r999 Privacy Policy

1. Introduction & Scope

r999 takes the privacy of its players seriously. This Privacy Policy sets out the basis on which any personal data r999 collects from you, or that you provide to r999, will be processed. Please read the following carefully to understand r999's practices regarding your personal data.

This Privacy Policy applies to all users of the r999 platform accessible at r999.today, including all casino games, sports betting markets, payment services, bonus programmes, account management tools, and any customer support communications. It applies regardless of whether you access r999 via a desktop browser or a mobile-optimised browser on a device in Bangladesh or elsewhere.

This Policy should be read alongside the r999 Terms & Conditions, which govern the overall relationship between r999 and its registered players. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to data protection matters, this Privacy Policy shall prevail.

2. Data Controller Information

For the purposes of applicable data protection law, r999 acts as the data controller in respect of personal data collected from players who use the r999 platform. As data controller, r999 is responsible for determining the purposes for which, and the manner in which, your personal data is processed.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights as described in Section 10, you may contact r999's data protection point of contact at:

Email: [email protected] (plain text — not a clickable link)

r999 aims to respond to all data-related enquiries within 30 calendar days of receipt. For complex requests involving large volumes of data or requiring extensive verification, r999 may extend this period by a further 30 days, with written notice provided to the requesting player.

3. Personal Data We Collect

3.1 Registration Data

When you create an r999 account, r999 collects the following information that you provide directly:

• Full legal name
• Date of birth (for age verification purposes — players must be 18 or older)
• Email address
• Mobile phone number
• Preferred payment method (e.g., bKash number, Nagad number, Rocket number)
• Username and password (password stored in encrypted, hashed form only)
• Country and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

3.2 Identity Verification (KYC) Data

In order to verify your identity and comply with anti-money laundering obligations, r999 may request the following documents at the account verification stage or prior to processing withdrawals:

• Government-issued national identity card (NID) or passport
• Proof of residential address (utility bill, bank statement, or similar document issued within the last 3 months)
• Proof of ownership of the payment method used for deposits (e.g., screenshot of bKash or Nagad account registration in your name)

3.3 Transaction Data

r999 automatically records all financial transactions conducted through your account, including deposit amounts, deposit timestamps, withdrawal requests, withdrawal amounts, withdrawal timestamps, and the payment method used for each transaction. This data is retained for audit, fraud prevention, and regulatory compliance purposes.

3.4 Gameplay & Betting Data

r999 records data relating to your use of games and betting markets on the platform, including game sessions played, bet amounts, win/loss outcomes, bonus usage, wagering progress, and session duration. This data is used for account management, bonus administration, responsible gaming monitoring, and platform improvement.

3.5 Technical & Device Data

r999 automatically collects certain technical data when you access the platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited on the r999 platform. This data is used for platform security, fraud detection, and improving the user experience for players in Bangladesh.

3.6 Communications Data

r999 retains records of communications between you and the r999 customer support team, including live chat transcripts, email correspondence, and support ticket history. These records are kept for quality assurance, dispute resolution, and training purposes.

4. How We Use Your Data

r999 uses the personal data collected from you for the following purposes:

Purpose	Description
Account Registration	To create and manage your r999 player account, verify your identity, and enable secure r999 login access.
Payment Processing	To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to reconcile transaction records.
Age & Identity Verification	To confirm that you are at least 18 years of age and to verify that your account details are accurate and genuine.
Fraud & Security	To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the r999 platform.
Customer Support	To respond to your enquiries, resolve disputes, and provide technical assistance through live chat and email support.
Responsible Gaming	To monitor gameplay patterns that may indicate problem gambling and to enforce deposit limits, cooling-off periods, or self-exclusions requested by players.
Platform Improvement	To analyse usage patterns, identify technical issues, and improve the r999 platform experience for players in Bangladesh.
Marketing Communications	To send promotional offers, bonus notifications, and platform updates to players who have provided their marketing consent (opt-out available at any time).
Legal Compliance	To comply with applicable legal obligations, including responding to lawful requests from law enforcement or regulatory authorities.

5. Legal Basis for Processing

r999 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary to perform the contract between you and r999 — specifically, to operate your player account, process payments, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary for r999 to comply with applicable legal requirements, including identity verification, anti-money laundering checks, and record-keeping obligations.
• Legitimate Interests: Processing is necessary for r999's legitimate interests in operating a safe, secure, and fair gaming platform — including fraud detection, security monitoring, and platform improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, r999 processes your data on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

6.1 Payment Service Providers

r999 shares necessary transaction data with payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — for the sole purpose of processing deposits and withdrawals. These providers act as independent data controllers in respect of the data they receive and are subject to their own privacy policies.

6.2 Game Content Providers

r999 integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player session ID) necessary to deliver the game content. They do not receive your full identity data, payment details, or contact information.

6.3 IT & Platform Service Providers

r999 uses third-party providers for hosting, cloud infrastructure, data analytics, cybersecurity, and customer support software. These providers process personal data on r999's behalf as data processors under written agreements that require them to maintain appropriate security standards and to use your data only for the purposes specified by r999.

