rt99 Privacy Policy

1 Introduction

rt99 ("we", "us", "our", "the Platform") is an online sports betting and casino entertainment platform operating primarily for players based in Bangladesh. We are fully committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out, in plain and precise English, what personal information we collect, the purposes for which we process it, with whom we share it, how long we retain it, and the rights available to you as a data subject.

This Policy applies to all data processing activities carried out by rt99 in connection with the provision of its Service, including account registration, identity verification (KYC), deposit and withdrawal transactions, customer support interactions, marketing communications, and technical platform operations. It covers data collected through the rt99 website, any mobile web interface, and any official rt99 communication channels such as email and SMS.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with rt99 as a registered player.

2 Data Controller

For the purposes of this Privacy Policy, rt99 acts as the data controller in respect of all personal data collected from players and website visitors. As data controller, rt99 determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data-related queries, access requests, correction requests, deletion requests, and formal complaints should be directed to the rt99 data protection contact at [email protected]. Please include "Data Privacy Request" in the subject line of your email to ensure your message is routed to the appropriate team member without delay.

3 What Personal Data We Collect

The categories of personal data rt99 collects depend on the nature of your interaction with the platform. The following table summarises each data category, the specific types of data involved, and the stage at which collection typically occurs:

rt99 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data) unless a player voluntarily discloses such information in a support communication, in which case it is handled with heightened confidentiality and is not stored beyond the duration of the relevant support case.

4 How We Collect Your Data

rt99 collects personal data through the following channels and mechanisms:

• Direct collection: Data you provide voluntarily when completing the registration form, submitting KYC documents, initiating a deposit or withdrawal, or contacting customer support.
• Automated technical collection: Data gathered automatically when you access the platform, including IP address, device fingerprint, browser settings, session duration, and navigation behaviour via server logs and analytics tools.
• Cookie and tracking technologies: Cookies, local storage, and similar technologies placed on your device when you visit rt99.today. See Section 11 for full details of our cookie usage.
• Third-party verification providers: Identity verification and anti-fraud data returned by our KYC partners when we submit your documents for verification. We receive a verification result and any flags raised — we do not receive raw biometric data from these providers.
• Payment gateway partners: Transaction status confirmations and reference numbers provided by bKash, Nagad, Rocket, Upay, and card payment processors when you make a deposit or withdrawal.

5 Why We Use Your Personal Data

rt99 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, and maintain accurate account records throughout your relationship with the platform.
• Identity verification (KYC/AML): To verify that you meet the minimum age requirement of 18 years, to confirm your identity in accordance with anti-money laundering obligations, and to prevent fraud.
• Payment processing: To process deposits and withdrawals securely via your chosen MFS provider (bKash, Nagad, Rocket, Upay) or card payment method, and to maintain an accurate transaction history.
• Platform personalisation: To tailor game recommendations, promotional offers, and platform content to your preferences and betting history, where you have consented to personalised communications.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour and to administer self-imposed deposit limits, cooling-off periods, or self-exclusion requests.
• Customer support: To respond to queries, resolve disputes, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Security and fraud prevention: To monitor for suspicious activity, detect duplicate accounts, identify unauthorised access attempts, and investigate potential breaches of our Terms & Conditions.
• Legal and regulatory compliance: To meet our obligations under applicable record-keeping, anti-money laundering, and financial crime reporting requirements.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have opted in to such communications.
• Platform improvement: To analyse aggregated and anonymised usage data for the purposes of improving platform performance, user experience, and game content offerings.

6 Legal Basis for Processing

rt99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between rt99 and you as a registered player — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and record-keeping requirements.
• Legitimate interests: Processing carried out in pursuit of rt99's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and aggregate analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 How We Share Your Data

rt99 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateway partners receive the minimum transaction data required to process your deposits and withdrawals. These partners are contractually prohibited from using your data for any purpose other than payment processing.
• Identity verification providers: KYC and AML compliance partners receive copies of the identity documents you submit for verification. These providers operate under strict data processing agreements and certified security standards.
• Game content providers: Where you play games powered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), a session token and anonymised player identifier are shared with the game server for the duration of your session. These providers do not receive your full name, contact details, or financial data.
• Cloud hosting and infrastructure providers: rt99's platform operates on cloud infrastructure managed by certified providers. These providers process data only according to rt99's instructions and are bound by strict confidentiality obligations.
• Legal authorities: rt99 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by a valid legal order, court order, or mandatory reporting obligation. Where legally permitted, rt99 will notify you before making such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of rt99's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms that will govern your data under the new entity.

