rb777 Privacy Policy — How We Protect Your Personal Data

Introduction and Scope

This Privacy Policy (hereinafter referred to as "Policy" or "Privacy Policy") is issued by rb777 (hereinafter referred to as "rb777", "we", "us", or "our"), the operator of the online betting and gaming platform available at rb777.io and any associated subdomains or mobile-optimised versions thereof.

This Policy describes how rb777 collects, receives, uses, stores, shares, transfers, and otherwise processes personal data relating to individuals who visit, register on, or interact with the rb777 platform (hereinafter referred to as "you", "Player", or "User"). It applies to all users of the rb777 platform, including registered account holders, visitors who browse without registering, and individuals who contact rb777 support.

This Policy should be read alongside rb777's Terms and Conditions and Responsible Gaming Policy, both of which are published at rb777.io. Where any conflict exists between this Policy and those documents with respect to data handling matters, this Privacy Policy shall take precedence.

By accessing rb777.io, creating an account, or interacting with any rb777 service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must not use the rb777 platform.

Data Controller Information

rb777 acts as the data controller in respect of the personal data processed in connection with your use of the rb777 platform. As data controller, rb777 determines the purposes and means by which your personal data is processed.

For all data protection enquiries, requests to exercise your rights, or concerns regarding how your personal data is handled, please contact rb777 using the details provided in Section 16 of this Policy. rb777 is committed to responding to all data-related requests within a reasonable timeframe and in accordance with applicable data protection principles.

rb777 operates its platform in compliance with data protection principles including lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability. These principles underpin every aspect of rb777's approach to handling personal data.

Personal Data We Collect

rb777 collects several categories of personal data depending on how you interact with the platform. These categories include:

• Identity Data: Your full legal name, date of birth, national identity card (NID) number or passport number, and any other government-issued identification submitted during the account verification (KYC) process.
• Contact Data: Your email address, mobile phone number registered in Bangladesh, and residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and postal code.
• Financial Data: Mobile financial service (MFS) wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (where applicable), transaction reference numbers, deposit and withdrawal history, and account balance records.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, referring URLs, session start and end times, and approximate geolocation data derived from your IP address.
• Usage Data: Details of your activity on the rb777 platform, including games accessed, bets placed, wager amounts, game outcomes, session duration, responsible gaming tool usage, and bonus claim history.
• Communications Data: Content of any messages you send to rb777 support via live chat, email, or any other channel, including any attachments or screenshots submitted.
• Marketing and Preference Data: Your communication preferences, opted-in promotional channels, and feedback submitted via surveys or ratings.

rb777 does not collect or process special categories of sensitive personal data (such as biometric data, health data, or political opinions) unless explicitly required for regulatory compliance purposes and with appropriate safeguards in place.

How We Collect Your Data

rb777 collects personal data through a variety of methods, all of which are designed to be transparent and proportionate:

• Direct Collection: Data you provide directly when creating an account, completing the KYC verification process, making a deposit or withdrawal, using support services, participating in promotions, or completing any form on the rb777 platform.
• Automated Collection: Technical and usage data collected automatically when you visit rb777.io via cookies, web beacons, pixel tags, server logs, and similar tracking technologies. See Section 7 for full details on cookies.
• Third-Party Sources: Identity and fraud-screening data received from payment processors (bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank), KYC verification service providers, and fraud prevention agencies where necessary to verify your identity or detect prohibited activity.
• Inferred Data: In some cases, rb777 may derive or infer information about you based on your usage patterns and behaviour on the platform — for example, identifying signs of problem gambling behaviour to fulfil our responsible gaming obligations.

