ra666 Privacy Policy — How We Handle Your Data

1 Introduction

ra666 ("we", "us", "the Platform") is committed to protecting the privacy of every person who uses the ra666 platform at ra666.pro. This Privacy Policy sets out in plain terms what personal data we collect from you, how we use and store it, who we may share it with, how long we keep it, and what rights you have in relation to your personal data.

By registering an account with ra666, logging in, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are published on this site.

2 Data Controller

The data controller responsible for your personal data is ra666, the operator of the ra666 platform at ra666.pro. When this policy refers to "ra666", "we", "us" or "our", it refers to the entity operating ra666.pro and responsible for the collection and processing of personal data described in this document.

3 Personal Data We Collect

We collect personal data in different ways — data you provide directly when you register or use the Platform, data generated automatically through your use of the Platform, and data provided by payment processors when you make a deposit or withdrawal. The categories of personal data we collect are set out below.

4 How We Use Your Personal Data

ra666 uses personal data only for the purposes listed below. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent.

• Account registration and management: creating your account, verifying your identity, maintaining your account settings and responsible gaming tool preferences, and communicating account-related information to you.
• KYC and fraud prevention: verifying your age and identity in compliance with responsible gaming and anti-money laundering obligations, and detecting and preventing fraudulent activity, bonus abuse and prohibited conduct.
• Payment processing: processing your deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay), reconciling transactions and maintaining financial records as required by applicable law.
• Platform operation and improvement: delivering the games, betting markets and features you use, diagnosing technical issues, improving platform performance, and developing new features based on aggregated usage patterns.
• Responsible gaming: monitoring account activity for patterns consistent with problem gambling behaviour, administering deposit limits, session timers and self-exclusion requests, and contacting you proactively if we are concerned about your gaming patterns.
• Customer support: responding to your queries, processing complaints, resolving disputes, and maintaining records of communications for quality assurance and training purposes.
• Legal compliance: complying with applicable laws, responding to lawful requests from regulatory or law-enforcement authorities, and enforcing our Terms and Conditions.

ra666 does not use your personal data for profiling for marketing purposes, for the sale of targeted advertising, or for automated decision-making that produces legal or similarly significant effects on you, without first obtaining your explicit consent.

5 Legal Basis for Processing

ra666 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being processed.

• Contractual necessity: processing your identity data, contact data, financial data and gaming activity data is necessary to provide the ra666 service under our Terms and Conditions — without this processing we cannot operate your account or process your transactions.
• Legal obligation: processing your identity documents for KYC verification, retaining transaction records and communications, and cooperating with law-enforcement investigations are all required by applicable legal obligations that ra666 is subject to.
• Legitimate interests: processing technical data and gaming activity data for platform security, fraud detection and responsible gaming monitoring serves ra666's legitimate interests in operating a safe and fair platform — provided those interests do not override your own privacy rights.
• Consent: where we send you optional marketing communications or use optional analytics cookies, we will obtain your explicit consent first. You may withdraw consent at any time by contacting [email protected] or updating your account settings.

6 Sharing Your Personal Data

ra666 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment processors: your deposit and withdrawal transactions are processed through bKash, Nagad, Rocket and Upay. These providers receive only the minimum data necessary to process the transaction. Each provider operates under its own privacy framework and is independently responsible for the data it processes.
• Game providers: where games are delivered by third-party software providers such as Pragmatic Play, Evolution Gaming, Spribe or Ezugi, those providers may receive technical session data (such as session token and stake amount) necessary to deliver the game. They do not receive your full identity data.
• Law enforcement and regulators: ra666 will disclose personal data to police, courts, regulatory bodies or other public authorities when required to do so by applicable law, a valid legal order, or where we reasonably believe disclosure is necessary to protect the safety of any person or to prevent fraud or criminal activity.
• Service providers: we may engage trusted third-party service providers (such as cloud infrastructure providers and IT security firms) who process personal data on our behalf and under our instruction, subject to strict data-processing agreements that prohibit them from using your data for any other purpose.

