rf999 Privacy Policy

This Privacy Policy ("Policy") sets out how rf999 ("we", "us", or "our") collects, processes, stores, uses, and protects the personal data of users ("you" or "your") who access and use the rf999 Platform available at rf999.club. This Policy applies to all players, registered users, and visitors to the rf999 website, regardless of the device or method of access used. By registering an account or continuing to use the rf999 Platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein.

rf999 takes data privacy seriously. We do not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We collect only the data that is necessary to provide you with a safe, secure, and enjoyable gaming and betting experience on our Platform. Our data handling practices are designed to give you meaningful control over your personal information while allowing rf999 to meet its legal and compliance obligations.

rf999 collects personal data from you in several ways: directly when you register an account, make a deposit, or contact our support team; automatically when you use our Platform; and, in limited cases, from third-party service providers such as KYC verification agencies and payment processors. The categories of personal data we collect include:

• Identity data: full name, date of birth, gender, and government-issued identification document details (such as National Identity Card number or passport number) provided during registration or KYC verification.
• Contact data: mobile phone number, email address (where provided), and residential address details submitted during registration or KYC.
• Financial data: deposit and withdrawal transaction histories, payment method identifiers (e.g. the last four digits of the bKash or Nagad mobile number used), and account balance information.
• Technical data: IP address, device type, operating system, browser type and version, session duration, pages visited, and referring URL, collected automatically by our servers when you access the Platform.
• Gaming and betting data: game history, bet amounts, wagering activity, win and loss records, bonus usage, and responsible gaming tool interactions (e.g. deposit limit settings, time-out activations).
• Communications data: records of your interactions with our customer support team via live chat and email, including the content of messages, timestamps, and the outcome of any complaint or query.

rf999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where expressly required by applicable law (for example, information about problem gambling disclosed during a responsible gaming interaction). Where such sensitive information is shared voluntarily by you, it will be handled with the highest level of care and used only for the specific purpose for which it was disclosed.

rf999 uses the personal data we collect for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purposes described in this Policy. The primary purposes for which we process your personal data are:

• Account creation and management: to register your account, verify your identity, manage your profile, and maintain the integrity of your account throughout its lifetime on the rf999 Platform.
• Payment processing: to process your deposits and withdrawal requests, verify that payment sources belong to you, detect and prevent fraudulent transactions, and maintain accurate financial records for compliance purposes.
• KYC and regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) frameworks, verify player eligibility, and respond to lawful requests from regulatory authorities or law enforcement agencies.
• Customer support: to respond to your queries, complaints, and requests submitted via live chat, email, or any other support channel, and to maintain a record of those interactions for quality assurance and dispute resolution.
• Responsible gaming: to monitor gaming behaviour for signs of problem gambling, to apply and administer responsible gaming tools requested by the player (such as deposit limits, time-outs, and self-exclusion), and to fulfil our duty of care obligations.
• Platform improvement and analytics: to analyse aggregated, anonymised usage data to improve the Platform's performance, stability, game selection, and user experience. rf999 does not use personally identifiable information for general analytics purposes.

rf999 processes your personal data only when there is a valid legal basis for doing so. The legal bases on which we rely to process your data are:

• Contractual necessity: processing your identity, contact, financial, and gaming data is necessary for rf999 to fulfil its contractual obligations to you under the Terms and Conditions — for example, creating your account, processing deposits and withdrawals, and delivering game access.
• Legal obligation: processing your data for KYC verification, AML monitoring, age verification, and responding to lawful regulatory requests is required by applicable law and cannot be avoided through consent or opt-out.
• Legitimate interests: rf999 may process your technical and gaming data on the basis of its legitimate interests in operating a secure platform, detecting and preventing fraud, and improving service quality — provided those interests are not overridden by your rights and freedoms.
• Consent: where rf999 sends you marketing communications or uses optional cookies, we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rf999 does not sell your personal data. We share your data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: mobile financial service providers such as bKash, Nagad, Rocket, and Upay, and bank partners such as Dutch-Bangla Bank, BRAC Bank, and City Bank, receive only the transaction data necessary to process your deposit or withdrawal request. These providers are contractually bound to protect your data and may not use it for their own purposes.
• KYC and identity verification providers: third-party KYC service providers receive the identity documents and personal details you submit during the verification process for the sole purpose of verifying your identity and age on behalf of rf999.
• Game providers: technology providers such as Pragmatic Play, Evolution Gaming, Spribe, and Jili receive session and wagering data required to deliver the game experience. This data is typically pseudonymised and does not include your full name or payment details.
• Regulatory and law enforcement authorities: rf999 may be required by law to disclose your personal data to government bodies, financial intelligence units, tax authorities, or law enforcement agencies. Any such disclosure will be made only to the extent required by applicable law and, where legally permissible, rf999 will notify you of such a disclosure.

rf999 does not share your personal data with advertising networks, data brokers, social media platforms, or any other third party for commercial or marketing purposes. All third-party service providers engaged by rf999 are subject to data processing agreements that require them to handle your data securely and only for the purposes specified by rf999.

rf999 accepts deposits and processes withdrawals via mobile financial services (MFS) that are widely used in Bangladesh, including bKash, Nagad, Rocket, and Upay, as well as through select bank transfer arrangements. When you make a deposit or withdrawal using any of these methods, rf999 records the transaction amount, the date and time of the transaction, and a partial identifier for the payment account used (such as the last four digits of your mobile wallet number). rf999 does not store your full mobile wallet PIN, full card number, or full bank account credentials.

