rd77 Privacy Policy

1Introduction and Scope

This Privacy Policy ("Policy") is issued by rd77 ("rd77", "we", "us", "our") and governs the collection, use, storage, disclosure and protection of personal data belonging to users ("Player", "you", "your") who register an account or otherwise interact with the rd77 platform accessible at rd77.ws. By registering an rd77 account, you acknowledge that you have read and understood this Policy and consent to the data practices it describes.

This Policy applies to all personal data collected through the rd77 website, mobile browser interface, customer support communications and any other channel through which you interact with rd77. It does not apply to third-party websites or services linked from the rd77 platform — those are governed by their own respective privacy policies.

2Personal Data We Collect

rd77 collects personal data in three categories: data you provide directly, data generated by your use of the platform, and data received from trusted third-party service partners.

Data You Provide Directly

• Registration data: full name, date of birth, mobile phone number, email address and a chosen username and password.
• Identity verification documents: National Identity Card (NID), passport or other government-issued identification submitted when KYC verification is requested.
• Payment information: mobile wallet account identifiers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used for deposit and withdrawal. Full card numbers are not stored by rd77 — they are processed directly by our payment gateway partners.
• Support communications: any messages, complaints or queries you send via live chat or email, retained to document the resolution of your request and to improve service quality.
• Responsible gaming preferences: deposit limits, session limits, self-exclusion status and cooling-off elections that you configure in your account settings.

Data Generated by Platform Use

• Transaction records: full history of deposits, withdrawals, bonus credits, wagers placed and game results, retained for account management and regulatory compliance purposes.
• Device and session data: IP address, device type, operating system, browser type and version, screen resolution and session timestamps. This data is used for fraud prevention, security monitoring and platform optimisation.
• Cookie and tracking data: as described in Section 6 of this Policy.

Data Received from Third Parties

• Payment gateway confirmation data: transaction reference numbers, payment status and payer account identifiers received from bKash, Nagad, Rocket, Upay and card processors following a deposit or withdrawal.
• Identity verification results: pass/fail outcomes from third-party KYC verification providers used to confirm player identity and age in compliance with platform eligibility requirements.
• Fraud and risk screening data: risk scores and flags provided by fraud prevention services that rd77 uses to protect the platform and its player community from financial crime.

3How We Use Your Personal Data

rd77 processes personal data only for defined, legitimate purposes. The lawful bases on which we rely are: performance of contract (operating your account), compliance with legal obligations (KYC, anti-money laundering), legitimate interests (fraud prevention, platform security) and, where applicable, your consent (marketing communications).

• Account creation and management: setting up your account, verifying your identity and age, managing your preferences, processing deposits and withdrawals, and maintaining transaction records.
• Responsible gaming support: monitoring account activity against responsible gaming limits you have set, identifying patterns that may indicate problem gambling, and enforcing self-exclusion requests.
• Fraud prevention and security: detecting and investigating suspicious account activity, preventing unauthorised access, and complying with anti-money laundering obligations under applicable law.
• Customer support: responding to your queries, resolving complaints, and improving the quality of our support based on historic interaction data.
• Platform improvement: using aggregated, anonymised behavioural data to improve game performance, navigation, payment flows and the overall player experience on rd77.

Marketing communications are only sent where you have given specific consent at registration or subsequently opted in. You may withdraw consent for marketing communications at any time by contacting our support team or updating your account notification settings.

4Data Sharing and Third-Party Disclosure

rd77 does not sell, rent or trade your personal data. We share personal data with third parties only in the following strictly limited circumstances:

Payment Service Providers

We share the minimum data required by bKash, Nagad, Rocket, Upay, Visa and Mastercard payment processors to authenticate and complete your deposit or withdrawal transactions. These providers are contractually bound to use your data only for that specific transaction purpose.

Identity Verification Partners

When identity verification is required, we share relevant identification documents and personal details with our KYC service provider. This sharing is limited to what is strictly necessary to confirm your identity and age, and is governed by a data processing agreement.

Fraud Prevention and Security Services

We share device identifiers, IP addresses and transaction metadata with fraud prevention service providers to protect the platform from financial crime, bonus abuse and account takeover attempts. These providers process data strictly for risk assessment purposes.

