Privacy Policy

This Privacy Policy ("Policy") is issued by Rajagacor ("the Platform", "we", "us", "our") and applies to all personal data collected, processed, stored, and transmitted in connection with your use of the website located at rajagacor.cam and all associated services, including account registration, deposits, wagering, withdrawal processing, customer support interactions, and promotional communications.

Rajagacor recognises that the privacy of our Malaysian players is a matter of the highest importance. We are committed to handling personal data with transparency, integrity, and in a manner consistent with applicable data protection obligations. This Policy has been written in clear, accessible English to ensure that every player understands how their information is managed.

By registering an account or continuing to use the Platform, you acknowledge that you have read this Policy, understood its contents, and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data — including name, email address, phone number, identification document numbers, IP address, device identifiers, and transaction records.
• "Processing" means any operation performed on personal data, including collection, recording, storage, organisation, retrieval, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" refers to Rajagacor as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by Rajagacor — in practice, any registered player or website visitor.
• "Third Party" means any entity other than Rajagacor and the Data Subject, including payment processors, game software suppliers, KYC verification service providers, and IT infrastructure providers.
• "Cookie" means a small text file placed on your device by the Platform to store session information, preferences, and usage analytics data.
• "KYC" (Know Your Customer) refers to the identity and age verification process conducted by Rajagacor or its appointed verification partners prior to processing withdrawal requests.

Rajagacor collects the following categories of personal data in connection with your use of the Platform:

Rajagacor does not collect sensitive personal data beyond what is strictly required for identity and age verification purposes.

We collect personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing the KYC verification process, submitting a deposit or withdrawal request, contacting our support team, or updating your account profile.
• Automated Technical Collection: Technical and usage data collected automatically when you visit the Platform, including IP addresses, device identifiers, browser data, and session activity logs collected via cookies and similar tracking technologies.
• Payment Processors: Transaction confirmation data received from payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect), and cryptocurrency network confirmations. Note: Rajagacor receives only transaction reference data — we do not have access to your full bank account details, e-wallet PIN, or online banking credentials.
• KYC Verification Partners: Where identity verification is conducted via a third-party KYC service provider, we receive the outcome and relevant verification data from that provider.
• Publicly Available Sources: We may cross-reference information against publicly available fraud prevention databases or sanctions screening lists as part of our AML compliance obligations.

Rajagacor processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil the contract between Rajagacor and you as a registered player — including account management, processing deposits and withdrawals, and providing access to gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering (AML) record-keeping, responsible gaming age verification, and fraud prevention obligations.
• Legitimate Interests: Processing carried out to pursue Rajagacor's legitimate business interests, including platform security monitoring, fraud detection, improving the user experience, and conducting internal analytics — provided such interests do not override your fundamental data rights.
• Consent: Where you have provided explicit consent — for example, opting in to receive marketing communications and promotional offers from Rajagacor. Consent-based processing can be withdrawn at any time.

Rajagacor uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your player account; processing login authentication; and applying account settings and preferences.
• Identity and Age Verification (KYC): Confirming your identity, verifying that you meet the minimum age requirement of 21 years, and maintaining verification records as required by responsible gaming standards.
• Payment Processing: Processing deposits received via Touch 'n Go eWallet, Boost, DuitNow, FPX bank transfers, or cryptocurrency; processing withdrawal requests to your verified payment methods; and maintaining transaction records.
• Gaming Operations: Tracking wagering activity for bonus eligibility, wagering requirement calculations, VIP tier progression, and responsible gaming monitoring (including deposit limits and session tracking).
• Regulatory Compliance: Fulfilling AML record-keeping obligations, sanctions screening, fraud detection, and reporting to regulatory authorities where legally required.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining support correspondence records.
• Marketing Communications: Where you have provided consent, sending you information about promotions, new games, bonuses, and platform updates. You may withdraw consent at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, user experience, and content offering.

Rajagacor does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Transaction data is shared with your selected payment provider (Touch 'n Go eWallet, Boost, GrabPay, DuitNow operators, FPX-participating banks, or cryptocurrency network validators) solely to process your deposit or withdrawal request.
• KYC / Identity Verification Providers: Identity document data is shared with our appointed third-party KYC verification partner for the purpose of fulfilling age and identity verification obligations. These providers are contractually bound to process data only for the stated verification purpose.
• IT Infrastructure and Hosting Providers: Our cloud infrastructure and database hosting providers process data as data processors acting under our instruction, subject to strict data processing agreements and security standards.
• Game Software Suppliers: Gameplay session data (not personally identifiable) may be shared with our game content suppliers for RNG auditing, game integrity verification, and technical support purposes.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory authority request, Rajagacor may be obligated to disclose personal data to competent authorities without prior notice to the Data Subject.
• Fraud Prevention Databases: Where fraud or money laundering is suspected, relevant data may be shared with industry fraud prevention bodies or law enforcement agencies.

