Privacy Policy

This Privacy Policy ("Policy") is published by racik198 ("we", "us", "our", "the Platform") and applies to all personal data collected, processed, stored, or transmitted in connection with your use of the racik198 website and gaming services available at racik198.cam and its associated subdomains and mobile interfaces.

racik198 operates as an international online gaming and sports betting platform serving players across Malaysia, including those located in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, Ipoh, Kota Kinabalu, and all other states and territories of Malaysia. This Policy is written in English and is intended to be read and understood by Malaysian users.

We are committed to handling your personal data with transparency, integrity, and full respect for your rights as a data subject. This Policy describes our practices in alignment with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection frameworks.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, alteration, retrieval, and deletion.
• "Data Subject" means you — the individual whose personal data is being processed.
• "Data Controller" means racik198 in its capacity as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of racik198, such as payment processors or hosting providers.
• "Cookies" means small text files placed on your device by the racik198 platform to enable certain functions and collect usage data.
• "KYC" (Know Your Customer) means the identity and age verification process required for account access and financial transactions.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia.

racik198 collects the following categories of personal data, depending on how you interact with our platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data unless specifically required by applicable law (for example, in connection with a self-exclusion programme).

racik198 collects personal data through the following means:

• Direct collection: Information you provide voluntarily during account registration, the KYC verification process, deposit or withdrawal requests, live chat interactions, email correspondence, and the completion of responsible gambling tools such as self-exclusion or deposit limit requests.
• Automated collection: Technical data (IP address, device identifiers, session logs) is collected automatically when you access the platform via cookies, web beacons, and server-side logging systems.
• Third-party sources: We may receive information from third-party identity verification providers, fraud prevention databases, payment processors (including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, and GrabPay), and publicly available databases for the purposes of KYC verification and fraud detection.
• Referral data: If you were referred to racik198 through our Refer A Friend programme, we receive limited information about your referral relationship from the referring player, limited to the referral identifier and registration timestamp.

racik198 processes your personal data for the following specific, stated purposes:

• Account management: To create, maintain, and administer your player account, including authentication, password resets, and account security notifications.
• Age and identity verification: To confirm that you are at least 21 years of age and that your identity meets our KYC requirements, as mandated by applicable anti-money laundering (AML) and responsible gambling obligations.
• Payment processing: To facilitate deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, DuitNow, FPX bank transfers, Maybank2u, CIMB Clicks, Public Bank Online, Boost, and GrabPay. All transactions are denominated in Malaysian Ringgit (RM).
• Fraud prevention and security: To detect, investigate, and prevent unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct.
• Customer support: To respond to your enquiries, resolve disputes, and provide after-service communications in English, Bahasa Melayu, and Chinese.
• Responsible gambling: To monitor gaming patterns for indicators of problem gambling, to administer deposit limits, loss limits, session controls, and self-exclusion requests, and to comply with responsible gambling obligations.
• Regulatory compliance: To fulfil record-keeping, reporting, and cooperation obligations under applicable law, including requests from law enforcement or regulatory authorities.
• Platform improvement: To analyse aggregated, anonymised usage data for the purposes of platform performance optimisation, A/B testing, and user experience research.
• Marketing communications: To send you promotional offers, bonus alerts, and platform updates, where you have consented to receive such communications. You may withdraw consent at any time.

Each processing activity carried out by racik198 is grounded in at least one of the following lawful bases under applicable data protection law:

• Contractual necessity: Processing required to perform the contract between you and racik198 — including operating your account, processing deposits and withdrawals, and providing gaming services.
• Legal obligation: Processing required to comply with applicable law — including age verification (21+ requirement), anti-money laundering (AML) checks, Know Your Customer (KYC) obligations, and cooperation with regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for racik198's legitimate operational interests — such as fraud prevention, platform security, responsible gambling monitoring, and IT system management — where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — such as the receipt of marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

racik198 does not sell, rent, or trade personal data to third parties for their own commercial or marketing purposes. Data sharing with third parties is strictly limited to the categories set out below, and only to the extent necessary for the stated purpose:

• Payment processors: Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay, and other payment service providers receive transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Identity verification providers: Third-party KYC and AML screening services receive identity documents and personal identifiers for the purposes of age verification, identity validation, and sanctions screening.
• Fraud prevention services: Shared risk signals (such as device fingerprints and IP reputation data) with fraud detection platforms to protect the platform and its players.
• Game studios and software providers: Technical data necessary for game provision (such as session tokens and bet identifiers) may be shared with licensed game studios. These studios do not receive identity data beyond what is operationally necessary.
• Hosting and infrastructure providers: Our platform's hosting partners may process personal data stored on their servers as Data Processors operating under binding data processing agreements with racik198.
• Legal and regulatory authorities: Personal data may be disclosed to law enforcement agencies, courts, regulators, or governmental authorities in Malaysia and elsewhere when required by law, court order, or regulatory direction.

