Privacy Policy — How ra99 Protects Your Data

ra99 collects personal data from you in three principal ways: data you provide to us directly, data we collect automatically as you use the platform, and data we receive from third parties. The categories below describe the full scope of personal data that ra99 may hold about you as a registered player or a visitor to ra99.vip.

Data You Provide Directly

Data Collected Automatically

When you access ra99.vip, our servers and analytics systems automatically record certain technical data. This includes your IP address, browser type and version, operating system, device type (mobile or desktop), referring URL, pages visited, time spent on each page, game sessions played, bets placed, and the dates and times of all platform interactions. This data is used primarily for security monitoring, fraud detection, platform optimisation, and responsible gaming analysis.

Data from Third Parties

ra99 may receive personal data about you from the following third-party sources:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard to verify deposits and withdrawals.
• Identity verification providers: Results of automated document checks performed during KYC to confirm identity and age.
• Fraud prevention databases: Alerts or flags from industry fraud-sharing networks that help ra99 identify accounts associated with known fraudulent activity.
• Game providers: Aggregated session data from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners relating to game rounds played on their software.

ra99 processes your personal data only for the specific, legitimate purposes listed below. We rely on one or more legal bases for each processing activity — either the performance of our contract with you, compliance with a legal obligation, your explicit consent, or our legitimate interests as a platform operator where those interests are not overridden by your rights.

• Account management: Creating and maintaining your ra99 player account, verifying your identity and age, and enabling you to log in, deposit, withdraw, and play games.
• Payment processing: Executing your deposit and withdrawal instructions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; reconciling transactions; and investigating payment disputes.
• Legal and regulatory compliance: Fulfilling our obligations under applicable anti-money laundering rules, Know Your Customer requirements, and any lawful requests from regulatory or law enforcement authorities.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, bot usage, collusion, bonus abuse, and other forms of prohibited conduct described in the ra99 Terms & Conditions.
• Responsible gaming: Monitoring player behaviour for indicators of problem gambling; enforcing self-exclusion and deposit limit settings; and contacting players where our responsible gaming systems flag a concern.
• Customer support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution.
• Platform improvement: Analysing aggregated, anonymised usage data to improve ra99 game offerings, user interface, payment flows, and overall platform performance.
• Marketing communications: Sending you promotional offers, bonus notifications, and event updates — but only where you have given us your explicit consent at registration or at a later time via your account settings. You may withdraw this consent at any time.
• Personalisation: Tailoring the games, offers, and content displayed to you on the ra99 platform based on your gaming preferences and activity history, where you have consented to this use of your data.

ra99 does not sell your personal data to any third party. We share your data only in the limited, specific circumstances described below, and only to the extent necessary for each stated purpose. All third-party service providers who process data on our behalf are bound by contractual data processing agreements that require them to handle your data securely and only for the purpose for which it was shared.

Service Providers

ra99 engages carefully vetted third-party service providers to support its operations. These include payment gateway operators (bKash, Nagad, Rocket, Upay, Visa, Mastercard processing partners), identity verification and KYC technology vendors, fraud detection services, cloud hosting providers, customer support software platforms, and email/SMS delivery services. Each provider receives only the data necessary for their specific function.

Game Software Providers

When you play a game developed by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session data (such as a pseudonymous player identifier, bet amounts, and round outcomes) is transmitted to that provider's systems solely to deliver the game. ra99 game providers are contractually prohibited from using this data for any purpose beyond game delivery and technical support.

Legal and Regulatory Disclosure

ra99 may disclose your personal data to governmental authorities, law enforcement agencies, or courts where we are required to do so by applicable law, a valid court order, a regulatory direction, or where disclosure is necessary to protect the safety of any individual or to prevent serious financial crime. In such cases, ra99 will disclose only the minimum data required and will notify you of the disclosure where permitted by law to do so.

Business Transfers

In the event that ra99 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address or mobile number prior to your data becoming subject to a materially different privacy policy as a result of such a transfer.

ra99.vip uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, remember your preferences, keep you securely logged in, and collect anonymised analytics data. This section explains what types of cookies we use and how you can manage them.

Types of Cookies Used by ra99

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential to the secure and functional operation of the platform. You may disable functional and analytics cookies via your browser settings at any time. Note that disabling functional cookies may affect your experience on ra99.vip — for example, your session preferences may not be remembered between visits.

Most modern web browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, or delete cookies through the browser's privacy or security settings menu. Instructions for managing cookies in your specific browser are available in that browser's official help documentation. Clearing all cookies from ra99.vip will log you out of your current session.

ra99 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The retention periods below reflect our standard practices, though specific circumstances (such as an ongoing legal dispute or a regulatory investigation) may require us to retain certain data for longer.

