raj123 operates the online casino and sports betting platform accessible at raj123.cam ("the Platform"). This Privacy Policy applies to all personal information processed by raj123 in connection with your use of the Platform, including account registration, identity verification, financial transactions, sports betting activity, casino gameplay, customer support interactions, and marketing communications.
This Policy is to be read alongside the Terms & Conditions and the Responsible Gambling Policy, both of which are incorporated by reference. By registering an account or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
If you do not agree to the terms of this Privacy Policy, you must not use the Platform or provide us with any personal information.
Pakistan-Specific Note: raj123 does not claim to be regulated by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan (SBP), or any Pakistani provincial authority. This Privacy Policy is governed by the data protection and privacy laws applicable in the Operator's licensing jurisdiction. Pakistani users access and use the Platform at their own risk and in compliance with applicable local law. Nothing in this Policy constitutes legal advice.
For the purposes of this Privacy Policy, the following definitions apply:
"Personal Data" / "Personal Information"
Any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, date of birth, residential address, email address, phone number, identity document details, IP address, device identifiers, and financial account information.
"Processing"
Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction, whether by automated or manual means.
"Data Controller"
The Operator of the raj123 Platform — the legal entity that determines the purposes and means of processing Personal Data. Specific Operator details are made available in the Platform's legal documentation and account onboarding materials.
"Data Processor"
A third party that processes Personal Data on behalf of the Data Controller, pursuant to a data processing agreement, including payment service providers, KYC verification services, fraud detection platforms, and cloud infrastructure providers.
"Consent"
A freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for a stated purpose. Where consent is the legal basis for processing, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
"KYC"
Know Your Customer — the identity and age verification process required prior to or during account use, as described in the Terms & Conditions. KYC data is processed for identity verification, age confirmation, fraud prevention, and AML compliance purposes.
raj123 collects the following categories of Personal Data from users, depending on the services used and the stage of account lifecycle:
3.1 — Registration & Identity Data
- Full legal name as it appears on government-issued ID
- Date of birth
- Residential address (including city and country — e.g., Karachi, Lahore, Islamabad)
- Email address
- Phone number
- Username and encrypted password
- Security questions and answers (where applicable)
3.2 — KYC & Verification Data
- Copy of government-issued identity document (Pakistani CNIC or passport)
- Proof of address documentation
- Selfie or liveness verification image
- Source-of-funds or source-of-wealth documentation (for enhanced due diligence)
- Payment method verification evidence
3.3 — Financial & Transaction Data
- Deposit and withdrawal history
- Payment method references (wallet identifiers, bank account reference numbers — not full card/account numbers stored in plain text)
- Transaction amounts denominated in PKR or applicable currency
- Bonus claim and wagering activity records
3.4 — Gaming & Betting Activity
- Sports bets placed, including markets, odds, and outcomes
- Casino game sessions, including game titles, stakes, duration, and results
- Responsible gambling limit settings and self-exclusion status
- Account preferences and betting history
3.5 — Technical & Device Data
- IP address and approximate geolocation derived therefrom
- Device type, operating system, and browser version
- Session identifiers and authentication tokens
- Log data including access times, pages visited, and error reports
3.6 — Communications Data
- Customer support chat transcripts and email correspondence
- Complaint records
- Marketing communication preferences and interaction data
Categories of data collected in summary:
We collect Personal Data through the following means:
- Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, place bets, play casino games, contact customer support, or respond to marketing communications.
- Automatically: Through cookies, session tracking technologies, server logs, and analytics tools as you navigate and interact with the Platform. See Section 10 (Cookies & Tracking) for further details.
- From third parties: From KYC and identity verification service providers, fraud detection platforms, payment processors (including those facilitating transfers via Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah, or other methods), and data enrichment services where applicable. These providers are contracted under data processing agreements and are not permitted to use your data for their own purposes.
- From publicly available sources: Where permitted by law and necessary for fraud prevention or AML compliance, we may verify information against publicly available records or registers.
