🔒 Official Privacy Document

Privacy Policy Raya12 — Indonesia Member Data Protection

At raya12, your privacy and data security are not merely a legal obligation — they are a genuine priority we uphold at all times. This page transparently explains how we manage your personal information from the moment you register through every transaction you make.

Last updated: January 1, 2026
🛡️
Our Privacy Commitment
Applies to all raya12 members
✔ 256-bit SSL encryption for all data
✔ Data is not sold to third parties
✔ Right to data erasure is available
✔ Security systems updated regularly
✔ International regulatory compliance

Six Pillars raya12 Privacy Protection

The concrete measures we take to protect your personal information

🔐
End-to-End Encryption

All communications between your device and raya12 servers are encrypted using 256-bit TLS/SSL protocol — the same encryption standard used by international banks. Data sent and received cannot be read by unauthorized parties.

🏦
Financial Data Separation

Member financial information — including bank account details and e-wallet data — is stored separately from account profile data using a multi-layered database segmentation system. Even internal raya12 staff do not have full access to all member financial data at once.

👁️‍🗨️
Zero Data Selling

Raya12 never sells, rents, or trades your personal data to third parties for commercial purposes. The data you provide is used solely to deliver better service to you — not as a business commodity.

🗑️
Right to Data Erasure

As a raya12 member, you have the full right to request deletion of your personal data from our systems at any time. Deletion requests will be processed within 30 business days, unless data retention obligations under applicable regulations apply.

🔄
Regular Security Audits

Raya12's security systems undergo regular audits and penetration testing by independent cybersecurity teams. Any vulnerabilities discovered are immediately addressed and resolved before they can be exploited, ensuring member data remains consistently protected.

📱
Two-Factor Authentication

Raya12 supports two-factor authentication (2FA) for all member accounts as an added security layer. With 2FA enabled, your account stays secure even if your password is compromised — because access still requires a second verification from your device.

1

Information We Collect

Raya12 collects various types of information from members in order to provide optimal, secure, and regulation-compliant services. The information we collect falls into three main categories:

Information you provide directly:

  • Identity data: full name, date of birth, gender, and ID number (National ID/Driver's License) during the account verification (KYC) process.
  • Contact information: active email address, phone number, and residential address.
  • Financial data: bank name, account number, or e-wallet details for deposit and withdrawal purposes.
  • Verification documents: photos or scans of official identity documents uploaded during the KYC process.

Automatically collected information:

  • Technical data: IP address, device type, operating system, browser type, and screen resolution.
  • Activity data: login history, games played, bet values, session duration, and pages visited.
  • Transaction data: deposit history, withdrawal history, claimed bonus history, and wins history.
  • Location data: approximate location based on IP address for geographic compliance purposes.

Data collection transparency: We only collect information that is strictly necessary to operate raya12 services safely and effectively. There is no excessive data collection or gathering of information irrelevant to the services we provide.


2

How We Use Your Data

Every piece of information we collect is used for specific, legitimate, and proportionate purposes. raya12 uses your data for the following:

  • Account management: Creating, verifying, and maintaining your account on the raya12 platform.
  • Transaction process: Processing deposits, withdrawals, and all other financial transactions accurately and on time.
  • Regulatory compliance: Fulfilling Know Your Customer (KYC), Anti-Money Laundering (AML), and other applicable legal requirements.
  • Platform security: Detecting suspicious activity, preventing fraud, and protecting the platform ecosystem from abuse.
  • Service improvement: Analyzing usage patterns in aggregate (not personally identifiable) to improve the gaming experience.
  • Communications: Sending important account information, policy updates, and — with your consent — relevant promotional information.
  • Customer support: Responding to inquiries, handling complaints, and providing effective technical support.

Never for third-party advertising: raya12 does not use your personal data to display ads from other platforms or brands, and does not share your gaming behavior data with any advertising network.


