Does Rainbet share my information with other companies for advertising purposes?

No. Rainbet does not sell, rent, or share users' personal data with other companies for advertising or marketing purposes. Your data is only shared with third parties in the limited categories set out in Section 5 of this Privacy Policy — namely payment service providers, game providers, KYC providers, and legal authorities where required by law — and in all cases, data is shared only to the extent necessary for the stated purpose.

Can I request Rainbet to delete all my personal data?

Yes, you have the right to request deletion of your personal data under certain circumstances. However, please note that Rainbet has legal obligations to retain certain records — for example, financial transaction records for 7 years and KYC documents for 5 years after account closure — in accordance with anti-money laundering (AML) requirements. Data subject to statutory retention obligations cannot be deleted upon request, but any other data not required by law will be deleted or anonymised within 90 days.

What happens to my data if I close my Rainbet account?

When your account is closed at your request (and not due to a violation), Rainbet will deactivate your account immediately. Data that is not required to meet legal obligations will be deleted or anonymised within 90 days. Data that must be retained under applicable law (financial records, KYC) will be kept for the prescribed period but will not be used for any active purpose and may only be accessed by authorised personnel for compliance purposes.

Is my data stored on servers in Malaysia or overseas?

Rainbet uses server infrastructure designed to deliver optimal performance and security for Malaysian users. Regardless of where data is physically stored, it is protected by the same technical security measures — AES-256 encryption, strict access controls, and continuous monitoring. In all cases, cross-border data transfers are governed by adequate safeguards, including contractually binding data processing agreements.

How do I stop receiving promotional emails from Rainbet?

There are several ways to stop receiving marketing communications from Rainbet: (1) Click the "Unsubscribe" link found at the bottom of any promotional email you receive; (2) Log in to your Rainbet account and go to Settings > Notifications to disable marketing communications; or (3) Contact Rainbet customer support via live chat or email support@rainbet.express with a request to opt out of marketing communications. Please note that opting out of marketing does not prevent Rainbet from sending important account-related communications such as transaction notifications, security alerts, or essential service information.

What does Rainbet do in the event of a data breach?

In the event of a data breach affecting the confidentiality, integrity or availability of users' personal data, Rainbet has a comprehensive incident response procedure in place. Immediate steps to be taken include: isolating and containing the breach, assessing its scope and impact, notifying the relevant authorities within the timeframe required by law, and informing affected users within 72 hours with details on the nature of the breach, the types of data potentially exposed, and the actions being taken to protect them. Rainbet will also provide guidance to affected users on protective measures they can take.

rainbet | Privacy Policy and Your Data Protection

1

Introduction & Scope of Privacy Policy

Rainbet (referred to as "we", "the platform" or "Rainbet") is the operator of an online casino gaming and Sports Betting platform accessible at rainbet.express. We understand that the trust of our Malaysian users is our most valuable asset — and that trust begins with how we handle your personal data.

This Privacy Policy ("Policy") describes:

The types of personal information we collect from Rainbet platform users
The purpose and legal basis for processing that data
How we protect your personal data from unauthorised access, use or disclosure
Your rights regarding the personal data we hold
How to contact us for privacy-related enquiries or requests

This Policy applies to all users who register a Rainbet account, browse the rainbet.express website, use the Rainbet mobile app (if available), or interact with any services provided by Rainbet. It covers all activity on the platform — from registration and deposits through to slots, Live Casino, blackjack, poker, badminton betting, football betting, and all other activities on Rainbet.

Important Note: This policy is written in Malay for the convenience of local users. Rainbet respects every individual's right to privacy and is committed to ensuring that data processing is handled responsibly, transparently and securely at all times.

2

Types of Personal Data We Collect

Rainbet only collects data that is genuinely necessary to provide our platform services, meet legal obligations, and maintain platform security and integrity. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

Registration Data & Identity Verification (KYC)

Full name as stated on identity card
Malaysian identity card number (MyKad) or passport number
Date of birth and gender
An active email address
Malaysian mobile number
Current residential address
Copies of identity documents and proof of address (for KYC purposes)

Financial & Transaction Data

Deposit records — payment method used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u FPX, CIMB Clicks FPX), amount in RM, and transaction timestamp
Withdrawal records — destination account, amount, and processing status
Account balance history and fund movements
Records of bonuses claimed and rollover status

Gaming Activity Data

Gaming history — slots played, bets placed on badminton and other Sports Betting, Live Casino sessions, blackjack and poker games
Net wins and losses record
Game preferences and platform usage patterns
Limits set through responsible gaming tools

Technical & Usage Data

IP address and general geographic location (state/city)
Device type, operating system, and web browser used
Access and session log data
Cookie data and device identifiers (further explained in Section 8)

Data We Do Not Collect: Rainbet does not directly collect credit or debit card numbers — payments are processed through authorised third-party payment providers. We also do not collect sensitive information such as medical records or religious beliefs unless directly relevant to a responsible gaming self-exclusion request.