Legal Basis for Processing

rb777 processes your personal data only where a valid legal basis exists. The legal bases on which rb777 relies are as follows:

• Contractual Necessity: Processing required to perform the contract between you and rb777 — that is, to provide the betting and gaming services you have registered for, process your deposits and withdrawals, and manage your account.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification obligations, financial record-keeping requirements, and cooperation with law enforcement or regulatory requests.
• Legitimate Interests: Processing carried out on the basis of rb777's legitimate business interests, such as fraud detection and prevention, platform security, responsible gaming monitoring, customer support quality improvement, and platform analytics — provided such interests are not overridden by your own privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — most notably for marketing and promotional communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

rb777 uses the personal data it collects for the following purposes:

• To create, verify, and manage your player account, including identity verification and age confirmation (21+ requirement).
• To process financial transactions — deposits via bKash, Nagad, Rocket, Upay, and supported banks, and withdrawals back to your registered payment method.
• To provide, maintain, and improve the rb777 betting and casino platform, including personalising your experience based on your game preferences and betting history.
• To communicate with you about your account, including transaction notifications, security alerts, account updates, and support responses.
• To send you promotional offers, bonuses, and marketing communications, but only where you have explicitly consented to receive such communications.
• To fulfil our responsible gaming obligations, including monitoring usage patterns for signs of problem gambling, enforcing deposit limits and self-exclusion requests, and proactively contacting players who may be at risk.
• To detect, investigate, and prevent fraud, money laundering, collusion, account abuse, and other prohibited conduct as defined in the rb777 Terms and Conditions.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.
• To conduct internal analytics, research, and reporting to improve the quality and safety of the rb777 platform.

Cookies and Tracking Technologies

rb777 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. rb777 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the rb777 platform to function correctly. They enable core features such as account login sessions, security token validation, and load balancing. These cookies cannot be disabled without causing the platform to malfunction.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use the rb777 platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve platform performance and user experience.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred payment method, and display settings — to provide a more personalised experience on return visits.
• Security and Fraud Prevention Cookies: These cookies help rb777 detect and prevent fraudulent activity, multiple account creation, and other prohibited behaviour by identifying patterns consistent with abuse.

rb777 does not use third-party advertising or behavioural targeting cookies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the rb777 platform.

Third-Party Sharing

rb777 does not sell, rent, or trade your personal data to unrelated third parties for their own marketing or commercial purposes. Your data may be shared with the following categories of trusted service providers, strictly to the extent necessary for them to perform their role in delivering rb777's services to you:

• Payment Processors: bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other payment service providers used to process your deposits and withdrawals. These providers receive only the financial data strictly necessary to execute and verify your transactions.
• Game Studios and Technology Providers: Third-party game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe, who supply the casino and slot games available on the rb777 platform. These providers may receive technical session data to facilitate gameplay and detect cheating.
• Identity Verification (KYC) Providers: Third-party identity verification services used to authenticate your identity documents and confirm your eligibility to use the platform.
• Fraud Prevention and Security Services: Specialist fraud detection and cybersecurity providers who assist rb777 in identifying and preventing account abuse, financial fraud, and prohibited conduct.
• Legal and Regulatory Authorities: Where required by law, rb777 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in response to lawful requests. rb777 will always seek legal advice before making any such disclosure and will notify affected players where legally permissible to do so.

All third-party service providers engaged by rb777 are required to process personal data only on rb777's instructions, to maintain appropriate security standards, and to handle data in compliance with applicable data protection obligations. rb777 maintains written data processing agreements with all third-party processors.

International Data Transfers

rb777's primary operations and data storage are designed with Bangladeshi players in mind. However, some of rb777's third-party service providers — particularly game studios and technical infrastructure providers — may operate servers located outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, rb777 will implement appropriate safeguards to protect your data, including contractual clauses requiring the recipient to apply data protection standards equivalent to those described in this Policy.

By using the rb777 platform, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh as described above. rb777 takes all reasonable steps to ensure that such transfers are conducted securely and in accordance with applicable data protection principles.

Data Security

rb777 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your information from unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and rb777's servers is protected using industry-standard SSL/TLS encryption. Look for the padlock icon and "https://" prefix in your browser address bar when using rb777.io.
• Encrypted Data Storage: Sensitive personal data — including financial details and identity documents — is stored in encrypted form on rb777's secure servers. Data is never stored in plain text.
• Access Controls: Access to personal data is restricted to authorised rb777 personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations and receive regular data security training.
• Intrusion Detection and Monitoring: rb777's technical infrastructure is monitored continuously for signs of unauthorised access, unusual activity, or potential security breaches. Automated systems flag anomalous patterns for immediate review.
• Incident Response: In the event of a data security incident that may affect your personal data, rb777 will take immediate steps to contain the incident, assess its impact, and notify affected players and relevant authorities in a timely manner in accordance with applicable obligations.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. Players are also responsible for maintaining the security of their own account credentials and should use strong, unique passwords and never share their login details with anyone.

