rf777 Privacy Policy

1 Introduction

rf777 is committed to protecting the privacy and personal data of all players who use our platform. We understand that you are entrusting us with sensitive information, and we take that responsibility seriously. This Policy sets out in clear, transparent terms exactly what personal data rf777 collects from you, for what purposes that data is processed, with whom it may be shared, and how long it is retained.

This Policy applies to all visitors and registered users of the rf777 website at https://rf777.io, including players located across Bangladesh — in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions. It covers all services offered on the rf777 platform, including sports betting, live casino, slots, crash games, and all associated account management and financial transaction services.

This Privacy Policy should be read together with the rf777 Terms & Conditions, which also form part of the agreement between you and rf777. By using the platform, you accept both documents in full.

2 Data Controller

For the purposes of applicable data protection law, rf777 acts as the data controller in respect of your personal data. This means rf777 determines the purposes for which and the means by which your personal data is processed. Where rf777 engages third-party service providers to process data on its behalf (for example, payment processors and KYC verification services), those third parties act as data processors operating under rf777's instruction and under binding contractual obligations of confidentiality and data security.

All enquiries relating to this Privacy Policy or the processing of your personal data should be directed to our support team at the contact details provided in Section 14 of this document.

3 Personal Data We Collect

rf777 collects only the personal data that is necessary for the operation of your account and the delivery of our services. The categories of personal data we collect are described below.

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth, used to verify that you meet the minimum age requirement of 21 years.
• Email address, used for account communications, transaction notifications, and marketing (where consented).
• Mobile phone number, used for account security, two-factor authentication, and support communications.
• Residential address in Bangladesh, collected as part of the KYC identity verification process.

3.2 Identity Verification Documents

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements) not older than three months.
• Selfie photographs taken alongside identity documents for facial verification purposes.
• Proof of payment method ownership (screenshot of mobile banking app or bank statement header).

3.3 Financial and Transaction Data

• Payment method details including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank account references (account numbers and registered mobile numbers — not full PINs or passwords).
• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Account balance history and bonus credit activity.
• Wagering history including game titles, bet amounts, results, and timestamps.

3.4 Technical and Device Data

• IP address and approximate geolocation data derived from it.
• Device type, operating system, browser type and version.
• Session logs including login timestamps, pages visited, and session duration.
• Cookie identifiers and similar tracking technologies as described in Section 8.

3.5 Communication Data

• Records of all communications you send to or receive from rf777 customer support, including live chat transcripts, emails, and support ticket histories.
• Feedback, complaint, or dispute correspondence submitted through any channel.

4 How We Collect Your Data

rf777 collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technologies: Data collected automatically when you access the rf777 platform, including IP address, device identifiers, session logs, and cookie data.
• Third-party sources: Data received from identity verification service providers and payment processors in the course of processing your transactions or verifying your identity.
• Responsible gaming monitoring: Behavioural data analysed by rf777's internal responsible gaming systems to identify patterns that may indicate problem gambling, in accordance with our duty of care obligations.

5 Purpose of Processing

rf777 processes your personal data only for defined, legitimate purposes. The following table summarises the key processing activities and their associated purposes.

6 Lawful Basis for Processing

rf777 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you, including operating your account, processing deposits and withdrawals, and settling wagers.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC verification, and the retention of financial records.
• Legitimate interests: Processing carried out for purposes that are in rf777's legitimate business interests and do not override your fundamental privacy rights, including platform security, fraud prevention, and responsible gaming monitoring.
• Consent: Processing for optional activities where you have provided a clear, freely given, specific, and informed consent — including receipt of marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing and Third Parties

rf777 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

7.1 Payment Service Providers

Your payment method details and transaction data are shared with the relevant payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — solely for the purpose of processing your deposit or withdrawal transaction. These providers are independently responsible for the security of data within their own systems and operate under their own privacy policies.

7.2 KYC and Identity Verification Providers

Identity documents and selfie photographs submitted for KYC verification may be processed by a third-party identity verification service provider engaged by rf777. Such providers operate under strict contractual data processing agreements and are prohibited from using your data for any purpose other than verifying your identity on behalf of rf777.

7.3 Legal and Regulatory Authorities

rf777 may be required by applicable law to disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities. In such cases, rf777 will disclose only the minimum data required to comply with the legal obligation and will, where permitted by law, notify the affected player of the disclosure.

7.4 Game Content Providers

Game studios and content providers such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Ezugi, and Spribe may receive anonymised or aggregated session data related to gameplay activity for purposes of game performance monitoring and RTP auditing. No personally identifiable information is shared with game providers beyond what is technically necessary for game delivery.

8 Cookies and Similar Technologies

rf777 uses cookies and similar browser-based technologies to enable the platform to function correctly, to maintain the security of your session, and to collect analytical data that helps us improve the platform experience for all players.