3

How We Use Your Personal Data

Every piece of data collected by Rainbet has a clear and specific purpose. We do not use your data for any purpose beyond those stated below without first obtaining your consent.

Purpose of Use	Types of Data Used	Requirements
Registration & account management	Name, email, phone, address	Mandatory
Identity verification (KYC)	MyKad/passport, proof of address	Mandatory (legal)
Deposit & withdrawal processing	Financial data, wallet information	Mandatory
Fraud prevention & security	IP address, transaction patterns, log data	Mandatory (legal)
Customer support	Account information, transaction history	Mandatory
Promotional communications & bonuses	Email, phone number	Consent (withdrawable)
Platform improvements & analytics	Usage data, gaming patterns	Legitimate interests
Responsible gambling	Gaming patterns, set limits	Public interest

Regarding marketing communications: if you provided consent during registration, Rainbet may send you email or SMS notifications about new promotions, exclusive bonuses and special offers. You may withdraw this consent at any time through the notification settings in your account or by contacting our customer support.

4

Legal Basis for Data Processing

Rainbet processes your personal data on the basis of one or more valid legal grounds for each processing activity. These grounds ensure that all data processing we carry out is justified, lawful, and accountable.

Contract Performance: The data processing required to provide Rainbet's platform services to you — including account management, deposit and withdrawal processing, and the handling of bets — is based on the necessity to perform the agreement between you and Rainbet.
Legal Obligation: Rainbet has legal obligations to comply with Know Your Customer (KYC), anti-money laundering (AML), and other regulatory requirements. Data processing for these purposes is mandatory and cannot be waived.
Consent: For non-mandatory processing such as direct marketing communications, we require your explicit consent. This consent may be withdrawn at any time without affecting the lawfulness of any processing carried out prior to withdrawal.
Legitimate Interest: Rainbet has a legitimate interest in processing data for the purposes of fraud prevention, platform security, usage analytics to improve our services, and risk management — provided these interests do not override your fundamental rights and freedoms.

Right to Object: Where processing is based on legitimate interest, you have the right to object. If you do so, Rainbet will cease that processing unless we can demonstrate compelling grounds that override your objection, or a legal requirement to continue.

5

Data Sharing with Third Parties

Rainbet does not sell users' personal data. However, in the course of operating the platform, we share certain data with a limited set of third-party categories under the circumstances outlined below:

Payment Service Providers: Malaysian digital wallet and local banking providers — including systems that process Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u FPX, and CIMB Clicks transactions — receive only the minimum transaction data necessary to process your payment. All such providers are bound by strict confidentiality agreements and data security standards.
Game Providers: Third-party game providers such as Pragmatic Play, Playtech, NetEnt, and others receive the session identifiers required to deliver games to you. They do not receive your personal identity information directly.
Identity Verification Providers: A third-party KYC service we use to verify user identity documents. Data is shared securely and deleted once the verification process is complete.
Legal Authorities: Rainbet will disclose personal data to Malaysian authorities or competent international authorities when required to do so by applicable law, court order, or as part of a legitimate financial crime investigation.
Auditors & Professional Consultants: In certain circumstances, independent auditors or legal counsel bound by professional confidentiality obligations may access specific data within a limited scope during audits or legal assessments.

In all data-sharing instances, Rainbet ensures that the receiving party has adequate data protection measures in place and uses the data solely for the specified purpose.

6

Data Security — How Rainbet Protects Your Information

Rainbet continuously invests in security infrastructure to ensure users' personal data is protected to the highest standard. The technical and organisational measures we have implemented include:

256-bit SSL/TLS Encryption: All data transmitted between your browser and Rainbet's servers is protected with 256-bit SSL/TLS encryption — the same standard used by global banking institutions. The padlock icon or "https://" in your address bar confirms this secure connection.
Data-at-Rest Encryption (AES-256): Personal data stored in Rainbet's databases is encrypted using AES-256 — one of the strongest encryption standards currently available. Even if a database were physically compromised, the stored data cannot be read without the encryption key.
Layered Access Controls: Access to user data is restricted on a need-to-know basis. Rainbet staff who do not require access to specific data within the scope of their role will not be able to access it, regardless of their position.
24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity, intrusion attempts, or unauthorised access. Alerts are sent to Rainbet's cybersecurity team in real time.
Regular Penetration Testing: Rainbet conducts regular penetration testing through independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
Secure Data Backup: Data backups are performed regularly to geographically separate server locations, encrypted and stored to the same security standards as production data. This ensures service continuity in the event of disaster recovery.