All third-party processors engaged by racik198 are subject to contractual data processing obligations that require them to protect personal data at a standard at least equivalent to that described in this Policy.

racik198 treats payment-related data with the highest level of security and operational care. The following specific practices apply to financial information:

• racik198 does not store full payment credentials such as full bank account numbers, complete e-wallet account details, or card CVV codes on its own systems. All payment data is tokenised and processed via certified third-party payment gateways.
• Deposit and withdrawal records are retained in our transaction logs for up to 7 years to comply with anti-money laundering record-keeping requirements under applicable Malaysian law.
• All transactions are denominated in and settled in Malaysian Ringgit (RM). No foreign currency conversion is applied to player deposits or withdrawals.
• Payment method ownership verification may be requested at any time as part of our KYC or fraud-prevention process. You may be asked to provide a screenshot of your e-wallet account or a redacted bank statement confirming account ownership.
• Third-party payment processors — including the operators of Touch 'n Go eWallet, DuitNow, and FPX — are independent data controllers in respect of data held within their own platforms. racik198 is not responsible for the privacy practices of these third-party platforms.

racik198 uses cookies and similar tracking technologies on its platform. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for platform operation — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your account preferences, language settings, and responsible gambling configurations between sessions.
• Analytical Cookies: Collect anonymised data on platform usage patterns — such as pages visited, session duration, and click paths — to help us improve platform performance. This data is processed in aggregate and does not identify individual users.
• Security Cookies: Used for fraud detection and prevention purposes, including device fingerprinting and session anomaly detection.

racik198 does not deploy third-party advertising cookies or retargeting pixels that track your activity across external websites for commercial advertising purposes.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the platform. For mobile users, device-level privacy controls (available on Android and iOS) may also affect data collection.

racik198 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

racik198 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff access rights are reviewed regularly and revoked upon termination of employment.
• Two-factor authentication: Available to all players for account login and recommended as a baseline security measure.
• Penetration testing: Our systems undergo regular third-party security assessments to identify and remediate vulnerabilities.
• Incident response: We maintain a documented data breach response plan. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify affected data subjects and relevant authorities as required by applicable law.

As a data subject, you hold the following rights in relation to personal data that racik198 processes about you. These rights are subject to applicable legal limitations and exemptions:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right of Correction: You may request that inaccurate or incomplete personal data we hold about you be corrected or updated.
• Right of Deletion: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis exists. Note that certain data must be retained by law (e.g., AML records) and cannot be deleted on request.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about accuracy is under review.
• Right to Data Portability: Where technically feasible, you may request that we provide a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. Objections to direct marketing are always honoured.

To exercise any of the above rights, please contact our support team via live chat or at [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Identity verification will be required before any data disclosure or deletion request is processed.

racik198 is strictly prohibited to persons under the age of 21. We do not knowingly collect personal data from individuals under the age of 21. The platform employs age verification measures during registration and KYC to prevent access by underage persons.

If you have reason to believe that a minor has registered on racik198 using false information, please notify us immediately at [email protected] so that we may take prompt action.

racik198 operates with international technology partners and infrastructure providers. As a result, your personal data may be transferred to and processed in countries outside Malaysia, including jurisdictions where data protection laws may differ from those applicable in Malaysia.

Where such transfers occur, racik198 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring recipients to protect personal data to a standard at least equivalent to that described in this Policy.
• Selection of processing partners located in jurisdictions with an adequate level of data protection as determined by applicable standards.
• Use of data minimisation techniques to limit the volume and sensitivity of data transferred internationally.

Game studios operating live dealer tables stream from facilities in Eastern Europe and Southeast Asia. Technical session data (bet identifiers, session tokens) may pass through these jurisdictions during gameplay. Identity data is not transmitted to game studio systems.

racik198 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, applicable law, regulatory requirements, or platform functionality. Material changes to this Policy will be communicated to registered players via:

• A prominent notice displayed on the platform on or before the effective date of the change.
• An email notification to the address registered to your account where the change materially affects your rights or how your data is used.

The "Last updated" date at the top of this document will be revised with each substantive change. Your continued use of the racik198 platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data by racik198, please contact us using the following channels:

• Live Chat: Available 24/7 on the racik198 platform. Average response time 3–5 minutes. Supported languages: English, Bahasa Melayu, and Chinese.
• Email: [email protected] — for formal data subject requests, privacy complaints, or detailed data enquiries. We aim to respond within 24 hours for general enquiries and within 5 business days for formal data subject rights requests.

When submitting a data subject rights request, please include your registered account username and the email address associated with your account to enable us to verify your identity efficiently. We do not charge a fee for handling data subject requests.

For further information about your rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you may consult the Department of Personal Data Protection (JPDP) of Malaysia. racik198 is not affiliated with JPDP and cannot provide legal advice.