Rajalotre Privacy Policy – Personal Data Protection for Malaysian Players

Welcome to the Privacy Policy page Rajalotre. This document explains in detail how we collect, use, store, and protect your personal data when you use our online casino platform at rajalotre.click.

At Rajalotre, we believe privacy is more than a legal requirement – it is a fundamental right of every user. That is why we have written this policy in plain language that every Malaysian can understand, rather than in lengthy, confusing legal clauses. Our aim is for you to genuinely know what happens to your information when you use Rajalotre.

This Privacy Policy applies to all users who access or use the services of Rajalotre via the rajalotre.click website, the mobile app (if available), or any official Rajalotre communication channel including email and live chat. This covers registered members, unregistered site visitors, and anyone who interacts with Rajalotre in any capacity.

In the context of this Privacy Policy, "personal data" refers to any information that can be used to identify you as an individual, directly or indirectly. This includes your name, phone number, email address, financial information, and usage data automatically collected when you use Rajalotre.

Rajalotre operates under Malaysian law and complies with the Personal Data Protection Act 2010 (PDPA 2010) as well as internationally recognised data protection principles.

Rajalotre only collects data that is genuinely necessary to provide our services safely and effectively. Below are the categories of data we collect and how they are gathered:

We do not collect sensitive data categories such as medical records, genetic information, political views, or religious beliefs. Biometric data such as fingerprints or facial recognition is also not collected by Rajalotre under any circumstances.

Personal data collected by Rajalotre is used solely for the purposes stated below. We will not use your data for any other purpose without first obtaining your consent.

• Account Management: Creating and maintaining your account, verifying your identity at login, and enabling access to all features on the Rajalotre platform.
• Payment Processing: Processing deposits via DuitNow, FPX Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as handling your withdrawal requests.
• Legal Compliance: Meeting anti-money laundering (AML), know-your-customer (KYC), and other reporting obligations required under Malaysian law.
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, unauthorised access, and misuse of the Rajalotre platform.
• Customer Service: Responding to enquiries, resolving complaints, and providing technical assistance to Rajalotre members.
• Responsible Gaming: Monitors gameplay patterns to detect signs of problem gambling and enforces the self-control tools you have set.
• Platform Improvements: Analysing aggregated (anonymised) usage data to improve the user experience, add in-demand games, and optimise Rajalotre's performance.
• Service Communications: Sending important information about your account, policy updates, or service disruptions that require your attention.
• Marketing (with consent only): Sending promotional offers, bonuses, and updates about new games on Rajalotre — only to members who have agreed to receive marketing communications. You may withdraw this consent at any time.

Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), Rajalotre has a valid legal basis for processing your personal data. The primary bases we rely on are as follows:

• Consent: When you register a Rajalotre account and agree to these Terms & Conditions and Privacy Policy, you give us consent to process your personal data for the stated purposes. This is the primary basis for marketing communications.
• Contract Performance: Processing your data is necessary for us to fulfil our contractual obligations in providing you with Rajalotre's online casino services — including deposit processing, game management, and winnings payouts.
• Legitimate Interest: Rajalotre has a legitimate business interest in processing certain data for the purposes of platform security, fraud prevention, and service improvement — provided this does not override your fundamental rights and freedoms.
• Legal Compliance: Certain data processing is required under Malaysian law — for example, AML requirements that obligate us to retain transaction records for a specified period.

If you would like to know the specific legal basis for any data processing activity at Rajalotre, you may contact our support team and we will provide a full explanation within 5 business days.

Rajalotre does not sell or trade your personal data to any party. That said, operating the platform requires us to share certain data with selected third parties who help us deliver our services. All sharing is strictly limited to what is necessary.

All third parties that receive personal data of Rajalotre members are required to uphold data protection standards equivalent to or stricter than our own, including compliance with PDPA 2010 where they operate in Malaysia.

Rajalotre does not retain your personal data indefinitely. Retention periods are determined by operational requirements, Malaysian legal obligations, and the data minimisation principles we adhere to.

Once a retention period expires and there is no legal requirement to keep the data longer, Rajalotre will securely delete or anonymise it in accordance with industry-standard data deletion procedures. Anonymised data cannot be re-linked to you and may be retained for analytics purposes without a time limit.

