Privacy Policy — How rf77 Collects, Uses, and Protects Your Personal Data
rf77 is committed to protecting the privacy and personal data of every player who uses the platform. This Privacy Policy explains in clear, formal terms what personal information we collect, why we collect it, how it is used, who it may be shared with, and what rights you have over your data as an rf77 account holder in Bangladesh.
Secure Data Storage
All personal data collected by rf77 is stored on encrypted servers using industry-standard security protocols. No sensitive credential is ever held in plain text. Access to stored data is strictly limited to authorised personnel with a legitimate operational need.
Your Rights, Your Control
rf77 respects your right to access, correct, and request deletion of personal data we hold about you. You can exercise these rights at any time by contacting our support team. We aim to respond to all valid data rights requests within a reasonable timeframe.
No Data Selling
rf77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data is shared only where strictly necessary for platform operations, regulatory compliance, or where you have given explicit consent.
SSL Encryption
Every connection between your device and the rf77 platform is protected by SSL/TLS encryption. This ensures that all data transmitted during login, deposit, withdrawal, and account management activities is protected from interception or tampering.
Payment Data Protection
rf77 does not store full payment credentials such as complete bKash wallet numbers or bank card details on its own servers. Payment data is handled exclusively by our certified payment processing partners, including bKash, Nagad, and Rocket, under their own security frameworks.
Regulatory Compliance
rf77 maintains data handling practices consistent with internationally recognised data protection standards. Our KYC and AML data obligations mean we retain certain records for defined periods as required, after which data is securely deleted or anonymised.
01 Who We Are
rf77 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at rf77.io and all associated sub-domains. rf77 is the data controller in respect of the personal data of users ("you", "your") who access and use the Platform.
As the data controller, rf77 is responsible for determining the purposes and means by which your personal data is processed. We take this responsibility seriously and have implemented a range of technical, organisational, and procedural measures to ensure that your data is handled securely, lawfully, and with respect for your privacy at all times.
This Privacy Policy applies to all personal data collected and processed in connection with your use of the rf77 platform, including data collected during account registration, identity verification, deposits, withdrawals, gameplay, customer support interactions, and general browsing of the platform. It applies to users accessing the platform from Bangladesh and all other locations where the platform is accessible.
If you have any questions about how rf77 handles your personal data, or if you wish to exercise any of your data rights described in this Policy, please contact our support team at [email protected]. Support is available 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).
02 Personal Data We Collect
rf77 collects personal data that is necessary for the operation of the platform, for compliance with applicable legal and regulatory obligations, and for the provision of a safe, personalised experience for every player. The categories of personal data we collect include, but are not limited to, the following:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number, photograph | Registration & KYC verification |
| Contact Data | Mobile number (bKash/Nagad registered), email address, residential address | Registration & account updates |
| Financial Data | Deposit and withdrawal history, transaction reference numbers, payment method identifiers | Deposits, withdrawals, cashier activity |
| Gaming Data | Game history, bet amounts, wagering records, session duration, bonus usage | Ongoing platform use |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Every platform visit |
| Communication Data | Live chat transcripts, support ticket content, email correspondence with rf77 | Support interactions |
| Preference Data | Favourite games, preferred language, notification settings, responsible gaming limits | Account settings and platform use |
rf77 does not intentionally collect special category data (such as health data, racial or ethnic origin, political opinions, or biometric data) unless this is strictly required for responsible gaming assessments or as otherwise required by law, in which case explicit consent will be sought.
03 How We Collect Your Data
rf77 collects personal data through a variety of methods, all of which are designed to be transparent and proportionate to the legitimate purposes for which the data is required.
- Direct submission: Data you provide directly when completing the registration form, submitting KYC documents, making deposits or withdrawals, filling in support tickets, or updating your account settings.
- Automated collection: Technical data such as IP address, device identifiers, and session data collected automatically when you access the rf77 platform through your browser or mobile device.
- Cookies and similar technologies: Session cookies, persistent cookies, and local storage technologies used to maintain your login session, remember preferences, and support platform analytics. Full details are provided in the Cookies section of this Policy.
- Third-party sources: Identity verification data from KYC service providers; fraud screening data from payment processors; and, where permitted, publicly available data used for AML compliance checks.
- Payment partners: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you make a deposit or request a withdrawal. rf77 receives only the reference and status data necessary to credit or debit your account — full payment credentials are handled by the payment provider.
04 Why We Use Your Personal Data
rf77 processes your personal data only for defined, legitimate purposes. We do not use your data in any manner that is incompatible with the purposes for which it was collected. The primary purposes for which rf77 uses personal data are as follows:
- To create and manage your rf77 account, verify your identity, and maintain the security of your account throughout its lifetime on the platform.
- To process deposits and withdrawals through your chosen payment method — including bKash, Nagad, Rocket, Upay, or connected bank accounts — and to maintain accurate transaction records.
- To deliver the games, sports betting markets, live casino services, and other features of the rf77 platform, personalised where applicable to your preferences and account history.
