Privacy Policy — ra888

ra888 ("we," "us," "our," or "ra888") is the operator of the online sportsbook, casino, and gaming platform accessible at ra888.im and its associated subdomains and mobile interfaces (collectively, the "Platform"). ra888 operates under an international gaming licence and is the data controller responsible for the personal information collected and processed through the Platform.

This Privacy Policy applies to all players, registered users, and visitors who access or interact with the ra888 Platform, including those accessing the Platform from Pakistan and other permitted jurisdictions. By using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.

This Privacy Policy should be read alongside ra888's Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with ra888.

ra888 collects personal data that falls into the following categories. We collect only what is necessary for the purposes described in this policy.

ra888 collects your personal data through the following channels and mechanisms:

• Direct Registration: When you create your ra888 account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
• Identity Verification: When ra888 requires KYC (Know Your Customer) verification, you submit identity documents directly via the account verification section of the Platform or by email to our support team.
• Deposits & Transactions: When you make a deposit or request a withdrawal using JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or other supported Pakistani payment methods, ra888 receives transaction reference data from the payment processor.
• Automated Technologies: As you use the Platform, ra888 automatically collects technical and usage data through server logs, session tracking, and first-party cookies. This includes your IP address, device fingerprint, and betting behaviour patterns.
• Customer Support Interactions: Any communication you initiate with the ra888 support team — via live chat, email, or support ticket — is recorded and retained for quality assurance and dispute resolution purposes.
• Third-Party Sources: ra888 may receive supplementary identity or fraud-flag data from licensed identity verification service providers and payment fraud prevention networks in order to comply with our AML obligations.

ra888 uses the personal data we collect for the following specific, documented purposes:

• Account Creation & Management: To register your account, maintain your player profile, authenticate your logins, and manage your ra888 account settings.
• Service Delivery: To process your bets on cricket, PSL, UFC, and other sports markets; to operate the live casino and slot games; and to credit winnings and process withdrawal requests.
• Identity Verification & KYC: To verify your identity and age (21+ requirement) in compliance with our licensing obligations, and to satisfy anti-money laundering (AML) due diligence requirements.
• Payment Processing: To process deposits and withdrawals via supported Pakistani payment methods and to maintain an accurate transaction record for your account.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, multi-accounting, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling, to apply self-exclusion and limit settings you have requested, and to contact you where the ra888 responsible gaming team has concerns about your welfare.
• Legal & Regulatory Compliance: To comply with our international gaming licence conditions, applicable AML regulations, and any lawful requests from regulatory or law enforcement authorities.
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of our customer service.
• Platform Improvement: To analyse aggregated usage patterns and improve the features, security, and performance of the ra888 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, PSL season updates, and other ra888 marketing communications — but only where you have opted in to receive them. You may withdraw consent at any time.

Every data processing activity conducted by ra888 is grounded in one of the following lawful bases under applicable data protection principles:

Where ra888 relies on legitimate interest as the lawful basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental privacy rights. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

ra888 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your data with the following categories of recipients strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other Pakistani payment partners receive the minimum transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Licensed KYC and AML service providers who assist ra888 in verifying player identities and screening against sanctions lists and politically exposed persons (PEP) databases.
• Game Content Providers: Third-party slot studios and live casino operators whose games are hosted on the ra888 Platform receive anonymised session data necessary to deliver their game content. They do not receive your identity data.
• IT Infrastructure Partners: Cloud hosting and data centre providers who process data strictly under ra888's instruction and under binding data processing agreements that prohibit independent use.
• Regulatory & Law Enforcement Authorities: ra888 will disclose personal data to licensing regulators, financial intelligence units, or law enforcement agencies where required by a lawful order or where we are under a legal obligation to do so — for example, in the context of AML suspicious activity reporting.
• Professional Advisors: Lawyers, auditors, and insurers who are bound by professional confidentiality obligations and who require access to data in connection with the provision of their professional services to ra888.

ra888 uses first-party cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, and analyse how the Platform is used. We do not deploy third-party advertising cookies or social media tracking pixels on ra888.im.

