rd999 Privacy Policy

The primary purposes for which rd999 processes your personal data are as follows:

• To create, verify, and manage your rd999 player account, including enforcing the one-account-per-player policy.
• To verify your age (18+) and identity in compliance with our KYC obligations and to prevent underage gambling.
• To process deposits, withdrawals, and payment reversals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, and connected local banks.
• To settle bets, award winnings, apply bonuses, and maintain an accurate transaction history for your account.
• To detect, investigate, and prevent fraud, money laundering, collusion, and other forms of prohibited conduct on the platform.
• To provide customer support — including responding to account queries, disputes, and technical issues — via live chat and email.

• To send transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send promotional communications (bonuses, seasonal offers, BPL and IPL promotions, Eid special offers) where you have given explicit marketing consent.
• To personalise your platform experience — for example, surfacing cricket betting markets or slot game categories based on your activity history.
• To support responsible gaming tools including deposit limit management, session tracking, cool-off requests, and self-exclusion.
• To analyse platform usage patterns and improve rd999's performance, navigation, and game catalogue for players across Bangladesh.
• To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

The categories of third party with whom rd999 may share your data, and the specific purpose of each sharing relationship, are described below:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other local payment partners receive the transaction data strictly necessary to process your deposits and withdrawals. These providers operate under their own privacy and security policies.
• KYC & Identity Verification Providers: rd999 uses licensed third-party services to perform automated identity and age checks. These providers receive only the data required for the verification task.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and bet data necessary to run their games. These providers are contractually prohibited from using this data for independent marketing purposes.
• Fraud Prevention & AML Services: rd999 shares flagged activity data with specialist anti-fraud and anti-money laundering services to detect and prevent financial crime on the platform.

• Customer Support Tools: Our live chat and email support infrastructure is provided by a third-party helpdesk platform. Conversations you initiate with our support team are stored within this system and are accessible only to authorised rd999 support staff.
• Legal & Regulatory Authorities: rd999 will disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by a valid legal process or where disclosure is necessary to protect the rights, property, or safety of rd999 or its players.
• Business Transfers: In the event that rd999 is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer by email and given the opportunity to close your account if you do not wish your data to be transferred.

The following retention periods apply to the main categories of personal data held by rd999:

Where rd999 processes data on the basis of your consent — for example, to send promotional emails — that data will be deleted promptly upon withdrawal of consent, except where a separate legal basis (such as a contractual or legal obligation) independently requires continued retention.

Players who have been self-excluded from rd999 should be aware that their self-exclusion record is retained for a minimum of seven years to prevent re-registration in violation of the exclusion period. This retention is mandatory and cannot be waived by a deletion request during the exclusion period.

• Right of Access: You may request a copy of all personal data that rd999 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to Rectification: If any personal data held by rd999 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no overriding legal basis for retention applies.
• Right to Restrict Processing: You may request that rd999 pause processing of your data while the accuracy of that data or our legal basis for processing it is under review.

• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a structured, machine-readable copy of your personal data for transfer to another service.
• Right to Object: You may object at any time to processing of your personal data based on legitimate interest, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing relies on your consent — for example, marketing emails — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: If you believe rd999 has handled your personal data unlawfully, you have the right to lodge a complaint with the competent supervisory authority in your jurisdiction.

• SSL/TLS Encryption: All data in transit between your browser or device and the rd999 platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when visiting rd999.bet.
• Encryption at Rest: Sensitive personal data stored on rd999 servers — including identity documents and payment details — is encrypted at rest using strong symmetric encryption algorithms.
• Access Controls: Access to personal data within the rd999 organisation is granted on a strict need-to-know basis. Staff members are only permitted to access the categories of personal data necessary to perform their specific job function.
• Two-Factor Authentication: rd999 supports two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA to add an additional layer of protection against unauthorised account access.

• Penetration Testing: rd999's platform infrastructure undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Intrusion Detection: Our systems are monitored around the clock by automated intrusion detection tools that alert the security team to suspicious activity in real time, including unusual login patterns and irregular transaction behaviour.
• Staff Training: All rd999 staff who handle personal data receive regular data protection and security awareness training to ensure they understand their obligations and can recognise social engineering threats.
• Data Breach Response: In the event of a personal data breach that poses a risk to affected individuals, rd999 will notify the relevant supervisory authority within 72 hours and will inform affected players without undue delay.