rd777 Privacy Policy

rd777 is an English-language online gaming platform serving the Bangladesh market. In the course of operating the platform, rd777 collects and processes personal data relating to registered users, prospective users and visitors to the rd777 website. This Policy sets out the categories of personal data rd777 collects, the purposes for which that data is processed, the parties with whom it may be shared, and the rights individuals hold in relation to their personal data.

This Policy should be read alongside the rd777 Terms and Conditions, which govern the overall relationship between rd777 and registered users. If you have any questions about this Policy or about how rd777 handles your personal data, please contact us at [email protected].

rd777 collects personal data in the following categories. The specific data points collected in each category depend on the services you use and the features you access on the platform:

• Identity and contact information: full name, date of birth, residential address, email address and mobile phone number, provided at registration or subsequently updated by you.
• Identity verification documents: national identity card, passport or driving licence details, submitted as part of the Know Your Customer (KYC) verification process.
• Financial and transactional data: deposit and withdrawal history, payment method details (excluding full card numbers or wallet PINs), account balance history and bonus transaction records.
• Gaming activity data: game session logs, bet history, win and loss records, game preferences and session duration, used to personalise your experience and detect unusual account behaviour.
• Technical and device data: IP address, device type, operating system, browser type and version, mobile network operator, time zone and session timestamps, collected automatically when you access the rd777 platform.

rd777 collects only the personal data that is necessary for the purposes described in this Policy. rd777 does not collect sensitive personal data such as racial or ethnic origin, political opinions or religious beliefs beyond what may be incidentally contained in identity documents submitted for KYC purposes.

rd777 uses the personal data it collects for the following purposes. Where a purpose requires a specific legal basis for processing, that basis is identified in Section 3 of this Policy:

• Account creation and management: to register your account, verify your identity, manage account settings, process deposits and withdrawals, and provide ongoing access to the rd777 platform.
• Platform operation and service delivery: to operate the gaming platform, process bets and wagers, calculate and pay winnings, administer bonus offers and run promotions, and provide customer support.
• Legal compliance and fraud prevention: to fulfil KYC obligations, comply with anti-money laundering requirements, detect and prevent fraud, and respond to lawful requests from regulatory authorities.
• Responsible gaming: to monitor account activity for signs of problematic gambling behaviour, apply self-exclusion arrangements and deposit or session time limits set by users, and provide access to responsible gaming information and support resources.
• Platform improvement and analytics: to analyse aggregate usage patterns, identify technical issues, improve game selection and platform features, and optimise the user experience for Bangladesh-market users.
• Marketing communications: where you have provided consent, to send you information about promotions, bonuses, new games and platform updates by email or other channels. You may withdraw consent at any time by contacting [email protected].

rd777 does not use personal data for automated profiling that produces legal or similarly significant effects on users, other than the fraud-detection and responsible-gaming monitoring systems described above, which are subject to human review where any significant account action results.

rd777 processes personal data on the following legal bases, applicable to the processing purposes described in Section 2:

• Contractual necessity: processing required to perform the contract between rd777 and the registered user, including account registration, platform access, processing bets, paying winnings and handling withdrawals.
• Legal obligation: processing required to comply with applicable law, including KYC and anti-money laundering obligations, responding to lawful regulatory requests and retaining records for legally required minimum periods.
• Legitimate interests: processing carried out in rd777's legitimate interests in operating a secure, fair and commercially viable gaming platform, including fraud detection, responsible gaming monitoring and platform analytics, subject to those interests not overriding the rights of individual users.
• Consent: where rd777 sends marketing communications, that processing is based on the user's prior consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before the withdrawal.

rd777 does not sell personal data. rd777 may share personal data with the following categories of recipients where doing so is necessary for the purposes described in this Policy or required by applicable law:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa and Mastercard, and any other payment processing partner used to facilitate deposits and withdrawals. These providers receive only the transaction data necessary to process the relevant payment and may not use it for any other purpose.
• Game content providers: third-party game studios and live casino operators whose games are offered on the rd777 platform, including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming and Spribe. These providers may receive session-level data necessary to operate their games but do not receive full account or identity data.
• Identity verification services: third-party KYC and identity verification providers engaged by rd777 to verify user identity documents as part of the KYC process. These providers are contractually bound to use verification data only for the purpose of identity verification on behalf of rd777.
• Regulatory and law enforcement authorities: where rd777 is required by applicable law or a lawful regulatory order to disclose personal data, rd777 will comply. rd777 will, where legally permissible, notify the affected user of any such disclosure.

All third-party recipients of personal data shared by rd777 are required by contract or applicable law to maintain the confidentiality and security of that data, to use it only for the specified purpose, and not to share it further without rd777's authorisation. rd777 uses reasonable due diligence in selecting third-party partners and reviews those partnerships periodically to ensure ongoing compliance with this Policy.

