Privacy Policy — How rr444 Collects, Uses & Protects Your Personal Data

1. Introduction

rr444 is committed to protecting the privacy and security of all personal data entrusted to us by our players. This Privacy Policy sets out in clear and transparent terms how rr444 collects, receives, uses, stores, transfers, and otherwise processes personal data in connection with your use of the rr444 platform.

rr444 operates as Bangladesh's leading online casino and sports betting platform, offering cricket betting, live casino games, slots, and instant BDT payment processing via bKash, Nagad, Rocket, and Upay. In the course of providing these services, rr444 necessarily collects and processes certain categories of personal data to enable account management, payment processing, identity verification, fraud prevention, and service improvement.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between those documents and this Privacy Policy in respect of data processing matters, this Privacy Policy shall prevail.

If you have any questions about this Privacy Policy or about how rr444 handles your personal data, please contact our Data Support team at [email protected] before using the platform.

2. Personal Data We Collect

rr444 collects the following categories of personal data from players. We have structured this information in a transparent table format so you can quickly understand exactly what we hold and why.

Data Category	Specific Data Points	Collection Trigger
Identity Data	Full legal name, date of birth, gender, NID/passport/driver's licence number, NID scan or photograph	Account registration; KYC verification request
Contact Data	Mobile phone number (Bangladesh), email address, city/district of residence	Account registration; profile update
Financial Data	Mobile wallet number (bKash, Nagad, Rocket, Upay), card last-four digits (Visa/Mastercard), transaction history, deposit and withdrawal amounts in BDT	Deposit or withdrawal request; KYC financial verification
Account Data	Username, encrypted password hash, account balance, bonus history, wagering history, session history, communication preferences	Account creation and ongoing platform use
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, time zone (BST UTC+6 assumed), referring URL	Every platform session (collected automatically)
Usage Data	Pages visited, games played, betting markets accessed, session duration, click-path data, in-app search queries	Every platform session (collected automatically)
Communications Data	Live chat transcripts, email correspondence content, WhatsApp support message content, survey responses, complaint records	Any support interaction or feedback submission
Marketing Preferences	Opted-in promotional categories, preferred communication channel (email/SMS/WhatsApp), notification preferences	Account settings; opt-in/opt-out actions

2.1 Special Category Data

rr444 does not intentionally collect any special category personal data (also known as sensitive personal data) — including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, or data concerning sexual orientation — unless you voluntarily disclose such information in the course of a support interaction. Any such information received inadvertently will be deleted promptly and will not be processed by rr444.

The one exception relates to self-exclusion and responsible gaming requests: if a player voluntarily informs rr444 that they are seeking support for problem gambling, rr444 may record this disclosure solely for the purpose of applying appropriate account restrictions in accordance with our Responsible Gaming Policy. This data is treated with the highest level of confidentiality and is not shared with third parties except where required by law.

3. How We Collect Your Data

rr444 collects personal data through the following channels and mechanisms:

• Direct collection: Data you actively provide during account registration, KYC document upload, deposit/withdrawal requests, support interactions, and survey participation.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, pixel tags, and similar tracking technologies each time you access the rr444 platform. See Section 7 for full cookie details.
• Payment processor data: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card payment processors when you initiate a deposit or withdrawal. rr444 does not receive or store full card numbers — only the last four digits and card type are retained for reference.
• Third-party identity verification: Where rr444 uses a third-party KYC or identity verification service, that provider may return identity match scores or document verification results to rr444. rr444 does not retain the raw identity documents on its own systems beyond the period necessary to complete the KYC review.
• Publicly available sources: In limited fraud investigation circumstances, rr444 may cross-reference information against publicly available records. This is done on a case-by-case basis and only where rr444 has a legitimate interest in doing so.

4. How We Use Your Personal Data

rr444 uses the personal data it collects for the following purposes. Each purpose is linked to a lawful basis for processing, as described further in Section 5.

• Account creation and management: To register your account, authenticate your identity at login, maintain your account balance and transaction history, and provide you with access to the rr444 platform's games and betting services.
• Payment processing: To process BDT deposits and withdrawals via your registered payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), to reconcile transactions, and to resolve disputed or failed transactions.
• Identity verification (KYC): To verify that you are who you say you are, that you meet the minimum age requirement of 21 years, and that you are not subject to any sanctions or financial crime watch-lists.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple account registration, and any other prohibited conduct described in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply account restrictions (deposit limits, cooling-off periods, self-exclusion) where requested by the player or required by our policies.
• Customer support: To respond to your support queries, resolve complaints, and maintain records of our interactions with you for quality assurance and compliance purposes.
• Marketing communications: To send you promotional offers, bonus notifications, new game announcements, and seasonal promotions (e.g., BPL cricket season, Eid special offers, Pohela Boishakh promotions) — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyse aggregated usage data, identify technical issues, test new features, and improve the overall quality and performance of the rr444 platform.
• Legal compliance: To comply with applicable anti-money laundering (AML) obligations, tax reporting requirements, and any other legal obligations to which rr444 is subject.