The following categories of cookies are used by ra888:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred currency display (PKR), and your last visited sports market or game category. These improve your experience on return visits.
• Analytics Cookies: First-party analytics cookies that help ra888 understand which features are most used, where players encounter friction, and how to improve the Platform. Data collected is aggregated and does not identify individual players.
• Responsible Gaming Cookies: Technical cookies that enforce session time limits, deposit limit acknowledgements, and self-exclusion flags that you have set on your account.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core ra888 services. For functional and analytics cookies, you may opt out through your account settings without affecting access to the Platform.

ra888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods which are driven by our legal and regulatory obligations:

• Account & Identity Data: Retained for a minimum of 5 years following account closure, as required by our international gaming licence AML compliance framework.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in line with anti-money laundering record-keeping requirements.
• Betting & Gaming History: Retained for a minimum of 3 years following account closure for dispute resolution, regulatory audit, and responsible gaming review purposes.
• Customer Support Communications: Retained for 2 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Preference Records: Opt-in and opt-out records are retained for the lifetime of the account and for 2 years post-closure as evidence of consent management.
• Technical Logs: Server and access logs are retained for 12 months for security investigation purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, ra888 will securely delete or anonymise your personal data such that it can no longer be attributed to you as an identified individual.

As an ra888 player, you have the following rights over your personal data. These rights can be exercised free of charge by contacting the ra888 data team at the email address listed in Section 14 of this policy.

• Right of Access: You have the right to request a copy of all personal data ra888 holds about you, along with information about how it is being processed. ra888 will respond to access requests within 30 calendar days.
• Right to Rectification: If any personal data held by ra888 is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. ra888 will comply where the data is no longer necessary for its original purpose and where no legal obligation requires its retention.
• Right to Restriction of Processing: You may request that ra888 restrict the processing of your data — for example, while a dispute about its accuracy is being resolved — without requiring full deletion.
• Right to Data Portability: You have the right to request your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests. ra888 will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing before the withdrawal date.

The ra888 Platform is strictly prohibited for persons under the age of 21. ra888 does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not attempt to register an account or use any ra888 service.

If ra888 becomes aware — through our KYC verification process, parental notification, or other means — that personal data has been collected from a person under 21, we will immediately close the relevant account, delete all associated personal data that is not subject to a legal hold, and return any deposited funds to the originating payment method.

Parents and guardians who believe that their child may have registered on ra888 without authorisation are encouraged to contact our support team immediately so that the account can be investigated and closed promptly. ra888 takes underage gambling extremely seriously and cooperates fully with parental or guardian notifications of this nature.

ra888 implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes the following measures:

• TLS Encryption in Transit: All data transmitted between your browser or mobile device and ra888 servers is encrypted using TLS 1.2 or TLS 1.3 protocols. This applies to every interaction on ra888.im, including login, deposit, and bet placement.
• AES-256 Encryption at Rest: Sensitive personal and financial data stored in ra888 databases is encrypted at rest using AES-256, the same standard used by major financial institutions globally.
• Access Controls: Access to ra888 systems containing personal data is restricted to authorised personnel on a need-to-know basis. All internal access is logged, monitored, and subject to regular audit.
• Two-Factor Authentication (2FA): ra888 offers 2FA on player accounts for an additional layer of login security. Players are encouraged to enable 2FA through their account security settings.
• Intrusion Detection: ra888 operates real-time network monitoring and intrusion detection systems to identify and respond to security threats before they can affect player data.
• Penetration Testing: The ra888 Platform undergoes periodic independent security assessments to identify and remediate vulnerabilities proactively.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ra888 will notify affected players without undue delay in accordance with our regulatory obligations.

ra888 is operated by an entity licensed in an international jurisdiction. As a result, your personal data may be transferred to and stored on servers located outside of Pakistan. Where such transfers occur, ra888 ensures that adequate safeguards are in place to protect your data, including:

• Binding data processing agreements with all third-party processors that impose data protection obligations equivalent to those under which ra888 itself operates.
• Use of data centre providers located in jurisdictions with recognised data protection frameworks.
• Transfer impact assessments conducted prior to transferring data to any new jurisdiction or processor.

By using the ra888 Platform, you acknowledge that your personal data may be transferred to, processed in, and stored in countries outside Pakistan. ra888 takes all reasonable steps to ensure such transfers are conducted lawfully and securely.

ra888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the ra888 Platform informing logged-in players of the update.
• Where the changes materially affect your rights or the way we use your data, send a notification to the email address registered on your ra888 account.

Your continued use of the ra888 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with the changes, you must stop using the Platform and contact our support team to close your account and arrange return of any remaining balance.

We recommend reviewing this Privacy Policy periodically — particularly before the start of major cricket or PSL seasons when Platform features and data collection practices may be updated to support new services.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a data-related complaint, please contact the ra888 data team using the details below:

If you are not satisfied with ra888's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to you, or to the regulatory authority overseeing ra888's international gaming licence. Details of the relevant authority are available from our support team upon request.

ra888 takes all privacy complaints seriously. Every complaint received is reviewed by a qualified member of our compliance team, and we are committed to resolving data concerns fairly, transparently, and without unnecessary delay.