ra77 Privacy Policy — How We Handle Your Data
This Privacy Policy explains what personal data ra77 collects from players in Bangladesh, how it is used, how it is protected, and your rights in relation to it. Last updated January 2026.
Overview
ra77 is committed to protecting the privacy and personal data of all players who use its platform. This Privacy Policy applies to all data collected through the ra77 website, mobile platform, and associated services (collectively, the "Platform"). By registering an account or using the Platform, you consent to the data practices described in this Policy.
This Policy should be read alongside our Terms and Conditions, which govern the overall use of the ra77 Platform. If you have any questions about how ra77 handles your personal data, you can contact us at any time at [email protected].
SSL Encrypted
All data in transit is protected by 256-bit SSL encryption on every session.
Not Sold
Your personal data is never sold to third-party advertisers or data brokers.
Your Rights
You have the right to access, correct, or delete your data at any time by contacting support.
Contact Us
Data-related queries can be sent to [email protected] and will be responded to within 30 days.
Information We Collect
ra77 collects personal data only to the extent necessary to provide its services to players in Bangladesh, to comply with applicable legal and regulatory obligations, and to maintain the security and integrity of the Platform. The categories of personal data we collect include:
- Identity data: full legal name, date of birth, and government-issued identification documents (such as a National ID card or passport) provided during account registration or KYC verification.
- Contact data: email address and mobile phone number provided at registration, and any updated contact information you subsequently provide.
- Financial data: payment method identifiers used for deposits and withdrawals (such as bKash wallet numbers or Nagad account references), transaction amounts, dates and reference numbers. ra77 does not store full card numbers or complete bank account credentials.
- Usage and gameplay data: login timestamps, session durations, games played, bet amounts, win and loss records, and in-play behaviour data collected automatically as you use the Platform.
- Technical data: IP address, device type, operating system, browser type, and general geographic location derived from your IP address (country or region level only — ra77 does not collect precise GPS location data).
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by applicable law or by our responsible gaming obligations (for example, where a player requests self-exclusion and discloses a personal circumstance in support of that request).
How We Use Your Information
ra77 uses the personal data it collects for the following purposes. All processing is carried out on a lawful basis as described in Section 3 of this Policy:
- Account creation and management: to create and maintain your ra77 account, verify your identity, process your registration, and manage ongoing account settings including deposit limits and self-exclusion preferences.
- Service delivery: to process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; to credit winnings and apply bonuses; and to provide access to all games and betting markets available on the Platform.
- Legal and regulatory compliance: to comply with applicable anti-money laundering (AML) regulations, KYC obligations, age verification requirements, and any lawful requests from regulatory authorities or law enforcement agencies.
- Responsible gaming: to monitor play patterns for indicators of problem gambling, to administer deposit limits, session limits and self-exclusion requests, and to contact players proactively where responsible gaming concerns are identified.
- Customer support: to respond to your support queries, complaints, and feedback, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
- Platform improvement and security: to analyse usage data in aggregate to improve Platform features and performance, to detect and prevent fraud, to identify and respond to security threats, and to investigate suspected breaches of our Terms and Conditions.
Legal Basis for Processing
ra77 processes personal data on the following legal bases. Where more than one basis applies to a specific processing activity, all applicable bases are relied upon:
- Contractual necessity: processing your identity data, contact data, and financial data is necessary to perform the contract between you and ra77 — that is, to provide you with access to the Platform and its services, and to process your deposits, gameplay and withdrawals.
- Legal obligation: processing for KYC verification, AML compliance, age verification, and responses to lawful regulatory and law enforcement requests is required by applicable law. ra77 has no discretion to decline such processing.
- Legitimate interests: processing usage and technical data for Platform security, fraud prevention, and aggregate analytics is carried out on the basis of ra77's legitimate interests in operating a secure, fair and sustainable platform. Players' privacy interests are weighed against these legitimate interests; data used on this basis is not used for marketing or shared beyond what is necessary.
- Consent: where ra77 sends you optional promotional communications (such as bonus offers or seasonal promotions), this is carried out on the basis of your consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Payment Data and Identity Verification
All financial transactions on the ra77 Platform are processed through secure, established Bangladeshi payment gateways. When you make a deposit or request a withdrawal via bKash, Nagad, or Rocket, your transaction details are transmitted directly to the relevant payment provider using encrypted connections. ra77 receives only the reference data necessary to record the transaction (such as a transaction ID and the amount) — ra77 does not receive or store your full mobile wallet PIN, bKash/Nagad account password, or complete bank account credentials.
ra77 may require you to submit identity documents as part of the KYC (Know Your Customer) verification process before processing withdrawals or at any other point where identity verification is required by law or by our internal compliance policies. Documents collected for KYC are stored securely and are accessible only to authorised compliance personnel. They are not used for any purpose other than identity verification and legal compliance, and are retained only for as long as required by applicable law.
Data Sharing and Disclosure
ra77 does not sell, rent, or trade your personal data to any third party. Personal data is shared only in the following limited circumstances:
- Payment processors: transaction data is shared with bKash, Nagad, Rocket, and other payment providers strictly to the extent necessary to process deposits and withdrawals. Each payment provider operates under its own privacy policy and is independently responsible for data it holds.