Payment Provider Note: When payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, or Bank Alfalah are mentioned in data collection contexts, this refers to transaction reference data received through the payment processing flow. These providers do not share your full account data with raj123 beyond what is necessary for transaction processing. They do not endorse or support gambling.
We process your Personal Data on the following legal bases, depending on the purpose and applicable law in our licensing jurisdiction:
Contractual Necessity
Processing necessary for the performance of the contract between you and raj123 — including account registration, KYC verification, processing deposits and withdrawals, and operating your gaming account. Without this processing, we cannot provide the Platform's services.
Legal Obligation
Processing necessary to comply with applicable legal and regulatory obligations, including Anti-Money Laundering (AML) requirements, identity verification obligations under our operating licence, and any mandatory reporting requirements imposed on the Operator.
Legitimate Interests
Processing necessary for our legitimate business interests, where those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, responsible gambling controls, internal analytics, and improving Platform functionality.
Consent
Where you have provided explicit consent — for example, for the receipt of marketing communications. You may withdraw consent for marketing at any time by contacting us or using the unsubscribe mechanism in marketing emails. Withdrawal of marketing consent does not affect processing carried out on other legal bases.
We use the Personal Data we collect for the following purposes:
- Account management: Creating, maintaining, and administering your account, including authentication and access controls.
- Identity and age verification (KYC): Confirming your identity and age to comply with our licensing obligations and to prevent underage gambling.
- Payment processing: Facilitating deposits, withdrawals, and bonus disbursements. Transaction data is processed through our payment service providers in accordance with their applicable terms and our data processing agreements.
- Responsible gambling: Monitoring gaming activity to detect indicators of problem gambling, applying limits and self-exclusion controls, and fulfilling our responsible gambling obligations.
- AML and fraud prevention: Detecting, investigating, and preventing money laundering, fraud, and other financial crime. This may include automated risk scoring and manual review of transactions.
- Customer support: Responding to your enquiries, complaints, and support requests.
- Legal compliance: Meeting reporting obligations, responding to lawful requests from regulatory authorities, and enforcing our Terms & Conditions.
- Platform improvement: Analysing usage data to improve the Platform's features, performance, and user experience.
- Marketing communications (with consent): Sending promotional offers, bonus notifications, and updates about Platform features where you have opted in. You may opt out at any time.
- Security: Protecting the Platform and its users from fraud, abuse, and unauthorised access.
We do not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:
7.1 — KYC & Identity Verification Providers
Third-party identity verification platforms that process your CNIC, passport, selfie, or liveness check data to confirm your identity and age. These processors are bound by data processing agreements and are not permitted to use your data for their own commercial purposes.
7.2 — Payment Service Providers
Payment processors and gateway providers necessary for facilitating your deposit and withdrawal transactions. These include processors who interact with payment rails familiar to Pakistani users (such as bank transfer networks and mobile money operators). Your data is shared only to the extent necessary to complete the transaction and comply with applicable financial regulations.
7.3 — Fraud & AML Compliance Services
Fraud detection, risk assessment, and AML screening providers that assist in identifying and preventing financial crime. These services may process transactional and behavioural data under strict confidentiality obligations.
7.4 — Technology & Infrastructure Providers
Cloud hosting, database management, customer support platform, and analytics service providers who process data on our behalf as Data Processors under contractual data processing agreements.
7.5 — Regulatory & Law Enforcement Authorities
We may disclose Personal Data to regulatory authorities, law enforcement agencies, courts, or other public bodies where required to do so by applicable law, a valid legal order, or in connection with an investigation into fraud, money laundering, or other illegal activity. Such disclosures are made only to the extent required and we will, where legally permitted, inform you of any such disclosure.
7.6 — Business Transfers
In the event of a merger, acquisition, sale of assets, or restructuring of the Operator, your Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.
No Unsolicited Third-Party Marketing: We do not share your Personal Data with third-party advertisers or marketing companies for their own direct marketing purposes without your explicit consent.
The Operator is based outside Pakistan. When you use the Platform, your Personal Data may be transferred to, stored in, and processed in countries other than your country of residence, including countries where data protection laws may differ from those in your jurisdiction.
