rg66 Privacy Policy – How We Handle Your Data

1 Introduction

rg66 is an online casino and sports betting platform operated for players in Bangladesh. This Privacy Policy applies to all personal data collected by rg66 in connection with the operation of the platform, including data collected during account registration, identity verification (KYC), payment processing, gameplay, customer support interactions, and marketing communications (where consented to).

This policy should be read together with rg66's Terms & Conditions and any game-specific or promotion-specific terms that may apply to your use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters of data handling, this Privacy Policy shall take precedence.

rg66 is committed to protecting the privacy and security of all players, particularly those based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and other locations across Bangladesh. We handle all personal data with care, discretion, and in accordance with recognised data protection principles.

2 Data We Collect

rg66 collects personal data across several categories. The specific data collected depends on how you interact with the platform. The main categories are as follows:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (for 21+ age verification)
• Gender (optional, where provided)
• Residential address (including city, district, and postcode)
• Nationality
• National ID number or passport number (collected during KYC verification)

2.2 Contact Data

• Email address
• Mobile phone number (including WhatsApp number where provided)
• Preferred communication language

2.3 Financial & Payment Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers registered in your name)
• Bank account details (where applicable for bank transfer transactions)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used
• Bonus and promotional credit history

rg66 does not store full card numbers or mobile banking PINs. Payment credential data is handled directly by the respective payment processor under their own security standards.

2.4 Technical & Device Data

• IP address at time of registration and subsequent logins
• Device type, operating system, and browser version
• Session timestamps and duration
• Geolocation data (country and city level, derived from IP)

2.5 Gameplay & Betting Data

• Game history including games played, wager amounts, outcomes, and session duration
• Sports betting history including markets wagered on, stake amounts, and settlement outcomes
• Responsible gaming tool usage (e.g., deposit limits set, cooling-off periods requested)

2.6 Communications Data

• Records of live chat conversations with the support team
• Email correspondence with rg66
• Records of any complaints or dispute submissions

3 How We Collect Your Data

rg66 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or filling in any other platform forms.
• Automated collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, and session activity logs gathered via server logs and cookies.
• Third-party sources: Identity verification data may be cross-checked against third-party KYC service providers. Payment confirmation data is received from payment processors including bKash, Nagad, and Rocket upon successful transaction processing.
• Gameplay systems: Game result and wagering data is recorded automatically by the platform's gaming systems and third-party game studio integrations.

4 How We Use Your Data

rg66 uses the personal data it collects for the following specific purposes:

rg66 does not use personal data for automated profiling that produces legally significant decisions about individual players without human review. Responsible gaming monitoring may flag accounts for enhanced review, but any resulting action involves a human assessment before implementation.

5 Legal Basis for Processing

rg66 processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil rg66's obligations under the Terms & Conditions, including account management, payment processing, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, age verification obligations, and financial record-keeping duties.
• Legitimate interests: Processing conducted to protect the platform and its players from fraud, ensure fair play, investigate security incidents, and improve platform functionality, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes, such as sending promotional emails or personalised bonus communications. You may withdraw consent for these communications at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of prior processing.

6 Sharing Your Data

rg66 does not sell personal data to any third party. Data may be shared with the following categories of recipients solely as necessary to operate the platform:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum data necessary to process transaction instructions. These providers operate under their own privacy policies and security standards.
• KYC and identity verification providers: Third-party services used to verify player identity and age in compliance with platform requirements. These providers are contractually bound to process data only for verification purposes.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive a player identifier and session token necessary to load games and record game results. Full personal details are not shared with game studios.
• Fraud prevention and security services: Third-party services used to detect suspicious account activity, identify multi-accounting, and prevent money laundering. These services receive technical and transactional data under strict contractual data protection terms.
• Legal authorities: rg66 may disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, lawful order, or to protect the rights and safety of rg66, its players, or the public.

All third-party recipients of personal data are required to maintain appropriate security measures and to use the data only for the specific purpose for which it was shared.

