ra99 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how ra99 ("we", "our", or "the Company") collects, uses, stores, shares, and protects personal information relating to individuals ("Players", "you", or "your") who register for or use the ra99 online casino and sports betting platform available at ra99.im (the "Platform").

ra99 is committed to handling your personal data with transparency, integrity, and in full compliance with the data protection principles applicable to our operations. This Policy applies to all personal data collected through the Platform, including data submitted during account registration, identity verification, payment processing, customer support interactions, and general use of our Services.

By creating a ra99 Account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with this Policy, you must not register for or use the Platform.

Who We Are

ra99 is an online casino and sports betting platform purpose-built for players in Bangladesh. We offer over 500 certified games from leading providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, alongside live cricket betting markets covering BPL, IPL, T20 World Cup, and international fixtures.

ra99 operates in a secure, SSL-encrypted environment with integrated support for Bangladesh's leading mobile financial service providers — bKash, Nagad, Rocket, and Upay — enabling instant deposits and fast withdrawals denominated in Bangladeshi Taka (৳).

For all data-related enquiries, please contact our dedicated support team at [email protected]. This email address is provided for direct correspondence only — it is not a clickable link.

Data We Collect

ra99 collects personal data through several channels and at various stages of the Player relationship. The categories of data we collect are set out below.

How We Use Your Data

ra99 uses your personal data only for legitimate purposes directly related to the delivery of our Services, the security of our Platform, and our legal and regulatory obligations. Specifically, we use your data to:

• Create and manage your Account: to register you as a Player, verify your identity, and maintain the security and integrity of your ra99 Account.
• Process payments: to facilitate deposits via bKash, Nagad, Rocket, and Upay, to process withdrawal requests to your registered payment accounts, and to maintain accurate financial records of all transactions in Bangladeshi Taka (৳).
• Deliver our Services: to provide you access to casino games, live dealer tables, crash games, and cricket and sports betting markets on the Platform.
• Ensure Platform security: to detect, investigate, and prevent fraudulent activity, unauthorised access, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Comply with legal obligations: to fulfil our obligations under applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and any lawful requests from law enforcement or regulatory authorities.
• Provide customer support: to respond to your enquiries, process complaints, and deliver our 24/7 English-language support service.
• Personalise your experience: to remember your preferences, display relevant game recommendations, and tailor promotional communications to your gaming activity — subject to your communication preferences.
• Support responsible gaming: to monitor gaming behaviour for indicators of problem gambling, enforce self-exclusion and deposit limit settings, and fulfil our duty of care to Players.
• Improve the Platform: to analyse aggregated, anonymised usage data for the purpose of improving Platform performance, game selection, and user experience. Individual Players are not identified in this analysis.

ra99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

Legal Basis for Processing

ra99 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contract Performance: Processing that is necessary to create your Account, verify your identity, process deposits and withdrawals, and deliver the Services you have requested under the ra99 Terms & Conditions.
• Legal Obligation: Processing that is required to comply with applicable legal and regulatory obligations, including AML/KYC requirements, financial record-keeping obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for ra99's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and Platform improvement — provided that such interests are not overridden by your fundamental data rights.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — primarily relating to optional marketing communications and the use of non-essential cookies. You may withdraw consent at any time by contacting [email protected].

Sharing Your Data

ra99 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following strictly defined circumstances:

• Payment Service Providers: We share your name, contact details, and transaction data with bKash, Nagad, Rocket, and Upay solely to facilitate deposit and withdrawal processing. These providers are contractually bound to use your data only for the purpose of processing the relevant transaction.
• Game Providers: For the purpose of delivering game services, limited technical session data (such as a pseudonymous session token) may be passed to our game providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. No directly identifiable personal data (such as your name, address, or bKash number) is shared with game providers.
• Identity Verification Partners: Where ra99 uses a third-party KYC verification service to confirm your identity and age, your identity documents and relevant personal data will be shared with that service for this specific purpose only.
• Legal and Regulatory Authorities: ra99 will disclose personal data to law enforcement agencies, financial intelligence units, courts, or other public authorities when required to do so by applicable law or a valid legal order. We will notify the affected Player of such a disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of ra99's business, Player data may be transferred to the acquiring entity. Players will be notified of any such transfer via the Platform before their data is subject to a different privacy policy.