Shared Responsibility: While Rainbet takes all reasonable security measures, the security of your account also depends on your own actions. Use a strong and unique password, do not share your login credentials, and always log out of your account after using a public device.

7

Data Retention Period

Rainbet does not retain personal data for longer than necessary. Retention periods are determined based on operational requirements, legal obligations, and the original purpose for which the data was collected.

Active Account Data: For as long as your account remains active, registration and user profile data is retained and updated as needed.
Financial Transaction Records: Records of deposits, withdrawals, and financial activity are retained for 7 years after the transaction date, in accordance with applicable anti-money laundering (AML) and financial audit requirements.
KYC Documents: Identity verification documents are retained for 5 years after account closure or the date the documents were submitted, whichever is later, in line with regulatory requirements.
Gaming Activity Records: Gaming history is retained for 3 years for dispute resolution, responsible gaming, and regulatory compliance purposes.
Log & Technical Data: Access logs and technical data are retained for 12 months for cybersecurity and fraud detection purposes.
After Account Closure: When an account is closed at the user's request (not due to a policy violation), any data not required by law will be deleted or anonymised within 90 days.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8

Cookies & Tracking Technologies

Rainbet uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and understand usage patterns. The following are the categories of cookies we use:

You can manage cookie settings through your web browser settings. Please note that disabling all cookies may affect certain functions of the Rainbet platform. A cookie notice will be displayed on your first visit to the website to obtain your consent.

9

Your Personal Data Rights

As a Rainbet user, you have the following rights regarding your personal data. Rainbet is committed to respecting and facilitating the exercise of these rights within a reasonable timeframe.

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 30 days of receiving your request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Simple corrections can be made directly in your account settings.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, when the data is no longer needed for its original purpose. Such requests are subject to any applicable legal retention obligations.

Right to Restrict Processing

In certain circumstances, you may request that we temporarily restrict the processing of your data — for example, while you are disputing the accuracy of your data or objecting to certain processing activities.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer that data to another party if you wish.

Right to Withdraw Consent

For processing based on your consent (such as marketing communications), you may withdraw that consent at any time through your account settings or by contacting our support team.

To exercise any of the rights above, contact the Rainbet privacy team by email at support@rainbet.express stating the right you wish to exercise and your account information for verification purposes. We will respond within 30 days.

10

Children's Data Protection

The Rainbet platform is intended exclusively for individuals aged 18 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

Rainbet takes child protection very seriously. The following measures are in place to prevent underage individuals from using the platform:

An age verification process during registration requiring date of birth confirmation
KYC checks, which may include identity document verification to confirm actual age
Monitoring of usage patterns to identify warning signs of potentially underage users
Immediate closure of any account confirmed to belong to a minor, with a full refund of all deposited funds

Immediate Action Required: If you believe a child has registered for or is using the Rainbet platform, please contact us immediately at support@rainbet.express. We will investigate and take prompt action, including closing the account in question and deleting all collected data.

11

Amendments to This Privacy Policy

Rainbet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. Any amendments will take effect upon publication of the updated Privacy Policy on this page.

For material changes — such as changes to the types of data collected, new processing purposes, or changes to user rights — Rainbet will:

Sending email notifications to all registered users at least 14 days before the changes take effect
Displaying a prominent notice on the platform's main page for a specified period
Maintaining an archive of previous versions of the Privacy Policy for users' reference

We encourage you to review this Privacy Policy page periodically. The date of the most recent update will always be displayed at the top of this page. Continued use of the platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy.

If you disagree with any amendments to the Privacy Policy, you have the right to close your account before the changes take effect by contacting Rainbet customer support.

12

Contact Us — Privacy-Related Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how Rainbet handles your personal data, please contact us through the following channels:

Privacy Email: support@rainbet.express — please mark the email subject with "[PRIVACY]" to ensure it is handled by our privacy team
Live Chat: Available 24/7 through the Rainbet platform — ideal for general enquiries and issues requiring immediate attention

We are committed to:

Providing acknowledgement of your request within 48 hours of receipt
Resolving standard privacy enquiries within 14 working days
Completing data subject rights requests (access, correction, deletion) within 30 working days

Unresolved Complaints: If you are not satisfied with how Rainbet has handled your privacy request after contacting us, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to reach out to us first so we can work to resolve the matter directly.

Rainbet Privacy Policy — How We Protect Your Personal Data

Rainbet's Six Core Privacy Principles