Rajalotre takes infrastructure security and data protection seriously. The technical and organisational measures we have in place to safeguard your data include:

• 256-bit SSL Encryption: All communications between your browser or app and Rajalotre's servers are encrypted using TLS 1.3 with strong cipher suites. This means your data remains secure even if your internet connection is being monitored.
• Data Storage Encryption: Sensitive data such as financial details and identification information is stored in encrypted form on Rajalotre's servers, not as plain text.
• Internal Access Controls: Only Rajalotre staff who require access to specific data to carry out their duties are permitted to access it — based on the principle of least privilege.
• Two-Factor Authentication (2FA): Rajalotre offers 2FA for all member accounts. We strongly encourage all members to enable this feature in their account settings.
• 24/7 Security Monitoring: Our automated monitoring system detects and alerts you in real time to any suspicious access attempts or unusual account activity.
• Regular Security Audits: Rajalotre conducts regular internal and external security audits to identify and address vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a security breach, Rajalotre has a clear incident response procedure – including notifying affected members within 72 hours if their personal data may have been exposed.

While we take all reasonable steps to protect your data, no security system is 100% foolproof. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Rajalotre. We are committed to making it straightforward for you to exercise these rights without unnecessary procedures.

Rajalotre uses cookies and similar technologies to enhance your experience, maintain account security, and understand how users interact with our platform. Cookies are small text files stored on your device when you use Rajalotre.

Essential and security cookies cannot be disabled as they are required for the basic operation of the Rajalotre platform. For analytics and functional cookies, you can adjust your cookie settings in your web browser. Please note, however, that disabling certain cookies may affect your experience on Rajalotre.

Rajalotre does not use third-party cookies for third-party advertising purposes or to track your activity on other websites.

Rajalotre is a platform intended solely for individuals aged 21 and above. We do not accept registrations from underage individuals and do not knowingly collect personal data from them.

Rajalotre enforces a strict age verification process at registration, including validation of a Malaysian mobile number registered in an adult's name. For accounts showing signs of underage registration, we will suspend the account and carry out further checks.

In operating Rajalotre's services, some of your data may be processed or stored on servers located outside Malaysia — for example, servers belonging to international game providers such as Pragmatic Play or Evolution Gaming, which supply our live casino content.

Rajalotre ensures that any transfer of personal data outside Malaysia is carried out with adequate safeguards in place, including:

• Share only the minimum data necessary for service purposes.
• Ensuring that data recipients outside Malaysia have privacy policies and security measures that are equivalent to or exceed the standards set by PDPA 2010.
• Using binding contractual agreements that hold data recipients to strict data protection obligations.
• Full identity data (name, phone number, financial details) is never shared with game providers — only an anonymised member ID is used for this purpose.

Rajalotre reserves the right to update or amend this Privacy Policy from time to time to reflect changes in Malaysian law, industry practices, the technologies we use, or the way we operate our services.

When we make material changes to how we use or protect your personal data, we will:

• Updating the "Last Updated" date at the top of this page.
• Display a clear notice on the Rajalotre platform informing users of the changes.
• Sending an email to all active members at least 7 days before amendments take effect, for changes that require fresh consent.

Continued use of Rajalotre after an amendment takes effect constitutes acceptance of the revised terms. If you do not agree with the changes, you may close your account and request deletion of your data before the amendment comes into force.

If you have any questions, requests, or concerns about how Rajalotre handles your personal data, our team is here to help.

• Privacy Email: support@rajalotre.click – For data rights requests, privacy complaints, or enquiries about this policy.
• Live Chat: Available 24/7 within the Rajalotre platform – target response time under 3 minutes.
• Response Time: Data rights requests (access, correction, deletion) will be acknowledged within 24 hours and resolved within 21 calendar days.

For more formal or serious privacy complaints that cannot be resolved through standard support channels, send an email with the subject line "Formal Privacy Complaint" to the email address above. All formal complaints are acknowledged within 24 hours and resolved within 30 business days.

This Privacy Policy and all matters relating to it are governed by the laws of Malaysia. Any dispute that cannot be resolved amicably will be referred to the jurisdiction of the competent courts in Malaysia, or to the Department of Personal Data Protection Malaysia (JPDP) where it concerns rights under PDPA 2010.