The rd777 platform uses cookies and similar tracking technologies to operate core platform functionality, remember user preferences, maintain session state and collect aggregate analytics data. The following types of cookies are used on rd777:

• Strictly necessary cookies: required for core platform operation, including maintaining your logged-in session, processing bets and navigating between pages. These cookies cannot be disabled without preventing access to the platform.
• Functional cookies: used to remember your preferences and settings, such as language choice, notification preferences and session time limit settings, so that they do not need to be re-entered on each visit.
• Analytics cookies: used to collect aggregate, anonymised data about how users navigate and interact with the rd777 platform. This data is used to identify technical issues and improve the platform experience. rd777 does not use analytics data to build individual user profiles for marketing purposes.

Most web browsers allow you to manage cookies through browser settings. You can choose to block or delete cookies; however, blocking strictly necessary cookies will prevent you from using the rd777 platform. rd777 does not use third-party advertising cookies or cross-site tracking for targeted advertising purposes.

rd777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. In practice: account data and transaction records are retained for a minimum of five years following account closure to comply with applicable financial record-keeping and anti-money laundering obligations; KYC verification records are retained for the period required by applicable law from the date of verification; gaming activity logs are retained for a minimum of two years; and marketing consent records are retained until consent is withdrawn and for one year thereafter.

When personal data is no longer required for any legitimate purpose and no legal retention obligation applies, rd777 will securely delete or anonymise that data. Anonymised aggregate data from which individual users cannot be identified may be retained indefinitely for platform analytics and improvement purposes.

rd777 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include: SSL/TLS encryption for all data in transit between user devices and rd777 servers; encrypted storage for sensitive data at rest; access controls restricting internal access to personal data to those staff and systems with a legitimate need to process it; regular security assessments and vulnerability testing of the rd777 platform; and incident response procedures to detect, investigate and respond to security incidents in a timely manner.

While rd777 takes all reasonable steps to protect personal data, no internet-based platform can guarantee absolute security. In the event of a data security incident likely to result in a risk to the rights and freedoms of affected users, rd777 will take immediate steps to contain the incident, assess its scope and notify affected users and any relevant authorities as required by applicable law. Users who suspect their rd777 account has been compromised should contact [email protected] immediately.

Subject to applicable law, registered users of rd777 have the following rights in relation to their personal data. To exercise any of these rights, please contact rd777 at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise:

• Right of access: you have the right to request a copy of the personal data rd777 holds about you, together with information about the purposes for which it is processed and the categories of recipients with whom it is shared.
• Right to rectification: you have the right to request that rd777 correct any inaccurate personal data it holds about you, or complete any incomplete personal data, without undue delay.
• Right to erasure: you have the right to request that rd777 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed, subject to applicable legal retention obligations.
• Right to restriction of processing: you have the right to request that rd777 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests pending verification of rd777's overriding grounds.
• Right to object to marketing: you have the right to object at any time to the processing of your personal data for direct marketing purposes. rd777 will cease processing your data for marketing purposes promptly upon receipt of such an objection.

rd777 will respond to all data rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case rd777 will notify you of the extension and the reason. rd777 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

rd777 is strictly intended for persons aged 21 and above. rd777 does not knowingly collect personal data from anyone under the age of 21. The age verification measures applied at registration are designed to prevent minors from accessing the platform. If rd777 becomes aware that personal data has been collected from a person under the age of 21, it will promptly close the relevant account, delete the associated personal data and, where appropriate, report the matter to relevant authorities.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account with rd777 or provided personal data to rd777, please contact us immediately at [email protected]. rd777 will investigate the matter promptly and take appropriate action including account closure and data deletion.

The rd777 platform integrates games and services provided by third-party game studios and live casino operators. While rd777 selects its third-party partners carefully and requires them by contract to maintain appropriate data protection standards, rd777 is not responsible for the privacy practices of third-party providers in relation to data processed solely within their own systems. rd777 does not include hyperlinks to external websites. This Policy applies only to data processed by rd777 in connection with the rd777 platform.

rd777 may update this Privacy Policy from time to time to reflect changes in applicable law, changes in the way rd777 operates its platform, or changes in the categories of personal data processed. The most current version of this Policy will always be published on this page with the effective date noted at the top. Where changes are material — meaning they significantly affect your rights or the way your personal data is used — rd777 will use reasonable efforts to notify registered users via their registered email address in advance of the change taking effect.

Continued use of the rd777 platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any change to this Policy, your remedy is to close your account and cease using the platform. Account closure requests can be made by contacting [email protected].

If you have any questions, concerns or complaints about this Privacy Policy or about the way rd777 processes your personal data, please contact our support team by email at [email protected] with the subject line "Privacy Policy Enquiry". rd777 is committed to resolving all privacy-related enquiries promptly and in good faith. Our support team is available 24 hours a day, 7 days a week.

We aim to acknowledge all privacy-related enquiries within 24 hours of receipt and to resolve all substantive privacy complaints within 30 days. Where a complaint requires more detailed investigation, we will keep you informed of progress and provide a final response within a reasonable extended timeframe. Your trust is important to rd777, and we take all privacy concerns seriously.