teams
  • Regular data backups with tested disaster recovery procedures
  • Mandatory security awareness training for all staff handling personal data
Your Responsibilities: While rafi99 takes all reasonable steps to protect your data, account security also depends on your own actions. Please use a strong password, enable two-factor authentication, and never share your login credentials with anyone.

7. Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by Rafi99. We are committed to respecting and facilitating the exercise of these rights.

Right of Access

Request a copy of all personal data we hold about you at any time.

Right to Rectification

Correct any personal data that is inaccurate or incomplete.

Right to Erasure

Request deletion of your personal data, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Restrict Processing

Request a temporary restriction on the processing of your data under certain circumstances.

To exercise any of the above rights, please contact the rafi99 privacy team by email at [email protected] including your full name, account number, and request details. We will process your request within 30 calendar days from the date of receipt.

8. Data Retention Period

Rafi99 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by law. Retention periods vary by data type:

  • Active account data: Retained for the duration your account is active and for one year after account closure.
  • Financial transaction records: Retained for a minimum of seven years to comply with anti-money laundering and tax legal requirements.
  • KYC Documents: Retained for five years after the termination of the business relationship or as required by law.
  • Support communication logs: Retained for three years for dispute resolution and service improvement purposes.
  • Analytics data: Aggregated data that cannot identify individuals is retained for a maximum of two years.

Upon expiry of the retention period, your data will be securely deleted or fully anonymised in accordance with the data deletion procedures established by rafi99.

9. Changes to Privacy Policy

Rafi99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you via a prominent notice on the website or by email to the address registered in your account at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy page periodically so you are always informed of how we protect your information. The "Updated" date shown at the top of this page indicates when this Privacy Policy was last revised.

Change Notice: If the proposed changes will materially affect how we use your personal data, we will seek your fresh consent before those changes take effect.

10. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how rafi99 handles your personal data, please contact our team through the following channels:

We aim to respond to all privacy-related enquiries within 72 working hours. For more complex complaints requiring detailed investigation, the response period may take up to 30 calendar days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or any relevant data protection authority under PDPA 2010.

Your Data Is Safe. Your Entertainment Awaits. Secured.

Rafi99 protects your privacy with the latest encryption technology and full compliance with Malaysia's PDPA. Register now and enjoy a safe, responsible gaming experience.

Bahasa Melayu