Last Updated: January 2026

Official Documents

Privacy Policy Rafi88 – Our Commitment to Protecting the Personal Data of Every Malaysian Member

At rafi88, your privacy is not merely a legal obligation — it is a core value we uphold every day. This document clearly explains how we collect, store, use, and protect your personal information as a member of the rafi88 platform.

Rafi88 Privacy Policy

Version 3.1 | Effective 1 January 2026 | Compliant with Malaysia's Personal Data Protection Act 2010 (PDPA)

SAFE Your data is protected by 256-bit SSL – the international banking standard at rafi88 Rafi88 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) rafi88 does not sell or disclose your personal data to third parties without your consent. You have the right to access, correct, or delete your personal data at rafi88 at any time Privacy questions? Contact rafi88's CS team at support@rafi88.best — available 24/7. SAFE Your data is protected by 256-bit SSL – the international banking standard at rafi88 Rafi88 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) rafi88 does not sell or disclose your personal data to third parties without your consent. You have the right to access, correct, or delete your personal data at rafi88 at any time Privacy questions? Contact rafi88's CS team at support@rafi88.best — available 24/7.
Current Version: 3.1 – Effective 1 January 2026

Welcome to rafi88's Privacy Policy page. This document is our written commitment to you — every member who entrusts their personal data to the rafi88 platform. We understand that in today's digital age, privacy is more than just a word. It is a fundamental right that deserves serious protection, and that is exactly how we handle it at rafi88.

When you register an account at rafi88, make a deposit via Touch 'n Go eWallet or DuitNow, play live Baccarat, or place a sports bet, you naturally share some personal information with us. This Privacy Policy explains clearly – in straightforward language – what information we collect, why we need it, how we use it, who may have access to it, and what rights you have over that information.

Rafi88 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. By using the rafi88 platform, you agree to the terms of this Privacy Policy. If you disagree with any part of this policy, please contact us before continuing to use the platform.

Six Privacy Commitments from Rafi88 to Malaysian Members

This is not just a promise — it is our daily practice in protecting your data at rafi88

256-bit SSL Encryption

All data transmitted between your device and rafi88's servers is protected with 256-bit SSL encryption — the same security technology used by leading Malaysian banking institutions such as Maybank and CIMB. Your data cannot be intercepted or read by third parties during transmission.

No Sale of Data to Third Parties

Rafi88 has never and will never sell, rent, or disclose members' personal data to any third party for marketing or other commercial purposes without your explicit consent. Your data belongs to you – it is not a business asset for us to trade.

Full PDPA 2010 Compliance

All data handling practices at rafi88 comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every collection, processing, and use of your data is carried out within the limits permitted by Malaysian law and for legitimate purposes only.

Full Control in Your Hands

As a rafi88 member, you have the right to access, correct, update, or request deletion of your personal data at any time. We provide straightforward channels for you to exercise these rights without complicated or drawn-out procedures.

Secure Servers & Restricted Access

Rafi88 member personal data is stored on servers protected by strict physical and digital security layers. Access is granted only to rafi88 staff who require it for operational purposes — and every access is fully audited and logged.

Full Transparency in Everything

Rafi88 believes in transparency. This Privacy Policy is written in plain, easy-to-understand language – not confusing legal jargon. We want you to know exactly what happens to your data, not have it buried in fine print that nobody reads.

1 Personal Data Collected by Rafi88

Rafi88 collects the personal data necessary to provide our platform services to you. Our principle is to collect only the minimum data required — we do not collect information that is unrelated to delivering rafi88's services. The following are the categories of data we collect:

Data Category Sample Information Requirements
Identity Data Full name, MyKad identification number, date of birth, gender Mandatory (KYC)
Contact Details Malaysian phone number, email address, current residential address Mandatory
Financial Data Payment method details (Touch 'n Go, GrabPay, DuitNow, FPX), deposit and withdrawal records Mandatory
Gaming Activity Data Betting records, slots game history, Live Casino sessions, sports betting activity Mandatory
Technical Data IP address, device type, web browser, operating system, cookie data Automatic
Communication Data Records of conversations with rafi88 customer support, emails sent, and feedback submitted Where applicable

Important Note: rafi88 never stores full credit or debit card numbers. All financial transactions are processed through certified third-party payment gateways (Touch 'n Go, GrabPay, DuitNow, FPX, and others) that maintain their own security standards. rafi88 only receives a success or failure confirmation for each transaction.