When your data reaches the end of its applicable retention period and no legal obligation requires further retention, ra99 will securely delete or irreversibly anonymise it. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and research purposes.

If you close your ra99 account, your data is not deleted immediately. The post-closure retention periods in the table above apply from the date your account is formally closed. This is required to meet our anti-money laundering and financial record-keeping obligations under applicable law.

ra99 takes the security of your personal data seriously and implements a layered approach to information security that covers technical, organisational, and procedural controls. No internet-based platform can guarantee absolute security, but ra99 takes every reasonable measure to protect your data against unauthorised access, disclosure, alteration, or destruction.

Technical Controls

• Transport encryption: All data transmitted between your device and ra99.vip is encrypted using TLS 1.2 or higher with 256-bit cipher strength.
• Password hashing: Account passwords are never stored in plaintext. ra99 uses industry-standard one-way hashing algorithms with per-account salting so that even in the event of a database breach, raw passwords cannot be recovered.
• Access controls: ra99 staff access to personal data is restricted on a strict need-to-know basis. Privileged access to production systems requires multi-factor authentication and is logged for audit purposes.
• Firewall and intrusion detection: ra99 infrastructure is protected by web application firewalls, rate-limiting controls, and automated intrusion detection systems that flag and block suspicious traffic patterns in real time.
• Regular security testing: ra99 conducts periodic vulnerability assessments and security audits of its platform to identify and remediate any weaknesses before they can be exploited.

Organisational Controls

All ra99 staff who handle personal data receive data protection training at onboarding and annually thereafter. Contractual confidentiality obligations are in place for all employees, contractors, and service providers who access player data. ra99 maintains an internal incident response plan that defines the procedures for detecting, containing, and reporting any personal data breach.

What to Do If You Suspect a Security Incident

If you suspect that your ra99 account has been accessed without your authorisation, or if you notice any unusual activity such as unrecognised bets, unexpected password-change notifications, or login alerts from unfamiliar devices, please contact ra99 immediately at [email protected]. We will suspend the account, secure it, and investigate the incident promptly.

As a player on the ra99 platform, you have a number of rights in relation to the personal data we hold about you. ra99 is committed to facilitating the exercise of these rights in a straightforward and timely manner. To exercise any of the rights described below, please submit a written request to [email protected] from the email address registered to your account. We will respond within 30 days.

• Right of access: You have the right to request a copy of all personal data that ra99 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a valid request. The first copy is provided free of charge; ra99 may charge a reasonable administrative fee for subsequent requests within a 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update many details — such as your contact email address or registered mobile number — directly within your ra99 account settings without needing to contact support.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been processed unlawfully. Please note that ra99 may be unable to fulfil an erasure request in full where retention is required by applicable law — for example, we cannot delete financial transaction records that we are legally required to keep for a specified period.
• Right to restrict processing: In certain circumstances — for example, where you contest the accuracy of your data while we investigate, or where processing is unlawful but you prefer restriction to deletion — you may request that ra99 restrict the processing of your data rather than delete it.
• Right to data portability: Where ra99 processes your data on the basis of your consent or the performance of our contract with you, and where processing is carried out by automated means, you have the right to receive your data in a structured, machine-readable format and to have it transmitted to another service provider where technically feasible.
• Right to withdraw consent: Where ra99 relies on your consent as the legal basis for processing (for example, for marketing communications or personalised game recommendations), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to ra99 processing your personal data where we rely on legitimate interests as our legal basis for that processing. ra99 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to report a suspected data security incident, or have a concern about how ra99 has handled your personal data, please contact us using the details below. Our support team handles all privacy-related enquiries and is available 24 hours a day, seven days a week.

Email: [email protected]

Response time: ra99 aims to acknowledge all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days. Where a request is particularly complex, we may extend this period by a further 30 days — but we will always notify you of any extension within the initial 30-day window.

Complaints

If you are not satisfied with ra99's response to your privacy concern, you have the right to escalate your complaint. ra99 takes all privacy complaints seriously and will escalate unresolved issues to our senior data protection team for review. All escalated complaints are acknowledged within 5 business days and are subject to a full internal investigation.

Changes to This Privacy Policy

ra99 reviews this Privacy Policy at least annually and updates it whenever there is a material change to how we collect or use personal data, or when required by changes in applicable law. The effective date at the top of this page indicates when the current version was last updated. Where a change is material — meaning it significantly affects your rights or how your data is used — ra99 will notify you via your registered email address or mobile number at least 14 days before the change takes effect.

We encourage you to revisit this page periodically to stay informed about how ra99 is protecting your information. Your continued use of the ra99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of that revised version.