01 Introduction
This Privacy Policy ("Policy") describes how Raja07 ("Raja07", "we", "us", "our"), the operator of the online gaming information platform accessible at https://raja07.cam ("Platform", "Site"), collects, uses, stores, discloses and otherwise processes personal data relating to users ("User", "you", "your") of the Platform.
Raja07 is an English-language online gaming platform designed to serve users across Pakistan — including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — as well as users in other jurisdictions where use of the Platform is lawful. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles.
By registering an Account, accessing the Platform or submitting any personal data to us, you acknowledge that you have read and understood this Policy and agree to the collection and use of your information as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
02 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" — any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.
- "Processing" — any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure or erasure.
- "Data Controller" — the entity that determines the purposes and means of processing Personal Data. Raja07 acts as Data Controller in relation to user data collected on this Platform.
- "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a written data processing agreement.
- "Consent" — any freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their Personal Data for one or more specific purposes.
- "Cookie" — a small text file placed on a User's device by a website that stores certain session or preference data.
- "KYC" — Know Your Customer — the identity verification process required before full account functionality and withdrawals are enabled.
03 Data We Collect
Raja07 collects Personal Data through several channels. The categories of data collected, and the circumstances in which they are collected, are set out below.
3.1 Data You Provide Directly
- Registration data: Full legal name, date of birth, residential address, email address, telephone number and chosen username when you create an Account.
- Identity verification (KYC) documents: Government-issued identification (e.g., Pakistani CNIC, passport), proof of address and any other documentation requested for compliance purposes.
- Financial data: Payment method details provided during deposit or withdrawal, including relevant account or wallet references. Full payment card numbers are never stored by Raja07 — card processing is handled by third-party payment service providers.
- Support communications: The content of messages, emails or live chat transcripts submitted to our customer support team.
- Responsible gambling declarations: Any self-exclusion requests, limit-setting instructions or problem-gambling disclosures made through your Account.
3.2 Data Collected Automatically
- Device and browser data: IP address, device type, operating system, browser type and version.
- Usage data: Pages visited, time spent on each page, clickstream data, session duration, game selections and betting history.
- Cookies and tracking technologies: See Section 7 (Cookies & Tracking) for full details.
- Geolocation data: Approximate location derived from your IP address, used for compliance and jurisdictional-restriction purposes.
3.3 Data From Third Parties
We may receive Personal Data from third parties in the following circumstances:
- Identity verification service providers used for KYC checks.
- Payment processors confirming transaction status and flagging fraud indicators.
- Fraud prevention and AML screening services.
- Analytics partners providing aggregated or anonymised platform-usage insights.
04 Data Processing
We process Personal Data for the following purposes:
| Purpose | Types of Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, DOB, address, username | Contract performance |
| Identity verification (KYC/AML) | ID documents, financial history, geolocation | Legal obligation |
| Processing deposits and withdrawals | Payment references, transaction records | Contract performance |
| Customer support and communications | Email, chat transcripts, account data | Contract performance / Legitimate interest |
| Fraud prevention and security monitoring | IP address, device fingerprint, behavioural patterns | Legitimate interest / Legal obligation |
| Platform analytics and improvement | Usage data, session data (anonymised where possible) | Legitimate interest |
| Responsible gambling monitoring | Betting history, self-exclusion declarations, deposit patterns | Legal obligation / Vital interest |
| Regulatory compliance and reporting | Account data, transaction records, KYC documents | Legal obligation |
| Marketing communications (where consented) | Email address, communication preferences | Consent |
05 Legal Basis for Processing
Raja07 processes Personal Data only where a valid legal basis exists. The legal bases we rely upon are:
- Contract Performance: Processing is necessary to perform the contract we have with you as a registered user — including operating your Account, processing transactions and delivering the Services you have requested.
- Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC/AML requirements, responsible-gambling regulatory obligations and tax reporting duties under applicable law.
- Legitimate Interests: Processing is necessary for purposes of our legitimate business interests — including platform security, fraud prevention, abuse detection and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where processing is based on consent (for example, optional marketing communications), you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
- Vital Interests: In limited circumstances, processing may be necessary to protect your vital interests — particularly in connection with responsible-gambling intervention measures.
06 Data Sharing & Disclosure
6.1 Third-Party Service Providers
Raja07 engages carefully selected third-party service providers who process Personal Data on our behalf as Data Processors. These providers are bound by written data processing agreements and are authorised to process your data only for the purposes specified by Raja07. Categories of Data Processors include:
- Payment processing and fraud prevention services
- KYC and identity verification providers
- Cloud infrastructure and hosting providers
- Customer support platform providers
- Analytics and platform monitoring services
- AML screening and compliance services
6.2 Payment References
Where Pakistani payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah are used as deposit or withdrawal channels, transaction data is exchanged with those providers solely to the extent necessary to process the relevant transaction. These providers operate under their own privacy policies. None of these providers endorse gambling or have any affiliation with Raja07.
6.3 Legal and Regulatory Disclosure
Raja07 may disclose Personal Data to regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order or regulatory direction. We will notify you of such disclosures where permitted by law.