Cookies & Tracking Technologies

ra99 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, authenticate your session, remember your preferences, and analyse Platform usage. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. You cannot opt out of these cookies without ceasing to use the Platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, last visited game category, and session reminder settings — to provide a more personalised experience. They do not track your activity across external websites.
• Analytics Cookies: ra99 uses aggregated, anonymised analytics data to understand how Players navigate the Platform, which game categories are most popular, and where usability improvements can be made. Individual Players are not identified in analytics reports.
• Marketing / Preference Cookies: These optional cookies help ra99 deliver relevant promotional content to Players based on their gaming activity and stated preferences. These cookies are only activated with your consent and can be disabled by contacting our support team.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your ra99 Account. For any cookie-specific enquiry, contact [email protected].

Data Security

ra99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• SSL/TLS Encryption in Transit: All data exchanged between your device and ra99 servers is encrypted using TLS 1.2 or higher, preventing interception during transmission.
• AES-256 Encryption at Rest: Personal data stored on ra99 servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within ra99 is restricted on a strict role-based, need-to-know basis. All internal access events are logged and subject to regular security audits.
• Firewalls and Intrusion Detection: ra99's infrastructure is protected by enterprise-grade firewalls and automated intrusion detection systems that monitor for anomalous access patterns in real time.
• Staff Training: All ra99 personnel with access to personal data undergo mandatory data security and privacy training upon onboarding and on a recurring annual basis.
• Incident Response: ra99 maintains a formal data breach incident response plan. In the event of a breach that poses a material risk to Players, affected individuals will be notified promptly with guidance on protective steps they should take.

Data Retention

ra99 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the following retention periods:

When data reaches the end of its applicable retention period, ra99 will securely delete or anonymise it such that it can no longer be linked to an individual Player. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Your Rights

As a ra99 Player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data ra99 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your registered name and date of birth may require additional identity verification before correction is applied.
• Right to Erasure ("Right to be Forgotten"): You may request that ra99 delete your personal data. This right is subject to our legal obligations — we are required to retain certain data (e.g., financial transaction records) for the periods set out in Section 9, which will take precedence over an erasure request for that data.
• Right to Restriction of Processing: You may request that ra99 restrict the processing of your data in certain circumstances — for example, while we investigate a dispute regarding the accuracy of your data.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to ra99, and to request that it be transferred to another provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data that is based on ra99's legitimate interests, including direct marketing. Where you object to marketing, we will cease all promotional communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children & Minors

The ra99 Platform is strictly intended for adults aged 21 years and above. ra99 does not knowingly collect, process, or store personal data from individuals under the age of 21. The Platform employs age verification measures during account registration, and reserves the right to request government-issued proof of age at any point.

If ra99 becomes aware that personal data has been collected from an individual under the age of 21, all data associated with that individual will be permanently deleted, the Account will be immediately closed, all transactions will be reversed where technically possible, and the matter may be referred to relevant authorities if there is evidence of deliberate misrepresentation.

Parents and guardians who believe that a minor under their care may have accessed or registered on the ra99 Platform are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

Changes to This Privacy Policy

ra99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the Services we provide. When material changes are made to this Policy, we will notify registered Players by displaying a prominent notice on the Platform and, where practicable, by sending a notification to the contact method associated with your Account.

The "Last Updated" date displayed at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how ra99 protects your personal information. Your continued use of the Platform following the posting of a revised Policy constitutes your acceptance of the updated terms.

If a proposed change to this Policy would represent a material reduction in your privacy rights, ra99 will provide at least 14 calendar days' advance notice before the change takes effect, during which time you may exercise your right to request Account closure and the return of any real-money Account Balance.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to ra99's data practices, please contact our support team using the details below. All data-related correspondence is handled in English and is treated with strict confidentiality.

• Email: [email protected] (plain text only — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Policy Enquiry"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

ra99 takes all privacy-related enquiries seriously. If you are not satisfied with our response to a data rights request, you have the right to escalate the matter through whatever formal complaint channels are available under the laws applicable to your jurisdiction.