Rajagacor's Privacy Commitment

Rajagacor Privacy Policy – How We Protect Malaysian Players' Personal Data

At rajagacor, player privacy is more than a legal obligation — it is a core value we stand firmly behind. This document transparently explains what data we collect, why we need it, how it is protected, and what your rights are as a Malaysian player under the Personal Data Protection Act 2010 (PDPA).

Updated: January 2026 PDPA Malaysia 2010 AES-256 Encryption

6 Privacy Commitments from Rajagacor to Malaysian Players

This is what we promise every player who entrusts us with their personal data

Full Compliance with Malaysia's PDPA 2010

Rajagacor fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This means all processing of your personal data is carried out on a valid legal basis, for stated purposes, and no further than what is necessary. Your rights as a data subject are protected and can be exercised at any time.

IMPORTANT

Bank-Grade AES-256 Encryption

All your personal and financial data is stored with AES-256 encryption — the same standard used by leading banking institutions and government agencies worldwide. This means that even in the unlikely event of a system breach, your data remains unreadable to any unauthorised party.

No Sale of Data to Third Parties

This is the strongest commitment we make — rajagacor has never sold, rented, or traded players' personal data to any third party for marketing or commercial purposes, and we never will. Your data is not a commodity. It is your personal information, and we treat it as such.

Player Access Rights & Full Control

You have the right to view all data we hold about you, request corrections if any information is inaccurate, and request data deletion when your account is closed. All such requests can be made through our customer support and will be processed within 14 business days in accordance with PDPA requirements.

Minimum Data — Only What Is Necessary

Rajagacor only collects data that is strictly necessary to operate our services securely and in compliance with the law. We do not collect data without a clear purpose. This principle of data minimisation ensures your digital footprint on our platform is kept as small as possible, while still allowing us to deliver the best experience.

Timely Notification in the Event of an Incident

While our security systems are designed to prevent any data breach, in the unlikely event that a security incident affecting your data does occur, rajagacor is committed to notifying you within the timeframe required by law — promptly and with clear information about what happened and the steps taken in response.

256
AES Encryption Bit
0
Data Breach Incidents Since 2018
14
Business Days for Data Request Response
24/7
Dedicated Cybersecurity Team

This Privacy Policy ("Policy") describes how rajagacor ("we", "Rajagacor" or "the Company") collects, uses, stores, protects, and discloses your personal data when you use the rajagacor platform at rajagacor.run. This Policy applies to all Malaysian players who register for and use our services.

Rajagacor operates in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. We are committed to being transparent about our data practices and to respecting the privacy rights of every individual who uses our platform. If you have any questions regarding privacy, please contact us at support@rajagacor.run.

1. Information We Collect

Rajagacor collects various categories of personal data in the course of providing our online casino platform services. Below is a detailed explanation of the types of data we collect and their sources.

1.1 Data You Provide Directly

When registering for and using the rajagacor platform, you directly provide the following information:

  • Full name as shown on your Malaysian identity card (MyKad)
  • An active Malaysian mobile phone number
  • A valid email address
  • Account password (stored as an unreadable hash)
  • Date of birth (for age verification — must be 18 years of age or older)
  • Payment method details (eWallet account numbers, FPX details — stored as secure tokens, not raw data)
  • Identity documents during the KYC (Know Your Customer) process, if required

1.2 Automatically Collected Data

When you use the rajagacor platform, our systems automatically record the following technical information for security, performance, and service improvement purposes:

  • IP address and general location (state or city, not precise location)
  • Device type, operating system, and web browser version in use
  • Access time and date, pages visited, and time spent
  • Betting history and in-platform transaction records (retained indefinitely for AML compliance)
  • Cookie and session information (see Section 5 for further details)
  • Technical error logs and application crash reports for maintenance purposes

1.3 Data from Third-Party Sources

In certain situations, we may receive information about you from legitimate third-party sources, including:

  • Payment providers (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX) — to verify transaction status
  • Third-party identity verification agencies — for KYC purposes during the verification process
  • Industry blacklist databases — to comply with anti-money laundering (AML) requirements

Rajagacor does not collect sensitive data such as medical information, religious beliefs, or sexual orientation. Credit/debit card details are not stored on our servers — all card transactions are processed directly through PCI-DSS certified payment gateways.