2 How Your Data Is Collected at Rafi88

Rafi88 collects your personal data through various channels as you interact with our platform. Here are the main ways data is collected:

  • Account Registration Form – When you first register a rafi88 account, you provide basic information such as your name, email address, and Malaysian phone number directly.
  • KYC (Know Your Customer) Process – When you undergo identity verification to enable withdrawals, you will be required to submit documents such as a copy of your MyKad and proof of address.
  • Financial Transactions – Every time you make a deposit via Touch 'n Go, GrabPay, DuitNow, or FPX, or withdraw your winnings, the transaction details are automatically recorded by the rafi88 system.
  • Gaming Activity – All your gaming activity on the rafi88 platform – from slots sessions and live Baccarat matches, to Blackjack and sports betting on cricket and the Malaysia Super League – is automatically recorded by our systems.
  • Automated Technology – Cookies, web pixels, and similar tracking technologies are used to collect technical data on how you use the rafi88 platform, including pages visited, time spent, and actions taken.
  • Customer Support Interactions – When you contact the rafi88 CS team via live chat, email, or WhatsApp, conversations are recorded for service quality and future reference purposes.

Rafi88 does not collect data from external sources such as social media unless you explicitly choose to register using a social media account (if that option is offered in the future). We do not purchase personal data from data brokers or third parties.

3 How Your Personal Data Is Used

Rafi88 uses the personal data we collect solely for legitimate and necessary purposes in operating our platform. The following outlines the specific purposes for which your data is used:

A
Rafi88 Service Provision & Management

Primary purpose — to register your account, enable login, process deposits and withdrawals in MYR, manage your account balance, credit bonuses and promotions, and give you access to all games and services on the rafi88 platform.

B
Identity Verification & Fraud Prevention

Rafi88 uses your personal data to verify your identity (KYC), ensure that only the rightful account holder can make withdrawals, detect and prevent fraud, money laundering, and platform abuse, and to comply with applicable financial regulatory obligations.

C
Communication & Customer Support

To send you important account-related notifications (such as deposit confirmations, withdrawal approvals, and security alerts), respond to enquiries via live chat or email, and resolve any technical or transaction issues that require our team's attention.

D
Experience Personalization & Relevant Promotions

Rafi88 uses your gaming activity data to personalise game recommendations, determine your eligibility for bonuses and promotions based on your playing habits (such as the daily 0.8% live casino rebate), and send you offers relevant to your gaming interests — whether that's slots, Baccarat, Sports Betting, or cricket.

E
Responsible Gaming & Compliance

Gaming activity data is used to monitor your playing habits for responsible gambling purposes — identifying signs of potential problem gambling and, where necessary, applying limits or reaching out to you with appropriate support information, in line with rafi88's commitment to member safety.

Purpose Limitation Principle: rafi88 uses your data solely for the purposes stated in this Privacy Policy. We will not use your data for any unrelated purposes without first obtaining your consent. If you have any concerns about how your data is being used, you can reach us at support@rafi88.best at any time.