3

Legal Basis for Data Processing

The processing of personal data by raya12 is based on valid legal grounds. We identify at least one applicable legal basis for every data processing activity we carry out:

Legal Basis Usage Examples at raya12
Contract Performance Processing transactions, managing accounts, processing winning withdrawals
Legal Obligation KYC verification, AML reporting, transaction record retention in accordance with regulations
Legitimate Interests Fraud detection, platform security, and service quality improvement
Agreement Sending promotional emails, optional personalization of the gaming experience

Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.


4

Sharing Data with Third Parties

Raya12 is committed to never selling your personal data to anyone. However, to deliver complete services and meet legal obligations, there are limited situations where we may need to share certain information:

  • Payment providers: Local banks, e-wallet providers (such as GoPay, OVO, DANA), and payment processors receive only the information necessary to complete your financial transactions. All partners are bound by strict data confidentiality agreements.
  • Game providers: Game providers such as Pragmatic Play, PG Soft, and others receive only the minimal technical data required to run your game session. They do not receive any personally identifiable information.
  • Legal authority: raya12 is required to respond to official orders from authorized legal authorities in accordance with applicable legal procedures. We will notify you of such disclosures unless prohibited by law.
  • Technical service providers: Cloud infrastructure and cybersecurity partners that help us operate the platform are bound by strict data processing agreements and are not permitted to use your data for any other purpose.

No data sharing for advertising: raya12 does not work with data brokers, advertising platforms, or third-party marketing networks when it comes to sharing member personal data for external promotional purposes.


5

Cookies & Tracking Technologies

Raya12 uses cookies and similar tracking technologies to enhance your gaming experience and ensure the platform runs smoothly. The types of cookies we use are as follows:

  • Essential cookies: Required for the platform to function correctly. Includes login session cookies, language preferences, and CSRF security. These cookies cannot be disabled.
  • Functional cookies: Remembering your preferences such as display settings and the last game played for a more personalized experience. You can disable this in your account settings.
  • Analytics cookies: Helps us understand how members use the platform in aggregate (anonymized) so we can continuously improve our services. This data does not identify you personally.

You can manage your cookie preferences through your browser settings or the privacy settings within your account. Disabling certain cookies may affect some platform features.


6

Data Security

Raya12 applies comprehensive technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction:

  • Data encryption: All data transmitted between your device and our servers is protected by 256-bit TLS/SSL encryption. Sensitive data stored in our database is also encrypted using AES-256 standards.
  • Access controls: Only staff with verified need-to-know access can view member data, and all access is logged in an audit trail that is monitored on a regular basis.
  • Secure infrastructure: raya12 servers are hosted in certified data centers with multi-layered physical and cyber security, including advanced firewalls, intrusion detection systems, and DDoS protection.
  • Regular security updates: All systems and software are updated regularly to patch newly discovered security vulnerabilities.
  • Team training: All raya12 staff with access to member data receive regular data security training.

Security incident reporting: In the event of a significant security incident affecting your data, raya12 is committed to notifying affected members within 72 hours of becoming aware of the incident, in line with international data breach notification standards.


7

Data Retention

Raya12 retains your data for as long as necessary to fulfill the purposes of collection and applicable legal obligations. Our general retention policy is as follows:

  • Active account data: Retained for as long as your raya12 account is active, plus the regulation-required retention period after account closure.
  • Financial transaction data: Retained for a minimum of 5 years in accordance with AML requirements and international financial regulations applicable to licensed online gaming platforms.
  • Identity verification data (KYC): Retained for a minimum of 5 years after the business relationship ends, as required by anti-money laundering regulations.
  • Support communication logs: Retained for 2 years for dispute resolution and service improvement purposes.
  • Technical data & cookies: Generally retained for 12–24 months depending on the type of data.

Once the retention period ends, data will be permanently deleted or anonymized so it can no longer be linked to your identity.


8

Member Rights Over Personal Data

As a raya12 member, you have a range of rights you can exercise at any time regarding your personal data. Here are those rights and how to use them:

👁️
Right to Access

Requesting a copy of the personal data we hold about you, including how that data is used.

