ra999 Privacy Policy

1 Introduction

ra999 operates the online betting and casino platform accessible at ra999.ws (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers with, or uses the ra999 Platform. This Privacy Policy describes how ra999 collects, uses, stores, shares, and protects your personal information in connection with your use of our services.

This policy applies to all players registered on ra999, visitors who browse the Platform without an account, and any individual who contacts ra999 customer support. By accessing or using the ra999 Platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read in conjunction with the ra999 Terms & Conditions and Responsible Gaming Policy, both of which are published on the Platform. Where this Privacy Policy refers to obligations under the Terms & Conditions, those references incorporate the Terms & Conditions by reference.

2 Data Controller

For the purposes of this Privacy Policy, ra999 acts as the data controller in respect of all personal data collected from players and visitors through the ra999.ws Platform. As data controller, ra999 is responsible for determining the purposes and means of processing your personal data.

If you have any questions about how ra999 handles your personal data, or if you wish to exercise any of the rights described in Section 11 of this policy, you may contact our dedicated data privacy team at:

• Email: [email protected] (mark your subject line "Privacy / Data Request")
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours of receipt and to provide a substantive response within 10 business days.

3 Data We Collect

ra999 collects the following categories of personal data in connection with the operation of the Platform:

ra999 does not collect special categories of personal data (such as health data, religious beliefs, or political opinions) except where voluntarily disclosed by a player in the context of a responsible gaming request, in which case such data is processed solely for the purpose of providing appropriate player protection tools and is not used for any other purpose.

4 How We Collect Your Data

ra999 collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated platform interactions: Technical and activity data collected automatically as you browse and use the Platform, including via cookies and similar technologies (see Section 8).
• Third-party verification providers: Identity and fraud risk data returned by KYC verification service providers when we submit your identity documents for authentication.
• Payment processors: Transaction confirmation and fraud screening data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and other payment partners when you initiate deposit or withdrawal transactions.
• Game providers: Game session logs and bet settlement data from certified third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe, which is used for dispute resolution and responsible gaming monitoring.

5 How We Use Your Data

ra999 uses your personal data for the following defined purposes only:

• Account management: Creating, maintaining, and administering your ra999 player account, including processing deposits and withdrawals, applying bonuses, and enforcing account limits.
• Identity verification and KYC: Verifying that you are who you claim to be, confirming you meet the minimum age requirement of 21 years, and complying with anti-money laundering obligations.
• Service delivery: Providing access to betting markets, casino games, live casino, slots, and all other Platform features.
• Payment processing: Executing and reconciling deposit and withdrawal transactions through your chosen payment method.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct described in the ra999 Terms & Conditions.
• Responsible gaming: Monitoring account activity for indicators of problem gambling, enforcing self-exclusion and deposit limit settings, and proactively reaching out to players who may need support.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the platform's features, performance, and user experience. Individual player data is not used for product development without anonymisation.
• Legal compliance: Meeting our obligations under applicable law, responding to lawful requests from government or law enforcement authorities, and maintaining records required by regulation.
• Marketing communications: Sending promotional offers, bonus notifications, and platform news to players who have consented to receive such communications. See Section 14 for details on opting out.

6 Legal Basis for Processing

ra999 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and ra999 — specifically, to operate your account, process transactions, and deliver the Platform's services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, record-keeping obligations, and responses to lawful law enforcement requests.
• Legitimate interests: Processing carried out for ra999's legitimate business interests, including fraud detection, platform security, abuse prevention, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time by contacting [email protected] or using the opt-out mechanism in any marketing email you receive.

7 Sharing Your Data

ra999 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Identity verification providers: KYC and anti-fraud service providers who verify the authenticity of identity documents and screen against sanctions and watchlists.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card payment networks, solely for the purpose of processing your financial transactions.
• Game providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other certified game studios, to the extent required to deliver game sessions, settle bets, and resolve disputes.
• IT and hosting providers: Data centre, cloud hosting, and infrastructure providers who store and process Platform data on ra999's behalf under strict data processing agreements.
• Customer support tools: Support platform providers used by the ra999 customer service team to manage and respond to player enquiries.
• Legal and regulatory authorities: Government agencies, law enforcement bodies, courts, and regulators where ra999 is required by law to disclose personal data or where disclosure is necessary to protect ra999's legal rights.

ra999 does not transfer personal data to third parties located outside the jurisdictions in which our service providers operate without ensuring that adequate data protection safeguards are in place. Where international data transfers occur, ra999 relies on appropriate contractual mechanisms to ensure your data remains protected.

8 Cookies & Tracking Technologies

ra999 uses cookies and similar tracking technologies (collectively "cookies") when you access the Platform. Cookies are small text files stored on your device by your browser. The following categories of cookies are used on ra999:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. Essential cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred display options, and responsible gaming reminder configurations. These cookies improve your experience but are not strictly essential.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — including pages visited, session duration, and features used — to help ra999 improve performance and usability. ra999 uses first-party analytics only; we do not use Google Analytics or other third-party analytics platforms that track users across websites.

ra999 does not use advertising or retargeting cookies. We do not participate in cross-site tracking networks or allow third-party advertisers to set cookies on the ra999 Platform.

