ra777 Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") sets out the data practices of ra777 ("ra777", "we", "us", "our") in connection with the website ra777.cc and all associated services, including the online casino, live dealer games, sports betting sportsbook, crash games, fishing games, and all customer support channels. This Policy applies to all individuals ("Player", "User", "you", "your") who access or use the platform, whether as a registered account holder or as an unregistered visitor.

This Policy should be read alongside the ra777 Terms & Conditions and the ra777 Responsible Gaming Policy, both of which are incorporated by reference. In the event of a conflict between this Policy and any other document, this Policy takes precedence with respect to data protection matters.

This Policy is written in English. The platform is directed at adult players in Bangladesh, and all communications are conducted in English. Financial transactions are denominated in Bangladeshi Taka (BDT).

Data Controller

ra777 is the data controller responsible for the personal data described in this Policy. This means that ra777 determines the purposes for which personal data is collected and the means by which it is processed. For all data protection enquiries, requests, and complaints, you may contact us using the details provided in Section 14 of this Policy.

ra777 appoints data processors — third-party organisations that process personal data strictly on our behalf and under our documented instructions — where necessary for the delivery of the platform's services. These processors are bound by written agreements that impose data protection obligations no less stringent than those applicable to ra777 itself. A list of current processor categories is provided in Section 6.

Data We Collect

ra777 collects and processes the following categories of personal data in connection with the operation of the platform:

• Identity Data: Full legal name, date of birth, gender, and government-issued identification document details (National ID card number, passport number, driving licence number), including scanned or photographed copies of those documents where submitted for KYC purposes.
• Contact Data: Email address, mobile phone number, and full residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar) and postal code.
• Financial Data: Mobile wallet account identifiers (bKash, Nagad, Rocket, Upay), bank account reference data where applicable, payment card last-four digits and expiry date (full card numbers are never stored by ra777), and records of all deposit and withdrawal transactions including amounts in BDT, timestamps, and transaction reference numbers.
• Technical Data: Internet Protocol (IP) address, device type and model, operating system version, browser type and version, time zone setting, browser plug-in types and versions, unique device identifiers, and session authentication tokens.
• Usage Data: Full gaming history including game titles, wager amounts, win/loss outcomes, session start and end times, bonus redemptions, responsible gaming tool activations, and sports betting market selections.
• Communications Data: The full text and metadata of any support ticket, live chat transcript, email exchange, or complaint submission you initiate with the ra777 support team.
• Marketing Preference Data: Your opt-in or opt-out status for promotional communications, your preferred game categories, and a record of which promotional offers have been presented to and accepted or declined by your account.

ra777 does not collect special categories of sensitive personal data (such as health records, racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless required to do so by applicable law in a specific regulatory context.

How We Collect Data

ra777 collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact the support team, or respond to a survey or promotion.
• Automated technical collection: Data collected automatically when you browse or interact with ra777.cc, including IP address, device identifiers, session data, and cookies. See Section 7 for full details of our cookie practices.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card payment processors when you initiate a financial transaction.
• KYC and identity verification providers: Verification outcome data (pass/fail/refer) received from third-party identity verification services when we conduct KYC checks on your account.
• Anti-fraud and risk management systems: Risk signals and fraud indicators generated by automated screening tools that analyse transaction patterns and device behaviour against known fraud typologies.
• Publicly available sources: In limited circumstances related to AML/CFT compliance, we may consult publicly available databases, sanctions lists, or adverse media sources to verify the information you have provided.

How We Use Your Data

ra777 uses the personal data it collects for the following specific, documented purposes:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), manage your account settings, and communicate with you about account-related matters.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records.
• KYC and AML compliance: To verify your identity, confirm your source of funds where required, and meet our obligations under applicable anti-money-laundering frameworks.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling, to administer deposit limits, session limits, cooling-off periods, and self-exclusion requests, and to intervene proactively where our responsible gaming tools identify a player at risk.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, collusion, unauthorised access, and other security incidents.
• Customer support: To respond to your support requests, resolve complaints, and maintain records of communications for quality assurance and regulatory purposes.
• Service improvement: To analyse aggregated, anonymised usage data to improve the platform's performance, game selection, user interface, and customer experience.
• Marketing communications (with consent only): To send you promotional emails, bonus offers, and tournament notifications where you have expressly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].
• Legal and regulatory obligations: To fulfil any legal obligation imposed on ra777 by applicable law, including record-keeping obligations, regulatory reporting, and responses to lawful requests from competent authorities.