6.4 Business Transfers
In the event of a merger, acquisition, sale of assets or restructuring affecting Raja07, Personal Data held by the Platform may be transferred to the relevant acquiring or successor entity, subject to the same data protection obligations as set out in this Policy.
6.5 No Sale of Personal Data
Raja07 does not sell, rent or trade your Personal Data to any third party for marketing or commercial purposes. Any sharing described in this section is limited to what is necessary for operational, legal or security purposes.
08 Data Retention
Raja07 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Key retention principles are as follows:
- Active Account data: Retained for the duration of the Account relationship and for a period thereafter as required by applicable AML, gaming regulatory and tax record-keeping obligations.
- KYC and identity documents: Retained in accordance with applicable AML legislation, which typically requires retention for a minimum of five years following the end of the customer relationship.
- Transaction records: Retained for a minimum of five years from the date of each transaction in compliance with financial record-keeping requirements.
- Support communications: Retained for up to three years from the date of the last interaction unless a longer period is required for ongoing dispute resolution or regulatory purposes.
- Closed or inactive accounts: Data associated with closed Accounts is retained for the legally required period and then securely deleted or anonymised.
- Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence the consent and its withdrawal.
09 Data Security
Raja07 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
- HTTPS/TLS encryption for all data in transit between your browser and our servers
- Encryption of sensitive data at rest, including stored KYC documents
- Role-based access controls restricting internal staff access to Personal Data on a need-to-know basis
- Regular security assessments and vulnerability reviews
- Session management controls including automatic timeout for inactive sessions
- Logging and monitoring of access to sensitive data systems
Notwithstanding the above, no method of data transmission or storage is entirely secure. Raja07 cannot guarantee absolute security of your Personal Data and accepts no liability for unauthorised access resulting from circumstances beyond our reasonable control.
In the event of a Personal Data breach that is likely to result in a high risk to your rights and freedoms, Raja07 will notify affected users without undue delay and will take all reasonable steps to mitigate the impact of the breach.
10 International Data Transfers
Raja07 may transfer Personal Data to third-party service providers or infrastructure partners located outside of Pakistan. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place, which may include:
- Contractual clauses providing equivalent data protection obligations to those applicable in the originating jurisdiction
- Transfers to jurisdictions with recognised adequate data protection frameworks
- Binding corporate rules where applicable to group-level data sharing
By using the Platform and providing your Personal Data, you acknowledge that your data may be transferred and processed in jurisdictions outside Pakistan that may not provide the same level of data protection as applicable Pakistani law. We will always seek to protect your data consistently with this Policy regardless of where it is processed.
11 User Rights
Subject to applicable law and certain conditions, you may hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact us at the address in Section 15.
Right of Access
You have the right to request a copy of the Personal Data we hold about you, together with information about how and why we process it. We will respond to verified access requests within a reasonable timeframe.
Right to Rectification
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Account profile data can often be updated directly through your Account settings.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn or where processing was unlawful. This right is subject to legal retention obligations that may require us to retain certain data notwithstanding your request.
Right to Restriction of Processing
In certain circumstances you may request that we restrict processing of your Personal Data — for example, while the accuracy of data is contested or while a withdrawal of consent is processed.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used and machine-readable format.
Right to Object
You have the right to object to processing of your Personal Data where it is based on our legitimate interests, including profiling for direct marketing purposes. Where you object to marketing processing, we will cease that processing immediately.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time through your Account settings or by contacting our support team. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
12 Minors & Age Restriction
The Raja07 Platform is intended solely for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect Personal Data from persons under the minimum eligible age.
If we become aware that we have collected Personal Data from a minor without appropriate verification, we will take immediate steps to delete that data and close the associated Account. All winnings or balances associated with an underage Account may be forfeited.
We encourage parents and guardians in Pakistan to use available parental controls and content filtering tools to prevent underage access to online gaming platforms. Being 18 or over does not make gambling lawful in Pakistan — users remain responsible for verifying their own legal position.
13 Third-Party Links
The Platform may contain references to third-party websites or services. This Policy applies only to data processed by Raja07. We have no control over and accept no responsibility for the privacy practices or content of third-party websites. You are encouraged to review the privacy policy of any third-party website you visit independently of this Policy.
14 Policy Changes
Raja07 reserves the right to update or amend this Privacy Policy at any time. Updated versions will be published on this page with a revised "Last Updated" date. Where changes are material, we will endeavour to provide notice through the Platform or via registered email addresses.
Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the changes. If you do not accept the updated Policy, you must cease using the Platform and may request Account closure by contacting our support team.
15 Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or to the processing of your Personal Data, please contact our support and data protection team using the details below. All contact details are provided as plain text only and are not clickable links.
Data Enquiries & Support Email:
[email protected]Subject Line for Data Requests:
Please use the subject line "Privacy Request — [Your Full Name]" when emailing regarding Personal Data rights, erasure requests or consent withdrawals. This helps our team identify and process your request efficiently.
Expected Response Time:
We aim to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 days. Complex requests may require additional time, in which case we will notify you of the expected timeline.