Your privacy is not just a priority — it is our commitment. Find out exactly how rafi88 collects, uses, and protects every piece of your personal information to the highest industry security standards.
All player data is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.
Your personal information will not be sold, rented, or shared with any third party without your explicit consent.
You have the right to access, correct, or request deletion of your personal data at any time through your account settings.
Rafi88's security systems undergo independent audits on a regular basis to ensure data protection consistently meets the latest standards.
Every login session is secured with a unique session token that will automatically expire upon inactivity to protect your account.
Sensitive data is stored on isolated servers, protected by layered firewalls, and accessible only to authorised personnel.
Rafi88 values the privacy of every player using our platform at rafi88.fun. This Privacy Policy is designed to give you full clarity on how we handle your personal information — from how it is collected and the purposes it is used for, to the security measures we take to protect it.
We understand that your trust is the most valuable asset we hold. That is why we take data protection seriously. Every process involving players' personal information is carefully designed to ensure your privacy is safeguarded at every stage.
This document applies to all users of the rafi88 platform, including website visitors, registered players, and VIP members. If you have any questions after reading this policy, our customer support team is available via 24/7 live chat.
Rafi88 only collects information that is genuinely necessary to provide a safe, smooth, and responsible service. We do not collect excessive data or data unrelated to the purpose of this platform.
| Data Type | Primary Purpose | Retention Period |
|---|---|---|
| Identity (name, IC) | KYC verification & security | Throughout active account + 5 years |
| Financial (bank, wallet) | Deposit & withdrawal processing | Throughout active account + 7 years |
| Technical data (IP, device) | Security & fraud detection | 90 days after session |
| Game records | Audits, disputes & support | 3 years |
| Support communications | Referrals & improvements | 2 years |
Every piece of information we collect is used for specific and legitimate purposes. rafi88 does not use your data for purposes you would not expect or that violate applicable data protection laws.
Your registration details and KYC documents are used to establish and verify your account identity. This is a fundamental requirement to ensure that every account on the rafi88 platform is owned by a real individual who meets the stipulated age and eligibility criteria.
Your financial details are used solely to process deposits into and withdrawals from your account. rafi88 does not store full credit card information — only the minimum details required for transaction verification are retained in encrypted form.
Technical data such as IP addresses and device information is used by our security systems to detect suspicious activity, unauthorised login attempts, and potential fraud patterns. This is a protective measure that directly benefits the security of your account.
Anonymised usage data is analysed to understand platform usage patterns, identify areas for improvement, and develop better new features for the Malaysian player experience.
With your consent, we use your email address and phone number to send promotional information, bonus offers, and platform updates. You may withdraw this consent at any time through the notification settings in your account.
Rafi88 does not sell, rent, or trade players' personal information to any third party for commercial purposes. However, there are limited situations where data may be shared with certain parties, and we wish to be transparent about this.
Rafi88 works with selected third-party service providers to carry out specific functions such as payment processing, KYC verification, and server infrastructure. All providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.
Rafi88 may be required to disclose player information where mandated by law, court order, or direction from a competent authority, including anti-money laundering enforcement units. In such situations, we will disclose only the minimum information necessary.
In certain cases, your data may be processed by servers located outside Malaysia. Such transfers only occur to countries or entities that comply with equivalent or higher data protection standards, and are always safeguarded by appropriate data protection agreements.
Rafi88 invests seriously in security infrastructure to ensure your personal data remains protected at all times. Our systems are designed with a "layered security" approach where each layer provides an additional level of protection.
All data transmitted between your browser and rafi88's servers is protected with SSL/TLS 256-bit. Sensitive data stored in our databases is also encrypted using industry-standard encryption algorithms. This means that even if the data were stolen, it cannot be read without the appropriate encryption key.
Access to player data within rafi88's internal systems is restricted to staff with a legitimate business need only. All access is logged and monitored, and all staff undergo data protection training before being granted any access to systems containing players' personal information.
The rafi88 security team monitors our systems 24 hours a day to detect any suspicious activity or intrusion attempts. Our automated threat detection system is configured to proactively respond to known attack patterns.
Rafi88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the rafi88 platform, including the ability to stay logged in or save your preferences.
Rafi88 recognises and respects your rights regarding personal data. You have the following rights, which may be exercised at any time by contacting our team.
You have the right to request a copy of all personal data we hold about you. This request will be processed within 14 business days.
If any of your personal information is inaccurate or incomplete, you have the right to request an immediate correction through your account profile settings.
You may request deletion of your personal data. However, certain data may need to be retained for a specified period to meet legal or regulatory requirements.
For data processed based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) and to transfer it to another service if desired.
In certain circumstances, you may request that we restrict the processing of your data, for example while a dispute regarding data accuracy is being resolved.
Rafi88 does not retain your personal data longer than necessary. Retention periods are determined based on the original purpose of data collection and applicable legal requirements.
Generally, active account data is retained for the duration your account remains active. After account closure, certain data will be kept for an additional period to meet anti-money laundering legal requirements, tax obligations, and to enable the resolution of any pending disputes.
When you request account closure, rafi88 will initiate the data deletion process within 30 business days. Data that must be retained for legal reasons will be held in an isolated archive system and will no longer be actively used for any operational purpose.
Rafi88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, latest legal requirements, or improvements in platform operations.
Any significant changes will be communicated to registered players via email or in-platform notification at least 14 days before the changes take effect. You are encouraged to review this policy periodically via this page.
The "Updated" date shown at the top of this page reflects the date this policy was last modified. Continued use of the rafi88 platform after changes take effect constitutes your acceptance of the updated privacy terms.
Create your account today and enjoy a safe, transparent, and enjoyable gaming experience. The rafi88 platform is built with player privacy as its top priority — you play with peace of mind, and we take care of your data security .