rt77 Privacy Policy

rt77 collects personal data from players through several channels: directly from you when you register an account or interact with the Platform, automatically through your use of the Platform via cookies and server logs, and from third-party payment processors and identity verification services in the course of transaction processing and KYC compliance.

Personal Identification Data

When you register an rt77 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification purposes — players must be 18 or older)
• Residential address including district, division, and postcode within Bangladesh
• Mobile phone number (used for account verification and security alerts)
• Email address (used for account communications, promotional offers, and support correspondence)
• National ID number, passport number, or driving licence number (collected during KYC verification)
• Photographs or scans of identity documents and address proof submitted for KYC verification

Financial & Transaction Data

In connection with deposits and withdrawals processed in BDT through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment methods, rt77 collects:

• Payment method account identifiers (e.g., the mobile number registered to your bKash or Nagad account)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history associated with your rt77 account
• Bank account details where bank transfer is used as a payment method

rt77 does not store full payment card numbers. Where card payments are supported, card data is handled directly by PCI-DSS compliant payment processors and is never stored on rt77 servers.

Gameplay & Behavioural Data

rt77 collects data about how you use the Platform, including:

• Game titles accessed, wager amounts, bet history, and game session durations
• Sports betting markets accessed, odds accepted, and settlement records
• Bonus offers claimed and wagering progress against bonus requirements
• Responsible gaming tool usage, including deposit limits set and cooling-off periods activated
• Customer support interactions, including chat transcripts and email correspondence

Technical & Device Data

When you access the rt77 Platform, our servers automatically record:

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type, and version
• Pages visited, time spent on each page, and navigation path through the Platform
• Referring URL (the address of the page you visited immediately before reaching rt77)
• Session timestamps and login history

rt77 uses the personal data we collect for a defined set of purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your explicit consent or being required to do so by applicable law.

Account Management & Platform Operation

• Creating and maintaining your rt77 player account
• Authenticating your identity at login and during sensitive account operations
• Processing deposits and withdrawals in BDT via your chosen payment method
• Applying bonus credits, tracking wagering progress, and settling promotions
• Providing customer support and resolving disputes or complaints
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account security alerts

Compliance & Legal Obligations

• Verifying player age (18+) and identity through KYC procedures
• Monitoring account activity to detect and prevent fraud, money laundering, and other prohibited conduct
• Maintaining transaction records as required by applicable financial record-keeping obligations
• Responding to lawful requests from competent authorities

Responsible Gaming

• Monitoring gameplay patterns to identify potential indicators of problem gambling behaviour
• Enforcing self-exclusion requests, deposit limits, and cooling-off periods applied by players
• Communicating with players who may benefit from responsible gaming resources or support

Platform Improvement & Analytics

• Analysing aggregated and anonymised usage data to improve the Platform's performance, layout, and game catalogue
• Identifying and resolving technical errors, security vulnerabilities, and service disruptions
• Evaluating the effectiveness of promotional campaigns using anonymised conversion data

Marketing Communications

Where you have opted in to receive promotional communications from rt77, we may use your email address and mobile number to send you information about new games, special offers, BPL cricket promotions, seasonal bonus events (such as Eid and Pohela Boishakh offers), and other rt77 marketing materials. You may opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing will not affect your ability to use the Platform or receive essential transactional communications.

rt77 processes personal data only where there is a lawful basis for doing so. The following legal bases apply to the processing activities described in this Privacy Policy:

• Contractual Necessity: Processing is necessary to perform the contract between rt77 and the player (i.e., the Terms & Conditions). This covers account creation, transaction processing, game operation, and customer support.
• Legal Obligation: Processing is required by applicable law. This covers KYC/AML verification, record-keeping requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing serves rt77's legitimate interests in operating a secure, fair, and commercially viable platform, provided those interests are not overridden by the player's fundamental rights. This covers fraud detection, security monitoring, and anonymised analytics.
• Consent: Where processing relies on consent — primarily for marketing communications — rt77 will obtain explicit opt-in consent. Consent may be withdrawn at any time by contacting [email protected], without affecting the lawfulness of processing carried out prior to withdrawal.

rt77 does not sell, rent, or trade your personal data to any third party for their independent commercial use. We share data only with carefully selected service providers and in the limited circumstances described below.