Data Category & Purpose Summary

Data CategoryExamplePrimary Purpose
Identity Data Full name, date of birth, MyKad number Identity verification, KYC, age restriction
Contact Information Phone number, email Account communications, customer support, 2FA verification
Financial Data Payment method, transaction history Processing deposits/withdrawals, AML compliance
Betting Data Betting history, winnings, losses Account management, VIP programme, compliance
Technical Data IP address, device type, access logs Security, fraud detection, platform performance
Cookie Data Session cookies, preference cookies User experience, auto-login, analytics

2. Purposes of Data Collection

Rajagacor uses your personal data only for the clearly stated purposes below. We do not use your data for any other purpose without first obtaining fresh consent from you.

2.1 Service Provision

The primary purpose of data collection is to enable us to provide you with rajagacor's online casino platform services — including managing your account, processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and giving you access to all games and platform features.

2.2 Legal & Regulatory Compliance

As a licensed platform, rajagacor is required by law to maintain certain records and meet compliance obligations, including:

  • Anti-Money Laundering (AML) — maintaining transaction records and identifying suspicious activity
  • Know Your Customer (KYC) — verifying player identity and minimum age of 18 years
  • Reporting to the relevant regulatory authorities when required by law
  • PDPA 2010 Compliance — ensuring all data processing adheres to the Act

2.3 Security & Fraud Detection

Technical data such as IP addresses, usage patterns, and device information is used to detect and prevent fraudulent activity, unauthorised access, multiple account usage, and system abuse. This protects not only the company's interests but also those of all other players on the rajagacor platform.

2.4 Product Improvement & User Experience

Usage data (anonymous and aggregated) is used to understand how players interact with our platform, identify areas for improvement, and make better product decisions. This data is never analysed at an individual level for these purposes — only aggregate patterns are considered.

2.5 Service Communications & Marketing

We use your phone number and email address to send you important account information, rajagacor promotions you are eligible for, and service updates. For marketing communications, you have the option to unsubscribe at any time (see Section 8).

3. How We Protect Your Data

Rajagacor continually invests in security infrastructure to ensure your data is protected to the highest industry standards. Below are the layers of protection we have in place.

3.1 Data Encryption

All personal data stored on rajagacor servers is protected with AES-256 encryption (Advanced Encryption Standard with a 256-bit key). All communications between your device and our servers are secured using the latest SSL/TLS (Secure Sockets Layer / Transport Layer Security) protocols. Your password is never stored in readable form — it is stored as a one-way cryptographic hash using the bcrypt algorithm.

3.2 Access Controls

Access to players' personal data within rajagacor's internal systems is strictly restricted on a need-to-know basis. Any employee who needs to access customer data for work purposes must go through a multi-layered identity verification process, and their access logs are monitored automatically. Access to sensitive data such as KYC records requires approval from senior management.

3.3 Infrastructure Security

Rajagacor servers are hosted in Tier III or higher data centres with strict physical access controls, automated fire suppression systems, uninterruptible power supplies, and round-the-clock security personnel. Our systems are protected by multi-layered firewalls, intrusion detection systems (IDS), and continuous real-time security monitoring.

3.4 Regular Security Audits

Rajagacor conducts regular penetration testing carried out by accredited independent cybersecurity firms to identify and address vulnerabilities before they can be exploited. The findings from these audits are used to continuously strengthen the security posture of our platform.

Since rajagacor's founding in 2018 through to the date of this Privacy Policy update (January 2026), we have not experienced any significant personal data breach affecting our players. This track record is the result of our ongoing investment in cybersecurity, which we regard as a core responsibility to our players.

4. Disclosure to Third Parties

Rajagacor does not sell or trade your personal data to third parties. However, in certain limited situations, we may need to share data with the following parties for legitimate purposes.

4.1 Contracted Service Providers

To operate the platform, rajagacor works with a number of third-party service providers acting as "data processors" under our direction. These include:

  • Payment gateway providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) — only the data required to process transactions is shared
  • KYC service providers — for identity verification when required
  • Email and SMS delivery service providers — for account communications only
  • Platform analytics service providers (anonymised and aggregated data only)

All third-party service providers are bound by strict data confidentiality agreements and are only permitted to process your data for the specific agreed purposes. They are not permitted to use your data for any other purpose.

4.2 Legal Requirements

Where we are required by law or court order to disclose player data, rajagacor will comply with such requirements. This includes requests from Malaysian law enforcement agencies in criminal investigations, valid court orders, or reporting obligations imposed by relevant regulatory bodies. We will notify you of any such disclosure where we are legally permitted to do so.

4.3 Corporate Transactions

In the event of a merger, acquisition, or sale of company assets, players' personal data may be transferred as part of the business assets. In such situations, we will notify players and ensure that the new recipient is bound by a privacy policy at least equivalent to the one set out here.