Data Retention

rb777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Identity and KYC Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for the duration of your active account plus a minimum of 7 years following account closure, in line with financial compliance obligations.
• Technical and Usage Data: Retained for up to 13 months from the date of collection for analytics purposes, and for up to 3 years post-account closure for fraud and security investigation purposes.
• Support Communications: Retained for 3 years from the date of the last communication in a support thread.
• Marketing Preference Data: Retained until you withdraw your consent or your account is permanently closed.

When personal data is no longer required and the applicable retention period has expired, rb777 securely deletes or anonymises the data so that it can no longer be associated with you as an individual. Anonymised or aggregated data (which cannot identify you) may be retained indefinitely for statistical and platform improvement purposes.

Your Privacy Rights

As a data subject, you have a number of rights with respect to the personal data rb777 holds about you. rb777 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction:

• Right of Access: You have the right to request a copy of the personal data rb777 holds about you, along with information about how it is being processed. rb777 will respond to access requests within 30 days.
• Right to Rectification: If any personal data rb777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain information directly within your account profile.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to rb777's legal obligations to retain certain records (for example, financial records required for AML compliance), which may prevent full erasure in all cases.
• Right to Restriction: You may request that rb777 restricts the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling carried out on that basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where rb777 processes your data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, please contact rb777 support using the details in Section 16. rb777 may need to verify your identity before processing a rights request to ensure that data is not disclosed to or altered at the request of an unauthorised person.

Children and Minors

The rb777 platform is strictly intended for adults aged 21 and above. rb777 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Registration by minors is prohibited, and rb777 employs active age verification procedures to enforce this policy.

If rb777 becomes aware — through its own verification procedures or through a report from a third party — that personal data has been collected from a person under the age of 21, rb777 will take immediate steps to delete that data, close the associated account, and where applicable, return any funds to the payment source from which they originated.

If you believe that a minor has registered an account on rb777, please contact rb777 support immediately using the details in Section 16. We take all such reports seriously and will act swiftly to investigate and resolve the matter. This commitment is absolute and admits no exceptions.

Marketing Communications

rb777 may send you promotional communications — including information about bonuses, special offers, new game launches, and seasonal promotions (such as Eid, Pohela Boishakh, Victory Day, or BPL-related offers) — but only where you have given your explicit prior consent to receive such communications during account registration or subsequently via your account notification preferences.

You may opt out of marketing communications at any time by:

• Updating your notification preferences directly within your rb777 account settings.
• Clicking the unsubscribe link included in any marketing email sent by rb777.
• Contacting rb777 support directly and requesting to be removed from all marketing communications.

Please note that opting out of marketing communications will not affect transactional or account-related communications — such as deposit confirmations, withdrawal notifications, security alerts, and support responses — which rb777 is required to send as part of delivering its service to you.

rb777 does not share your contact details with third parties for their own marketing purposes. Any promotional communications you receive will be sent by rb777 directly and will relate exclusively to rb777 products and services.

Changes to This Policy

rb777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When material changes are made to this Policy, rb777 will take reasonable steps to notify registered players, which may include displaying a prominent notice on the rb777.io homepage, sending a notification to your registered email address, or presenting an in-platform alert upon your next login.

The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent version came into effect. We encourage all rb777 players to review this Privacy Policy periodically to stay informed about how your personal data is being protected. Your continued use of the rb777 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes.

If you do not agree with any changes made to this Policy, you must discontinue use of the rb777 platform and may request account closure by contacting rb777 support. Upon account closure, rb777 will handle your personal data in accordance with the data retention obligations described in Section 11 of this Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to rb777's handling of your personal data, please do not hesitate to get in touch. rb777's data protection team can be reached using the following contact details:

• Email: [email protected]
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" to ensure your message is directed to the appropriate team.
• Response Time: rb777 aims to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6). For formal data rights requests under Section 12, rb777 will respond within 30 days of receiving a verified request.

rb777 takes all privacy enquiries seriously. If you are not satisfied with rb777's response to your privacy concern, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.