4 Data Sharing with Third Parties

Rafi88 understands that you care deeply about who has access to your personal data. Our position is clear — we do not sell or disclose your personal data to third parties for commercial purposes. However, in the normal course of operating the platform, certain third parties may have limited access to your data based on legitimate operational needs:

  • Payment Service Providers – Payment gateways such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX process your financial transactions. They receive only the information required to complete the transaction in MYR and are subject to their own privacy policies and security standards.
  • Live Casino Game Providers – The Live Casino platform hosting Baccarat, Blackjack, and other live dealer games at rafi88 collects minimal information (such as a member ID without full name) solely to grant access to the game tables.
  • Technology Service Providers – IT infrastructure providers, server hosting services, and analytics providers that support rafi88 in running the platform have limited access to the technical data required, subject to strict confidentiality agreements with rafi88.
  • Relevant Authorities – rafi88 may be required to disclose certain personal data to Malaysian authorities (such as the police, courts, or regulatory agencies) when mandated by law or a valid court order.
  • Professional Advisors – Solicitors, accountants, or auditors involved in rafi88's legal or financial matters may have access to certain data based on professional necessity and subject to their professional confidentiality obligations.

All third parties mentioned above are bound by strict confidentiality and data protection agreements with rafi88. They are only permitted to use your data for the specific purposes defined in those agreements, and may not use it for any other purpose or disclose it to further parties without rafi88's authorisation.

5 Data Protection & Security Measures

Rafi88 continuously invests in robust security infrastructure to ensure your personal data is always protected to the highest standard. Here are the security layers we have in place:

  • 256-bit SSL Encryption – All communications between your device and the rafi88 platform are encrypted using TLS 1.3 protocol with 256-bit encryption keys. This ensures your data cannot be intercepted even on public WiFi networks.
  • Encryption of Stored Data – Sensitive data stored in rafi88's databases, including identity information and financial records, is encrypted at rest using strong encryption algorithms.
  • Role-Based Access Control – Each rafi88 staff member has access only to the data necessary for their specific role. Access to sensitive data requires additional verification and is automatically audited.
  • 24/7 Monitoring & Threat Detection – rafi88's security monitoring system operates around the clock to detect intrusion attempts, suspicious activity, or unauthorized access to our systems.
  • Regular Security Audits – rafi88 conducts regular internal and external security audits to identify and address system vulnerabilities before they can be exploited.
  • Secure Data Backup – rafi88 member data is backed up regularly to a secure, separate location to ensure service continuity and data recovery in the event of a system failure.

In the Event of a Data Breach: In the unlikely event of a data breach that affects your rights or freedoms, rafi88 is committed to notifying affected members within a reasonable timeframe in accordance with applicable legal requirements. We will also take immediate steps to mitigate the impact and prevent any further breach.

6 Your Personal Data Rights at Rafi88

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and rafi88's privacy policy, you hold several important rights regarding your personal data. We want to make sure you are aware of these rights and can exercise them with ease:

Right of Access

You have the right to request a copy of all personal data rafi88 holds about you. We will provide this information within 14 business days from the date your request is received.

Right to Rectification

If the personal data rafi88 holds about you is inaccurate or outdated, you have the right to request a correction. Log in to your rafi88 account to update basic information, or contact our CS team for document-related corrections.

Right to Erasure

You may request the deletion of your personal data from rafi88's systems, subject to our legal obligations (for example, we may be required to retain financial records for the minimum period prescribed by Malaysian law).

Right to Object

You have the right to object to the processing of your personal data for specific purposes such as direct marketing. You may withdraw your consent to receive marketing communications from rafi88 at any time through your account settings or via email.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider if needed, to the extent technically feasible.

Right to Restrict Processing

Under certain circumstances, you may request that rafi88 restrict the processing of your personal data — for example, while we are investigating a data correction request or during a dispute regarding the lawfulness of processing.

To exercise any of the rights above, you can submit a request to rafi88 by emailing support@rafi88.best with the subject line "Privacy Rights Request" or via live chat on your rafi88 platform. Please include your rafi88 account number and a clear description of your request. Our team will respond within 14 business days.