5. Cookies & Tracking Technologies

The rajagacor platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use.

5.1 Essential Cookies (Required)

These cookies are required for the platform's core functionality and cannot be disabled. They include login session cookies (which keep you signed in while using the platform), security cookies (which protect against CSRF attacks), and language preference cookies. These cookies do not track any personal information and expire when you close your browser.

5.2 Performance & Analytics Cookies

These cookies help us understand how players use the rajagacor platform — which pages are most popular, where users run into issues, and how to improve the overall experience. All data collected is aggregated and anonymous — we do not identify individual players through analytics cookies.

5.3 Functional Cookies

These cookies store your preferences such as display settings, favourite game selections, and notification preferences. They allow us to personalise your platform experience from one session to the next, so you do not need to reconfigure your settings each time.

5.4 Managing Cookies

You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling certain cookies (particularly essential cookies) may affect the functionality of the rajagacor platform and your gaming experience. For guidance on managing cookies in popular web browsers, please contact our customer support.

6. Your Rights as a Data Subject

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by rajagacor. We fully respect and facilitate the exercise of these rights.

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If any of your data is inaccurate or out of date, you have the right to request an immediate correction. Please contact our support team with the relevant supporting evidence.

Right to Erasure

Once your account is closed, you may request data deletion. Some data may be retained for AML legal compliance for the prescribed period.

Right to Object

You have the right to object to the processing of your data for marketing purposes. You may unsubscribe via your account settings or by contacting us directly.

Data Portability

You may request your data in a machine-readable format for portability to another platform, subject to applicable technical and legal limitations.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute or investigation is being resolved.

To exercise any of the above rights, please contact the rajagacor customer support team by email at support@rajagacor.run with the subject line "PDPA DATA RIGHTS REQUEST" along with your account number and the right you wish to exercise. We will verify your identity before processing any request to safeguard your data security.

7. Data Retention & Deletion

7.1 Data Retention Periods

Rajagacor retains your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following are general guidelines for retention periods across different data categories:

  • Active account data: For the duration your account is active and for 5 years after account closure (AML compliance requirement).
  • Financial transaction records: Minimum 7 years after the transaction, as required by Malaysian tax and AML laws.
  • KYC Documents: For 5 years after the business relationship ends.
  • Customer support communication logs: 2 years from the date of communication.
  • Technical data & logs: Between 90 days and 1 year, depending on the log type.
  • Session cookie data: Expires when the session ends, or after a maximum of 30 days for persistent cookies.

7.2 Deletion Process

Once the retention period expires or an approved data deletion request is received, rajagacor will securely delete or anonymise your data using industry-standard methods. For data stored in backup systems, deletion may take up to 90 days to be fully completed across all backup systems.

8. Marketing Communications

Rajagacor sends marketing communications to members who have agreed to receive them during registration or subsequently through their account settings. This includes information on new promotions, deposit bonuses, exclusive VIP offers, and new game updates on the platform.

8.1 Types of Marketing Communications

  • SMS: Promotional notifications and limited-time offers are sent to your registered phone number.
  • Email: Weekly newsletters, bonus updates, and special promotions are sent to your registered email.
  • In-app notifications: In-platform pop-ups and notifications while you are active on the platform, featuring offers relevant to your gaming activity.

8.2 How to Unsubscribe

You may opt out of marketing communications at any time through the following methods:

  • Click the "Unsubscribe" link at the bottom of any marketing email we send.
  • Log in to your rajagacor account and update your notification settings under the Profile section.
  • Contact our customer support at support@rajagacor.run and specify the type of communications you no longer wish to receive.

Please note that unsubscribing from marketing communications will not stop you from receiving essential service communications — such as transaction confirmations, account security notifications, and important updates to our Terms & Conditions that require your attention.

9. Child Safety

Rajagacor is a paid entertainment platform strictly limited to individuals aged 18 and above. We do not knowingly collect any personal data from children under the age of 18. Our registration process requires date of birth verification, and we use verification measures to ensure that only adults can access the platform.

If you as a parent or guardian believe that your child under the age of 18 has registered for or used the rajagacor platform, please contact us immediately at support@rajagacor.run. We will investigate without delay, close the account, delete all associated personal data, and refund any deposits that may have been made.

If you become aware of anyone under the age of 18 using the rajagacor platform, please notify us immediately. Child protection is a shared responsibility that we take very seriously.

