ra786 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") describes how ra786 ("the Platform", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("Members", "Users", "you", "your") who access or use the ra786 online gaming platform available at ra786.bio and all associated services.

ra786 is committed to handling all personal data with the highest standards of care and transparency. This Policy has been prepared to ensure that every ra786 member — whether located in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan — understands precisely how their information is being used and what controls they hold over it.

This Policy forms part of ra786's broader member agreement and should be read alongside our Terms & Conditions and Responsible Gaming policy. By using the ra786 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein.

For the purposes of applicable data protection legislation, ra786 acts as the Data Controller in respect of all personal data collected from members and visitors to the ra786 platform. As Data Controller, ra786 determines the purposes and means by which personal data is processed.

ra786 operates under an international gaming license issued by a recognised regulatory authority. Our data processing activities are conducted in accordance with the obligations imposed by that licensing regime, applicable data protection laws, and our own internal data governance policies.

All inquiries regarding ra786's role as Data Controller, or any aspect of this Privacy Policy, should be directed to our support team at [email protected] or via the live chat facility available 24/7 on the ra786 platform.

ra786 collects the following categories of personal data from members and platform visitors. All categories of data collected are limited to what is necessary for the stated purpose.

3.1 Identity & Contact Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification purposes)
• Residential address, including city and postcode
• Email address — used for account communications and support
• Pakistani mobile number — used for account verification and optional two-factor authentication

3.2 Financial Data

• Payment method details sufficient to process deposits and withdrawals (e.g., JazzCash account number, EasyPaisa details, bank account details for HBL, UBL, or Meezan Bank transfers)
• Transaction history — deposits, withdrawals, wager amounts, game stakes, and winnings
• Wallet balance information

3.3 Technical & Usage Data

• IP address and approximate geolocation at the time of login and transaction
• Device type, operating system, and browser information
• Session duration, pages visited, and features accessed on the ra786 platform
• Login timestamps and active session records
• Game play history including games played, bet amounts, outcomes, and session durations

3.4 KYC & Verification Data

• Copies of government-issued identity documents (CNIC, passport, or driving licence) where requested for KYC verification
• Proof of address documentation where required
• Selfie or video verification data where requested during enhanced due diligence procedures

3.5 Responsible Gaming Data

• Self-exclusion status and duration, where a member has activated this tool
• Deposit limit, loss limit, and session timer settings configured by the member
• Responsible gaming interaction history with ra786 support staff

ra786 collects personal data through the following channels:

• Direct Submission: Data you enter during account registration, profile updates, KYC verification, support interactions, and payment processing.
• Automated Collection: Technical and usage data collected automatically when you access the ra786 platform — including IP address, device data, and session activity — via server logs and analytics tools.
• Cookies and Similar Technologies: Data collected through cookies, local storage, and similar tracking technologies as described in Section 9 of this Policy.
• Third-Party Sources: Identity verification data received from licensed third-party KYC verification providers; fraud risk data from our payment processing partners; geolocation data from IP resolution services used to comply with jurisdictional restrictions.

ra786 processes your personal data only where a valid legal basis exists for doing so. The following table sets out the primary purposes for which ra786 processes member data and the corresponding legal basis in each case.

ra786 does not sell, rent, or trade your personal data to any third party for commercial purposes under any circumstances. We share member data only in the limited circumstances described below, and always subject to appropriate contractual protections.

6.1 Service Providers

ra786 engages trusted third-party service providers to support the delivery of our platform services. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), KYC and identity verification providers, game content providers, fraud prevention services, and customer support technology providers. All such providers are contractually bound to process ra786 member data only as instructed and to maintain appropriate data security standards.

6.2 Regulatory and Legal Disclosure

ra786 may disclose personal data to regulatory authorities, law enforcement agencies, tax authorities, or other government bodies where required to do so by applicable law, our gaming license conditions, court order, or other legal process. ra786 will notify affected members of such disclosure wherever permitted by law.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of ra786's business, member personal data may be transferred to the acquiring entity as part of the transaction. ra786 will provide advance notice to affected members of any such transfer and ensure that the receiving entity maintains equivalent data protection standards.

ra786 operates globally and some of our service providers — including game content studios, payment technology partners, and cloud infrastructure providers — process data outside Pakistan. Where personal data is transferred internationally, ra786 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that required under this Policy.