Payment transaction data is retained for a minimum of five years from the date of the transaction, in compliance with financial record-keeping obligations. This data may be reviewed by rf999's compliance team or shared with relevant regulatory bodies or law enforcement agencies where required by applicable law.

rf999 uses cookies and similar tracking technologies on its Platform to provide core functionality, remember your preferences, and analyse usage patterns. A cookie is a small text file placed on your device by our web server when you visit the Platform. The types of cookies we use are:

• Essential cookies: these are strictly necessary for the Platform to function correctly. They manage your login session, maintain your account authentication state, and enable core security features. These cookies cannot be disabled without breaking the Platform's core functionality.
• Performance and analytics cookies: these cookies collect anonymised data about how players navigate the Platform, which pages are most visited, and where errors occur. This information is used solely to improve Platform performance and the user experience.
• Preference cookies: these cookies remember your language preference, display settings, and other personalisation choices so that you do not need to reconfigure them each time you visit the Platform.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect your ability to use some features of the rf999 Platform. rf999 does not use third-party advertising cookies or permit ad networks to place tracking cookies on the Platform.

rf999 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply as a general guide: account and identity data is retained for the lifetime of your account and for a minimum of five years following account closure; financial transaction records are retained for a minimum of five years from the date of each transaction; gaming and betting history is retained for a minimum of three years; and customer support communications are retained for a minimum of two years.

Where you request deletion of your personal data, rf999 will action that request as promptly as possible, subject to our legal obligation to retain certain categories of data for compliance and regulatory purposes. Data that rf999 is legally obliged to retain will be kept in a restricted, access-controlled environment and will not be used for any operational purpose during the retention period.

rf999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers, ensuring that your login credentials, personal data, and payment information cannot be intercepted in transit.
• Access controls that restrict access to personal data to only those rf999 staff members and authorised third-party service providers who have a documented need to access such data in the course of their duties.
• Encrypted storage of sensitive data fields, including identity document information and financial records, using industry-standard encryption protocols.
• Regular security assessments and monitoring of our Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

While rf999 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights or freedoms, rf999 will notify you without undue delay and will take immediate steps to contain and remediate the incident.

As an rf999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or at [email protected]:

• Right of access: you have the right to request a copy of the personal data rf999 holds about you, together with information about how it is being used and with whom it has been shared.
• Right of rectification: if any personal data rf999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: you have the right to request that rf999 delete your personal data, subject to our legal retention obligations. Requests for erasure will be reviewed and actioned within 30 days of receipt.
• Right to restriction: you have the right to request that rf999 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its processing.
• Right to data portability: where rf999 processes your data on the basis of your consent or a contract, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.

rf999 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case rf999 will inform you of the extension and the reason for it. rf999 will not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive.

The rf999 Platform is strictly intended for adults aged 21 years and above. rf999 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of the rf999 registration and KYC process. Where rf999 discovers or is notified that personal data belonging to a person under the age of 21 has been collected, rf999 will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on the rf999 Platform or provided personal data to rf999, please contact us immediately at [email protected]. rf999 will investigate and take appropriate action within 48 hours of receiving such a notification.

The rf999 Platform may contain references to third-party game providers whose software is integrated into our Platform under licence. While rf999 takes care to engage reputable providers, rf999 is not responsible for the privacy practices of third-party game studios or payment service providers. Each third party's handling of your data is governed by their own privacy policy. rf999 does not permit third-party providers to use player data obtained through the rf999 Platform for their own marketing or commercial purposes. If you have concerns about how a specific provider handles your data, please contact rf999 support and we will investigate on your behalf.

rf999 may update or revise this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the features and services offered on the Platform. The date on which this Policy was most recently updated is displayed at the top of this page. We encourage you to review this Policy periodically so that you remain informed about how rf999 handles your personal data.

Where a change to this Policy is material — for example, where we propose to use your data for a new purpose that was not disclosed when it was originally collected — rf999 will notify you via the mobile number or email address associated with your account before the change takes effect. If you do not accept the revised Policy, you may close your account by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rf999 handles your personal data, please contact us via live chat on the Platform, which is available 24 hours a day, 7 days a week. Our support team will direct your query to the appropriate person and ensure you receive a response within the timeframes set out in Section 9 of this Policy.

For written data-related enquiries, you may also email us at [email protected]. Please include your registered mobile number and a clear description of your request so that we can verify your identity and process your request efficiently. Do not include your full password or full payment credentials in any email communication.