Service Providers

rt77 engages third-party service providers who process data on our behalf to enable Platform operation. These providers are contractually bound to use your data only for the purposes for which it was disclosed and to maintain appropriate security measures. Categories of service providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transaction data necessary to process deposits and withdrawals in BDT.
• Identity Verification Providers: Third-party KYC and AML screening services receive identity document images and personal identification data for age and identity verification purposes.
• Game Content Providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver their games. These providers operate their own data practices governed by their respective privacy policies.
• IT & Hosting Infrastructure: Cloud hosting and content delivery providers may process technical data (such as server logs) as part of Platform infrastructure operation.
• Customer Support Platforms: Live chat and helpdesk software providers may process support correspondence data.

Legal & Regulatory Disclosure

rt77 may disclose personal data to competent governmental or regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, legal process, or binding order. rt77 will, where permitted by law, notify the affected player of any such disclosure request unless prohibited from doing so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rt77's business operations, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified in advance of any such transfer and of any material changes to this Privacy Policy that result from the transaction.

rt77 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and gather anonymised analytics data. A cookie is a small text file placed on your device by a website; it allows the site to recognise your device across sessions.

Types of Cookies We Use

You may configure your browser to refuse all cookies or to alert you when cookies are being placed. Please note that disabling essential cookies will impair your ability to log in and use core Platform features. rt77 does not use third-party advertising cookies or behavioural targeting cookies.

rt77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

• Active Account Data: Retained for the duration of your active account relationship with rt77, plus a minimum of five years following account closure to satisfy financial record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five years from the date of submission or the date of account closure, whichever is later, in accordance with anti-money laundering record-keeping obligations.
• Transaction Records: All deposit, withdrawal, and wager records are retained for a minimum of five years following the date of each transaction.
• Customer Support Correspondence: Chat transcripts and email threads are retained for two years from the date of the interaction, unless related to an ongoing dispute in which case they are retained until the dispute is fully resolved.
• Marketing Consent Records: Records of your marketing opt-in or opt-out are retained for the lifetime of your account plus three years, to demonstrate compliance with consent obligations.
• Server Logs & Technical Data: Aggregated server logs are retained for up to 12 months. Logs associated with security incidents may be retained longer pending resolution of the incident.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data derived from your account activity may be retained indefinitely for statistical and analytical purposes.

As a player on the rt77 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your account. rt77 will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data rt77 holds about you, including the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by rt77. Where data cannot be corrected directly in your account dashboard, submit a correction request to [email protected].
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to rt77's legal obligations to retain certain data for the periods specified in Section 6.
• Right to Restrict Processing: You may request that rt77 temporarily restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on rt77's legitimate interests, including processing for direct marketing purposes. Marketing opt-outs take effect within 48 hours of your request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

rt77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated on a regular basis to reflect the current threat landscape.

• All data transmitted between your device and the rt77 Platform is encrypted using TLS (Transport Layer Security) with current cipher suites. The Platform is accessible exclusively over HTTPS.
• Sensitive account data, including passwords, is stored using strong one-way hashing algorithms. rt77 staff cannot retrieve your plaintext password under any circumstances.
• Access to personal data within rt77's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific operational role.
• All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• rt77's infrastructure is hosted in data centres with physical access controls, redundant power systems, and environmental monitoring.
• Regular vulnerability assessments and penetration testing are conducted to identify and remediate security weaknesses before they can be exploited.

In the event of a data security incident that is likely to result in a risk to the rights of affected players, rt77 will notify affected individuals without undue delay after becoming aware of the incident, providing information about the nature of the incident, the data affected, and the steps rt77 is taking in response. Such notifications will be sent to the email address registered to your rt77 account.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy concern, contact rt77 at the support email address displayed in the footer of this page. All privacy enquiries are handled confidentially by rt77's support team.