Privacy Policy — How ra777 Protects Your Data

1 Introduction

ra777 is Pakistan's trusted online casino and sports betting platform, serving registered players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We are committed to protecting the privacy of every player who registers and uses our platform. This Privacy Policy describes our practices with respect to personal information in full compliance with applicable international data protection standards.

When we refer to "personal data" or "personal information" in this policy, we mean any information that identifies or can reasonably identify you as an individual — such as your name, CNIC number, mobile number, email address, or device identifiers. This policy applies to all personal data collected through the ra777 website, mobile interface, applications, customer support interactions, and any other touchpoints associated with the ra777 brand.

ra777 acts as the data controller with respect to your personal information. As data controller, we determine the purposes and means of processing your data and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

2 Data We Collect

ra777 collects personal data through several channels — directly from you at registration, automatically through your use of the platform, and occasionally from third-party verification or payment providers. The categories of data we collect include:

3 How We Use Your Data

ra777 uses your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that would be incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are:

• Account Management: To create, verify, and maintain your ra777 account, including processing your registration, authenticating your login, and managing your account preferences and settings.
• Identity Verification (KYC): To verify your identity and age (21+) in accordance with our licensing obligations and fraud prevention policies. KYC checks may use your CNIC, passport, or other government-issued documentation.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Crypto payment methods. Financial data is shared with payment processors strictly to facilitate transactions.
• Service Delivery: To provide you with access to cricket betting, PSL markets, live dealer games, slot games, the Bird Catcher game, the Loyalty Program, and all other ra777 services.
• Responsible Gaming: To monitor gaming behaviour and identify players who may be at risk of problem gambling. This includes implementing deposit limits, session reminders, cooling-off periods, and self-exclusion where necessary.
• Fraud & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multiple account registrations, bonus abuse, and other prohibited conduct.
• Legal Compliance: To fulfil our obligations under applicable international gaming regulations, anti-money laundering (AML) requirements, and any lawful requests from regulatory authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and ra777 news — but only where you have consented to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse player behaviour, identify technical issues, and improve the overall quality, usability, and performance of the ra777 platform.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and effective manner.

4 Legal Basis for Processing

ra777 processes your personal data on the following legal bases, as recognised under applicable international data protection frameworks:

• Contractual Necessity: Processing necessary to perform our contract with you — i.e., to provide the ra777 gaming and betting services you have registered to use, process your payments, and manage your account.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including KYC requirements, AML obligations, gaming licence conditions, and lawful authority requests.
• Legitimate Interests: Processing necessary for ra777's legitimate interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given, and informed consent — primarily for marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

ra777 does not sell your personal data to third parties. We share your data only in the following limited circumstances and only to the extent strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment providers receive the financial data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and applicable financial regulations.
• KYC & Identity Verification Providers: Where ra777 uses third-party verification services to conduct KYC checks, your identity documents and personal details may be shared with those providers for verification purposes only.
• Technology & Platform Providers: Third-party software providers who supply ra777 with gaming technology, live dealer infrastructure, random number generation systems, or platform hosting services may process limited technical data as part of service delivery.
• Regulatory & Legal Authorities: ra777 may disclose personal data to gaming regulators, law enforcement agencies, tax authorities, or other public bodies where required to do so by law, court order, or valid regulatory request.
• Fraud Prevention Agencies: Where fraudulent activity or money laundering is suspected, ra777 may share relevant data with anti-fraud networks and financial intelligence bodies.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ra777's business, player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

6 Cookies & Tracking Technologies

ra777 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and deliver a personalised experience. The types of cookies used on ra777 include:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Remember your preferences such as preferred language, currency display, and game settings to improve your experience on return visits.
• Analytics Cookies: Used to collect anonymised information about how players interact with ra777 — which pages are visited most, how long sessions last, and where players navigate from. This data helps ra777 improve the platform over time.
• Marketing Cookies: Used to track the effectiveness of ra777's promotional campaigns and to show relevant offers to players who have consented to marketing communications. These cookies are only activated with your consent.

You can manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may impair your ability to use the ra777 platform. For marketing and analytics cookies, you may withdraw consent without affecting your access to core services.

