Privacy Policy

This Privacy Policy ("Policy") is published by raja123 ("we", "us", "our"), the operator of the website accessible at https://raja123.cam ("the Site"). It describes our practices with respect to the collection, use, storage, disclosure and protection of personal data provided by or collected about users ("you", "your") who access or interact with the Site.

raja123 is an English-language gaming information and entertainment brand for Malaysian adults. We are committed to handling personal data responsibly and in a manner consistent with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA) and any subordinate regulations made thereunder.

This Policy should be read together with the raja123 Terms and Conditions, which govern the overall use of the Site and are accessible at /terms-conditions. By accessing or using any part of the Site, you acknowledge that you have read, understood and accepted the practices described in this Policy.

For the purposes of this Policy, the following terms shall have the meanings set out below.

raja123 collects personal data across several categories, depending on the nature of your interaction with the Site. The categories and specific data points we may collect are described in the table below.

We do not intentionally collect special category personal data (such as health, racial or ethnic origin, religious beliefs or biometric data for identification purposes) unless specifically required for a regulated KYC check and only with your explicit consent or as required by law.

We collect personal data through the following channels and means:

Directly from you

• During account registration, when you provide your name, email address, date of birth, phone number and residential address.
• During KYC verification, when you upload identity documents, proof of address and, where required, a selfie or liveness check.
• When you make a deposit or request a withdrawal, through the payment details you provide or the payment gateway you select (including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost and GrabPay).
• When you contact our support team by email, live chat or any other communication channel available on the Site.
• When you complete surveys, participate in promotions or respond to any request for feedback.

Automatically, through your use of the Site

• Technical data such as your IP address, browser fingerprint, device identifiers and session logs are collected automatically when you visit the Site.
• Cookies and similar tracking technologies record your preferences and browsing behaviour within the Site as described in Section 8.
• Usage analytics tools track page interaction patterns to help us improve content and user experience.

From third parties

• Identity verification providers may return a verification status or risk score based on document checks.
• Payment processors may share transaction references, fraud flags or chargeback notices associated with your account.
• Anti-fraud and anti-money-laundering screening services may return risk classifications or watchlist match results.

raja123 processes your personal data only where a lawful basis exists for doing so. The primary legal bases on which we rely are set out below.

raja123 uses the personal data we collect for the following specific purposes:

• Account management: Creating, maintaining and securing your user account, processing login authentication and managing account preferences.
• Identity and age verification: Confirming that you are at least 21 years of age and that your identity matches the registration details provided, in compliance with applicable KYC requirements.
• Payment processing: Facilitating deposits and withdrawals via your chosen Malaysian payment method, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong.
• Customer support: Responding to queries, resolving disputes, managing complaints and maintaining records of communications for quality assurance purposes.
• Security and fraud prevention: Detecting and investigating suspicious account activity, preventing unauthorised access, identifying patterns indicative of money laundering or fraud, and sharing relevant data with law enforcement where required by law.
• Responsible gambling: Monitoring usage patterns to identify behaviours that may indicate problem gambling and, where appropriate, intervening with responsible gambling tools or resources such as deposit limits, cooling-off periods and self-exclusion.
• Marketing communications: Sending promotional offers, bonus notifications, and product updates — only to users who have provided explicit opt-in consent. Marketing messages will always include an unsubscribe option.
• Analytics and improvement: Analysing aggregated and anonymised usage data to understand how users interact with the Site, identify areas for improvement and optimise content layout and performance.
• Legal compliance: Meeting obligations under applicable Malaysian law and any regulatory requirements relevant to the operation of an online gaming information platform.

raja123 does not sell, rent or trade your personal data to any third party. We may share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service providers and data processors

We engage trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These include:

• Payment gateway operators facilitating transactions via FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost and GrabPay.
• Identity verification and KYC service providers.
• Anti-fraud and anti-money-laundering screening platforms.
• Cloud hosting and infrastructure providers storing Site data on secured servers.
• Customer support software platforms used to manage support ticket communications.
• Analytics platforms used to measure anonymised Site usage metrics.

Legal and regulatory disclosure

raja123 may disclose personal data to competent authorities, law enforcement agencies, courts or regulators where required to do so by applicable Malaysian law, court order or regulatory instruction — including for the purposes of anti-money-laundering investigations or fraud prevention.

