Privacy Policy

This Privacy Policy explains how Razed Casino, in connection with the Razed Casino experience available via razedbet-au.com, collects, uses, discloses and protects personal information about players and website visitors. It applies to all visitors, registered users and other individuals who access or use razedbet-au.com or related mirror domains that provide the same service to Australian users. By using our services, you acknowledge that your personal information will be handled in accordance with this Privacy Policy. This Privacy Policy is effective from 1 January 2026.

Who We Are

Operator and brand

• Brand name: Razed Casino (Razed Casino experience for Australian users).
• Primary AU-facing domain: razedbet-au.com (a geo-replacement environment for Australia).
• Primary global domain: razed.com (may be subject to DNS blocking in Australia).
• Additional mirror domains: razed.gg, razed.io (status as mirrors may vary over time).

Operating company and licence

• Legal operator: Pretense B.V. (the company operating Razed Casino).
• Licensing jurisdiction: Curaçao.
• Gambling licence: Curaçao Gaming Control Board (GCB), licence number OGL/2024/1670/0964.
• Regulatory reference: details about the Curaçao licensing framework can be found at gamingcontrolcuracao.org.
• Australian licensing status: as of 2026, Razed Casino/Pretense B.V. does not hold an Australian gambling licence and operates offshore. The Australian Communications and Media Authority (ACMA) may apply DNS and IP blocking measures (see acma.gov.au for context).

Corporate information

• Registered office / legal address: a specific postal address for Pretense B.V. is not provided in the data available for this Privacy Policy. When an address is published on razedbet-au.com or razed.com, that address will prevail over this notice.
• Company registration number / tax ID: not specified in the available data. We therefore cannot state a precise number here.
• Payment processing: certain EU transactions may be processed by a related subsidiary or payment processor commonly located in Cyprus; the specific entity details are not specified in the available data.

Data protection contact

• Data Protection Team / DPO equivalent: Razed Casino Data Protection Team (acting on behalf of Pretense B.V.).
• How to contact us for privacy matters:
  • Through any in-account support tools or live chat provided on razedbet-au.com or razed.com from time to time; and
  • Through any contact or support forms, or other channels, that are made available via our websites (including pages such as our Terms of Service at https://razed.com/terms-of-service when contact details are listed there).
• When you contact us, please clearly mark your message as a "Privacy / Data Protection Request" so it can be routed promptly to our data protection personnel.

What Personal Data We Collect

Identification and contact data

• Account details: username, password (stored in hashed form), security questions and answers.
• Identity data: full name, date of birth, nationality, gender (where provided), occupation (where required for KYC/AML).
• Contact data: email address, telephone number, residential address, country of residence.
• Verification documents: copies or data extracted from passports, national ID cards, driving licences, utility bills, bank statements or similar documents used for KYC and age verification.

Technical and device data

• Device information: device type, operating system, browser type and version, language settings, device identifiers.
• Network data: IP address, approximate geolocation inferred from IP, connection timestamps, ISP details.
• Log data: access logs, login/logout times, session duration, error logs and system events related to your use of razedbet-au.com and associated domains.

Payment and financial data

• Transaction data: deposits, withdrawals, bets, wins and losses, bonus redemptions, account balances and currency.
• Payment method data: limited card details (such as masked card number and expiry date), e-wallet identifiers, bank account references or crypto wallet addresses, depending on the method used.
• Anti-fraud / AML data: information required under applicable AML, counter-terrorism financing and sanctions-screening rules (such as PEP status, source-of-funds information and screening results).
• We do not store complete payment card numbers or CVV codes on our systems; those are handled by third-party payment processors where applicable.

Behavioural and usage data

• Gaming activity: betting history, games played, game sessions, stakes, wins/losses, bonuses used, in-game events, and time spent playing.
• Website interactions: pages viewed, clicks, navigation paths, search queries, interaction with banners and promotions.
• Marketing interaction data: email open rates, click-through rates, unsubscribe actions, and responses to promotions.
• Risk and compliance indicators: behavioural patterns used for responsible gambling analysis, fraud detection and AML monitoring.

