rg999 Privacy
Policy

1 Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected and processed through the rg999 platform is rg999 (referred to throughout this document as "rg999", "we", "us", or "our"). rg999 operates the online casino and sports betting platform accessible at rg999.bet, which serves players primarily located in Bangladesh.

As the data controller, rg999 determines the purposes and means by which your personal data is processed. rg999 is committed to handling your data responsibly, lawfully, and in accordance with applicable data protection principles. This Privacy Policy applies to all personal data collected from players, prospective players, and website visitors who interact with any part of the rg999 platform, including the rg999.bet website and any associated mobile applications.

If you have any questions about how rg999 processes your personal data, or if you wish to exercise any of your data rights described in Section 8 of this Privacy Policy, you may contact the rg999 privacy team at any time:

• Privacy enquiries email: [email protected] (subject line: "Privacy Enquiry")
• Data deletion requests: [email protected] (subject line: "Data Deletion Request")
• Data access requests: [email protected] (subject line: "Data Access Request")

2 Personal Data We Collect

rg999 collects personal data from you in several ways: directly when you register an account and use the platform, automatically through your device and browser when you visit rg999.bet, and occasionally from third-party sources such as payment providers and identity verification services. The categories of personal data we collect are set out below.

Registration and Account Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify you are aged 18 or above)
• Email address (used for account communications, security alerts, and promotional messages where consent is given)
• Mobile phone number (used for account verification and two-factor authentication)
• Residential address (city, district, and postal area — collected at the KYC verification stage)
• Username and encrypted password (your password is stored using one-way hashing and is never visible to rg999 staff)
• Account preferences and self-imposed responsible gaming limits you set on your rg999 account dashboard

Identity Verification (KYC) Data

• Scanned or photographed copy of your National ID Card (NID), passport, or driver's licence
• Proof of address documentation (utility bill, bank statement, or official correspondence)
• Proof of payment method ownership (screenshot or confirmation of bKash, Nagad, or bank account registered in your name)
• Facial verification photograph or selfie where required for enhanced identity verification

Transaction and Financial Data

• Deposit amounts, dates, times, and payment methods used (bKash, Nagad, Rocket, Upay, bank transfer, card)
• Withdrawal requests, amounts, and processing status
• Bonus transactions, wagering activity records, and balance history
• Payment method identifiers (bKash wallet number, Nagad wallet number, bank account details) — note that rg999 does not store full card numbers; card payments are handled by PCI-DSS compliant processors

Gameplay and Betting Data

• Game session logs, including games played, stakes placed, outcomes, and timestamps
• Sports betting selections, stake amounts, odds accepted, and settlement records
• Responsible gaming activity: session duration, self-exclusion activations, limit adjustments

Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Cookie identifiers and session tokens (see Section 6 for full cookie details)
• Pages visited on rg999.bet, time on page, referral source, and click-path data collected through analytics tools
• Login timestamps and session activity logs

Communications Data

• Support chat transcripts and email correspondence with the rg999 support team
• Feedback, complaint, and formal dispute submissions
• Responses to surveys or promotional questionnaires where you choose to participate

3 How rg999 Uses Your Data

rg999 processes your personal data only for clearly defined, lawful purposes directly connected to the operation of the rg999 platform and the delivery of services to you as a player. The table below summarises the primary purposes for which rg999 uses your personal data, alongside the corresponding legal basis for each processing activity.

4 Legal Basis for Processing

rg999 processes your personal data on one or more of the following legal bases, each of which is identified in the processing purpose table in Section 3 above:

Contract Performance

The majority of rg999's data processing activities are necessary to fulfil the contract between rg999 and you as a registered player. This includes creating and maintaining your account, processing your deposits and withdrawals, operating casino games and sports betting markets, and managing bonus offers. Without processing your data for these purposes, rg999 could not provide the core services you have agreed to receive.

Legal Obligation

rg999 is required by applicable law and regulation to collect and retain certain categories of personal data. This includes identity verification (KYC), age verification (confirming players are aged 18 or above), anti-money laundering transaction monitoring, and fraud prevention. rg999 cannot waive these obligations at a player's request.

