rg77 Privacy Policy — How We Protect Your Data

When you register an rg77 account, complete KYC verification, make a deposit or withdrawal, or contact rg77 support, you provide personal data directly to us. The categories of personal data we collect in this way include:

• Identity data: full name, date of birth, and government-issued identification number as provided during KYC verification.
• Contact data: mobile phone number and email address used to register your account.
• Financial data: payment method identifiers (such as bKash wallet numbers or Nagad account references), transaction amounts, and transaction history.
• KYC documents: copies of identity documents (such as National ID card or passport) submitted as part of the account verification process.
• Communications data: records of any communication you send to or receive from rg77 support, including the content of support tickets and live chat transcripts.

When you use the rg77 platform, certain technical and behavioural data is collected automatically through the platform's technology infrastructure. This data is used to maintain the security and integrity of the platform, improve performance, detect fraud, and comply with our responsible gaming obligations. Automatically collected data includes:

• Device and connection data: IP address, device type, operating system version, browser type and version, and mobile network operator.
• Usage data: pages visited, games accessed, session start and end times, betting and wagering activity logs, and feature interactions.
• Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies used to maintain your logged-in session, remember preferences, and analyse platform usage patterns.
• Geolocation data: approximate location derived from your IP address, used to enforce jurisdictional access controls and detect account access from unexpected locations.

rg77 processes your personal data only for specific, legitimate purposes. We do not process personal data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we process your personal data are:

• Account management: to create, verify, maintain, and administer your rg77 account, including processing deposits, withdrawals, and account closures.
• Identity and age verification: to fulfil our KYC obligations, confirm that you are 21 or older, and verify the ownership of payment methods linked to your account.
• Security and fraud prevention: to monitor account activity for indicators of fraud, money laundering, account takeover, and other prohibited conduct described in the Terms and Conditions.
• Responsible gaming: to identify patterns of behaviour that may indicate problem gambling, and to apply responsible gaming tools (deposit limits, session controls, self-exclusion) as requested by the player or required by our policy.
• Customer support: to respond to your enquiries, resolve disputes, and communicate with you about your account, transactions, and the platform generally.
• Marketing communications: to send you promotional offers, bonus notifications, and seasonal promotions that may be of interest to you. You may opt out of marketing communications at any time by contacting rg77 support. Opting out of marketing does not affect transactional communications related to your account.

rg77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and specific circumstances:

• Payment processors: we share transaction data with bKash, Nagad, Rocket, Upay, and other payment service providers solely to process deposits and withdrawals on your behalf. These providers are bound by their own privacy policies and applicable financial regulation.
• Identity verification providers: we share identity and document data with third-party KYC and identity verification service providers for the purpose of completing the verification process required before withdrawals are permitted.
• Legal and regulatory authorities: we may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent fraud or other criminal activity.
• Platform technology providers: we share technical usage data (not identity or financial data) with software infrastructure providers, analytics platforms, and security services that support the operation of rg77. These providers act as data processors and are contractually obligated to process data only as instructed by rg77.

rg77 uses cookies and similar tracking technologies to operate the platform correctly, maintain your session, and understand how the platform is used. We use three categories of cookies:

• Strictly necessary cookies: these are essential for the platform to function. They manage your login session, maintain account state during gameplay, and handle the security token exchange required for payment processing. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: these remember your preferences, such as your last selected payment method and any responsible gaming settings you have activated. They improve your experience by reducing repetitive configuration steps but are not strictly necessary to use the platform.
• Analytics cookies: these collect aggregated, anonymised data about how players navigate the platform, which features are used most frequently, and where technical errors occur. This data is used to improve platform performance and user experience. Analytics cookies do not identify you personally.

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in to your rg77 account and using core platform features. rg77 does not use cookies to serve third-party advertising on the platform.

rg77 takes data security seriously. We implement and maintain a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and the rg77 platform servers.
• Encryption at rest for sensitive personal data fields, including identity document references and payment method identifiers, stored in rg77's databases.
• Access controls that restrict internal access to personal data to only those staff and systems that require it to perform their specific function.
• Regular security reviews and vulnerability assessments of the platform's infrastructure to identify and address potential weaknesses before they can be exploited.

rg77 retains personal data for as long as your account is active and for a period after account closure as required by our legal and regulatory obligations. Specifically: account registration and identity data is retained for a minimum of 5 years following account closure to meet anti-money laundering record-keeping requirements; transaction and financial data is retained for a minimum of 5 years from the date of each transaction; communications with rg77 support are retained for a minimum of 3 years from the date of the communication. After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an individual.

You may request the deletion of your personal data by contacting rg77 support. rg77 will action your deletion request within 30 days of receipt, subject to the following: rg77 is not required to delete data that it is legally obliged to retain (for example, transaction records required for anti-money laundering compliance). Where a deletion request cannot be fulfilled in full due to a legal retention obligation, rg77 will inform you of the specific data that must be retained and the reason for its retention, and will delete all other data to which no such obligation applies.

rg77 facilitates deposits and withdrawals through mobile financial services and digital payment platforms widely used in Bangladesh. When you use these services to transact with rg77, the following data practices apply:

• rg77 stores only the payment method identifier (for example, the last four digits of a wallet number or a masked account reference) necessary to process future transactions and verify ownership during KYC. Full payment credentials are never stored by rg77.
• Transaction data shared with payment processors is transmitted over encrypted channels and is governed by the privacy policy of the respective payment service provider. rg77 recommends that you review the privacy policies of bKash, Nagad, Rocket, and any other payment provider you use.
• rg77 does not receive or store your mobile banking PIN, bKash or Nagad account passwords, or any other authentication credentials belonging to your payment accounts. These remain solely within the systems of the respective payment provider.

rg77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When material changes are made to this Policy, rg77 will notify registered players by email or via a prominent notice on the platform prior to the changes taking effect. The effective date at the top of this page will be updated to reflect the date of the most recent revision. Your continued use of the rg77 platform after the updated Policy takes effect constitutes your acceptance of the revised terms.

For any questions, concerns, or requests related to this Privacy Policy or to the personal data rg77 holds about you, please contact rg77 support using the email address displayed in the footer of this site. Please include your registered username, the nature of your enquiry, and any relevant details. rg77 aims to acknowledge all privacy-related enquiries within 3 business days (Bangladesh Standard Time, UTC+6) and to resolve them within 30 days.