rg99 Privacy Policy — Your Data, Your Rights

rg99 ("we", "us", "our") is committed to protecting the privacy of every player who uses our online gaming platform at rg99.bio. This Privacy Policy describes how we collect, use, store, share and protect your personal data when you register an account, make a deposit, participate in games or promotions, or otherwise interact with rg99. It also describes your rights as a data subject and how you can exercise those rights.

By creating an account or using any part of the rg99 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the rg99 platform. We encourage you to review this policy periodically as it may be updated from time to time.

rg99 collects personal information that is necessary to provide you with a safe, compliant and functional gaming experience. The categories of personal data we collect include:

• Identity data: your full name, date of birth, gender and a copy of government-issued photo identification provided during KYC verification.
• Contact data: your mobile phone number, email address, and residential address, including city and district within Bangladesh.
• Account data: your chosen username, encrypted password, account registration date, account status and login history.
• Financial data: your deposit and withdrawal transaction history, the payment methods you have used (bKash, Nagad, Rocket, Upay, bank card details masked to last four digits), and your account balance history.
• Technical and usage data: your IP address, device type, operating system, browser type, session duration, pages visited on rg99, games played, bets placed and game results. This data is collected automatically when you access the platform.

Where required by law (for example, to comply with anti-money-laundering regulations or our responsible gaming obligations), rg99 may also collect additional documentation such as source-of-funds evidence, proof of address or independent financial records. We only ask for what is genuinely necessary to fulfil our legal and operational obligations.

rg99 uses your personal data only for the purposes for which it was collected or for directly related purposes that a reasonable person would expect. Specifically, we use your data to:

• Create and manage your rg99 account, verify your identity and age in accordance with our KYC obligations, and authenticate you when you log in.
• Process your deposits, withdrawals and bonus transactions, and maintain an accurate record of your account balance and transaction history.
• Deliver the games, betting markets, promotions and platform features you access on rg99, and personalise your experience based on your activity and preferences.
• Comply with our legal and regulatory obligations, including anti-money-laundering (AML) requirements, responsible gaming obligations, age verification mandates, and any lawful requests from competent authorities.
• Detect, investigate and prevent fraud, money laundering, collusion, bonus abuse and other prohibited activities on the platform, and to protect the security of all players' accounts.
• Send you transactional communications (such as deposit confirmations, withdrawal notifications and account security alerts) and, where you have opted in, promotional communications about bonuses and offers available on rg99.

rg99 does not use your personal data for any purpose that is incompatible with the purposes described above. We do not use your data to build advertising profiles for third parties, and we do not subject you to automated decision-making that produces legal or similarly significant effects without human review.

rg99 processes your personal data on the following legal grounds:

• Contract performance: processing that is necessary to provide you with the services you have requested — including account creation, deposits, game access and withdrawals.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC, AML, responsible gaming obligations and responses to lawful authority requests.
• Legitimate interests: processing necessary to protect the platform and its players from fraud, abuse and security threats, and to improve the overall quality and reliability of our services.
• Consent: for optional processing such as sending promotional communications, we rely on your consent. You may withdraw your consent at any time by contacting rg99 support without this affecting the lawfulness of processing prior to withdrawal.

rg99 does not sell your personal data. We share your data only in the following limited circumstances:

• Authorised service providers: we share data with third-party companies that provide services on our behalf, including payment processors (bKash, Nagad, Rocket, Upay, card payment providers), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), KYC verification providers, fraud detection services and IT infrastructure providers. These providers are contractually bound to process your data only on rg99's instructions and in accordance with applicable data protection requirements.
• Legal and regulatory authorities: we may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units or courts when required to do so by law, court order or binding regulatory direction. rg99 will not voluntarily disclose more data than is required by the specific legal request.
• Business transfers: in the event of a merger, acquisition or sale of all or substantially all of rg99's assets, personal data held by rg99 may be transferred to the acquiring entity as part of that transaction. We will notify registered players via their registered contact details before any such transfer takes effect.
• With your explicit consent: for any sharing that falls outside the categories above, rg99 will seek your prior, explicit and informed consent before disclosing your data.

rg99 requires all third-party service providers who receive your personal data to maintain appropriate technical and organisational security measures and to process your data only in accordance with our instructions and applicable law. We do not permit our service providers to use your data for their own independent marketing or commercial purposes.

rg99 takes the security of payment and financial data with particular seriousness. When you make a deposit via bKash, Nagad, Rocket, Upay or a bank card, the transaction is processed through our payment provider's secure infrastructure. rg99 does not store your full card number, bKash PIN, Nagad PIN or any equivalent payment authentication credential on our servers. Bank card details stored by rg99 are limited to the last four digits of your card number for reference purposes only.