7 Cookies & Tracking Technologies

rg66 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform function correctly and allow rg66 to understand how players use the site.

The following categories of cookies are used on rg66:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your login state. These cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform. This helps rg66 identify pages that perform well, detect errors, and improve the overall user experience. No personally identifiable information is included in analytics data sets.
• Functional cookies: Remember your preferences such as display settings, preferred language, and session timeout warnings. These are optional but improve your experience on the platform.

By continuing to use the rg66 platform, you consent to the use of strictly necessary cookies. For optional cookie categories, rg66 will seek your consent where required. You can manage cookie preferences through your browser settings at any time, though disabling certain cookies may affect platform functionality.

8 Data Retention

rg66 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to applicable legal requirements. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of the active account relationship and for a period of five (5) years following account closure, to meet financial record-keeping and potential legal obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, in line with standard anti-money laundering record-keeping practices.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for three (3) years from the date of the last communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and device data: Retained for up to twelve (12) months from collection, after which it is aggregated and anonymised or deleted.
• Marketing consent records: Retained for the duration of the consent period plus three (3) years, to demonstrate compliance with consent requirements.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any individual.

9 Your Rights

As an rg66 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the rg66 support team at [email protected] with the subject line "Data Rights Request".

• Right of access: You may request a copy of the personal data rg66 holds about you. rg66 will respond within 30 calendar days of a verified request.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held on your account. Minor updates (such as email address changes) can be made directly within the account settings panel.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that may require rg66 to retain certain data regardless of your request.
• Right to restrict processing: You may request that rg66 limits its processing of your personal data in certain circumstances, for example while a correction request is being resolved.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service, where technically feasible.
• Right to object: You may object to the processing of your personal data where rg66 relies on legitimate interests as the legal basis, unless rg66 can demonstrate compelling legitimate grounds that override your interests. You may object to direct marketing at any time without restriction.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

rg66 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case rg66 will notify you of the extension and the reason for it.

10 Children & Minors

The rg66 platform is strictly for adults aged 21 and above. rg66 does not knowingly collect personal data from any individual under the age of 21. If rg66 discovers or is notified that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the relevant account will be closed.

If you believe that a minor has created an account on rg66, please report this to the support team at [email protected] immediately. rg66 takes underage gambling prevention extremely seriously and enforces strict age verification at the point of registration and at the point of first withdrawal request. For more information on rg66's player protection measures, please visit the Responsible Gaming page.

11 Security Measures

rg66 employs a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and rg66 servers.
• Encrypted storage for sensitive data including identity documents and payment identifiers held at rest on rg66 servers.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with all internal access logged and auditable.
• Regular security audits and vulnerability assessments conducted by qualified security professionals.
• Incident response procedures that define how rg66 detects, responds to, and recovers from security incidents, including player notification protocols where required.
• Secure password hashing — rg66 does not store player passwords in plain text. Passwords are stored using industry-standard one-way cryptographic hashing.

Despite these measures, no internet-based system can be guaranteed to be completely secure. Players are encouraged to use strong, unique passwords for their rg66 accounts, to keep their login credentials confidential, and to contact support immediately if they suspect any unauthorised access to their account.

12 Changes to This Privacy Policy

rg66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. When material changes are made, rg66 will notify registered players via email or a prominent notice on the platform before the revised policy takes effect. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of the rg66 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

rg66 recommends that players review this Privacy Policy periodically to stay informed about how their personal data is being handled. All previous versions of this policy are archived and can be provided upon request by contacting the support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rg66 handles your personal data, please contact the rg66 Data Support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: Data Rights Request
• Live Chat: Available 24/7 directly on the rg66 platform
• WhatsApp: +880 1700-000000
• Response time: Under 2 hours for general enquiries; up to 30 calendar days for formal data rights requests

For questions about responsible gaming, deposit limits, or self-exclusion, please visit our Responsible Gaming page. For general questions about your account or the platform, visit our FAQ page. For the full terms governing your use of rg66, please review our Terms & Conditions.