10. Privacy Policy Amendments

Rajagacor reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service improvements. When we make significant changes, we will notify you via:

  • Email notification to your registered email address
  • In-platform notification upon your next login
  • Link to the updated Privacy Policy with a clear effective date

Continued use of the rajagacor platform after the effective date of any Privacy Policy amendment constitutes acceptance of the updated policy. If you do not agree with any changes, you should close your account before those changes take effect.

All previous versions of the Privacy Policy are archived and available upon request from our customer support team for reference. This Privacy Policy was last updated on January 2026, version 3.1.

For any questions, concerns, or requests regarding this Privacy Policy, please contact Rajagacor's Privacy Officer at support@rajagacor.run with the subject line "DATA PRIVACY". We are committed to responding to all privacy enquiries within 7 business days.

Related Documents
Data Privacy Enquiries

Want to know what data we hold about you? Wish to request a correction or deletion? Contact our Privacy Officer.

support@rajagacor.run

Subject: DATA PRIVACY + your account number

Last Updated
January 2026
Version 3.1 — Bahasa Malaysia
Compliant with PDPA 2010
Malaysian Personal Data Protection Act — your rights are protected by law

FAQ — rajagacor Privacy Policy

The most frequently asked questions from Malaysian players about data privacy on our platform

No — this is one of the firmest commitments we make to all rajagacor players. We have never sold, rented, or traded your personal data to any third party for marketing or commercial purposes. The information you provide us is used solely for the purposes stated in this Privacy Policy — to deliver platform services to you, comply with legal requirements, and ensure platform security. If you receive marketing messages from a party claiming to be associated with rajagacor but you have never registered with them, that did not come from us — please notify our support team.

To request a copy of your personal data (Right of Access under PDPA 2010), send an email to support@rajagacor.run with the subject line "PDPA DATA ACCESS REQUEST" along with your rajagacor account number. We will first verify your identity to protect your security, then provide your data report in a readable format (typically PDF or CSV) within 14 business days. The report will include account information, transaction history, betting history, and communications we hold on record. There is no charge for the first request within a calendar year.

When you close your rajagacor account, most of your active personal data (profile, active game history, preferences) will be deactivated and made inaccessible. However, financial and transaction records must be retained under Malaysian law — including AML requirements (minimum 5 years) and tax legislation (minimum 7 years). Once these mandatory retention periods expire, your data will be permanently deleted or anonymised. If you request data deletion before the mandatory period ends, we will explain which data can be deleted immediately and which must be retained for legal compliance.

rajagacor will disclose player data to Malaysian law enforcement or government agencies only when required by valid legal process — for example, a properly issued court order or an official criminal investigation. We do not disclose data voluntarily beyond what is legally required. When we receive such a request, our legal team will verify its validity before any data is shared. Where we are permitted by law to notify you of the disclosure, we will do so. rajagacor's compliance with AML (anti-money laundering) requirements also means we are obligated under Malaysian law to report suspicious transactions to the relevant authorities.

The security of financial transactions is our top priority. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, the transaction is processed directly through a PCI-DSS certified payment gateway (Payment Card Industry Data Security Standard) — the highest security standard in the payments industry. This means your sensitive financial information never passes through or is stored on rajagacor's own servers. We only receive a transaction token and payment status from the provider — not your raw card or account details. All communications between our platform and the payment gateway are protected with the latest SSL/TLS protocols.

Yes, you have full control over the marketing communications you receive from rajagacor. There are several easy ways to reduce or stop marketing communications: (1) Click the "Unsubscribe" link at the bottom of any marketing email we send — this will remove you from our marketing email list immediately. (2) Log in to your account, go to Profile Settings, and update your notification preferences to disable any communication types you no longer want. (3) Send an email to support@rajagacor.run requesting to opt out of marketing communications. Please note that even after opting out of marketing, you will still receive essential service communications such as transaction confirmations and account security notifications — these are in place to protect you and cannot be fully disabled.
Rajagacor's Privacy Commitment — Your Data, Your Rights

Rajagacor operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles. We do not sell your data, we protect it with AES-256 encryption, and we respect your right to access, correct, or delete your information at any time. For any privacy-related enquiries, contact us at support@rajagacor.run. To read our full Terms & Conditions, visit Terms & Conditions page.

PDPA 2010
AES-256
No Data Selling
24/7 Support
Player Rights Guaranteed
Licensed & Audited

Your Data Is Safe at Rajagacor

Register with Confidence — Rajagacor Protects Your Privacy to the Highest Industry Standards

Over 250,000 Malaysian players trust rajagacor with their personal data and financial transactions. AES-256 encryption, PDPA 2010 compliance, and 24/7 support in Bahasa Malaysia — play with peace of mind.

Bahasa Melayu