Privacy Policy — How rd77 Collects, Uses, and Protects Your Data

1.1 Registration and Account Data

When you create an rd77 account, we collect the information you provide during the registration process. This includes:

1.2 Identity Verification (KYC) Documents

rd77 is required to verify the identity and age of all players before processing withdrawals. As part of the Know Your Customer (KYC) process, we may collect scanned or photographed copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid passport (biographical data page)
• Birth certificate issued by a recognised Bangladeshi authority
• Proof of address documents (e.g., utility bill, bank statement dated within 90 days)

Identity documents are processed solely for verification purposes and are not used for any other purpose. Documents are stored in encrypted form and are accessible only to authorised rd77 compliance staff.

1.3 Financial Transaction Data

When you make deposits or withdrawals through rd77, we collect transaction-level data to process your request, detect fraud, and comply with anti-money laundering obligations. This includes the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in Bangladeshi Taka (৳), the date and time of the transaction, and partial payment reference identifiers. rd77 does not store full card numbers or mobile banking PINs.

1.4 Activity and Behavioural Data

rd77 automatically records data about how you interact with the platform. This includes:

• Games played, bet amounts placed, outcomes, and session durations
• Sports betting markets accessed and wagers placed
• Bonus offers viewed, claimed, and completed
• Pages visited on rd77 and time spent on each page
• Search queries entered within the rd77 platform

This data is used to improve platform performance, personalise the user experience, and to power the responsible gaming monitoring systems that help rd77 identify players who may be experiencing gambling-related harm.

1.5 Technical and Device Data

When you access rd77, we automatically collect certain technical data about your device and internet connection. This includes your IP address, device type (mobile or desktop), operating system and version, browser type and version, and referring URL. This data is used for fraud detection, platform compatibility optimisation, and security monitoring. IP addresses are not shared with third parties for marketing purposes.

rd77 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below. In all cases, we require third parties to handle your data in accordance with applicable data protection standards and to use it solely for the purposes for which it was shared.

3.1 Payment Service Providers

To process your deposits and withdrawals, rd77 shares necessary transaction data with the relevant payment service providers. For Bangladesh players, this includes the mobile financial service operators bKash, Nagad, Rocket, and Upay, as well as partnered banks including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. The data shared is limited to what is strictly necessary to complete the transaction — rd77 does not share browsing history, game activity, or any data beyond what the payment provider requires.

3.2 Identity Verification Partners

rd77 may use third-party identity verification service providers to assist with the KYC process. These providers receive only the data required to perform identity checks — typically a copy of the submitted document and the associated name and date of birth. Identity verification partners are contractually bound to process this data solely for verification purposes and to delete it once the check is complete.

3.3 Game Software Providers

rd77 hosts games developed and operated by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe, among others. To facilitate gameplay — particularly for live dealer games — a limited set of account data (such as your account ID, session token, and ৳ balance for display purposes) is passed to the relevant game studio's software environment. Game studios do not receive your full name, NID, or payment method details.

3.4 Legal and Regulatory Disclosure

rd77 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or other legal process. rd77 will not notify you of such disclosures where doing so is prohibited by law or where notification could compromise an ongoing investigation.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rd77's business assets, personal data held by rd77 may be transferred to the acquiring entity as part of that transaction. rd77 will provide reasonable notice to affected players prior to any such transfer, and will ensure that the receiving entity is bound by privacy obligations consistent with this Privacy Policy.

rd77 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction. The following security controls are in place across the rd77 platform.

5.1 Technical Security Measures

• 256-bit SSL/TLS encryption on all data in transit between your device and rd77 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment reference data.
• Bcrypt hashing for all stored passwords — rd77 staff cannot read your password in plain text.
• Two-factor authentication (2FA) available for all accounts, strongly recommended for all players.
• Automated intrusion detection systems that monitor for unusual login patterns, brute-force attempts, and suspicious API activity in real time.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.

5.2 Organisational Security Measures

• Access to personal data is restricted to rd77 staff who genuinely need it to perform their role.
• All rd77 staff with access to personal data are subject to confidentiality obligations.
• Staff training on data protection and security awareness is conducted on a regular basis.
• Access privileges are reviewed and updated whenever a staff member changes role or leaves the organisation.

5.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rd77 will notify affected players without undue delay and provide information about the nature of the breach, the data affected, the likely consequences, and the steps being taken to address it. rd77 maintains an incident response plan specifically for data security events and conducts post-incident reviews to prevent recurrence.

As a player on rd77, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the rd77 support team. rd77 will respond to all valid rights requests within 30 days of receipt. In cases of particularly complex requests, this period may be extended by a further 30 days, with notice provided to you within the initial 30-day window.