8 International Data Transfers

Some of rt99's third-party service providers — including cloud infrastructure partners, game content servers, and KYC verification platforms — may process your data on servers located outside of Bangladesh. Where such international transfers occur, rt99 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that which it would receive within Bangladesh.

Safeguards employed for international transfers include contractual data processing agreements incorporating standard data protection clauses, requirements for recipients to maintain technical and organisational security measures equivalent to those employed by rt99, and regular assessments of third-party data handling practices. Data transferred internationally is subject to the same access, correction, and deletion rights as data stored domestically.

9 Data Retention

rt99 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

Upon expiry of the applicable retention period, personal data is either permanently and securely deleted from all rt99 systems, or anonymised such that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

10 Security Measures

rt99 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. These measures include but are not limited to:

• 256-bit TLS/SSL encryption on all data in transit between your device and the rt99 platform.
• AES-256 encryption at rest for all sensitive data stored on rt99 servers, including identity documents and financial records.
• Role-based access controls (RBAC) ensuring that only authorised personnel with a legitimate need can access identifiable player data, and that all such access is logged and auditable.
• Two-factor authentication (2FA) available to all players via SMS OTP, and mandatory for all rt99 staff accessing player data systems.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms.
• Intrusion detection and real-time monitoring of platform infrastructure to identify and respond to security incidents without delay.
• Staff training and confidentiality obligations ensuring all rt99 personnel who handle personal data are trained in data protection best practices and bound by contractual confidentiality obligations.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, rt99 will notify affected individuals as promptly as operationally possible. Notification will include a description of the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures taken or proposed to address the breach.

11 Cookies & Tracking Technologies

rt99 uses cookies and similar tracking technologies on its website to improve your browsing experience, maintain your login session, and collect aggregate analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the platform. These include session authentication cookies that keep you logged in as you navigate between pages, and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as preferred language, display settings, and notification preferences so that you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised and aggregated data about how visitors use the rt99 platform — for example, which pages are visited most frequently and where users encounter errors. This data is used solely to improve platform performance and does not identify individual users.
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain the state of your current session (e.g., your active bet slip or game state).

rt99 does not use third-party advertising cookies or behavioural tracking cookies that share your browsing data with external advertisers. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your rt99 account. Disabling analytics cookies will not affect your ability to use the platform.

12 Your Data Rights

As a data subject whose personal data is processed by rt99, you hold the following rights. These rights may be exercised at any time by contacting us at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of all personal data rt99 holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of receiving your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to erasure ("right to be forgotten"): You may request that rt99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to legal retention obligations that may require rt99 to retain certain data regardless of your request.
• Right to restriction of processing: You may request that rt99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and a determination is pending.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that rt99 provide your personal data in a portable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, and to object at any time to the processing of your personal data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal date.

13 Children's Privacy

The rt99 platform is strictly intended for adults aged 18 years and above. rt99 does not knowingly collect, process, or store personal data belonging to individuals under the age of 18. The registration process includes an age declaration requirement, and rt99 conducts age verification as part of its standard KYC procedure.

If rt99 becomes aware that personal data has been collected from a minor — whether through a misrepresentation of age during registration or any other means — that data will be deleted immediately, the associated account will be permanently closed, and any balances will be refunded to the originating payment method after verification. If you believe that a minor has registered on the rt99 platform, please notify us immediately at [email protected].

14 Changes to This Privacy Policy

rt99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. Where changes are material — meaning they significantly affect how your personal data is used or your rights as a data subject — rt99 will notify registered players by email at least 14 days before the changes take effect. For non-material changes, the updated Policy will be published on this page with a revised "Last Updated" date, and your continued use of the platform after the publication date will constitute acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how rt99 protects your data. The version of the Policy currently published at rt99.today/privacy-policy supersedes all prior versions. Archived versions of previous policies are available upon written request to [email protected].

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data rt99 holds about you, please contact our data protection team using the details below. We aim to acknowledge all enquiries within 2 business days and to provide a full response within 30 calendar days.