Legitimate Interest

rg999 processes certain data where it serves a legitimate business interest that is proportionate and does not override your privacy rights. Legitimate interest processing at rg999 includes platform security monitoring, responsible gaming analytics, fraud detection beyond minimum legal requirements, and general platform performance analytics used to improve the player experience for all rg999 users.

Consent

Where rg999 processes your data based on consent — primarily for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Consent-based data processing will cease as soon as your withdrawal is confirmed, typically within 5 business days.

5 Data Sharing and Third Parties

rg999 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. rg999 shares your personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Payment Service Providers

To process your deposits and withdrawals, rg999 shares relevant transaction details with the payment service providers you select, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. The data shared is limited to what is strictly required to complete each transaction. Each payment provider operates under its own privacy policy and is independently responsible for its own data protection obligations.

Identity Verification Services

rg999 uses third-party KYC and identity verification service providers to assist in verifying player identities and checking age compliance as required under our legal obligations. These providers are contractually bound to process your identity documents solely for the purpose of verification and to maintain appropriate data security standards throughout.

Game Software Providers

The casino games and live dealer content available on rg999 are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. Game providers may receive anonymised or pseudonymised gameplay data for the purpose of game operation, jackpot management, and RNG certification auditing. Personal identification data is not passed to game providers.

Analytics and Technology Partners

rg999 uses selected technology partners to support platform analytics, security monitoring, and customer support infrastructure. These partners are engaged under data processing agreements that restrict them to processing data only on rg999's instructions and prohibit any independent use of player data.

Legal and Regulatory Disclosure

rg999 may be required to disclose your personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts of competent jurisdiction where required by applicable law, legal process, or court order. rg999 will notify you of any such disclosure where legally permitted to do so.

6 Cookies and Tracking Technologies

The rg999 platform uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to operate essential platform functions, maintain your login session, remember your preferences, and where you have consented, to collect analytics data that helps rg999 improve the platform experience for players in Bangladesh.

Categories of Cookies Used by rg999

Managing Your Cookie Preferences

You may adjust your cookie preferences for non-essential categories (Analytics and Marketing) at any time through your rg999 account settings under the Privacy Preferences section. You may also control cookies through your browser settings — most modern browsers allow you to view, block, and delete cookies. Please note that blocking strictly necessary cookies will prevent core rg999 platform functions (including login) from working correctly.

Disabling analytics cookies will not affect your ability to play games, deposit, or withdraw funds on rg999. It will simply mean that rg999 has less aggregated data available to inform platform improvements.

7 Data Retention Periods

rg999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by rg999:

Following the expiry of the applicable retention period, rg999 will securely delete or anonymise your personal data so that it can no longer be used to identify you. Where data has been anonymised, it may be retained indefinitely in aggregate form for statistical and platform improvement purposes without affecting your privacy.

8 Your Data Rights

As a player on the rg999 platform, you hold a number of rights over your personal data. rg999 is committed to honouring these rights promptly and without unnecessary bureaucracy. To exercise any of the rights described in this section, contact the rg999 privacy team at [email protected] with the relevant subject line indicated below.

• Right of Access: You have the right to request a copy of all personal data rg999 holds about you. Submit your request to [email protected] with the subject "Data Access Request". rg999 will provide your data in a readable format within 30 days.
• Right to Rectification: If any personal data rg999 holds about you is inaccurate or incomplete, you have the right to request correction. For account details you can update directly (such as contact preferences), log in to your rg999 account dashboard. For name or date of birth corrections, contact support with supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer needed for the purpose for which it was collected. Note that rg999 may be unable to delete certain data categories where retention is required by law (see Section 7).
• Right to Restriction of Processing: You may request that rg999 restricts processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being investigated.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to request that rg999 transmit it to another service provider where technically feasible.
• Right to Object: You may object to rg999 processing your personal data on the basis of legitimate interest at any time. rg999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where rg999 processes your data based on your consent (primarily marketing communications and non-essential cookies), you may withdraw that consent at any time via your account preferences or by emailing [email protected].