7 Cookies & Tracking Technologies on the rafi88 Platform

Rafi88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the rafi88 platform. Here are the types of cookies we use:

  • Essential Cookies (Required) – Cookies required for the rafi88 platform to function properly, including login session cookies, account balance management, and security. These cookies cannot be disabled as they are essential to the platform's core operations.
  • Functional Cookies – Cookies that remember your preferences, such as your language setting, live Baccarat table display preferences, or your favourite games on rafi88. This enables a more personalised experience without having to reset your preferences each time you log in.
  • Analytics Cookies – Cookies that help rafi88 understand how members use the platform — the most frequently visited pages, most popular games, time spent in each section, and navigation patterns. This information is used in aggregate form (without identifying individuals) to improve the rafi88 platform.
  • Security Cookies – Specialised cookies that help rafi88's security systems identify legitimate sessions, detect suspicious activity, and protect your account from unauthorised access attempts.

You can control and manage cookies through your web browser settings. However, disabling essential cookies will affect core functions of the rafi88 platform, and you may be unable to log in or use our services properly. rafi88 does not use third-party cookies for marketing or cross-site tracking purposes.

8 Data Retention & Deletion

Rafi88 retains your personal data for as long as it is needed for the purposes it was collected and for as long as your account remains active. When you close your rafi88 account or when the data is no longer required, we will delete or anonymise it in accordance with our data retention policy, subject to the following exceptions:

  • Financial and transaction records may need to be retained for the period required under applicable Malaysian financial laws and regulations (typically 7 years).
  • KYC (identity verification) records may need to be retained for a longer period for anti-money laundering compliance purposes
  • Data related to an ongoing fraud investigation may be retained until that investigation is fully concluded.
  • Backup data may take up to 90 days to be fully deleted from all rafi88 backup systems after removal from the primary system

Account Deletion Request: If you wish to close your rafi88 account and request deletion of your personal data, please contact our CS team at support@rafi88.best. We will process your request within 30 working days, subject to any applicable legal retention requirements that may prevent the immediate deletion of certain data categories.

9 Children's Privacy Protection

Rafi88 is an online entertainment platform intended solely for individuals aged 18 and above. We do not knowingly collect or process the personal data of anyone under 18 years of age.

  • The rafi88 registration process requires age verification — you must be at least 18 years old to create an account.
  • rafi88's KYC process includes date-of-birth verification through official MyKad documents to ensure all members meet the minimum age requirement.
  • If we determine that a member is under 18 years of age, the account will be closed immediately and any associated data will be deleted.
  • If you believe your child or a minor has registered a rafi88 account, please contact us immediately at support@rafi88.best for prompt action

10 Changes to Rafi88's Privacy Policy

Rafi88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, technological developments, or the addition of new services on our platform.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Publishing in-platform notifications on your rafi88 account regarding changes made
  • Sending email notifications to all active rafi88 members for significant changes
  • Giving you reasonable time to review and respond before any changes take full effect

Continued use of the rafi88 platform after Privacy Policy changes have been published and you have been notified will be considered your acceptance of those changes. If you disagree with any changes made, you have the right to close your rafi88 account and request deletion of your personal data.

11 Contact rafi88 for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how rafi88 handles your personal data, our team is ready to assist you through the following channels:

  • Privacy Email: Send an email to support@rafi88.best with the subject line "Privacy Policy Enquiry" – response within 24–48 working hours
  • Platform Live Chat: For urgent enquiries, use the live chat available 24/7 within your rafi88 platform — our Malaysian-speaking CS team is ready to assist
  • Formal Written Request: For formal privacy rights requests (data access, rectification, deletion), please submit a written request via email including your rafi88 account number and a copy of your identification card for identity verification

Rafi88 is committed to handling every privacy enquiry and request with seriousness, respect, and in a timely manner. We believe that open and transparent communication about our privacy practices is the foundation of the trust you place in the rafi88 platform.

Why Rafi88's Privacy Policy Stands Apart from Other Platforms

Many online platforms bury their privacy policies in pages of legal jargon that the average user can barely follow. At rafi88, we've deliberately written this Privacy Policy in plain language – because we believe you shouldn't need a lawyer to understand what happens to your personal data.