Cookies and similar technologies

• Cookies: small text files placed on your device, including session cookies, persistent cookies, first-party and third-party cookies.
• Tracking technologies: pixels, tags, scripts, local storage or similar technologies used for analytics, security and advertising.
• These technologies can record information such as IP address, device identifiers, browser type, referral URLs, pages visited and timestamps.

Communication data

• Customer support data: records of chats, emails, support tickets and telephone contacts (where used) between you and our support or risk teams.
• Consent and preference data: records of your marketing consents and preferences, cookie consents and changes to these over time.

Legal Basis for Processing

Although Razed Casino is operated from Curaçao by Pretense B.V., we endeavour to align our data handling with key international standards (including the Australian Privacy Act 1988 and the Australian Privacy Principles, the EU General Data Protection Regulation (GDPR) and comparable Mexican privacy rules) where relevant. Depending on the context, we rely on the following legal grounds for processing your personal data:

• Performance of a contract and steps at your request:
  • To create and manage your Razed Casino account via razedbet-au.com.
  • To process deposits, withdrawals, bets and payouts.
  • To provide customer support and to resolve technical or account issues.
• Compliance with legal obligations:
  • To verify your identity and age (KYC) and meet anti-money laundering, counter-terrorism financing and sanctions requirements under applicable laws and licence conditions.
  • To maintain appropriate records for tax, audit, accounting and regulatory purposes.
  • To respond to lawful requests from courts, regulators (including the Curaçao GCB) and law enforcement authorities.
• Legitimate interests:
  • To secure our platforms (e.g. fraud prevention, network and information security, account integrity protection).
  • To improve and optimise the performance, content and user experience of razedbet-au.com and related domains.
  • To perform internal analytics, risk modelling, responsible gambling monitoring and product development.
  • To defend our legal rights and respond to disputes and complaints.
• Consent:
  • To send you electronic marketing communications (such as emails, SMS or in-app messages) where consent is required.
  • To use certain non-essential cookies and tracking technologies for analytics and advertising.
  • To share your data with third-party advertising networks for personalised marketing, where applicable.
  • You may withdraw your consent at any time (see "Your Rights" below).

Where Australian privacy law applies, we will collect, use and disclose your personal information in ways that are reasonably necessary for our functions or activities, and we will seek your consent for uses that are not otherwise authorised by law.

Purpose of Processing

We use your personal data only for specific, explicit and legitimate purposes. These purposes include:

• Providing and operating our services:
  • Creating and managing your Razed Casino account on razedbet-au.com.
  • Facilitating deposits, withdrawals, bets, payouts and bonuses.
  • Ensuring secure login, authentication and account recovery.
• Regulatory compliance, KYC and AML:
  • Verifying your identity, age and eligibility to use our services.
  • Monitoring transactions and behaviour to detect and prevent money laundering, fraud, abuse and prohibited activity.
  • Keeping appropriate records to comply with applicable laws, licence conditions and reporting obligations.
• Improvement of services and user experience:
  • Analysing how users interact with our games, features and interfaces.
  • Testing new functions, promotions and product changes.
  • Diagnosing technical issues and improving stability and performance.
• Marketing and personalisation:
  • Sending you promotions, bonuses and news about Razed Casino (where permitted by law and your preferences).
  • Customising content and offers based on your previous interactions and gaming behaviour.
  • Conducting customer surveys and feedback programmes.
• Responsible gambling and risk management:
  • Analysing your play patterns to identify potential gambling-related risks.
  • Supporting responsible gambling tools and interventions where applicable.
• Security, fraud prevention and dispute resolution:
  • Detecting and preventing unauthorised access, fraud, bonus abuse and other harmful activities.
  • Handling complaints, chargebacks and disputes, and enforcing our Terms of Service.