All financial records are retained for the period required by applicable financial regulations and anti-money-laundering law, which may extend beyond the closure of your rg99 account. After the mandatory retention period has expired, financial records are securely deleted or anonymised.

rg99 uses cookies and similar tracking technologies to operate and improve the platform. We use three categories of cookies:

• Strictly necessary cookies: these are essential for the platform to function. They keep you logged in during your session, maintain your account state, and ensure the security of your connection. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: these remember your preferences such as language settings and display options, so you do not need to re-enter them each visit. Functional cookies do not collect personally identifiable information and are used solely to improve your experience on rg99.
• Analytics cookies: these help us understand how players use the platform — which pages are visited most, where players encounter difficulties, and how we can improve overall performance. Analytics data is aggregated and does not identify individual players.

You can control cookie settings through your browser. Blocking strictly necessary cookies will impair the functionality of the rg99 platform. Blocking functional or analytics cookies will not prevent you from using rg99 but may reduce the quality of your experience. rg99 does not use advertising cookies or place third-party tracking cookies that follow you across other websites.

rg99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice, this means: account data and gameplay records are retained for the lifetime of your active account plus a minimum of five years following account closure; financial transaction records are retained for the period required by applicable anti-money-laundering regulations; KYC verification documents are retained for the period required by applicable identity verification and AML regulations; communication records (emails, support tickets) are retained for up to three years from the date of the communication.

When personal data is no longer required and the applicable retention period has expired, rg99 securely destroys or permanently anonymises the data so that it can no longer be attributed to an individual. Anonymised, aggregated data that cannot identify any individual may be retained indefinitely for statistical and platform improvement purposes.

rg99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and our servers; encrypted storage of sensitive data including passwords and KYC documents; access controls that limit employee access to personal data on a strict need-to-know basis; regular security assessments and vulnerability testing of our platform infrastructure; and incident response procedures to detect, contain and report data security incidents in accordance with applicable law.

While rg99 takes all reasonable steps to protect your personal data, no system is completely immune to security risks. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, rg99 will notify affected players promptly and take all necessary remedial action. You can help protect your account by using a strong, unique password, not sharing your login details with anyone, and contacting rg99 support immediately if you suspect unauthorised access to your account.

As a player on rg99, you have the following rights in relation to your personal data. To exercise any of these rights, please contact rg99 support at [email protected] with your registered username and a clear description of your request:

• Right of access: you may request a copy of all personal data rg99 holds about you. We will provide this within a reasonable timeframe at no charge for standard requests.
• Right of rectification: if any personal data rg99 holds about you is inaccurate or incomplete, you have the right to ask us to correct it. We will update inaccurate data promptly upon verification.
• Right of erasure: subject to our legal retention obligations, you may request deletion of your personal data when it is no longer necessary for the purposes it was collected, or where you withdraw consent and no other lawful basis for processing applies.
• Right to restrict processing: in certain circumstances (for example, while you contest the accuracy of data we hold) you may request that we restrict how we use your data rather than delete it entirely.
• Right to object: you have the right to object to processing of your personal data based on rg99's legitimate interests. You may also opt out of promotional communications at any time by contacting rg99 support.

rg99 aims to respond to all data subject requests within 30 days of receipt. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We will never charge a fee for a standard data subject request. If a request is manifestly unfounded or excessive, rg99 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons.

rg99 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. All players are required to confirm their age during registration, and rg99 conducts mandatory age verification as part of its KYC process. If rg99 discovers that personal data has been collected from a person under 21, we will immediately close the account, return any deposited funds to the payment source, and delete all personal data associated with that account. If you are a parent or guardian and believe a minor has registered on rg99, please contact us immediately at [email protected] so we can take appropriate action.

The rg99 platform may contain references to or integrations with third-party services such as game providers and payment processors. While rg99 carefully selects its third-party partners and contractually requires them to meet data protection standards, rg99 is not responsible for the privacy practices of third-party operators once you move outside the rg99 platform environment. Each third-party provider operates under its own privacy policy. We encourage you to review the privacy policies of any third-party service you interact with independently of the rg99 platform.

rg99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via their registered contact details. We encourage you to review this Privacy Policy periodically. Your continued use of the rg99 platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the updated policy, please stop using the platform and contact rg99 support to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how rg99 handles your personal data, please contact our support team. All privacy-related enquiries and data subject requests are handled with confidentiality and in accordance with our obligations under applicable data protection law.

Email: [email protected] (plain text only — not a clickable link). Please include your registered username and a brief description of your privacy request or concern when contacting us. We aim to acknowledge all privacy enquiries within 5 business days and to resolve them fully within 30 days.