8.1 Types of Cookies Used

• Strictly necessary cookies: Essential to the operation of the rf777 platform. These cookies enable you to log in, maintain your session across pages, and keep your account basket and game state intact. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as display settings and notification choices. These cookies enhance your experience but are not critical to platform operation.
• Analytical cookies: Used to collect anonymised data about how players interact with the rf777 platform — such as pages visited, time on site, and navigation paths — so that we can identify areas for improvement. Analytical data is never linked to an identifiable individual.

8.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your rf777 account. Disabling functional or analytical cookies will not prevent you from using the platform but may result in a reduced experience. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

9 Data Retention

rf777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention periods and principles:

• Active account data: Retained for the full duration of your account relationship with rf777 and for a period of five years following account closure, to comply with AML and financial record-keeping obligations.
• KYC documents: Retained for a minimum of five years following the date of verification or account closure, whichever is later, in accordance with anti-money laundering regulatory requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Customer support communications: Retained for three years following the resolution of the relevant support interaction, to support any subsequent complaint or dispute resolution process.
• Marketing consent records: Retained for as long as your consent remains active and for one year following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and session logs: Retained for up to 12 months from the date of collection, unless an extended retention period is required for a specific security investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where anonymisation rather than deletion is used, the resulting data may be retained indefinitely as aggregate statistical information.

10 Security Measures

rf777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and rf777 servers.
• Server-side encryption of sensitive data fields at rest, including identity document files and financial reference data.
• Role-based access controls ensuring that only authorised rf777 personnel with a legitimate operational need can access personal data.
• Regular internal security reviews and vulnerability assessments of all platform components.
• Multi-factor authentication requirements for all internal systems that store or process personal data.
• Continuous monitoring of platform activity for signs of unauthorised access, brute-force attacks, or data exfiltration attempts.
• Contractual security requirements imposed on all third-party data processors, including annual security review obligations.

Despite these measures, no data transmission over the internet or electronic storage system is entirely risk-free. rf777 cannot guarantee the absolute security of data. In the event of a personal data breach that poses a risk to your rights and freedoms, rf777 will notify affected players and take all necessary remedial steps without undue delay.

11 Your Data Rights

As a player on the rf777 platform, you hold a number of rights in respect of your personal data. rf777 is committed to honouring these rights promptly and without unnecessary barriers. Your rights are as follows:

• Right of access: You have the right to request a copy of all personal data rf777 holds about you. We will provide this within a reasonable period following receipt of a verified request.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Account details such as your email address and mobile number can be updated by contacting support.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note that this right is subject to rf777's legal obligation to retain certain data for regulatory and AML compliance purposes.
• Right to restrict processing: You may request that rf777 restrict the processing of your personal data while a complaint or accuracy dispute is being investigated.
• Right to object: You have the right to object to processing based on legitimate interests — in particular, to direct marketing communications. You may unsubscribe from marketing emails at any time using the unsubscribe link in any marketing communication or by contacting support.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact rf777 at [email protected] with the subject line DATA RIGHTS REQUEST. Please include your registered account username and a description of the specific right you wish to exercise. We will respond within 30 days of receiving a complete and verified request.

12 Protection of Minors

The rf777 platform is strictly prohibited for individuals under the age of 21. rf777 does not knowingly collect personal data from anyone under the age of 21. If rf777 becomes aware that it has inadvertently collected personal data from a minor, that data will be deleted immediately and the associated account will be permanently closed with any balance forfeited in accordance with the Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered an account on rf777 using false age information, please contact us immediately at [email protected] so that we can investigate and take the appropriate corrective action without delay.

13 Changes to This Privacy Policy

rf777 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how we collect, use, or share your personal data — will be communicated to registered players via email and by means of a prominent notice on the rf777 platform, with a minimum of seven (7) days' advance notice before the changes take effect.

Minor or administrative changes (such as formatting updates, clarification of existing practices, or correction of typographical errors) may be made without advance notice. In all cases, the effective date at the bottom of this page will be updated to reflect the date of the most recent revision.

Your continued use of the rf777 platform after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure by contacting [email protected].

The current version of the Privacy Policy is always accessible at https://rf777.io/privacy-policy and supersedes all previous versions.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way rf777 handles your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, including all public holidays observed in Bangladesh (including Eid, Victory Day on December 16, and Independence Day on March 26).

For urgent matters — including suspected unauthorised data access, potential data breaches affecting your account, or requests for immediate data deletion following account closure — please mark your email subject line as URGENT — DATA PRIVACY to ensure your request is prioritised by our team.

Last reviewed and updated: 1 January 2026. This document supersedes all previous versions of the rf777 Privacy Policy.