5. Legal Basis for Processing

rr444 processes personal data under one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account management, payment processing, and game service delivery. Without this processing, rr444 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC/AML requirements and record-keeping duties.
• Legitimate interests: Processing carried out for rr444's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — most notably for marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Third Parties

6.1 Categories of Third-Party Recipients

rr444 does not sell, rent, or trade personal data. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks (Visa/Mastercard) receive transaction data necessary to process your deposits and withdrawals. These providers operate their own privacy policies governing their data handling.
• KYC and identity verification providers: Third-party identity verification services receive identity document data to facilitate the KYC process. These providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Game content providers: Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers and game stake/outcome data sufficient to operate their game engines on the rr444 platform. These providers do not receive your full identity or contact data.
• IT infrastructure and hosting providers: Cloud hosting, content delivery, and IT security providers who process personal data on rr444's behalf under data processing agreements that require them to implement appropriate security measures and process data only on rr444's documented instructions.
• Legal and regulatory authorities: rr444 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other governmental bodies where required by applicable law or court order. rr444 will notify affected players of such disclosures where legally permitted to do so.
• Professional advisors: Lawyers, auditors, and accountants who require access to personal data in the course of providing professional services to rr444 and who are bound by duties of confidentiality.

6.2 International Data Transfers

Some of rr444's third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, rr444 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to ensure that your personal data receives an equivalent level of protection wherever it is processed.

7. Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. rr444 uses cookies and similar tracking technologies (including pixel tags and local storage) to enable core platform functionality, remember your preferences, maintain your login session, and gather aggregated analytics data about platform usage.

7.2 Types of Cookies Used by rr444

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your account preferences, enable secure page transitions, prevent CSRF attacks	Session / up to 24 hours
Functional	Remember game lobby filter settings, preferred language (English), notification preferences, recently played games list	Up to 90 days
Analytics	Aggregated page-view and session data used to measure platform performance, identify technical issues, and improve user experience. Data is anonymised before analysis.	Up to 12 months
Security	Device fingerprinting and anomaly detection to identify unusual login patterns, detect bot activity, and prevent fraudulent account access	Up to 30 days

7.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your rr444 account and using core platform features. Disabling analytics cookies will not affect your ability to use the platform. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser vendor.

8. Data Retention

rr444 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of the account's active status plus a minimum of 5 years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years following the completion of the KYC verification process or following account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years following the date of each transaction, in compliance with financial record-keeping obligations.
• Support communications: Retained for 3 years following the closure of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing preferences: Retained until you withdraw consent or update your preferences, plus 90 days to allow for processing of opt-out requests across all communication systems.
• Technical and usage data (logs): Server access logs retained for 90 days; anonymised aggregated analytics data retained indefinitely.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it can no longer be attributed to an identified or identifiable individual.

9. Your Privacy Rights

As a player on the rr444 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact rr444 at [email protected] with your registered mobile number and a clear description of your request. rr444 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data rr444 holds about you, along with information about how it is being processed. This is sometimes called a "Subject Access Request" (SAR).
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by rr444. You can update most account information directly within your account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other lawful basis applies. Please note that this right may be limited by legal retention obligations (see Section 8).
• Right to Restrict Processing: You have the right to request that rr444 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, pending rr444's verification of the accuracy.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV) and to transmit that data to another controller.
• Right to Object: You have the right to object to processing based on rr444's legitimate interests. rr444 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (most notably for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. You can opt out of marketing communications via the notification preferences section in your account settings or by replying STOP to any SMS received from rr444.

10. Data Security

rr444 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes the following controls:

• Encryption in transit: All data transmitted between your device and the rr444 platform is encrypted using TLS 1.2 or higher (256-bit SSL). All rr444.io pages are served exclusively over HTTPS.
• Encryption at rest: Sensitive personal data and financial records stored in rr444's databases are encrypted at rest using AES-256 encryption.
• Password security: Account passwords are stored using a modern, salted, one-way cryptographic hash function. rr444 staff cannot view your password in plain text. If you forget your password, a reset link will be issued to your registered email or mobile number — you will never be asked to reveal your password to a support agent.
• Access controls: Access to personal data within rr444's internal systems is restricted on a strict need-to-know basis. Staff with access to player personal data are subject to confidentiality obligations and regular data protection training.
• Intrusion detection: rr444 operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time.
• Penetration testing: rr444's platform undergoes periodic security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, rr444 will notify affected players without undue delay and will take all reasonable steps to contain the breach and prevent recurrence.

While rr444 takes extensive measures to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account secure — always use a strong, unique password for your rr444 account, never share your login credentials with anyone, and contact rr444 support immediately if you suspect unauthorised access to your account.

11. Children's Privacy

The rr444 platform is strictly intended for adults aged 21 years and above. rr444 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the rr444 platform, register an account, or provide any personal data to rr444.

If rr444 discovers or has reason to believe that it has inadvertently collected personal data from an individual under the age of 21, it will immediately suspend the relevant account, delete the personal data in question, and return any deposits made, in accordance with its underage gambling prevention procedures.

Parents and guardians who believe that their child may have registered an rr444 account should contact rr444 immediately at [email protected] so that the matter can be investigated and resolved promptly.

12. Changes to This Privacy Policy

rr444 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, rr444 will notify registered players via email or through an in-platform notification at least 7 days before the amended Privacy Policy takes effect. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

We encourage all players to review this Privacy Policy periodically to stay informed about how rr444 protects their personal data. Your continued use of the rr444 platform after the effective date of an amended Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

Archived versions of previous Privacy Policy versions are available on request by contacting rr444 support at [email protected].

13. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which rr444 processes your personal data, please reach out to the rr444 Data Support team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the rr444 platform
• WhatsApp: +880 1700 000444
• Support Hours: Live Chat & In-App Messaging 24/7; Email & WhatsApp 08:00 – 00:00 BST (UTC+6)

rr444 aims to acknowledge all privacy-related written requests within 24 hours and to provide a substantive response within 30 days of receipt of all information necessary to process the request. Where a request is particularly complex or where rr444 receives a large volume of requests simultaneously, the response period may be extended by a further 60 days, in which case rr444 will notify you of the extension and the reasons for it within the initial 30-day period.

If you are not satisfied with rr444's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.