✏️
Right to Rectification

Requesting correction of inaccurate or incomplete data held in our systems.

🗑️
Right to Erasure

Requesting deletion of your personal data, subject to applicable legal retention obligations.

⏸️
Right to Restriction

Requesting restriction of your data processing under certain conditions recognized by regulation.

📤
Right to Portability

Receiving your data in a structured, machine-readable format for transfer to another service.

🚫
Right to Object

Objecting to data processing based on our legitimate interests.

To exercise any of the rights above, contact our privacy team via Live Chat or email at [email protected] with the subject line "Data Privacy Rights Request". We will respond within 30 business days of receiving your request.


9

Cross-Border Data Transfer

As a platform operating internationally, raya12 data may be stored or processed on servers located outside Indonesia. When this occurs, we ensure that such data transfers are carried out with adequate protections in place:

  • Use of internationally recognized standard contractual clauses to ensure an equivalent level of data protection.
  • Adequacy assessment to ensure the destination country maintains adequate data protection standards.
  • Data in transit is encrypted using industry-standard security protocols.

Global protection commitment: Regardless of where your data is physically stored, the level of protection you receive as a raya12 member remains consistent with the standards set out in this Privacy Policy.


10

Minor Privacy

Raya12 services are strictly intended for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If raya12 becomes aware that personal data from individuals under the age of 18 has been collected without proper age verification, we will immediately take steps to delete that data and close the associated account in accordance with applicable child protection policies.

Parents or guardians who suspect their child has created an account on raya12 can contact our support team directly via Live Chat for immediate assistance.


11

Privacy Policy Changes

Raya12 may update this Privacy Policy from time to time to reflect changes in our data processing practices, service updates, or regulatory requirements. Any changes will be communicated through:

  • A clearly displayed notice on this page by updating the "Last updated" date.
  • Email notification to your registered address for material and significant changes.
  • Pop-up notification within the raya12 platform the first time you log in after changes take effect.

We encourage you to review this Privacy Policy periodically. Continued use of raya12 services after changes take effect will be considered acceptance of the updated policy.


12

Privacy Contact & Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, the raya12 privacy team is ready to assist through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week, directly on the raya12 platform. This is the fastest way to get a response.
  • Email: [email protected] — mark your email with the subject "Privacy Policy" for priority handling. We respond within 1×24 business hours.

For requests related to your privacy rights (access, correction, deletion, data portability), please include adequate identity verification so we can process your request securely.

Always remember: The raya12 team will never ask for your account password, PIN, or OTP via email or chat. If you receive any communication claiming to be from raya12 and requesting such sensitive information, please report it to us immediately.

Frequently Asked Questions About Privacy at raya12

Yes, identity documents you upload during the KYC process are encrypted using AES-256 and can only be accessed by authorized and specially trained verification staff. These documents are never shared with external parties unless required by applicable law. Once the verification process is complete, access to your original documents is further restricted in accordance with our data retention procedures.

You may submit a data deletion request at any time via Live Chat or email at [email protected]. raya12 will process such requests within 30 business days. Please note, however, that certain data — particularly financial transaction records and KYC data — must be retained for a minimum of 5 years in accordance with international anti-money laundering regulations, regardless of deletion requests. Data subject to mandatory retention will be anonymized to the greatest extent possible.

No. raya12 is fully committed to never selling, renting, or sharing your personal data with third-party advertisers or data brokers. We only use your data for our own platform's operational needs. If you agreed at registration, we will only send you promotional emails about raya12 offers — and you can unsubscribe at any time through your account settings.

Once your account is closed, your profile data and gaming preferences will be deleted from our active systems. However, financial transaction data and identity verification (KYC) records are retained for the period required by regulation (generally 5 years). During this retention period, such data is stored in an isolated archive system with strictly limited access and can only be accessed when required by law or a valid regulatory request.

Your Data Is Protected — Play with Peace of Mind at raya12

Join over 1 million members who already enjoy the security and comfort of playing on raya12. Your privacy is our priority from day one and beyond.

Bahasa Indonesia