- Game and technology providers: gameplay session data may be shared with licensed game studio providers (such as Evolution Gaming or Pragmatic Play) where technically necessary to deliver live casino streams or to investigate technical faults. These providers are contractually bound to process data only for the purpose of service delivery.
- Regulatory and law enforcement authorities: where ra77 is required by applicable law, court order, or regulatory directive to disclose personal data to a competent authority, it will do so. ra77 will not voluntarily disclose personal data to government bodies in the absence of a lawful basis for doing so.
- Corporate transactions: in the event of a merger, acquisition, or sale of all or part of ra77's business, personal data held by ra77 may be transferred to the acquiring entity as part of that transaction. Affected players would be notified of any material change to data controller in advance of such a transfer taking effect.
Beyond the circumstances described above, ra77 will not share your personal data with any third party without your explicit prior consent.
Cookies and Tracking Technologies
ra77 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to remember your session preferences, and to collect aggregate analytics data. The categories of cookies used are:
- Strictly necessary cookies: these are required for the Platform to function. They enable session authentication, maintain your login state across pages, and support the secure processing of financial transactions. These cookies cannot be disabled without breaking core Platform functionality.
- Functional cookies: these remember your preferences such as language settings and responsible gaming limit configurations so that you do not need to re-enter them on each visit.
- Analytics cookies: these collect anonymised, aggregate data about how players navigate the Platform — for example, which pages are visited most frequently and how long sessions last. This data is used solely to improve the Platform's performance and user experience. No individual player is identified from analytics data.
- Security cookies: these help detect and prevent fraudulent activity, session hijacking, and unauthorised access attempts by recording technical identifiers associated with your device and session.
ra77 does not use advertising cookies or share cookie data with third-party advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to log in and use the Platform.
Data Retention
ra77 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply as a general guide: account data and transaction records are retained for a minimum of five (5) years following account closure to satisfy anti-money laundering and financial record-keeping obligations; KYC identity documents are retained for the same period; gameplay logs are retained for up to two (2) years for dispute resolution and responsible gaming monitoring purposes; support correspondence is retained for up to three (3) years.
Where personal data is no longer required and no legal retention obligation applies, ra77 will securely delete or anonymise it. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.
Your Data Rights
As a user of the ra77 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered account details. ra77 will respond to all valid data rights requests within 30 days:
- Right of access: you may request a copy of the personal data ra77 holds about you, along with information about how it is used and with whom it has been shared.
- Right of rectification: if any personal data ra77 holds about you is inaccurate or incomplete, you may request that it be corrected. Where possible, corrections are applied within 5 business days of a verified request.
- Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that erasure requests cannot override legal data retention obligations (see Section 7).
- Right to restriction: you may request that ra77 restrict the processing of your personal data in certain circumstances — for example, where you dispute its accuracy or where you have objected to processing and a decision on that objection is pending.
- Right to data portability: where processing is carried out on the basis of your consent or on the basis of contractual necessity, you may request a copy of the personal data you have provided to ra77 in a structured, commonly used, machine-readable format.
- Right to object: you may object at any time to the processing of your personal data for direct marketing purposes or where processing is based on ra77's legitimate interests. Where an objection is raised to legitimate-interests processing, ra77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
Data Security
ra77 implements appropriate technical and organisational security measures to protect the personal data it holds against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include 256-bit SSL encryption for all data transmitted between your device and the Platform, secure encrypted storage of account and transaction data, access controls that restrict internal data access to authorised personnel only on a need-to-know basis, and regular security assessments of the Platform's infrastructure.
Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be entirely secure. In the event that ra77 becomes aware of a personal data breach that is likely to result in a risk to affected players, ra77 will notify the affected players without undue delay and will take immediate steps to contain the breach and mitigate its impact.
Children and Minors
The ra77 Platform is intended exclusively for adults aged 21 and above. ra77 does not knowingly collect personal data from persons under the age of 21. During registration, all users are required to confirm that they are 21 or older, and ra77 uses age verification procedures to enforce this requirement. Where ra77 discovers that an account has been registered by or on behalf of a person under the age of 21, the account will be closed immediately, all associated personal data will be securely deleted (subject to any overriding legal retention obligation), and any funds held in the account will be handled in accordance with our Terms and Conditions.
Changes to This Privacy Policy
ra77 may update this Privacy Policy from time to time to reflect changes in applicable law, in the services offered on the Platform, or in our data processing practices. Where a material change is made, ra77 will publish the updated Policy on this page with the revised effective date clearly shown, and will endeavour to notify registered account holders by email.
Your continued use of the Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must stop using the Platform and may request account closure by contacting [email protected].
Contact and Data Controller
ra77 is the data controller for personal data collected through the Platform. If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ra77 handles your personal data, please contact our support team. All privacy-related queries are handled by our compliance team and will receive a response within 30 calendar days.
[email protected]
Response time: within 30 calendar days of a verified request.
Your Privacy Is Protected — Play With Confidence
ra77 keeps your data safe so you can focus on what matters. Log in to your account or visit our FAQ for more information.
Log In to ra77 Visit Our FAQ21+ only. Please play responsibly. For adults aged 21 and above only.