Such safeguards include the use of standard contractual clauses approved by relevant data protection authorities, the selection of processors operating under equivalent regulatory regimes, and ongoing monitoring of third-party compliance. Any member wishing to obtain information about specific international transfers of their data may contact us at [email protected].

ra786 retains personal data for no longer than is necessary to fulfil the purpose for which it was originally collected, or as required by applicable law or our regulatory licensing obligations. The following standard retention periods apply:

• Active Account Data: Retained for the duration of your ra786 membership and for 5 years following account closure, unless a longer period is required by law.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction to satisfy anti-money laundering and financial regulatory obligations.
• KYC Documentation: Retained for 5 years from account closure or from the date of the last relevant transaction, whichever is later.
• Technical and Usage Logs: Retained for up to 24 months from the date of collection for security, analytics, and fraud prevention purposes.
• Marketing Consent Records: Retained until consent is withdrawn plus 3 years, as evidence of consent.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration by excluded members, in accordance with responsible gaming best practice.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

ra786 uses cookies and similar tracking technologies on its platform to deliver essential functionality, maintain session security, personalise your experience, and analyse platform performance. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the ra786 platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your language preference, game lobby layout, and notification settings.
• Analytics Cookies: Allow ra786 to understand how members use the platform — which pages are visited most, where users encounter difficulties, and how performance can be improved. Data collected is aggregated and anonymised.
• Security Cookies: Used to detect and prevent fraudulent login attempts, account takeovers, and bot activity.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ra786 platform, including your ability to maintain a logged-in session.

The ra786 platform is strictly intended for adults aged 21 years and above. ra786 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification measures are applied at registration and at key transactional stages throughout the member lifecycle.

If ra786 identifies that personal data has been submitted by or in relation to a person under the age of 21, the associated account will be immediately suspended, all deposits will be returned to the originating payment method, and all personal data collected will be deleted within a reasonable period, subject only to any legal hold obligations.

If you are a parent or guardian and believe that your child has registered on the ra786 platform, please contact us immediately at [email protected]. We will investigate and take appropriate action as quickly as possible.

ra786 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the ra786 platform — the same standard used by HBL and Meezan Bank for online banking.
• AES-256 encryption for all sensitive data at rest in ra786's databases and storage systems.
• Multi-factor authentication options for member login, including SMS verification to Pakistani mobile numbers.
• Continuous automated monitoring of platform traffic for anomalous activity indicative of hacking attempts, credential stuffing, or other cyber threats.
• Regular independent penetration testing of the ra786 platform and infrastructure by certified third-party security specialists.
• Strict internal access controls ensuring that only authorised ra786 personnel have access to member personal data, on a need-to-know basis only.

Despite these measures, no digital platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to member rights, ra786 will notify affected members and relevant authorities within the timeframes required by applicable law.

As a ra786 member, you hold the following rights in respect of your personal data. All rights may be exercised free of charge by contacting our support team. ra786 will respond to all valid data rights requests within 30 days of receipt.

Where you have provided your consent, ra786 may send you marketing communications relating to new games, promotions, PSL special offers, casino bonuses, and other platform news by email or SMS to your registered Pakistani mobile number.

You may withdraw your marketing consent at any time by: (a) clicking the unsubscribe link included in any ra786 marketing email; (b) adjusting your communication preferences in your ra786 account settings; or (c) contacting our support team at [email protected]. Withdrawal of marketing consent will not affect the lawfulness of any processing carried out prior to withdrawal, and will not affect essential transactional communications relating to your account.

The ra786 platform may, from time to time, contain links to third-party websites or services — for example, in the context of responsible gaming resources or payment provider information pages. ra786 has no control over the content, privacy practices, or data processing activities of any third-party website and accepts no responsibility for those practices.

We encourage all ra786 members to review the privacy policies of any third-party website they visit via a link from the ra786 platform. The ra786 Privacy Policy applies only to data collected and processed directly by ra786 in connection with your use of the ra786 platform.

ra786 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. Any material change to this Policy will be communicated to active ra786 members via email notification, sent to the address registered on your account, with a minimum of 14 days' advance notice before the change takes effect.

Non-material changes — such as minor clarifications of existing practices or correction of typographical errors — may be made without prior notice. The effective date at the top of this Policy will always reflect the date of the most recent revision. We encourage all members to review this page periodically.

Your continued use of the ra786 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept any amendment, please contact our support team to discuss your options, which may include account closure.

All privacy-related inquiries, data rights requests, and questions about this Privacy Policy should be directed to the ra786 Data Protection team using the contact details below. We aim to respond to all requests within 5 business days and to resolve all data rights requests within 30 calendar days.

This Privacy Policy was last reviewed and updated in January 2026. The most current version will always be available at ra786.bio/privacy-policy. Archived versions are available on request.