Legal and Regulatory Disclosure

rd77 may disclose personal data to law enforcement agencies, regulatory authorities or courts where required to do so by applicable law, a court order or a binding regulatory directive. In such cases rd77 will share only the specific data required and will, where legally permissible, notify the affected player of the disclosure.

5Data Retention

rd77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data: retained for the full duration of your account relationship with rd77, plus a minimum of 5 years after account closure to satisfy regulatory record-keeping obligations.
• Transaction records: retained for a minimum of 5 years from the date of the transaction in accordance with financial record-keeping requirements.
• Support communications: retained for 2 years from the date of the interaction, or longer where the communication relates to an unresolved complaint or ongoing investigation.
• Marketing consent records: retained for 3 years from the date of consent or until consent is withdrawn, whichever is earlier, to demonstrate compliance with consent requirements.

When the applicable retention period expires and no legal obligation requires continued retention, rd77 will securely delete or anonymise the relevant personal data so that it can no longer be linked to you as an individual.

6Cookies and Tracking Technologies

rd77 uses cookies and similar browser-based tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, and analyse aggregate usage patterns. The table below summarises the categories of cookies we use:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. Functional and analytics cookies may be managed through your browser settings. Note that disabling functional cookies may affect your account experience, including losing saved preferences between sessions.

7Your Data Rights

rd77 respects your rights in relation to your personal data. The following rights are available to all registered players:

• Right of access: you may request a copy of all personal data rd77 holds about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: if personal data we hold is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure: subject to our legal retention obligations, you may request deletion of your personal data when you close your account or where processing is no longer necessary.
• Right to object to processing: where we rely on legitimate interests as our lawful basis, you may object to that processing. We will assess whether our legitimate interests are overridden by your individual circumstances.
• Right to withdraw consent: where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the rd77 support team via live chat or by email at [email protected]. We will verify your identity before actioning any data request. There is no fee for submitting a data rights request. If we are unable to fulfil your request in full, we will explain why in writing.

8Data Security

rd77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Our security programme includes:

SSL Encryption

All data transmitted between your device and the rd77 platform is encrypted using industry-standard SSL (Secure Sockets Layer) technology. This ensures that your login credentials, payment information and personal data cannot be intercepted in transit.

Access Controls

Access to personal data within rd77's internal systems is restricted on a strict need-to-know basis. Only personnel whose role requires access to specific categories of data are granted that access, and all such access is logged and periodically audited.

Secure Payment Handling

rd77 does not store full card numbers. Payment card data is processed directly by our certified payment gateway partners, who operate under their own PCI-DSS compliant security frameworks. rd77 retains only the tokenised reference required to associate a transaction with your account.

Breach Response

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, rd77 will notify affected players without undue delay. We maintain an internal data breach response procedure to ensure rapid identification, containment and reporting of any security incident.

Your Security Responsibilities

The security of your rd77 account also depends on you. You must keep your login credentials confidential, use a strong and unique password, and contact support immediately if you believe your account has been compromised. rd77 cannot be held responsible for data breaches resulting from your own disclosure of login credentials to a third party.

9Changes to This Privacy Policy

rd77 reserves the right to update this Privacy Policy at any time. When we make a material change to this Policy, we will update the effective date shown at the top of this page and, where the change significantly affects how we use your personal data, we will notify you directly via your registered contact details.

Continued use of the rd77 platform following notification of a policy change constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and contact our support team to close your account.

10Contact Us About This Policy

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how rd77 handles your personal data, please contact our support team via live chat available 24/7 on rd77.ws, or by email at [email protected].

All data rights requests will be acknowledged within 5 business days and resolved within 30 days. Where a request is complex or involves multiple data categories, we may extend the resolution period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

11Governing Law

This Privacy Policy is governed by and construed in accordance with applicable law. Any dispute arising out of or in connection with this Policy shall be subject to the dispute resolution process described in the rd77 Terms and Conditions.

12Relationship to Terms and Conditions

This Privacy Policy forms part of the overall contractual framework governing your use of the rd77 platform and should be read alongside the rd77 Terms and Conditions. In the event of any inconsistency between this Policy and the Terms and Conditions on a data privacy matter, this Policy shall prevail.