9 Data Security Measures

rg999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to maintain their effectiveness as the threat landscape evolves.

Technical Security Controls

• 256-bit SSL/TLS encryption for all data transmitted between your device and rg999 servers
• Encryption at rest for all sensitive personal data and identity documents stored on rg999 infrastructure
• Passwords stored using one-way cryptographic hashing — rg999 staff cannot view your password in plain text
• Two-factor authentication (2FA) available for all rg999 player accounts — strongly recommended
• PCI-DSS compliant card payment processing via third-party processors — full card numbers are never stored on rg999 servers
• Regular penetration testing and vulnerability scanning conducted by independent security specialists
• Intrusion detection systems and 24/7 security monitoring of platform infrastructure
• Automatic account lockout after repeated failed login attempts to prevent brute-force attacks

Organisational Security Controls

• Access to player personal data is restricted strictly to rg999 personnel who require it to perform their job function
• All rg999 staff handling personal data receive mandatory data protection training
• Confidentiality agreements are in place for all employees and contractors with access to player data
• Third-party service providers with access to player data are required to maintain equivalent security standards under binding contractual terms

While rg999 takes all reasonable measures to protect your personal data, no online platform can guarantee absolute security. Players are responsible for keeping their own rg999 login credentials confidential and for logging out of their account when using shared or public devices. If you suspect unauthorised access to your rg999 account, contact support immediately at [email protected].

10 Minors and Privacy

The rg999 platform is strictly for adults aged 18 years and above. rg999 does not knowingly collect, process, or retain personal data from any individual under the age of 18. Age verification is a mandatory step in the rg999 registration and KYC process, and rg999 takes all reasonable technical and procedural measures to prevent underage access to the platform.

If rg999 discovers or is notified that personal data has been collected from an individual who was under 18 at the time of collection, rg999 will immediately suspend the associated account, permanently delete all personal data relating to that individual, and return any deposited funds (less any bonuses or generated winnings) via the original payment method.

If you are a parent or guardian and believe that a minor in your care may have accessed the rg999 platform or provided personal data without your knowledge, please contact the rg999 privacy team immediately at support@r g999.bet with the subject line "Minor Account Report". rg999 will investigate and take immediate remedial action.

11 Changes to This Privacy Policy

rg999 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, the services rg999 offers, or the way rg999 processes personal data. Any material changes to this Privacy Policy will be communicated to registered players via email notification or a prominent notice displayed on the rg999.bet platform prior to the changes taking effect.

The effective date at the top of this Privacy Policy indicates when the current version was last reviewed and approved. rg999 recommends that all players review this Privacy Policy periodically to stay informed about how their personal data is being handled. Continued use of the rg999 platform following the notification of any material changes constitutes your acknowledgement of the updated Privacy Policy.

Previous versions of this Privacy Policy are archived and available on request by contacting the rg999 privacy team at [email protected].

12 Privacy Contact and Complaints

rg999 takes all privacy concerns seriously. If you have a question about this Privacy Policy, wish to exercise any of your data rights described in Section 8, or want to raise a concern about how rg999 has handled your personal data, the rg999 privacy team is your first point of contact.

• General privacy enquiries: [email protected] — subject line: "Privacy Enquiry"
• Data access requests: [email protected] — subject line: "Data Access Request"
• Data deletion requests: [email protected] — subject line: "Data Deletion Request"
• Minor account reports: [email protected] — subject line: "Minor Account Report"
• Privacy complaints: [email protected] — subject line: "Privacy Complaint"

rg999 aims to resolve all privacy complaints fairly and promptly, typically within 30 calendar days of receipt. Where a complaint is particularly complex, rg999 will keep you informed of progress and provide a revised timeline if the standard 30-day period cannot be met.

If you are not satisfied with rg999's response to your privacy complaint after going through the internal complaints process, you retain the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. rg999 will cooperate fully with any such regulatory process.