Privacy Policy

01 Introduction

ra999 ("we", "us", "our" or the "Platform") is committed to protecting the privacy and personal data of all individuals who access or use the ra999 website located at ra999.cam (the "Platform" or "Site").

This Privacy Policy (the "Policy") explains how ra999 collects, processes, stores, shares and protects your personal data when you visit our website, register an account, make deposits or withdrawals, participate in gaming or betting activities, or contact our support team.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. By accessing the Platform, creating an account or otherwise providing your personal data to ra999, you acknowledge that you have read and understood this Policy.

02 Definitions

In this Policy, the following terms have the meanings set out below:

"Personal Data"

Any information relating to an identified or identifiable natural person, including name, national identity number, email address, postal address, payment details, device identifiers and session activity.

"Processing"

Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure or destruction.

"Data Controller"

The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is the operator of ra999.cam.

"Data Processor"

A third party that processes Personal Data on behalf of the Data Controller, under documented instructions and subject to appropriate data protection agreements.

"KYC"

Know Your Customer — the identity and age verification process required before withdrawals are processed or at any other point at the Operator's reasonable discretion.

"Cookie"

A small text file placed on your device when you visit the Platform, used to recognise your device, maintain session state and support platform functionality and analytics.

"You" / "Player"

Any individual who accesses, browses, registers on or uses the ra999 Platform in any capacity.

03 Data Controller

The Data Controller responsible for personal data processed through the ra999 Platform is the operating entity of ra999.cam. Where ra999 holds an international gaming licence, the Data Controller is the licensed entity under that jurisdiction's regulatory framework.

ra999 does not hold or claim a Pakistani data-protection registration, nor does it claim approval, endorsement or regulation by any Pakistani governmental or financial authority including the Government of Pakistan, the Pakistan Telecommunication Authority (PTA) or the State Bank of Pakistan. The processing of personal data on this Platform is governed by the laws of the Operator's licensing jurisdiction and the applicable data protection legislation therein.

For any privacy-related enquiries, please contact us using the details set out in Section 16.

04 Data We Collect

ra999 collects personal data through several channels. The categories of data we collect are described in the table below:

4.1 Data You Provide Voluntarily

When you register an account, complete KYC verification, make a deposit or withdrawal, contact support or participate in promotions, you voluntarily provide personal data to ra999. This data is necessary for the fulfilment of your account and the services offered on the Platform.

4.2 Data Collected Automatically

When you access the Platform, ra999 automatically collects certain technical and usage data through cookies, server logs and analytics tools. This includes your IP address, the type of device you are using and the pages you visit. This data helps us maintain platform security, monitor for fraud and improve user experience.

4.3 Data from Third Parties

We may receive personal data about you from third parties, including KYC verification service providers, fraud prevention services and payment processors. This data is used only for the purposes described in this Policy and subject to appropriate data-sharing agreements.

05 Purposes & Legal Basis for Processing

ra999 processes personal data only for defined, legitimate purposes. The principal purposes for which we process your data, and the legal basis for each, are set out below:

06 Data Processing

6.1 How We Use Your Data

Personal data is processed by ra999 only for the purposes described in this Policy. We do not repurpose data collected for one stated purpose to another incompatible purpose without first obtaining your consent or establishing a new legitimate basis for doing so.

6.2 Automated Decision-Making

ra999 may use automated processes for certain operational decisions, including fraud-risk scoring, bonus eligibility determination and responsible gambling alert generation. Where automated decision-making produces a significant effect on your account, you have the right to request human review of that decision. Please contact support to exercise this right.

6.3 Profiling

We may analyse your gaming behaviour and account activity to generate player profiles for the purposes of responsible gambling monitoring, fraud detection and personalised promotion eligibility. This profiling is conducted on the basis of our legitimate interests and, where applicable, our legal obligations. You may object to profiling for marketing purposes by contacting support.

07 Data Sharing

ra999 does not sell, rent or trade your personal data. We share personal data only in the following limited circumstances and always subject to appropriate contractual and security safeguards:

• KYC and Identity Verification Providers: to verify your identity, age and payment method ownership as required by our operating obligations.
• Payment Processors and Financial Technology Partners: to facilitate the processing of your deposits and withdrawal requests. Payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are named for contextual familiarity only; none of these providers endorse or are affiliated with ra999.
• Fraud Prevention and AML Services: to screen transactions and account activity against known fraud patterns and anti-money-laundering indicators.
• Gaming Technology Providers: game studios, live dealer providers and sports data partners may receive limited session data necessary for game delivery and integrity.
• Regulatory and Law Enforcement Authorities: where we are under a legal obligation to disclose data in response to a valid request from a competent authority.
• Corporate Successors: in the event of a merger, acquisition or sale of assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

In all cases, data shared with third parties is limited to what is strictly necessary for the specific purpose. Third-party processors are contractually required to maintain appropriate security standards and to process personal data only on our instructions.