Sharing Your Data

ra777 does not share your personal data with third parties except in the following defined circumstances:

• Payment service providers: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposit and withdrawal requests. These providers act as independent data controllers for their own processing activities and are subject to their own privacy policies.
• KYC and identity verification providers: We share identity document data and personal details with accredited third-party KYC service providers solely for the purpose of verifying your identity and age in compliance with our legal obligations.
• Game studio providers: When you play a game hosted by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), your account session token and gameplay data are shared with that studio's platform to facilitate the game session. Studios are contractually bound to use this data solely for game delivery and audit purposes.
• Anti-fraud and risk management services: We share technical and transactional data with fraud-screening service providers who assist us in identifying suspicious activity and protecting the integrity of the platform.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies in Bangladesh or internationally where we are legally required to do so, including in response to a court order, regulatory notice, or AML/CFT reporting obligation. We will not notify you of such disclosures where doing so would be unlawful or would prejudice a lawful investigation.
• Professional advisers: We may share data with lawyers, auditors, and accountants where necessary for the conduct of legal proceedings, regulatory audits, or financial audits. These parties are bound by professional confidentiality obligations.
• Business transfers: In the event that ra777 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to a successor entity. You will be notified of any such transfer and the successor entity will be bound by the terms of this Policy.

In all cases of data sharing, ra777 applies the principle of data minimisation: only the data necessary for the specific purpose is shared, and only for the duration necessary to fulfil that purpose.

Cookies & Tracking Technologies

ra777.cc uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the site. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without rendering the platform inoperable.
• Functional cookies: These cookies remember your preferences, such as your preferred game category, language setting (English), and responsible gaming tool configurations. They improve your experience but are not strictly necessary.
• Analytical cookies: These cookies collect anonymised or pseudonymised data about how players use the platform — which pages are visited most frequently, where sessions end, and how navigation flows are used. This data is used exclusively for internal platform improvement. ra777 does not use third-party analytics platforms that would share this data externally.
• Security cookies: These cookies support our fraud detection and account security systems by identifying unusual patterns in device or session behaviour that may indicate unauthorised access or bot activity.

ra777 does not use third-party advertising cookies, retargeting cookies, or cross-site tracking cookies. You may configure your browser to block or delete cookies; however, blocking strictly necessary cookies will prevent you from logging in and using the platform.

Data Security

ra777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the ra777 servers.
• Encryption at rest for sensitive personal and financial data stored in our databases, using AES-256 or equivalent standard.
• Role-based access controls ensuring that only authorised ra777 personnel with a documented business need can access personal data, and only to the extent necessary for their role.
• Multi-factor authentication required for all ra777 staff accessing internal systems that contain personal data.
• Regular vulnerability assessments and penetration testing conducted by independent security specialists to identify and remediate potential weaknesses in the platform infrastructure.
• Incident response procedures in place to detect, contain, and investigate any data security incident, and to notify affected players within a reasonable timeframe where a breach is likely to result in a risk to their rights.

While ra777 takes data security seriously and invests significantly in protective measures, no online platform can guarantee absolute security. Players are advised to use a strong, unique password for their ra777 account, to enable any available two-factor authentication option, and to contact support immediately at [email protected] if they suspect any unauthorised access to their account.