9 Data Retention

ra999 retains your personal data for as long as your account is active and for a defined period following account closure, in accordance with the following retention schedule:

• Account and identity data: Retained for a minimum of 5 years following the date of account closure. This period reflects standard record-keeping obligations applicable to financial services platforms and ensures that ra999 can comply with any regulatory audit, legal proceedings, or law enforcement requests that may arise after closure.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in line with applicable anti-money laundering record-keeping requirements.
• Verification documents: Retained for the same period as account and identity data. Copies are securely stored with access restricted to authorised compliance personnel.
• Customer support communications: Retained for 3 years following resolution of the relevant support case, to enable quality assurance reviews and to support any subsequent dispute or legal claim.
• Technical and activity data: Session logs and technical data are retained for up to 12 months from collection, after which they are deleted or anonymised.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, plus 2 years following opt-out to demonstrate compliance with consent records.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical and analytical purposes.

10 Data Security

ra999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption: All data transmitted between your device and ra999 is encrypted in transit using industry-standard TLS protocols.
• Encryption at rest: Sensitive personal data including identity documents and financial records is encrypted when stored on ra999's infrastructure.
• Access controls: Access to personal data is restricted to ra999 personnel and authorised third-party processors who require it to perform their specific role. All access is logged and periodically reviewed.
• Two-step account verification: Players are encouraged to enable two-step verification on their ra999 account to reduce the risk of unauthorised access.
• Intrusion detection: ra999 employs automated monitoring tools to detect and respond to unusual access patterns or potential security incidents in real time.
• Staff training: ra999 personnel with access to personal data receive regular training on data protection obligations and security best practices.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, ra999 will notify affected players without undue delay and will take all reasonable steps to contain the breach and prevent recurrence. You should notify ra999 immediately at [email protected] if you believe your account has been compromised.

11 Your Rights Over Your Data

As a player on the ra999 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and we will respond within 10 business days.

• Right of access: You may request a copy of the personal data that ra999 holds about you, along with information about how it is being used.
• Right to rectification: You may request that ra999 corrects any inaccurate or incomplete personal data held about you. You may also update certain account details directly through your ra999 account settings.
• Right to erasure: In certain circumstances, you may request that ra999 deletes your personal data. This right is subject to ra999's legal obligations to retain data for defined minimum periods as described in Section 9. Requests for erasure will be fulfilled to the maximum extent possible within those constraints.
• Right to restriction of processing: You may request that ra999 temporarily restricts the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format where technically feasible and where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where ra999 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of ra999's legitimate interests. ra999 will consider your objection and will cease processing unless there are compelling legitimate grounds that override your interests.

12 Children & Minors

The ra999 Platform is strictly for adults aged 21 years and above. ra999 does not knowingly collect personal data from individuals under the age of 21. If ra999 discovers or has reason to believe that an account holder is under 21, the account will be immediately suspended, all data associated with the account will be deleted (except where retention is required by law), and any funds in the account will be handled in accordance with ra999's age verification policy.

Parents and guardians are responsible for monitoring minors' internet activity and ensuring that children in their care do not access the ra999 Platform. If you believe a minor has registered an account with ra999, please contact us immediately at [email protected] and we will investigate and act promptly.

13 Third-Party Links

The ra999 Platform may contain references to third-party game providers, payment partners, and other external services. While ra999 selects its partners carefully, ra999 has no control over the privacy practices of third-party websites or services and accepts no responsibility or liability for their data handling practices.

When you interact with a third-party payment provider (such as bKash, Nagad, or Rocket) to complete a deposit or withdrawal, you are subject to that provider's own terms of service and privacy policy. We encourage you to review the privacy policies of any third-party service you use in connection with your ra999 account.

14 Marketing Communications

ra999 may send you promotional communications — including bonus offers, free bet promotions, seasonal offers related to Eid, Pohela Boishakh, Victory Day, and major cricket events such as the BPL and IPL — to the email address or mobile number registered to your account, provided you have consented to receive such communications.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any promotional email you receive from ra999.
• Updating your communication preferences in your ra999 account settings.
• Contacting ra999 support at [email protected] and requesting removal from the marketing list.

Opting out of marketing communications does not affect transactional communications, which ra999 must send to you in connection with your account — such as deposit confirmations, withdrawal notifications, KYC requests, responsible gaming notices, and security alerts. These service communications cannot be opted out of while your account remains active.

15 Changes to This Privacy Policy

ra999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. Updated versions will be published on this page with a revised effective date.

Where changes are material — meaning they significantly alter the way ra999 collects, uses, or shares your personal data — ra999 will notify registered players via the email address associated with their account or via an on-site notification, with reasonable advance notice before the changes take effect.

Continued use of the ra999 Platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and contact [email protected] to request account closure.

Effective date of this version: January 2026. This Privacy Policy is published in English. In the event of any ambiguity arising from translation into another language, the English-language version shall prevail.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ra999 handles your personal data, please contact our privacy team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy / Data Request")
• Response time: Within 48 hours for acknowledgement; full response within 10 business days.
• Support hours: 24 hours a day, 7 days a week — in both English and Bengali.
• Platform: ra999.ws, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all regions of Bangladesh.