rb77 Privacy Policy

rb77 is an online betting and gaming platform operating at rb77.io, serving players primarily in Bangladesh. References to "rb77", "we", "us", or "our" throughout this Privacy Policy refer to the operator of the rb77 platform.

rb77 acts as the data controller in respect of the personal data collected through the rb77.io website and associated services. As data controller, rb77 determines the purposes and means by which personal data is processed and is responsible for ensuring that all processing activities comply with applicable data protection principles.

If you have any questions about this Privacy Policy or the manner in which rb77 processes your personal data, please contact our data protection team at [email protected]. We aim to respond to all privacy-related enquiries within five (5) business days.

rb77 collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration Data

When you create an rb77 account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (to verify you meet the 21+ age requirement)
• Residential address (including district and division within Bangladesh)
• Mobile phone number (used for account verification and two-factor authentication)
• Email address (used for account communications and notifications)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, we are required to verify your identity. During the KYC process we may collect copies of:

• Government-issued photo identification (National ID card, Passport, or Driving Licence)
• Proof of address issued within the past three months (utility bill, bank statement, or official correspondence)
• Proof of payment method (screenshot or confirmation of your bKash, Nagad, Rocket, or Upay account registered in your name)
• A selfie or live photo for identity matching purposes where required

2.3 Financial and Transaction Data

We collect records of all financial transactions made through your rb77 account, including:

• Deposit amounts, timestamps, and payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Withdrawal requests, amounts, and processing status
• Bet and wager history, including market selections, stake amounts, odds accepted, and settlement outcomes
• Bonus credits received and wagering activity applied against bonus requirements
• Account balance history and transaction reference numbers

2.4 Technical and Device Data

When you access rb77 via a browser or mobile device, we automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps — login time, logout time, and session duration
• Pages visited, features accessed, and clickstream data within the platform
• Connection type (Wi-Fi or mobile data) and network provider

2.5 Communications Data

If you contact rb77 via email or live chat, we retain a record of the communication, including the date and time, the channel used, and the content of the message. This record is used to resolve your query and to improve the quality of our customer support service.

2.6 Responsible Gaming Data

Where you voluntarily set responsible gaming tools — such as deposit limits, session time limits, loss limits, or self-exclusion periods — we record and retain these preferences and the dates on which they were applied. This data is processed to honour your choices and to safeguard your wellbeing on the platform.

rb77 uses the personal data we collect for the following defined purposes only. We do not use your data for any purpose that is incompatible with the purposes listed below:

• Account Management: Creating, maintaining, and securing your rb77 account, including password resets, two-factor authentication, and login history monitoring.
• Service Delivery: Processing deposits, executing bets and casino gameplay, settling wagers, and processing withdrawal requests accurately and promptly.
• Identity Verification: Conducting KYC checks to confirm your identity and age (21+) before enabling full platform access and withdrawal functionality.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, match-fixing, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible Gaming: Monitoring usage patterns to identify indicators of problem gambling and applying the responsible gaming tools you have activated on your account.
• Customer Support: Responding to your queries, resolving disputes, and improving the quality of our support service based on interaction history.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with rb77 and to prioritise platform features and improvements.
• Legal Compliance: Fulfilling our legal and regulatory obligations, including responding to lawful requests from competent authorities and retaining records as required by law.
• Marketing Communications: Sending you promotional offers, bonus notifications, and relevant platform updates — but only where you have given your explicit consent to receive marketing communications. You may withdraw this consent at any time by contacting [email protected].

rb77 relies on the following legal bases to process your personal data, depending on the specific processing activity:

• Contractual Necessity: Processing required to provide the services you have requested under our Terms and Conditions — for example, processing deposits, settling bets, and fulfilling withdrawal requests.
• Legal Obligation: Processing required to comply with applicable legal obligations — for example, retaining financial transaction records and conducting identity verification as required by anti-money laundering principles.
• Legitimate Interests: Processing carried out on the basis of rb77's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security monitoring, and aggregated analytics.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending marketing communications and promotional offers. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

rb77 does not sell, rent, or trade your personal data to any third party. We share your data only with the categories of trusted third-party partners described below, and only to the extent strictly necessary to support the operation of our platform and fulfil our legal obligations:

5.1 Payment Processors

To process deposits and withdrawals, rb77 shares transaction data with your chosen payment method providers, including bKash, Nagad, Rocket, Upay, and the relevant Visa or Mastercard acquiring banks. These providers process your payment data under their own privacy policies and in accordance with applicable financial regulations. rb77 does not store full card numbers or mobile banking PINs.

5.2 Identity Verification Partners

To conduct KYC checks, we may share your identity documents and personal details with our trusted identity verification partners. These partners are contractually bound to use your data solely for verification purposes and to maintain security standards equivalent to or higher than those applied by rb77.