Disclosure & Sharing

We treat your personal data as confidential but may share it with carefully selected recipients where necessary for the purposes set out above, or where required by law. Categories of recipients include:

• Internal recipients:
  • Authorised employees and contractors of Pretense B.V. and its group, including customer support, risk, AML, finance, IT, product and marketing teams, strictly on a need-to-know basis.
• Payment and financial partners:
  • Banks, card schemes, e-wallet providers, crypto payment providers and other payment processors that handle deposits and withdrawals.
  • Payment processing entities that may be located in the EU (including Cyprus) or other jurisdictions, as part of cross-border transactions.
• Service providers (processors):
  • IT, hosting and cloud infrastructure providers.
  • Identity verification, KYC and AML screening providers.
  • Fraud detection, cybersecurity, analytics and risk management vendors.
  • Email delivery, SMS and marketing automation platforms.
  • Customer support platforms, CRM systems and ticketing tools.
• Group companies and affiliates:
  • Other entities in the Pretense B.V. group and its affiliates that assist in operating or marketing Razed Casino, subject to appropriate safeguards.
• Advertising and analytics partners:
  • Third-party analytics providers that help us understand usage and performance.
  • Advertising networks and partners that deliver personalised or interest-based ads, only where permitted by law and your cookie/marketing preferences.
• Regulators, authorities and dispute bodies:
  • The Curaçao Gaming Control Board and other gambling regulators where necessary.
  • Law enforcement, courts and governmental authorities where we are legally required or permitted to disclose information.
  • Alternative dispute resolution bodies, payment dispute schemes and chargeback services where relevant.
• Corporate transactions:
  • Prospective or actual purchasers, advisers or other stakeholders in connection with any merger, acquisition, restructuring or sale of assets, subject to confidentiality obligations.

We do not sell your personal data in the ordinary sense. Any sharing for marketing purposes is conducted under appropriate legal bases (consent or legitimate interest, as applicable) and subject to your right to opt out.

International Transfers

Because Razed Casino is operated by Pretense B.V. from Curaçao and uses service providers located in multiple countries, your personal data may be transferred to, stored in or accessed from jurisdictions outside your country of residence, including outside Australia and outside the European Economic Area (EEA). These may include:

• Curaçao: where our core gaming operations and primary licence are based.
• European Union / EEA (including Cyprus): where certain payment processing and service providers may operate.
• Other countries: where cloud infrastructure, analytics, email, support and other technical providers are located, which may include the United States or other jurisdictions.
• Domains: processing may occur via razedbet-au.com as well as other domains such as razed.com, razed.gg and razed.io that support the same platform.

Where we transfer personal data across borders, we use appropriate safeguards to protect it, such as:

• Contractual protections: standard contractual clauses or equivalent contractual terms requiring recipients to protect personal data in line with applicable standards.
• Technical and organisational measures: encryption, access controls, data minimisation and strict internal policies.
• Due diligence: vetting and ongoing monitoring of third-party service providers' security and privacy practices.

By using razedbet-au.com, you acknowledge that your personal data may be processed in these jurisdictions. Where local laws give you specific rights concerning cross-border transfers, we will respect those rights (see "Your Rights" below).

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes and enforce our agreements. Retention periods vary by data category and may be extended where law or regulators require. In general:

• Account and identification data: kept for the life of your account and normally for up to 5 years after account closure, unless a longer period is required for legal, regulatory or dispute-related reasons.
• Transaction, AML and risk data: retained for at least 5 - 7 years after the relevant transaction or account closure, to comply with anti-money laundering, counter-terrorism financing and bookkeeping requirements.
• Customer support communications: typically retained for up to 3 years after the case is closed, or longer if needed for ongoing disputes.
• Marketing and consent data: retained until you withdraw your consent or object to marketing, and for a limited period thereafter (for example up to 2 years) to maintain proof of your preferences.
• Technical logs and security data: retained for approximately 12 - 24 months, unless longer retention is required for security investigations or legal purposes.
• Cookies: stored on your device for periods ranging from a single session to typically up to 24 months, depending on the cookie type and your settings.

Once data is no longer needed, we will either securely delete it or irreversibly anonymise it. Where deletion is not immediately possible (for example, due to backup systems), we will securely store the data and isolate it from any further processing until deletion is feasible.