All third-party processors engaged by Rajagacor are subject to contractual data protection obligations. They are permitted to use personal data only for the specific purpose for which it was shared and are required to maintain appropriate technical and organisational security measures.

Rajagacor retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Account Data: Retained for the duration of the account relationship and for a period of 5 years following permanent account closure, to satisfy AML record-keeping and audit requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of verification or account closure (whichever is later), in accordance with applicable regulatory obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, consistent with standard financial record-keeping requirements.
• Gaming Activity Logs: Retained for a period of 3 years from the date of each gaming session.
• Support Communications: Retained for 3 years from the date of the interaction, unless the communication relates to a formal dispute in which case it is retained for 5 years.
• Marketing Opt-In Records: Retained for the duration of the marketing relationship and 3 years after you unsubscribe, as evidence of your prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. You may request early deletion of your personal data subject to the provisions of Clause 11 (Your Rights) and any applicable legal retention obligations.

Rajagacor uses cookies and similar tracking technologies to provide a functional, secure, and consistent experience on the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load balancing identifiers. These cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, last visited page, and display preferences to personalise your experience without requiring you to re-enter settings each session.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the Platform — including pages visited, time spent, and features used — to help us understand and improve the Platform's performance.
• Responsible Gaming Cookies: Track session duration to support the delivery of session time reminders where you have enabled this responsible gaming feature in your account settings.

Rajagacor does not use third-party advertising cookies or allow external advertising networks to place tracking technologies on the Platform.

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will affect Platform functionality. Disabling analytics cookies will not affect your ability to use the Platform.

Rajagacor implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• AES-256 encryption for all personal data stored at rest in our databases.
• TLS 1.2/1.3 (HTTPS) for all data transmitted between your device and the Platform.
• Multi-layered firewall protection and intrusion detection systems monitoring the Platform infrastructure 24/7.
• Role-based access controls ensuring that only authorised personnel access personal data on a need-to-know basis.
• Regular independent security audits and penetration testing conducted by qualified third-party security specialists.
• Two-factor authentication availability for player accounts to add an additional layer of login security.
• Secure, encrypted storage of KYC document uploads with restricted access limited to authorised verification personnel.

In the event of a personal data breach that poses a material risk to affected individuals, Rajagacor will notify impacted players and, where applicable, relevant authorities, within a reasonable timeframe consistent with applicable data protection obligations.

As a Data Subject, you hold the following rights in respect of your personal data held by Rajagacor. These rights may be exercised by contacting our support team at [email protected]:

All data rights requests will be acknowledged within 3 business days and substantively responded to within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days with prior notification.

Rajagacor's services are strictly intended for individuals aged 21 years and above. The Platform does not knowingly collect personal data from individuals below the minimum age requirement. Age verification is conducted as part of the KYC process for all registered accounts.

If Rajagacor becomes aware that personal data has been collected from an individual who is under 21 years of age, the relevant account will be immediately suspended, all data associated with the underage registration will be deleted, and any deposited funds will be returned to the originating payment method following appropriate verification.

Parents or guardians who believe their child has accessed or registered on the Platform should contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

In the course of providing our services, your personal data may be transferred to and processed in countries outside Malaysia — for example, by our cloud infrastructure providers or game software suppliers whose servers are located in other jurisdictions. Rajagacor ensures that any such international transfer of personal data is conducted only to countries or recipients that offer an adequate level of data protection, or subject to appropriate safeguards such as:

• Contractual data processing agreements incorporating standard data protection clauses requiring the recipient to maintain equivalent data protection standards.
• Transfer to jurisdictions that have been assessed as providing an adequate level of personal data protection by applicable regulatory standards.
• Binding corporate rules where transfers are made within the same corporate group of a service provider.

Rajagacor will not transfer your personal data internationally beyond what is necessary for the operation of the Platform, and will always ensure that recipient parties are subject to appropriate data protection commitments.

Rajagacor reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The date of the most recent revision is displayed at the top of this page.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered players via email to the address on record and/or by a prominent notice on the Platform, providing a minimum of 14 days' advance notice before the revised Policy takes effect.

We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or formal complaints regarding this Privacy Policy, the handling of your personal data, or if you wish to exercise any of your data rights as described in Clause 11, please contact Rajagacor's Data Protection team using the details below:

When submitting a data rights request or formal privacy complaint, please include your registered email address, a clear description of your request or concern, and any relevant reference numbers. This allows our team to locate your account data and process your request without unnecessary delay.