7 Data Retention

ra777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal retention requirements. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your ra777 account plus a minimum of five (5) years following account closure, to fulfil AML, KYC, and gaming regulatory obligations.
• Transaction & Financial Records: Retained for a minimum of seven (7) years in accordance with financial record-keeping requirements applicable to licensed gaming operators.
• KYC Documentation: Retained for the duration of the account relationship and for five (5) years after account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of the interaction unless subject to a longer retention requirement due to an ongoing dispute or investigation.
• Marketing Consent Records: Retained for as long as you remain subscribed and for two (2) years following withdrawal of consent, as evidence of the consent and its withdrawal.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud detection purposes, after which it is anonymised or deleted.

When personal data is no longer required for its original purpose and no legal retention obligation applies, ra777 will securely delete or anonymise it.

8 Data Security

ra777 takes the security of your personal data seriously and applies industry-standard technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ra777 platform is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology. You should always look for "https" in the ra777.club URL to confirm the secure connection is active.
• Encrypted Data Storage: Sensitive data — including financial details, identity documents, and passwords — is stored in encrypted form using industry-standard encryption algorithms. Passwords are hashed and salted; ra777 staff cannot view your password in plain text.
• Access Controls: Access to player personal data within ra777's internal systems is strictly limited to authorised personnel who require it to perform their job functions. All staff with data access are subject to confidentiality obligations.
• Two-Factor Authentication: ra777 offers two-factor authentication (2FA) for player accounts and mandates it for all internal staff accessing player data systems.
• Regular Security Audits: ra777's platform and data infrastructure undergo regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential risks.
• Incident Response: In the event of a data breach that poses a risk to players' rights and freedoms, ra777 will notify affected players and relevant authorities within the timeframes required by applicable law.

9 Your Rights

As a player registered on ra777, you hold the following rights with respect to your personal data. These rights may be subject to certain legal limitations or exceptions where applicable:

• Right of Access: You have the right to request a copy of the personal data ra777 holds about you, along with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by ra777.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to legal retention obligations — ra777 may be required to retain certain data even after account closure.
• Right to Restriction: You have the right to request that ra777 restricts the processing of your personal data in certain situations, such as where you contest its accuracy or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on ra777's legitimate interests and to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" along with your registered name and mobile number for verification. ra777 will respond to all valid requests within thirty (30) days.

10 Children's Privacy

ra777 operates exclusively for adults. Our platform is strictly restricted to individuals who are 21 years of age or older. ra777 does not knowingly collect, solicit, or store personal data from any individual under the age of 21.

If ra777 discovers or is notified that personal data belonging to an individual under 21 has been collected, we will immediately suspend the associated account, delete the personal data without delay, and take appropriate steps under our age verification and responsible gaming policies.

11 International Data Transfers

ra777 operates as an internationally licensed gaming platform. As a result, your personal data may be processed by ra777 or its service providers in countries outside Pakistan, including countries where ra777's technology infrastructure, payment systems, or third-party providers are based.

Where personal data is transferred internationally, ra777 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that applied within Pakistan. Such safeguards may include:

• Contractual data protection clauses binding the receiving party to equivalent privacy standards.
• Processing only by third parties that are certified under internationally recognised data protection frameworks.
• Transfers to jurisdictions that provide an adequate level of data protection as assessed by relevant data protection authorities.

By registering on ra777 and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data under the safeguards described above.

12 Third-Party Links

The ra777 platform may contain links to third-party websites, services, or payment portals. This Privacy Policy applies exclusively to ra777 and does not govern the data practices of any third-party website or service. ra777 is not responsible for the privacy practices, content, or security of any external site or service.

We encourage you to review the privacy policy of any third-party service — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — before submitting personal or financial information through their platforms. Your interactions with payment processors are governed by their own terms and privacy policies.

13 Changes to This Policy

ra777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. Where changes are material — meaning they significantly affect how we collect or use your personal data — ra777 will notify registered players via email or via a prominent notice on the platform prior to the changes taking effect.

Minor or clarificatory changes may be made without direct notification, but the revised policy will always be accessible on this page with an updated effective date. Your continued use of the ra777 platform following any change to this Privacy Policy constitutes your acceptance of the updated policy.

We encourage all players to review this Privacy Policy periodically, particularly before making deposits, initiating withdrawals, or sharing any new personal information with ra777.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ra777 handles your personal data, please contact us through the following channels:

• Email: [email protected] — Subject line: "Privacy Enquiry"
• Live Chat: Available 24/7 directly within your ra777 account dashboard
• Response Time: Privacy-related email enquiries are typically acknowledged within two business days and fully resolved within thirty (30) days

For data rights requests — including access, rectification, erasure, restriction, or portability — please include your registered full name and mobile number in your message to enable identity verification before we process your request.