raft Terms of Use

Platform security layers

We at raft implement comprehensive security measures to protect your account and payment information throughout the deposit, gameplay, and withdrawal workflow. Every connection between your mobile device or desktop and our servers is encrypted using SSL/TLS protocols — the same encryption standard employed by financial institutions for online banking. This encryption is automatic and transparent; you do not need to enable any settings. Your account password is stored using one-way cryptographic hashing, a method that ensures even our staff cannot reverse-engineer or view your original password. If you forget your password, we initiate a secure reset workflow: we send a verification link to your registered email or phone, and you create a new password through that link. We never transmit passwords via email or plaintext. Two-factor authentication (2FA) adds an additional security layer: once enabled, logging into raft from a new device or after a logout requires a one-time verification code sent to your email or SMS. This prevents account access even if someone obtains your password through phishing or data breach elsewhere. Our account security workflow includes automatic session timeouts — after subject to verification of inactivity, you are logged out, protecting your account if you leave your phone unattended at a café or during your commute. We monitor all account activity in real time, flagging suspicious patterns such as multiple failed login attempts, unusually large withdrawals, or logins from unexpected geographic locations. When we detect anomalies, we contact you immediately to verify the activity is legitimate or lock your account for protection. Your payment data — e-wallet account numbers, bank account details, credit card information — is never stored on your device or our servers in plaintext form. We use tokenisation, storing only a reference ID. Our data centres maintain 24/7 physical security, redundant power supplies, automated backups, and disaster recovery protocols, ensuring your account data is never lost due to hardware failure or natural disaster. We undergo quarterly security audits by independent third-party firms; audit reports and compliance certificates are available upon request to our compliance team.

Game fairness and RTP

Games on raft fall into two categories: RNG-driven games and live-dealer games. RNG-driven games — such as slots like Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, and Mahjong Ways — use certified Random Number Generators that have undergone independent third-party testing and audit. These audits confirm that our RNG produces statistically random outcomes and that no bias or manipulation exists. RNG fairness means each spin outcome is independent; results from previous spins have zero influence on future spins. We publish the Return to Player (RTP) percentage for each RNG game, representing the theoretical long-term payout rate calculated across millions of spins across all players globally. RTP applies to the entire player base over time, not to individual sessions or players. In the short term, players experience variance — streaks of losses or wins that deviate significantly from published RTP — which is statistically normal and expected in games of chance. We do not adjust or manipulate individual spins to meet daily quotas, punish frequent winners, or favour new players. Each spin outcome is determined by our RNG algorithm without human intervention or bias. Live-dealer games — blackjack, roulette, baccarat, Dragon Tiger — operate differently: outcomes depend on physical dealing or ball physics, not software algorithms. However, fairness is ensured through live-streamed video, which allows you to observe the entire dealing or spinning process in real time. Our dealers work in compliance with gaming regulations and undergo regular training and background checks. Game rules are published and audited; blackjack payouts follow standard casino rules (21 pays 1.5:1), roulette odds are fixed by wheel physics, and baccarat outcomes depend on card dealing. All games are audited monthly for compliance with published rules and payout structures.

KYC verification process

Know Your Customer (KYC) verification is a legal requirement in all jurisdictions where we at raft operate. When you register on raft, we collect your full legal name, date of birth, and residential address. Before you can deposit funds or play games, you must submit a government-issued identity document — such as a national ID card, passport, or driver's licence — and a recent utility bill (electricity, water, or internet bill dated within the last three months) to verify your residential address. Our compliance team reviews these documents manually; typical review time is one business day, though peak periods may extend to two days. If you access raft during holidays like Imlek, Idul Fitri, or Idul Adha, review may take slightly longer due to reduced staff. Documents must be clear, in focus, and display all relevant information (full name, date of birth, issue date, expiry date, and issuing authority). We accept digital photographs or scanned PDFs. Once verified, your account is flagged as "KYC complete," and you can deposit, withdraw, and play without further documentation, unless you request changes to your account details (name, residential address). We store your identity documents in encrypted form within secure data facilities and never share them with third parties without your explicit written consent, except where legally required by regulators, law enforcement, or financial authorities. If a document is rejected — for example, if it is expired, illegible, or does not match your account details — we notify you immediately with specific feedback and give you an opportunity to resubmit. Some jurisdictions or circumstances may require additional verification for large withdrawal requests, such as video-call verification, proof of source of funds, or tax documentation. If applicable to your account, our support team will guide you through these steps clearly and completely.

User feedback and review channels

We at raft actively encourage players to share feedback about our platform, games, and services. Reviews can be submitted via your account dashboard after you complete a gaming session; they are moderated to remove spam and abusive content, but genuine feedback — positive or negative — is published and visible to other players considering raft. When reading reviews from other players, consider their experience level and timeframe. A new player unfamiliar with how randomness operates in short-term gaming sessions may rate a slot game lower after experiencing early bad luck; this reflects their personal outcome, not the game's fairness or our platform's quality. A long-time player's review, reflecting hundreds or thousands of hands or spins, carries more statistical weight because it approaches the true long-term performance aligned with published RTP and game mechanics. We do not fabricate reviews, pay players to post positive comments, or artificially suppress negative feedback. We welcome honest third-party assessment from independent review websites and do not attempt to censor or influence critical reviews. If you experience a technical problem — such as a connection drop mid-game, a missing balance update, or a disputed transaction outcome — report it to our support team immediately with as much detail as possible: your account ID, the game or transaction ID, the time of the issue, your device type, and your connection type. Our team investigates every complaint and provides a resolution or detailed explanation within 48 hours. Our complaint resolution rate exceeds non-specific info, meaning most issues are resolved to the player's satisfaction or through appropriate remediation if a system error is confirmed. You can contact support via in-app chat, email, or our FAQ page, which is updated regularly with common questions and answers from players across Jakarta, Surabaya, Bandung, and Medan.