Your Rights

We aim to handle your personal data in a manner consistent with major privacy frameworks, including the Australian Privacy Act 1988 (and Australian Privacy Principles), the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and, where relevant, Mexico's Federal Law on Protection of Personal Data Held by Private Parties and its regulations. Even though these laws may not all apply directly to Razed Casino or Pretense B.V., we endeavour to provide you with rights that are broadly aligned with these standards.

Rights you may exercise

• Right of access: to obtain confirmation whether we process your personal data and to receive a copy of that data, subject to appropriate verification of your identity.
• Right to correction/rectification: to request that inaccurate, incomplete or outdated personal data be corrected or updated.
• Right to deletion ("erasure", "cancellation"): to request deletion of your personal data where it is no longer necessary, where you withdraw consent (if consent was the basis), or where the processing is unlawful, subject to legal and regulatory retention obligations.
• Right to restriction of processing: to ask us to limit processing of your data in certain circumstances (for example, while a dispute about accuracy is being resolved).
• Right to object: to object, on grounds relating to your particular situation, to processing carried out on the basis of legitimate interest, and to object at any time to processing for direct marketing (including profiling for marketing).
• Right to data portability: where technically feasible and where required by law, to receive personal data you provided to us in a structured, commonly used and machine-readable format, and to request transmission to another provider.
• Right to withdraw consent: where processing is based on your consent (for example, marketing emails or non-essential cookies), you may withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.
• Rights under Mexican privacy concepts (ARCO): to access, rectify, cancel and oppose the use of your personal data, in alignment with applicable Mexican law, to the extent it is relevant to our operations.

How to exercise your rights

1. Submit a request: contact our Data Protection Team using the privacy contact channels described in the "Who We Are" and "Complaints & Contacts" sections. Clearly state which right(s) you wish to exercise and provide sufficient information to identify your account.
2. Verification: we may ask you to provide additional information to verify your identity and ensure that we do not disclose data to the wrong person.
3. Response time: we aim to respond to your request within 30 days of receipt. If your request is particularly complex or numerous, we may extend this period as allowed by law, and we will inform you of any extension.
4. Cost: we generally handle rights requests free of charge. However, where requests are manifestly unfounded or excessive (for example, repeated requests), we may charge a reasonable fee or refuse to act, as permitted by law.
5. Limitations: in some instances we may be unable to fully accommodate your request (for example, where we must retain data for AML, regulatory, tax or legal reasons). In such cases, we will explain the reasons, unless restricted by law.

Cookies & Tracking Technologies

Types of cookies we use

• Session cookies: temporary cookies that exist only while your browser is open and are deleted when you close it. These are often used to maintain your session and keep you logged in.
• Persistent cookies: cookies that remain on your device for a predefined period (for example up to 24 months) or until you delete them. They help us recognise you when you return.
• First-party cookies: cookies set directly by razedbet-au.com or other Razed Casino domains to support our own services and functionality.
• Third-party cookies: cookies set by external providers such as analytics, advertising or social media partners.

Purposes of cookies and tracking

• Strictly necessary / functional: required to operate the website, enable core functions (such as login, account management, secure payment flows), and remember your settings (such as language).
• Analytics and performance: help us understand how visitors use the site (for example pages visited, time on site, errors encountered) so we can improve stability, performance and usability.
• Advertising and personalisation: allow us or our partners to show relevant promotions and measure the effectiveness of marketing campaigns, subject to your consent where required.
• Security and fraud prevention: help detect suspicious behaviour, protect accounts and prevent abuse of bonuses or promotions.

Managing cookies

• You can manage or disable cookies using:
  • Your browser settings: most browsers allow you to block or delete cookies. Please refer to your browser's help section for instructions.
  • In-site controls: where available, our cookie banners or preference centres let you manage non-essential cookies (such as analytics and advertising cookies).
• If you disable or refuse cookies, some parts of razedbet-au.com may not function correctly, and certain services or features may be unavailable.