Retention Periods

ra777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The general retention framework applied by ra777 is as follows:

• Identity and KYC documents: Retained for a minimum of 7 years following the date of account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, as required for financial audit and AML/CFT compliance purposes.
• Account and contact data: Retained for the duration of the active account relationship and for 5 years following account closure, to facilitate the resolution of any post-closure disputes or regulatory enquiries.
• Gaming and wagering history: Retained for 7 years post-account closure for responsible gaming monitoring, regulatory reporting, and dispute resolution purposes.
• Support communications: Retained for 5 years from the date of the interaction for quality assurance and as evidence in the event of a regulatory or legal challenge.
• Technical and session data: Retained for 13 months from collection, after which it is either deleted or anonymised for aggregate analytical purposes.
• Marketing preference data: Retained for the duration of the account relationship plus 2 years following consent withdrawal or account closure.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised in accordance with ra777's data disposal procedures. Anonymised aggregate data that cannot be linked to any identifiable individual may be retained indefinitely for statistical and research purposes.

Your Privacy Rights

As a player on ra777.cc, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected], including your registered account username and a clear description of your request. ra777 will respond within 30 calendar days of receipt.

• Right of access: You may request a copy of all personal data held about you by ra777, together with information about how it is used and with whom it has been shared.
• Right to rectification: You may request the correction of any personal data that is inaccurate or incomplete. For certain data (such as your registered email address), you may be able to make updates directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent (where consent was the lawful basis), or where you object to processing and ra777 has no overriding legitimate grounds. Note that this right is subject to ra777's legal retention obligations; we cannot delete data that we are legally required to retain.
• Right to restriction of processing: You may request that ra777 restrict the processing of your data in specific circumstances, such as while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that ra777 provides your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where ra777 relies on legitimate interests as the lawful basis. You have an absolute right to object to processing for direct marketing purposes; such objections will be acted upon immediately.
• Rights related to automated decision-making: ra777 uses automated systems for fraud detection and risk assessment. Where such a system makes a decision that significantly affects your account (such as a temporary suspension pending investigation), you have the right to request human review of that decision.

Children & Minors

ra777.cc is strictly prohibited for use by any person under the age of 21. ra777 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the account registration process, and ra777 reserves the right to request documentary proof of age at any time.

If ra777 discovers or is notified that personal data belonging to a person under 21 has been collected — for example, as a result of a false date of birth being provided during registration — that account will be immediately suspended, all data associated with the account will be reviewed, and all winnings and deposited funds will be handled in accordance with the platform's minor-protection procedures. If you believe a person under the age of 21 has registered on ra777.cc, please contact us immediately at [email protected].

International Data Transfers

In the course of operating the platform, personal data collected from players in Bangladesh may be transferred to, processed by, or stored on servers located in other jurisdictions. Such transfers may occur in connection with the use of cloud infrastructure providers, KYC verification services, payment processing partners, and game studio data feeds.

Where personal data is transferred internationally, ra777 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual data protection clauses agreed with the receiving party, or reliance on the receiving party's participation in a recognised data protection framework.

By using ra777.cc and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh where the platform's operational partners are located, subject to the safeguards described above.

Policy Changes

ra777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal or regulatory requirements, or the evolution of the platform's services. The current version of this Policy is always available at ra777.cc/privacy-policy and is identified by the effective date displayed at the top of the document.

Where a proposed change is material — meaning it significantly affects the way ra777 processes your personal data or the rights available to you — ra777 will notify registered players via their account-registered email address at least 14 days before the changes take effect. Continued use of the platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must close your account and cease using the platform before the effective date.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ra777 processes your personal data, please contact the ra777 Data Protection team using the following details:

• Email: [email protected]
• Response time: Within 2 hours for urgent security matters; within 2 business days for general data enquiries (Bangladesh Standard Time, UTC+6).
• Support availability: 24 hours a day, 7 days a week, in English.

Please include your registered account username, a clear description of your query or request, and — where applicable — the specific section of this Policy your question relates to. Where your request concerns the exercise of a data subject right (Section 10), we will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days.

If you are not satisfied with ra777's response to your data protection complaint, you have the right to escalate the matter through any applicable dispute resolution mechanism available to you under the laws of your jurisdiction.