Privacy Policy rama2 – Our Commitment to Protecting the Personal Data of Malaysian Players

Welcome to the Privacy Policy page rama2, a trusted online casino platform serving Malaysian players. This Privacy Policy explains in detail how rama2 ("we", "Platform") collects, uses, stores, protects and, in certain circumstances, discloses your personal data ("User", "Member") when you use our services.

We understand how important privacy is to every individual — especially on an online entertainment platform where financial transactions and sensitive personal information are involved. That is why rama2 has built a comprehensive data protection framework in full compliance with the Personal Data Protection Act (PDPA) Malaysia 2010 — the principal data protection legislation governing the handling of personal information in Malaysia.

By visiting, registering for or using any of the services at rama2, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision in this document, you are requested not to use our services.

rama2 only collects personal data that is strictly necessary to deliver our services safely, efficiently and in compliance with legal requirements. Below are the categories of data we collect and how they are gathered:

A. Data You Provide Directly:

• Registration Information: Full name, active Malaysian phone number, email address and the password you create when registering an account at rama2.
• Identity Verification (KYC) Information: A copy of your MyKad or passport, which we may request for identity verification purposes in order to comply with legal requirements and prevent fraud.
• Financial Information: Details of the payment methods you use — including the phone number linked to your Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and your FPX account number (Maybank2u, CIMB Clicks, and other Malaysian banks). We do not store full credit card numbers.
• Communication with Us: Records of live chat conversations, emails, and any other communications you have sent to our support team rama2.

B. Automatically Collected Data:

• Technical Data: IP address, browser type, operating system, device model and screen resolution used to access rama2.
• Usage Data: Gaming records including the types of games played, session duration, bet amounts, and game outcomes for each session at rama2.
• Transaction Data: Your complete history of deposits, withdrawals, and bonuses credited to your account.
• Cookie Data: Information collected through cookies and similar tracking technologies to enhance your experience on the platform.

rama2 uses collected personal data solely for lawful, stated purposes. Below is a detailed breakdown of how your data is used in the operation of our platform:

• Core Service Delivery: Processes account registration, handles deposits and withdrawals, credits promotional bonuses and grants access to all games available on rama2.
• Identity Verification & KYC: Ensuring compliance with anti-money laundering (AML) and counter-terrorism financing (CFT) legal requirements, which are mandatory obligations under Malaysian legislation.
• Security & Fraud Prevention: Detecting and investigating suspicious activity, unauthorised access attempts, system manipulation and any potential fraud that could compromise your account security or the integrity of the platform rama2.
• Customer Support: Handling enquiries, complaints and technical support requests submitted to the rama2 in Bahasa Melayu via live chat, email or other communication channels.
• Service Communications: Sending you important account-related notifications, transaction confirmations, policy updates, and relevant security information.
• Marketing Communications: Sending you information about promotions, bonus offers, and new games at rama2 — only to those of you who have given consent to receive such communications. You may withdraw this consent at any time.
• Responsible Gaming: Monitoring gaming habits and identifying players who may need support in managing their play in a healthier way at rama2.
• Platform Improvements: Analysing aggregated (not individual) usage patterns to develop new features and improve platform performance and usability rama2.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, all processing of personal data must have a valid legal basis. rama2 processes your personal data on the following legal bases:

• Consent (Your Permission): For marketing communications and optional cookies — you provide explicit consent during registration or through your account settings.
• Contract Performance: To process financial transactions, manage accounts and provide the gaming services you registered for at rama2.
• Legal Obligation: To comply with KYC, AML, CFT and licensing requirements as mandated by the relevant regulatory authorities.
• Legitimate Interest: To prevent fraud, maintain platform security, and protect the legitimate interests of rama2 and all its users.

rama2 does not sell or transfer your personal data to third parties for commercial or marketing purposes. However, in the course of lawfully operating the platform, there are limited circumstances in which your data may be shared with certain parties:

• Payment Service Providers: Required transaction data is shared with payment service providers such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and the FPX network to process your deposits and withdrawals. All such providers are bound by strict data protection agreements.
• Game Developers: Game session information required is shared with the relevant game developers (such as Evolution Gaming) for technical support and game fairness auditing. No personally identifiable information that could reveal your identity is shared.
• Legal Authorities: rama2 will disclose personal data to legitimate Malaysian authorities when directed to do so by a court or regulatory body with valid jurisdiction.
• Independent Auditors: External audit firms conducting periodic compliance reviews and security audits may access certain data strictly required for audit purposes, subject to strict confidentiality agreements.