Data Security

We implement technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse, alteration or destruction. While no system can be guaranteed 100% secure, we take security seriously and apply industry-recognised controls, including:

• Encryption:
  • Use of TLS 1.2 or higher to encrypt data in transit between your device and our servers.
  • Encryption of sensitive data at rest using industry-standard algorithms, and hashing of passwords.
• Access controls and authentication:
  • Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
  • Strong authentication mechanisms and multi-factor authentication for access to critical systems.
• Network and infrastructure security:
  • Firewalls, intrusion detection/prevention systems and segmented networks.
  • Regular security updates, patching and hardening of infrastructure.
• Monitoring, testing and audits:
  • Logging and monitoring of key systems to detect anomalies and potential security incidents.
  • Periodic vulnerability assessments and other security reviews, including those performed by or with third-party specialists where appropriate.
• Policies, training and confidentiality:
  • Internal policies and procedures governing data protection and information security.
  • Regular staff training on privacy, data protection, security best practices and incident reporting.
  • Contractual confidentiality obligations for employees and relevant service providers.
• Incident response:
  • Incident response processes to investigate, mitigate and notify where required by law in the event of a data breach.

We strive to align our controls with recognised information security standards (such as ISO 27001 or SOC 2) as benchmarks for good practice. However, Razed Casino / Pretense B.V. does not claim formal certification under these frameworks unless explicitly stated on our websites.

Complaints & Contacts

How to contact us

• Data Protection Team (Razed Casino / Pretense B.V.):
  • Use the in-account support tools (for example live chat or ticketing) available on razedbet-au.com or razed.com, where you have an active account.
  • Use any contact forms or contact channels indicated in our Terms of Service or help pages (including https://razed.com/terms-of-service when contact details are provided there).
  • Clearly label your message as a "Privacy / Data Protection Complaint" or "Privacy Request".

Our internal complaint procedure

1. Submission: you submit your complaint or query using the channels described above, providing a clear description of the issue and your relevant account details.
2. Acknowledgement: we aim to acknowledge receipt of your complaint within 7 days.
3. Investigation: we will investigate your complaint, which may involve asking you for additional information to clarify the facts.
4. Response timeframe: we aim to provide a substantive response within 30 days of receiving your complete complaint. Where more time is needed due to complexity, we will inform you of the delay and the reasons.
5. Outcome: we will explain our findings and any measures taken to address your complaint or concern. If we cannot fully comply with your request (for example due to legal retention obligations), we will explain why, unless prohibited by law.

Escalation to supervisory authorities

If you believe your privacy rights have been infringed and you are not satisfied with our response, you may have the right to lodge a complaint with a relevant data protection authority. Depending on your location and the circumstances, these may include:

• Australia: the Office of the Australian Information Commissioner (OAIC) oversees compliance with the Privacy Act 1988 and the Australian Privacy Principles. Please consult the OAIC's official website for current contact details and complaint procedures.
• European Union / EEA: your local data protection authority, in particular in the country of your habitual residence, place of work or place of the alleged infringement, if GDPR applies to the processing of your data.
• Mexico: the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), which supervises compliance with Mexican personal data laws. Please refer to the official INAI website for contact information and guidance.

These authorities operate independently from Razed Casino and can provide further information about your rights and available remedies.

External support resources (non-Razed)

For gambling-related issues rather than privacy complaints, you may wish to contact external support services, which are not operated by Razed Casino or Pretense B.V. For example:

• Gambling Help Online (Australia): https://gamblinghelponline.org.au, with the helpline number 1800 858 858 (this is not a Razed Casino contact number).
• For information about gambling enforcement measures such as DNS blocking in Australia, see the Australian Communications and Media Authority (ACMA) at https://acma.gov.au.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, legal or regulatory requirements, or other operational needs. When we make changes, we will take appropriate steps to inform you.

• Notification methods:
  • Publishing the updated Privacy Policy on razedbet-au.com with a revised "Last updated" date.
  • Highlighting material changes via banners or notices on our website.
  • Where appropriate, notifying you by email or via in-account messages or dashboard alerts.
• Advance notice for significant changes:
  • For material changes that significantly affect how we process your personal data, we will aim to provide at least 30 days' notice before the changes take effect, where practicable.
  • During this notice period, you may choose to object to the changes where applicable, or to close your account and discontinue use of our services.
• Changelog: for major updates, we may provide a summary of key changes or a changelog on our website or within your account area.

Last updated: January 2026