7 Payment Data and Financial Security

When you make a deposit or withdrawal via bKash, Nagad, Rocket or Upay, your transaction is processed directly by that mobile money provider through their secure API. ra666 does not store your full mobile wallet credentials, PIN, or one-time passwords. ra666 retains only a partial payment reference (for example, the last four digits of a wallet number) together with the transaction amount, date and status — the minimum needed to reconcile your account records.

All financial transaction data retained by ra666 is stored in encrypted form using 256-bit AES encryption at rest and 256-bit SSL/TLS encryption in transit. Access to financial records is restricted to authorised ra666 personnel on a strict need-to-know basis, and all access is logged and audited.

8 Cookies and Tracking Technologies

ra666 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The types of cookies we use are as follows.

• Strictly necessary cookies: these cookies are essential for the Platform to function. They enable core functions such as session management, login authentication and account security. You cannot opt out of strictly necessary cookies without disabling the Platform entirely.
• Functional cookies: these cookies remember your preferences, such as your language setting, responsible gaming limits and display preferences, so you do not have to re-enter them each session. They are activated only with your consent.
• Analytics cookies: these cookies collect aggregated, anonymised information about how Players use the Platform — such as which pages are most visited, how long sessions last, and which features are used most — so we can improve platform performance and user experience. We use aggregated analytics data only; individual user activity is not sold or shared with advertisers.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For questions about specific cookies used by ra666, contact [email protected].

9 Data Retention

ra666 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following general retention periods apply: account data and KYC documents are retained for the duration of your account plus a minimum of 5 years after account closure to comply with anti-money laundering obligations; transaction records are retained for a minimum of 5 years from the date of each transaction; communications with support are retained for 3 years from the date of the communication; technical logs are retained for 12 months.

When personal data is no longer required and no legal retention obligation applies, ra666 will securely delete or anonymise it so that it can no longer be attributed to any individual. Anonymised aggregate data (for example, statistical usage reports that contain no personally identifiable information) may be retained indefinitely for business analytics purposes.

10 Your Data Rights

You have the following rights in relation to your personal data held by ra666. To exercise any of these rights, submit a written request to [email protected]. We will respond within 5 business days and will action your request within 30 days of receipt, subject to any identity verification requirements.

ra666 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. If we are unable to fulfil a request — for example because a legal retention obligation prevents deletion — we will explain the reason in our response.

11 Data Security

ra666 applies industry-standard technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction or disclosure. Our key security measures include: 256-bit SSL/TLS encryption for all data in transit between your device and the ra666 servers; 256-bit AES encryption for personal and financial data stored at rest; access controls that restrict data access to authorised personnel based on role and need-to-know; regular security audits and vulnerability assessments; and incident response procedures designed to detect and contain data breaches within the shortest possible time.

Despite our best efforts, no data transmission over the internet or electronic storage system is guaranteed to be 100% secure. If you believe your ra666 account has been compromised or that unauthorised access has occurred, please contact us immediately at [email protected]. ra666 will notify you promptly if a data breach occurs that is likely to result in a high risk to your rights and freedoms.

12 Children and Minors

The ra666 platform is strictly for adults aged 21 and above. ra666 does not knowingly collect personal data from any person under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, we will immediately close that account, void any transactions, and securely delete all associated personal data without delay.

13 Updates to This Privacy Policy

ra666 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or the features of the Platform. The most current version will always be published at ra666.pro/privacy-policy with its effective date clearly shown at the top of the page.

Where we make a material change to this Privacy Policy — for example, a change in the types of data we collect, the purposes for which we use it, or the categories of third parties with whom we share it — we will notify registered users via the email address or mobile number on their account at least 14 days before the change takes effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

14 Contact and Complaints

For all data privacy enquiries, rights requests, or complaints about how ra666 handles your personal data, please contact our data team. We take all privacy complaints seriously and will acknowledge your complaint within one business day and provide a substantive response within 5 business days.