5.3 Fraud Prevention and Security Providers

rb77 works with specialist third-party providers to detect and prevent fraud, money laundering, and other prohibited activities. These providers may process your IP address, device fingerprint, and betting behaviour data on our behalf under strict data processing agreements.

5.4 Technology and Infrastructure Partners

Our platform is hosted on cloud infrastructure and supported by third-party software providers who may have access to personal data in the course of providing technical services (for example, database hosting, customer support tooling, and email delivery). All such partners are bound by data processing agreements that prohibit them from using your data for any purpose other than providing their contracted service to rb77.

5.5 Legal and Regulatory Disclosure

rb77 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so by a valid and lawful request. We will notify you of such a disclosure where legally permitted to do so.

rb77 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform efficiently and to improve your experience as a player. Cookies are small text files stored on your device by your browser.

6.1 Types of Cookies We Use

6.2 Managing Cookies

You can manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Functional and analytical cookies may be disabled without affecting your ability to place bets or access your account balance.

Instructions for managing cookies in major browsers are available through each browser's official support documentation. rb77 does not use advertising or targeting cookies and does not participate in cross-site advertising networks.

rb77 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include:

• Transport Encryption: All data transmitted between your device and rb77 is encrypted using 256-bit SSL/TLS. Our SSL certificate is renewed continuously and monitored for validity.
• Password Security: Account passwords are processed through a cryptographic one-way hash function before storage. rb77 staff members cannot view your password in plain text under any circumstances.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. rb77 will never ask for your 2FA code via email, SMS, or live chat.
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis. Staff members have access only to the data required to perform their specific job function.
• Intrusion Detection: rb77's infrastructure is monitored continuously for anomalous activity. Any suspected breach is escalated immediately to our security team for investigation.
• Data Minimisation at Rest: Full payment card numbers and mobile banking credentials are never stored on rb77's servers. Financial data at rest is stored in encrypted form.

rb77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to provide our services, and to comply with legal obligations. Our standard retention periods are as follows:

Once a retention period has expired, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

As a data subject, you have the following rights in relation to the personal data rb77 holds about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of all personal data rb77 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal obligation to retain certain records.
• Right to Restrict Processing: You have the right to request that rb77 restricts the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where rb77 relies on legitimate interests as the legal basis. rb77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The rb77 platform is strictly intended for adults aged 21 years and above. rb77 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in our registration and KYC process, and any account found to have been created by a person under the minimum age will be closed immediately.

If you are a parent or guardian and believe that a minor in your care has accessed rb77 or provided personal data to us, please contact our team immediately at [email protected]. We will promptly investigate the matter, close the account, and securely delete any personal data associated with the minor in question in accordance with our data retention obligations.

rb77 strongly encourages the use of parental controls and internet filtering tools to prevent underage access to gambling platforms. We support responsible access and work actively to enforce our minimum age policy across all touchpoints.

rb77 primarily processes and stores personal data within servers located in the Asia-Pacific region. In certain circumstances — for example, when using a globally distributed cloud infrastructure provider or an international fraud prevention service — your personal data may be transferred to, and processed in, countries outside Bangladesh.

Where such international transfers occur, rb77 takes appropriate steps to ensure that your personal data receives a level of protection that is consistent with the standards described in this Privacy Policy. These steps may include entering into standard contractual clauses with the receiving party, conducting due diligence on the recipient's security posture, and restricting the categories of data transferred to the minimum necessary.

If you would like more information about the specific safeguards rb77 applies to international data transfers, please contact us at [email protected].

The rb77 platform may contain references to third-party services, including payment method providers such as bKash and Nagad, game studios such as Pragmatic Play and Evolution Gaming, and sports data providers. These third parties operate their own websites and services under their own privacy policies, which rb77 does not control.

rb77 is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policy of any third party with whom you interact before providing your personal data to them directly. Where you use a third-party payment service to make a deposit or withdrawal, your transaction data is also governed by that provider's terms and privacy notice.

rb77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. The effective date at the top of this document will be updated whenever a material change is made.

Where a material change is made to this Privacy Policy — for example, a new category of data is collected, or a new category of third-party recipient is introduced — rb77 will notify registered account holders by email to their registered address at least seven (7) days before the change takes effect.

Minor clarifications and corrections that do not materially affect your rights or rb77's data processing activities may be made without prior notice. Your continued use of the rb77 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Privacy Policy, please cease using the platform and contact [email protected] to arrange account closure.

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which rb77 processes your personal data, please contact our data protection team using the details below. All communications should be in English.

• Email: [email protected]
• Subject Line: Use "Privacy Policy Enquiry" or "Privacy Rights Request" for priority handling
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 days
• Support Hours: 24 hours a day, 7 days a week

If you are not satisfied with the response you receive from rb77, you have the right to escalate your complaint to an appropriate supervisory authority or independent dispute resolution body applicable to your jurisdiction.