08 International Data Transfers

ra999 operates internationally and your personal data may be transferred to, stored or processed in countries other than the country in which you reside, including countries that may have different data protection laws than those in your jurisdiction.

Where personal data is transferred outside the jurisdiction in which it was collected, we take appropriate measures to ensure that such transfers are conducted in compliance with applicable data protection requirements, including the use of contractual protections and, where applicable, adequacy decisions recognised by the relevant regulatory authority.

09 Data Retention

ra999 retains personal data only for as long as necessary for the purposes for which it was originally collected, and as required by applicable legal, regulatory, tax and compliance obligations. The following general retention principles apply:

• Account Data and Transaction Records: retained for a minimum period as required by the Operator's licensing jurisdiction (typically five to seven years from account closure or the date of the relevant transaction).
• KYC Documentation: retained for the minimum period required under applicable anti-money-laundering and know-your-customer regulations.
• Support Communications: retained for a period sufficient to resolve any outstanding disputes and to meet applicable record-keeping requirements.
• Self-Exclusion Records: retained indefinitely or for the period required by the Operator's responsible gambling obligations to prevent re-registration during exclusion periods.
• Marketing Data: retained until you withdraw consent or request deletion, subject to any statutory minimum retention obligations.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10 Security Measures

ra999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include, but are not limited to:

• encryption of data in transit using industry-standard TLS/SSL protocols;
• access controls limiting personal data access to authorised personnel on a need-to-know basis;
• regular security testing and vulnerability assessments of Platform infrastructure;
• multi-factor authentication options for account access;
• session management controls and automatic timeout for inactive sessions;
• audit logging of significant account and administrative actions.

While we take these measures seriously, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us immediately of any suspected unauthorised access to your account.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ra999 will take steps to notify affected individuals without undue delay, in accordance with our obligations under applicable law.

11 Cookies & Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. ra999 uses cookies and similar tracking technologies (including local storage, session tokens and analytics scripts) to operate the Platform, maintain your session state, prevent fraud and understand how the Platform is used.

11.2 Types of Cookies We Use

• Strictly Necessary Cookies: essential for the Platform to function, including session authentication, load balancing and security. These cannot be disabled without disrupting platform functionality.
• Functional Cookies: remember your preferences such as language settings, responsible gambling limits and display preferences.
• Analytics Cookies: collect anonymous, aggregated data about how visitors use the Platform to help us improve performance and content. These are used on the basis of your consent where required.
• Security Cookies: help detect and prevent fraudulent access, account takeover attempts and bot activity.

11.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling strictly necessary cookies may prevent certain parts of the Platform from functioning correctly. For non-essential cookies, you may withdraw your consent at any time by adjusting your browser settings.

12 User Rights

Subject to applicable data protection law and the legitimate operational requirements of ra999, you have the following rights regarding your personal data:

To exercise any of these rights, please contact our support team using the details in Section 16. We will respond to all verified requests within 30 days. We may require you to verify your identity before fulfilling a rights request to protect against fraudulent claims.

13 Minors & Age Verification

The ra999 Platform is strictly for use by adults aged 18 years or older, or the higher minimum age required by the operator's license jurisdiction. ra999 does not knowingly collect personal data from individuals under the applicable minimum age.

Age verification is a mandatory component of our KYC process. All players must confirm their date of birth at registration and provide documentary evidence of age as part of the verification process before withdrawals are processed.

If you believe that a minor has registered an account on the Platform, please contact our support team immediately. We will investigate and take appropriate action, including closure of the account and deletion of any data collected in relation to a minor's account to the extent permitted by applicable law.

14 Pakistan-Specific Notice

Pakistan does not currently have a comprehensive personal data protection law directly comparable to international frameworks such as the EU General Data Protection Regulation (GDPR). The processing of personal data on the ra999 Platform is governed by the data protection laws of the Operator's licensing jurisdiction.

ra999 does not claim to be registered with, approved by or subject to the oversight of any Pakistani data protection authority, government body or financial regulator in connection with its data-handling practices.

Payment method references on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are made for contextual familiarity only. These providers may receive limited transactional data solely as necessary to process your deposit or withdrawal. None of these providers endorse, sponsor or are affiliated with ra999.

Pakistani players should be aware that accessing online gambling services may be subject to restrictions under Pakistani law, including the Prevention of Gambling Act, 1977. This notice does not constitute legal advice. Players are solely responsible for ensuring compliance with all applicable laws in their jurisdiction.

15 Policy Amendments

ra999 reserves the right to update, modify or replace this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via a notice on the Platform or by email to the address registered on your account, with a minimum of seven (7) days' notice prior to the updated Policy taking effect, except where an immediate change is required to comply with a legal or regulatory obligation.

The date of the most recent update is always displayed at the top of this Policy. We encourage you to review this Policy periodically to stay informed of how we handle your personal data. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes to the extent permitted by applicable law.

16 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the ra999 data team through the following channels:

If you are not satisfied with our response to a privacy request, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the Operator's licensing jurisdiction. Contact information for that authority will be provided upon request.