6.4 Legal & Regulatory Disclosure

r999 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required by law, or where r999 reasonably believes disclosure is necessary to protect the rights, property, or safety of r999, its players, or the public. r999 will, where lawful and practicable, notify you of any such disclosure.

6.5 No Sale of Data

r999 does not sell, rent, or otherwise transfer your personal data to any third party for that party's own commercial marketing or advertising purposes. Your data is not a product at r999.

7. Cookies & Tracking Technologies

r999 uses cookies and similar tracking technologies on the r999 platform to enhance your experience and to collect analytical data. The types of cookies used by r999 are as follows:

• Strictly Necessary Cookies: These cookies are essential to the operation of the r999 platform. They enable functions such as maintaining your r999 login session, remembering your account preferences, and ensuring secure navigation between pages. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised or pseudonymised data about how players interact with the r999 platform — such as which pages are visited most frequently, how long sessions last, and where technical errors occur. This information helps r999 continuously improve its platform for players in Bangladesh.
• Functionality Cookies: These cookies remember your account settings and preferences (such as display language and time zone set to BST/UTC+6) to provide a more personalised experience on future visits.
• Marketing Cookies: Where you have provided consent, r999 may use cookies to track whether you have engaged with a particular promotion or bonus offer, in order to deliver relevant follow-up communications. You may withdraw this consent at any time through your account settings or by contacting [email protected].

You may configure your browser to refuse all cookies or to alert you when cookies are being sent. Please be aware that disabling strictly necessary cookies may prevent you from accessing certain features of the r999 platform, including the secure r999 login function.

8. Data Retention

r999 retains your personal data for the following periods, after which data is securely deleted or anonymised unless a longer retention period is required by law:

• Active Account Data: Retained for the full duration of your r999 account plus 5 years following account closure, to comply with anti-money laundering and financial record-keeping obligations.
• KYC / Identity Verification Documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Retained for 7 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, unless the communication relates to an open dispute or legal claim, in which case it is retained until the matter is fully resolved.
• Marketing Consent Records: Retained for the duration of your marketing consent plus 2 years following withdrawal of consent, for evidential purposes.
• Technical & Device Data (Logs): Retained for 12 months from collection, after which they are deleted or aggregated into anonymised statistical data.

9. Data Security

r999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmissions between your device and the r999 platform.
• Encrypted storage of sensitive data, including hashed and salted password storage.
• Role-based access controls limiting access to personal data to r999 staff who require it for legitimate operational purposes only.
• Regular security audits and vulnerability assessments of the r999 platform infrastructure.
• Firewall protection and intrusion detection systems on r999's hosting environment.
• Two-factor authentication options available for player accounts to strengthen r999 login security.

While r999 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is entirely risk-free. r999 cannot guarantee absolute security but commits to promptly notifying affected players in the event of a data breach that poses a significant risk to their rights and freedoms.

10. Your Rights

Subject to applicable data protection law, you have the following rights in respect of the personal data r999 holds about you:

• Right of Access: You may request a copy of the personal data r999 holds about you and information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data r999 holds about you. You may also update certain information directly through your r999 account settings.
• Right to Erasure: You may request deletion of your personal data where r999 no longer has a lawful basis for retaining it, subject to r999's legal obligations to retain certain data for specified periods (see Section 8).
• Right to Restriction: You may request that r999 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that r999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to r999's processing of your personal data where that processing is based on legitimate interests. r999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact r999 at [email protected]. r999 will respond within 30 calendar days. r999 may need to verify your identity before processing your request to protect against unauthorised access to other players' data.

11. Children & Minors

The r999 platform is strictly intended for adults aged 18 years or older. r999 does not knowingly collect, store, or process personal data belonging to individuals under the age of 18. If r999 discovers that it has inadvertently collected data from a minor, that data will be deleted promptly and the associated account closed. If you are a parent or guardian and believe that your child has registered an r999 account, please contact r999 immediately at [email protected] so that the matter can be resolved without delay.

12. Marketing Communications

Where you have provided your consent to receive marketing communications, r999 may send you emails, SMS messages, or in-platform notifications about new games, bonus promotions, seasonal offers (such as Eid, Pohela Boishakh, and BPL cricket season promotions), and platform updates. r999 will not send you unsolicited marketing communications without your prior consent.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email sent by r999.
• Updating your communication preferences in your r999 account settings.
• Contacting r999 support at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications will not affect your ability to receive service-related communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

13. Changes to This Policy

r999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or platform services. When material changes are made, r999 will publish the revised Privacy Policy on this page with an updated "Last Updated" date and will use reasonable efforts to notify registered players via their registered email address.

Your continued use of the r999 platform after the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised terms, you must cease using the r999 platform and may request deletion of your personal data in accordance with Section 10.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to r999's data protection practices, please contact the r999 support team using the details below. All data-related enquiries are handled by r999's data protection point of contact.

Email: [email protected] (plain text — not a clickable link)

Live Chat: Available within your r999 account dashboard after completing the r999 login process. Live chat is available 24 hours a day, 7 days a week in Bangladesh Standard Time (UTC+6).

r999 aims to acknowledge all privacy-related enquiries within 5 BST business days and to provide a full response within 30 calendar days. For urgent matters relating to a suspected data breach or unauthorised account access, please use live chat for the fastest response.