Business transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the business, personal data held by raja123 may form part of the transferred assets. Affected users will be notified in advance wherever this is reasonably practicable.

The raja123 Site uses cookies and similar tracking technologies to support its operation, improve user experience and, where consent has been given, deliver relevant content and measure usage patterns.

Types of cookies used

You may manage or withdraw your cookie preferences at any time via your browser settings or the cookie preference centre available on the Site. Note that disabling strictly necessary cookies may prevent certain Site features from functioning correctly.

raja123 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below provides indicative retention periods by data category.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where deletion is not immediately feasible (for example, due to backup schedules), data will be isolated from active processing until deletion is carried out.

raja123 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) protocol.
• Encryption at rest: Sensitive data fields including identity document images and financial account details are encrypted when stored on our infrastructure.
• Access controls: Personal data is accessible only to authorised personnel who require it to perform their role. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for anomalous activity, with automated alerts triggering immediate investigation where applicable.
• Penetration testing and vulnerability assessments: Regular security audits are conducted to identify and remediate potential vulnerabilities in our platform.
• Incident response plan: In the event of a confirmed data breach that affects your rights, we will notify you and, where applicable, the relevant regulatory authority within the timeframe required by law.

Subject to applicable law and any overriding obligations (such as AML record-keeping requirements), you hold the following rights with respect to your personal data held by raja123:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how and why it is processed.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to our legal retention obligations.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is contested.
• Right to object: You may object to processing based on legitimate interests, including profiling, where you believe your fundamental rights and freedoms override those interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: If you believe we have not handled your personal data in accordance with applicable law, you may lodge a complaint with the Personal Data Protection Commissioner (PDPC) of Malaysia.

To exercise any of the rights listed above, please contact us at the email address provided in Section 15. We will respond to verified requests within 30 days. In some circumstances, we may need to ask for proof of identity before processing a request.

raja123 is strictly an adult platform. The Site is not directed at, and is not intended for use by, any person under the age of 21 years. We do not knowingly collect personal data from individuals under 21.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data from our systems and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to raja123, please contact us immediately at [email protected].

We encourage parents and guardians in Kuala Lumpur, Penang, Johor Bahru and across Malaysia to use internet content filtering software to prevent underage individuals from accessing gambling-related websites, including this Site.

In some cases, the third-party service providers we engage may be located in, or process data in, jurisdictions outside Malaysia. Where personal data is transferred outside of Malaysia, raja123 takes steps to ensure that appropriate safeguards are in place to protect your data, which may include:

• Binding contractual clauses requiring the recipient to handle personal data to a standard equivalent to that required under Malaysian PDPA.
• Transferring only to countries or service providers that maintain an adequate level of data protection as recognised by applicable standards.
• Applying additional technical security measures such as end-to-end encryption where data crosses jurisdictional boundaries.

By using the Site, you acknowledge that your personal data may be processed outside Malaysia in the circumstances and subject to the safeguards described above. If you have specific concerns about cross-border data processing, please contact us as set out in Section 15.

raja123 reserves the right to update or amend this Privacy Policy at any time. Any changes will be published on this page with an updated effective date. Where changes are material — for example, a change in the categories of data we collect, a new purpose for which data is used, or a change in our data sharing practices — we will make reasonable efforts to notify registered users by email or through a prominent notice on the Site.

Your continued use of the Site following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Site and may request account closure as described in the raja123 Terms and Conditions.

We recommend reviewing this page periodically. The effective date displayed at the top of this Policy will be updated each time a revision is published.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how raja123 has handled your personal data, please contact our support team. We are committed to responding to all privacy-related queries within a reasonable timeframe.

Please direct all privacy queries to our website support email. This address is provided as plain text only and is not a clickable link — please copy and paste it into your email client.

Website support email:

[email protected]

Our team aims to acknowledge all privacy-related requests within two business days and to provide a substantive response within 30 days of receipt. For requests that are complex or involve a high volume of data, we may extend this period by a further two months and will inform you accordingly.

If you are not satisfied with our response, you have the right to refer your complaint to the Department of Personal Data Protection (JPDP) of Malaysia, which is the relevant supervisory authority under the Personal Data Protection Act 2010.