raya Platform Privacy Notice

This page describes what we collect when you use raya and how we keep that data protected. Our privacy commitment centres on transparency: we tell you exactly what information we gather, why we need it, and who may access it. We do not sell your personal data to third parties, and we apply industry-standard encryption to all sensitive information stored on our servers.

We at raya operate under jurisdiction-restricted access policies. Our services are available only where local law permits. When you create an account on raya, you consent to our data practices as outlined here. If you do not agree with any aspect of this policy, you should not use our platform.

For questions about your data or to exercise your privacy rights, contact our support team via live chat or in-app messaging. Our team can assist users across all supported regions, including Jakarta, Surabaya, Bandung, Medan, and Semarang.

What data we collect on raya

We collect information in three categories: account registration data, transaction data, and behavioural data. At registration, we require your full name, date of birth, email address, phone number, and residential address. This information is mandatory for account creation and compliance with anti-money-laundering regulations.

When you deposit or withdraw funds on raya, we record the transaction amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), timestamp, and settlement status. We retain this data for audit and dispute resolution purposes. Before your first withdrawal, we require Know Your Customer (KYC) verification: a government-issued ID and proof of address. We store scanned copies of these documents encrypted on our servers.

We also collect behavioural data: which games you play (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), how long you play, your session timestamps, and your account balance history. This data helps us detect fraud, prevent account abuse, and understand platform usage patterns. We do not use this data for marketing profiling or third-party sale.

We collect only the data necessary to operate raya securely and comply with applicable law. We do not monetize your personal information.

How we use your data on raya

We use your personal information for five primary purposes. First, we verify your identity and prevent fraud. Our compliance team reviews KYC documents and cross-references your account data against known fraud patterns and sanctions lists. Second, we process your deposits and withdrawals. Your payment method and transaction history are shared with our payment processors to settle funds accurately and on time.

Third, we provide customer support. When you contact our team via live chat or in-app messaging, we access your account history to resolve your issue. Fourth, we comply with legal obligations. We may disclose your data to law enforcement or regulatory authorities if required by court order or applicable law. Fifth, we improve our platform. We analyse aggregate usage data (not linked to individual identities) to optimise game performance, payment flows, and user experience.

We do not use your data for direct marketing, unsolicited email campaigns, or third-party advertising. If you receive promotional messages from raya, you have opted in to those communications and can disable them in your account settings at any time.

Third-party processors and data location on raya

Our servers may sit outside your jurisdiction. We use data centres in multiple regions to ensure platform availability and redundancy. Your data is encrypted in transit and at rest using industry-standard protocols (TLS 1.2 or higher). We do not transfer your personal data to third parties except as necessary to process your transactions or comply with law.

Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive only the information required to settle your deposit or withdrawal. They operate under their own privacy policies, which we encourage you to review. We are not responsible for their data practices.

We use third-party analytics providers to measure platform performance and user engagement. These providers receive only aggregate, anonymised data—no personal identifiers. We also use anti-fraud vendors to detect suspicious account activity. These vendors receive transaction patterns and device fingerprints but not your name or contact details.

Registration data

Name, date of birth, email, phone, address. Required for account creation and compliance.

Transaction data

Deposit/withdrawal amounts, payment methods, timestamps. Retained for audit and dispute resolution.

KYC documents

Government ID and proof of address. Encrypted and stored; required before withdrawal.

Behavioural data

Game play history, session timestamps, account balance. Used for fraud detection and platform optimisation.

Your rights and data retention on raya

You have the right to access, correct, or delete your personal data on raya, subject to legal and operational constraints. If you request deletion of your account, we will remove your personal information from active systems within 30 days. However, we may retain transaction records and KYC documents for up to seven years to comply with anti-money-laundering regulations and tax law.

You may request a copy of all data we hold about you. Submit this request via our support team, and we will provide a machine-readable export within 15 business days. You may also object to certain data processing activities—for example, if you believe we are using your behavioural data inappropriately. We will review your objection and respond within 10 business days.

If you believe we have mishandled your data, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can attempt to resolve the issue directly.

Cookies and tracking on raya

We use cookies to maintain your session on raya and remember your preferences. Session cookies expire when you log out. Preference cookies (e.g., language selection, theme preference) persist for up to one year. We do not use third-party tracking cookies or retargeting pixels.

You may disable cookies in your browser settings, but this may impair your ability to use raya. We do not track you across other websites or apps.

Security practices on raya

We encrypt all data in transit using TLS 1.2 or higher. Your password is hashed using industry-standard algorithms and never stored in plain text. We conduct regular security audits and penetration testing to identify and remediate vulnerabilities. Our team monitors account activity for suspicious patterns—unusual login locations, rapid withdrawal requests, or multi-account access—and may temporarily lock your account pending verification.

Despite our security measures, no system is completely risk-free. We are not liable for data breaches resulting from your own actions: weak passwords, account sharing, or phishing attacks. We recommend using a strong, unique password and enabling two-factor authentication if available.

Policy updates and contact on raya

We may update this privacy notice at any time. Changes take effect immediately upon publication on this page. Your continued use of raya after an update constitutes acceptance of the revised policy. We recommend reviewing this page periodically, especially before major events like Liga 1 tournaments, Piala Indonesia, or Piala AFF, when our platform experiences higher traffic and we may adjust our data practices.

If you have questions about our privacy practices or wish to exercise your data rights, contact our support team via live chat, in-app messaging, or email. Our team operates in English and local languages and can assist with data access requests, deletion requests, or privacy concerns. We are committed to responding to all inquiries within standard business timelines.

Our full legal framework is outlined in our Terms and Legal noticeThis privacy notice complements those documents and should be read in conjunction with them. By using raya, you acknowledge that you have read and understood our privacy practices and consent to the collection and use of your data as described here.