Privacy is something rafi88 takes seriously. When you register an account and share information such as your Malaysian phone number, email address, and MyKad number with us, that is a significant act of trust. We honour that trust fully. That is why we invest in robust security infrastructure, train our staff on the importance of privacy, and continuously review and update our data security practices in step with the ever-evolving cyber threat landscape.

In the context of an online entertainment platform that processes MYR deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX, the security of financial data is critically important. Every time you make a deposit or withdraw winnings from live Baccarat, cricket betting, or Blackjack tables at rafi88, that transaction involves sensitive financial information. rafi88's 256-bit SSL encryption and 24/7 monitoring system ensure that every transaction is processed in a secure and controlled environment.

One aspect of rafi88's Privacy Policy we are proud of is our commitment to the "minimum data" principle — we only collect information that is genuinely necessary to provide our services to you. We do not collect excessive data simply because it might come in useful someday. Every data point we collect has a clear purpose and is used in the way you would reasonably expect.

Finally, we want you to know that rafi88's Privacy Policy is a living document — it evolves alongside our platform, Malaysia's privacy laws, and the needs of our members. We are committed to ensuring this policy reflects our actual practices, not just promises on paper. If at any point you feel that rafi88 is not living up to the privacy commitments stated here, we sincerely welcome your feedback so we can address it promptly.

FAQ – rafi88 Privacy Policy

Answers to the most frequently asked questions about how rafi88 handles member privacy

No. Rafi88 does not store or share your full eWallet or banking account details with any party. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, the transaction is processed directly through a certified payment gateway and rafi88 only receives a transaction success confirmation along with the amount in MYR. We do not view or store your full eWallet account number, password, or PIN. This data remains entirely within the systems of the respective payment provider, which maintains its own security standards.

To request a copy of your personal data from rafi88, send an email to support@rafi88.best with the subject line "Personal Data Access Request" and include your rafi88 account number along with a copy of your MyKad for identity verification. This is an important security measure to ensure we only disclose data to the rightful account holder. Our team will process your request within 14 working days and send you a summary of the data we hold about you in an easy-to-read format. This request is free of charge and can be made at any time.

When you close your rafi88 account, we will begin the process of deleting your personal data within 30 working days. This covers your profile information, communication history, and gaming activity data. However, certain data may need to be retained for a specified period due to Malaysian legal requirements — for example, financial transaction records in MYR may need to be kept for up to 7 years in accordance with financial laws, and KYC records may need to be retained for anti-money laundering compliance. Data retained for legal reasons will not be used for any other purpose and will be deleted as soon as the retention obligation expires.

Yes, you can withdraw your consent to receive marketing communications from rafi88 at any time. There are two easy ways to do this: first, click the "Unsubscribe" link found at the bottom of any promotional email we send you. Second, log in to your rafi88 account, go to "Notification Settings", and turn off the "Promotional Emails & Offers" option. Changes will take effect within 48 hours. Please note that opting out of marketing emails will not affect important transactional emails such as deposit or withdrawal confirmations — these will continue to be sent as they are an essential part of your rafi88 account service.

Your gaming activity data – including sports betting records (Malaysia Super League, IPL cricket, badminton), live Baccarat sessions, slots, and Blackjack – is used by rafi88 for three primary purposes. First, to properly manage your account, including processing winnings, calculating eligibility for the 0.8% daily rebate, and verifying compliance with bonus terms. Second, for responsible gaming purposes – rafi88's systems monitor playing patterns to identify signs that may require protective intervention. Third, for dispute resolution – game records allow us to resolve any disputes regarding match outcomes or winnings calculations in a fair and transparent manner. This data is not sold to third parties and is not used to target you with advertising outside the rafi88 platform.

Your Data Is Safe with Rafi88 – Register Now

Malaysia's online entertainment platform with 256-bit SSL data protection, PDPA 2010 compliance, and a full commitment to member privacy. Join over 250,000 members who trust rafi88 – register free and claim a bonus of up to RM1,500.

By registering, you agree to rafi88's Privacy Policy and Terms & Conditions. For members aged 18 and above only.

Bahasa Melayu