In all of the above circumstances, rama2 ensures that only the minimum necessary data is shared, and that all parties receiving such data are bound by data protection obligations equal to or exceeding those set out under Malaysia's PDPA 2010.

rama2 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL Encryption: All data communications between your device and our servers rama2 is protected by TLS/SSL protocols using 256-bit encryption keys — the same security standard used by Maybank2u and CIMB Clicks to safeguard online banking transactions.
• Secure Password Hashing: Your account password is never stored in plain text — it is processed through an advanced cryptographic hashing algorithm before being saved, meaning no one at rama2 can read your original password.
• Two-Factor Authentication (2FA): Two-factor authentication is available for all accounts rama2 — we encourage all members to enable this feature for an additional layer of security.
• Intrusion Detection System (IDS): Technical infrastructure rama2 equipped with an intrusion detection and prevention system that continuously monitors network traffic to identify and block potential cyber attacks.
• Internal Access Controls: Member personal data is accessible only to rama2 who have a legitimate need to do so within the scope of their duties. All access is logged and audited on a regular basis.
• Regular Security Audits: Security assessments, penetration testing and code reviews are conducted regularly by our internal security team and independent external security experts.

Assessment based on internal security audits and PDPA compliance reviews. Last updated: January 2026.

rama2 does not retain your personal data for longer than is necessary for the stated purposes or as required by Malaysian law. The following are the data retention principles we adhere to:

• Active Account: For as long as your account remains active at rama2, we retain all personal data necessary to deliver our services effectively.
• After Account Closure: When you close your account rama2 your personal data will be deleted or anonymised within 30 days — except for data that must be retained to meet legal obligations (for example, financial records that must be kept for 7 years for tax audit purposes under Malaysian law).
• Deletion Requests: You may request the deletion of your personal data at any time by contacting our support team. Requests will be processed within 30 business days, subject to applicable legal retention obligations.

rama2 uses cookies and similar tracking technologies to enhance user experience, maintain session security and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies (Required): Cookies required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled as they are fundamental to the operation of rama2.
• Performance Cookies: Collecting information on how you use the platform — such as the most frequently visited pages and time spent in each section. This data is gathered in aggregate form and does not identify you as an individual.
• Functional Cookies: Saving your preferences such as display settings, preferred language and saved login information for a seamless experience on rama2.

You can manage and delete cookies at any time through your browser settings. However, disabling essential cookies may affect the functionality and security of the platform rama2 for you.

Under Malaysia's PDPA 2010 and the Privacy Policy rama2, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact the rama2 via email at [email protected] with the subject line "Personal Data Rights Request", together with your account number. We will process your request within 30 business days.

rama2 is an online entertainment platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of any individual under the age of 18.

Should we discover that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered an account at rama2, please contact us immediately at [email protected] for prompt corrective action.

Platform rama2 integrates certain third-party services to enable the platform to function smoothly, including game providers such as Evolution Gaming and payment service providers such as Touch 'n Go, GrabPay, DuitNow and FPX. Please note that:

• Every third party that integrates with rama2 have their own Privacy Policies governing how they handle data shared with them.
• rama2 is not responsible for the privacy practices or content of those third-party platforms.
• We conduct thorough due diligence on all third-party partners to ensure they comply with data protection standards equivalent to Malaysia's PDPA 2010.

rama2 reserves the right to amend this Privacy Policy at any time to reflect changes in relevant practices, technology or legal requirements. Any amendment will be accompanied by:

• A new "Last Updated" date at the top of this page.
• Email notification to all registered members where an amendment is material and significantly affects your rights.
• In-platform notifications rama2 for a period of at least 14 days after the amendments come into effect.

Continued use of the platform rama2 after the amendments take effect will be considered acceptance of the revised policy. We encourage you to review this page periodically to stay informed of how we protect your privacy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how rama2 handles your personal data, we are ready to listen and respond promptly:

• Privacy Email: [email protected] — please use the subject line "Privacy Enquiry" for priority processing. Response times are typically within 24–48 business hours.
• Live Chat: Contact our support team via live chat, available 24 hours a day in both Malay and English, for any urgent enquiries.
• Frequently Asked Questions: Visit the FAQ us for answers to frequently asked privacy questions.

We are committed to handling every privacy enquiry with professionalism, transparency and full respect for your rights under Malaysia's PDPA 2010.