rv999 Privacy Policy —
How We Handle Your Personal Data

When you use the rv999 platform, we collect personal data in three primary ways: information you provide directly, information generated automatically through your use of the platform, and information obtained from trusted third-party partners as part of identity and payment verification processes.

The table below summarises the categories of personal data that rv999 collects, the specific data points within each category, and the primary reason for collection.

We collect data about minors only in the context of identifying and closing accounts belonging to under-18 users. We do not knowingly retain any personal data of individuals who are found to be under the age of 18, beyond what is required to document the account closure.

rv999 processes your personal data only where we have a lawful basis for doing so. The lawful bases we rely on are: performance of a contract (providing the rv999 service to you), compliance with a legal obligation, protection of our legitimate business interests, and — in limited cases — your explicit consent.

The specific ways in which rv999 uses your personal data include:

• Account management: Creating and maintaining your rv999 player account, verifying your identity at registration and through ongoing KYC checks, and communicating with you about your account status.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; reconciling transaction records; and investigating payment disputes.
• Security and fraud prevention: Monitoring login activity, detecting suspicious betting patterns, preventing account takeovers, and identifying potential money laundering activity.
• Responsible gaming: Monitoring account activity for signs of problem gambling, enforcing deposit limits and self-exclusion requests, and providing access to responsible gaming support resources.
• Customer support: Responding to your queries, resolving complaints, and maintaining records of our interactions to ensure consistent service quality.
• Service improvement: Analysing aggregated, anonymised usage data to understand how players interact with the rv999 platform, improve game offerings, and enhance the user experience for players across Bangladesh — from Dhaka and Chittagong to Sylhet and Rajshahi.
• Legal compliance: Meeting our obligations under applicable anti-money-laundering regulations and responding to lawful requests from competent authorities.
• Marketing communications: Sending you information about relevant promotions, seasonal offers (such as Eid bonuses or BPL season promotions), and platform updates — but only where you have opted in to receive such communications.

rv999 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle it securely and in accordance with this Privacy Policy.

• Payment service providers: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard in order to process your deposits and withdrawals. These providers operate their own data protection policies and are independently responsible for the security of data within their own systems.
• Identity verification partners: To perform KYC checks, rv999 may share identity documents and personal details with accredited verification service providers. These partners process data strictly on our instructions and may not use it for any other purpose.
• Game content providers: When you play games delivered by third-party studios such as Pragmatic Play, Evolution Gaming, PG Soft, or Ezugi, certain technical data (such as your session token, device type, and game activity) is transmitted to that studio's servers to render the game. These studios are licensed providers subject to their own compliance obligations.
• Legal and regulatory authorities: rv999 will disclose personal data to competent governmental or law enforcement authorities when required to do so by law, or when we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other illegal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of rv999's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

rv999 requires all third parties who receive your personal data to maintain appropriate technical and organisational security measures and to use the data solely for the purpose for which it was shared. We do not permit third parties to use your data for their own marketing purposes.

rv999 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the platform, remember your preferences, and understand how players interact with our website. This section explains what cookies we use and why.

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, to notify you when a cookie is set, or to delete cookies after each browsing session. Please note that disabling cookies beyond the performance and analytics categories may impair the functionality of the rv999 platform, including your ability to log in and place bets.

rv999 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, taking into account our legal obligations and the legitimate interests of both the platform and our players.

• Active accounts: We retain all account data for the full duration of your active player relationship with rv999, plus a period of five years following account closure. This retention period is required to meet anti-money-laundering record-keeping obligations.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven years from the date of the transaction, in line with applicable financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for five years from the date of submission, or five years after account closure, whichever is later.
• Support communications: Customer support chat transcripts and email correspondence are retained for three years from the date of the interaction.
• Technical and log data: IP address logs, device fingerprints, and security event logs are retained for 12 months from the date of collection, after which they are automatically deleted.
• Marketing preferences: Records of your marketing opt-in or opt-out status are retained for the lifetime of your account to ensure we respect your communication preferences.

When personal data reaches the end of its retention period, rv999 securely destroys or permanently anonymises it so that it can no longer be linked to any individual. Anonymised aggregate data (such as platform-wide game popularity statistics) may be retained indefinitely for business analysis purposes.

rv999 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no digital platform can guarantee absolute security, we invest continuously in maintaining industry-standard safeguards.

• Encryption in transit: All data transmitted between your browser or mobile device and rv999's servers is encrypted using TLS 1.2 or higher, with 256-bit AES encryption applied to sensitive data fields.
• Encryption at rest: Personal data stored in rv999's databases — including financial records and identity documents — is encrypted at rest using AES-256. Encryption keys are managed separately from the data they protect.
• Access controls: Internal access to personal data is governed by role-based access controls. Staff members are granted access only to the data required for their specific duties. All access events are logged and reviewed.
• Two-factor authentication: rv999 supports and strongly encourages the use of two-factor authentication (2FA) on all player accounts, providing an additional layer of protection beyond your password.
• Penetration testing: The rv999 platform undergoes regular security testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: rv999 maintains a documented data breach response plan. In the event of a confirmed breach that poses a risk to your rights, we will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

As a player on the rv999 platform, you hold a set of rights in relation to your personal data. rv999 is committed to honouring these rights and to responding to all verified data subject requests within 30 calendar days of receipt.

To exercise any of the rights listed above, please contact our support team in writing at [email protected]. Include your full name, the email address registered to your rv999 account, and a clear description of the right you wish to exercise. We may ask you to verify your identity before acting on your request, to ensure that data is not disclosed to or deleted at the request of an unauthorised third party.

rv999 reviews this Privacy Policy periodically and updates it when necessary to reflect changes in our data practices, changes in applicable law, or feedback from our player community. The effective date at the top of this page indicates when the current version was last revised.

When we make material changes to this Privacy Policy — changes that affect how we collect, use, or share your personal data in ways that are meaningfully different from the previous version — we will notify active players via the email address registered to their rv999 account at least 14 days before the changes take effect. For minor, clarificatory, or administrative changes, we will update this page and revise the effective date without sending a separate notification.

Your continued use of the rv999 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this Policy, you should cease using the platform and may request deletion of your account by contacting [email protected].

All previous versions of this Privacy Policy are archived internally and can be made available upon written request. If you have questions about any aspect of this Policy, or if you wish to understand how a specific change affects your rights, our support team is available to assist on Bangladesh Standard Time (BST, UTC+6) at [email protected].

This Privacy Policy is provided in English. It forms part of the broader legal framework governing your use of rv999, alongside the Terms & Conditions and Responsible Gaming Policy. In the event of any inconsistency between this Privacy Policy and another rv999 document on the specific subject of personal data, this Privacy Policy takes precedence.