Where Personal Data is transferred internationally, we implement appropriate safeguards in accordance with applicable data protection law, which may include:
- Standard contractual clauses approved by relevant data protection authorities;
- Binding corporate rules where applicable;
- Transfers to countries with recognised adequate levels of data protection; and/or
- Explicit consent where no other transfer mechanism is available.
By using the Platform and providing your Personal Data, you acknowledge and consent to these international transfers subject to the safeguards described above.
We retain your Personal Data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law and our licensing obligations. The following general retention principles apply:
- Active accounts: Personal Data is retained throughout the period your account is active and for a defined period following account closure, as required by our licensing and AML obligations.
- KYC and identity documents: Retained for the period required by applicable AML regulations in our licensing jurisdiction, typically a minimum of five (5) years following the end of the customer relationship, and potentially longer in the event of an active investigation or legal proceeding.
- Financial transaction records: Retained for the period required by applicable financial and licensing regulations, typically a minimum of five (5) years.
- Marketing data: Retained until you withdraw consent or opt out, after which it is deleted or anonymised within a reasonable period.
- Support communications: Retained for a period sufficient to resolve disputes and meet applicable legal obligations, typically between one (1) and five (5) years depending on the nature of the communication.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an individual.
raj123 uses cookies and similar tracking technologies (including session tokens, local storage, and analytics scripts) on the Platform. These technologies help us operate the Platform effectively, maintain session security, and understand how users interact with our services.
Strictly Necessary Cookies
Required for the Platform to function. These include authentication session cookies, security tokens, and cookies that remember your account login state. These cannot be disabled without preventing core Platform functionality.
Functional Cookies
Enable personalised features such as remembering your display preferences, language settings, and previously applied responsible gambling limits. These improve your experience but are not strictly essential to Platform operation.
Analytics & Performance Cookies
Collect anonymised or pseudonymised data about how users navigate and use the Platform — pages visited, session duration, device type, and error events. This data helps us identify usability issues and improve Platform performance. Analytics providers process this data under data processing agreements.
Managing Cookies
You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling certain cookies may affect the functionality of the Platform, including authentication and account security features. Refer to your browser's help documentation for specific instructions.
Depending on the data protection laws applicable in our licensing jurisdiction and your country of residence, you may have the following rights in relation to your Personal Data. We will respond to valid rights requests within the timeframe required by applicable law (typically 30 days, extendable in complex cases):
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Request a copy of the Personal Data we hold about you, along with information about how it is processed. | Contact support — see Section 15 |
| Rectification | Request correction of inaccurate or incomplete Personal Data. Note: KYC-verified data can only be updated through a new verification submission. | Contact support or update in your account dashboard |
| Erasure | Request deletion of your Personal Data where it is no longer necessary for its original purpose. Note: We may be required to retain certain data to fulfil legal and regulatory obligations (e.g., AML records). | Contact support with a formal request |
| Restriction | Request that we restrict processing of your data in certain circumstances, for example while you contest its accuracy or object to its use. | Contact support with a formal request |
| Portability | Request that we provide your Personal Data in a structured, machine-readable format, where technically feasible and legally applicable. | Contact support with a formal request |
| Objection | Object to processing based on legitimate interests, or to direct marketing. We will honour marketing objections immediately; other objections are assessed on a case-by-case basis. | Use unsubscribe link in emails or contact support |
| Withdraw Consent | Where processing is based on consent, you may withdraw that consent at any time. This does not affect prior lawful processing. | Contact support or use account settings |
Identity Verification for Rights Requests: To protect against unauthorised access to your data, we will verify your identity before processing any data subject rights request. You may be asked to confirm account details or provide a copy of your identity document through our secure verification portal.
raj123 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- HTTPS/TLS encryption: All data transmitted between your device and the Platform is encrypted using HTTPS/TLS protocols.
- Access controls: Personal Data is accessible only to authorised personnel who require it to perform specific job functions, subject to role-based access controls and audit logging.
- Password security: User passwords are stored using industry-standard cryptographic hashing — they are never stored in plain text.
- Secure KYC portal: Identity documents submitted for KYC verification are processed through an encrypted, access-controlled verification portal. Documents should only ever be submitted through the Platform's official HTTPS portal — never via unsecured chat or email.
- Fraud and intrusion monitoring: The Platform employs automated monitoring for suspicious access patterns, fraudulent transaction activity, and security anomalies.
- Vendor security standards: Third-party processors and service providers are assessed for data security standards as part of our vendor due diligence process and are bound by contractual security obligations.
While we take these measures seriously, no digital transmission or storage system is completely secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords for your account and to log out from shared devices.
Critical Reminder: raj123 support staff will never ask for your full password, full CNIC number, or payment PIN via any communication channel. If you receive a request for this information claiming to be from raj123, treat it as a phishing attempt and report it to our support team immediately.
The raj123 Platform is strictly for adults aged 18 years and above, or the higher minimum age required by the Operator's licensing jurisdiction. We do not knowingly collect, process, or retain Personal Data from individuals under the minimum required age.
If we discover or are notified that Personal Data has been collected from a minor — whether through a falsified registration or any other means — we will:
- Immediately suspend and close the account;
- Delete the collected Personal Data as promptly as practicable, subject to any mandatory retention obligations (e.g., AML records of financial transactions);
- Reverse financial transactions where technically and legally possible; and
- Take appropriate further action in accordance with applicable law.
If you are the parent or guardian of a minor and believe they may have accessed the Platform or provided us with Personal Data, please contact us immediately using the details in Section 15.
We reserve the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our operational requirements. Where changes are material, we will take reasonable steps to notify you in advance — for example, by displaying a prominent notice on the Platform or by sending a notification to your registered email address.
The "Effective Date" and "Last Reviewed" dates shown at the top of this document are updated with each revision. We encourage you to review this Policy periodically to stay informed about how we are protecting your Personal Data.
Your continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure in accordance with our account closure procedures.
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise any of your data protection rights described in Section 11, please contact us through the following channels:
For privacy-related enquiries and data subject rights requests:
(Email displayed as plain text only. Do not include sensitive data such as passwords, full CNIC numbers, or payment PINs in emails.)
Live Chat
Available through your account dashboard. For privacy-related matters, please clearly state "Privacy Request" at the start of your conversation to ensure your query is directed to the appropriate team. Operator-provided support hours apply; as per operator information, live chat is available 24/7.
Response Times
We aim to acknowledge privacy enquiries within 48 business hours and to respond to formal data subject rights requests within 30 calendar days, or within the timeframe required by applicable data protection law. Complex requests may require an extension, in which case we will notify you of the extended deadline.
Escalation: If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the Operator's licensing jurisdiction. We will advise you on the applicable authority upon request.
Our Privacy Commitments in Brief
HTTPS Encrypted at All Times
All data you submit — registration details, KYC documents, financial transactions — is transmitted over HTTPS/TLS encrypted connections. Your data is never sent in plain text.
We Don't Sell Your Data
Your Personal Data is never sold to third-party advertisers or data brokers. Sharing with third parties is limited strictly to what is necessary for service delivery, legal compliance, and fraud prevention.
You Control Your Data
You have rights to access, correct, delete, and export your data. You can also withdraw marketing consent at any time. We respond to data subject rights requests within the legally required timeframe.
Secure KYC Handling
CNIC and passport documents are processed through an encrypted verification portal only. We never instruct users to send identity documents via unsecured chat or email.
Clear Retention Periods
We don't keep your data forever. Retention periods are tied to specific legal and regulatory requirements — primarily AML obligations — and data is securely deleted when no longer necessary.
Transparent Communication
We notify you of material changes to this Policy before they take effect. You won't discover that the Privacy Policy changed after the fact through a buried update notice.
Questions About Your Privacy?
If you have questions about how raj123 handles your data, or if you wish to exercise your data rights, our support team is ready to help. You can also review related policies below.
🔞 Adults 18+ only, or the higher minimum required by the operator/license jurisdiction. Gambling involves financial risk. Local laws may restrict gambling — know your local law. Not legal advice.