- To comply with applicable anti-money laundering (AML), Know Your Customer (KYC), and counter-terrorist financing (CTF) legal obligations, including verifying the source of funds for larger transactions.
- To detect, investigate, and prevent fraudulent activity, account abuse, collusion, multi-accounting, and other prohibited activities that would harm the integrity of the platform or other users.
- To provide customer support, respond to your enquiries, and resolve any disputes or technical issues relating to your account or gameplay.
- To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and applying any responsible gaming restrictions you have requested.
- To send you relevant promotional communications and bonus offers where you have opted in to receive such communications. You may withdraw consent for marketing communications at any time via your account settings.
- To analyse platform usage patterns, improve the user experience, optimise platform performance, and develop new features and game offerings that better serve Bangladesh players.
05 Legal Basis for Processing
rf77 processes your personal data on the basis of one or more of the following lawful grounds, depending on the specific processing activity in question:
- Contractual necessity: Processing that is necessary for the performance of the agreement between you and rf77, including account creation, payment processing, and delivery of gaming services.
- Legal obligation: Processing required for rf77 to comply with applicable laws and regulations, including AML, KYC, and financial reporting obligations.
- Legitimate interests: Processing necessary for rf77's legitimate business interests, including fraud prevention, platform security, and improving the user experience, provided these interests are not overridden by your privacy rights.
- Consent: Processing based on your freely given, informed, and specific consent, including marketing communications and optional personalisation features. You may withdraw consent at any time without detriment.
Where rf77 relies on legitimate interests as the basis for processing, we conduct a balancing assessment to ensure that our interests do not unfairly override your fundamental privacy rights. If you have questions about any specific processing activity and its legal basis, please contact our support team.
06 Data Sharing and Third Parties
rf77 does not sell, rent, or trade your personal data to third parties. We may share your personal data with third parties only in the following specific circumstances, and only to the extent necessary for the stated purpose:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data required to process your deposit or withdrawal transaction. Each payment partner operates under its own privacy and security framework.
- KYC and identity verification providers: Third-party identity verification services may receive copies of your identification documents and photographs to verify your identity on behalf of rf77 as part of the registration and compliance process.
- Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and session token to deliver games to your account. These providers do not receive your full identity or payment data.
- Fraud prevention and AML services: Specialised third-party screening services may process your data to help rf77 detect suspicious activity, prevent fraud, and fulfil its AML and CTF obligations.
- Regulatory and law enforcement authorities: rf77 may be required by law to disclose personal data to competent regulatory, tax, or law enforcement authorities. Such disclosures are made only to the extent legally required and, where permitted, rf77 will notify you of the disclosure.
- Business transfers: In the event of a merger, acquisition, restructuring, or sale of rf77's business or assets, your personal data may be transferred to the relevant acquiring entity, subject to the same privacy protections set out in this Policy.
07 Cookies and Tracking Technologies
rf77 uses cookies and similar tracking technologies to operate the platform, maintain user sessions, remember preferences, and analyse how the platform is used. A cookie is a small text file placed on your device by the rf77 platform when you visit. Cookies do not contain executable code and cannot access other data stored on your device beyond what rf77 itself has placed there.
The following categories of cookies are used on the rf77 platform:
- Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens that keep you logged in during your visit. Without these cookies, the platform cannot operate correctly. These cookies cannot be disabled.
- Functional cookies: Remember your preferences and settings — such as your chosen language, game display preferences, and responsible gaming limit configurations — so that you do not need to re-enter them on each visit.
- Analytics cookies: Help rf77 understand how users interact with the platform, including which games are most popular, where users encounter difficulties, and how navigation flows are used. This data is aggregated and does not identify individual users.
- Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns that may indicate an unauthorised access attempt on your account.
You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the rf77 platform, including the ability to maintain your login session or retain your account preferences between visits.
08 Data Retention
rf77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your active account and for any additional period required by applicable law or regulation. The following general retention principles apply:
- Active account data: Retained for the full duration of your registered account with rf77, plus a post-closure period as required by AML and financial record-keeping obligations (typically a minimum of five years following account closure).
- Transaction and financial records: Retained for a minimum of five years from the date of each transaction in accordance with standard AML record-keeping requirements applicable to online gambling platforms.
- KYC and identity verification documents: Retained for the period required by applicable AML legislation, and securely deleted or destroyed thereafter using approved data destruction methods.
- Support communications: Retained for a period sufficient to resolve any outstanding dispute and for quality assurance purposes, typically no longer than three years from the date of the most recent interaction on a given matter.
- Marketing consent records: Retained for as long as the consent remains active and for a reasonable period thereafter to evidence that consent was properly obtained, in the event of any subsequent query or complaint.
Upon expiry of the applicable retention period, personal data is either securely deleted from rf77's systems or anonymised in a manner that prevents re-identification, such that the residual information can no longer be associated with any identifiable individual.
09 Your Data Rights
As an rf77 account holder, you have the following rights in respect of your personal data. rf77 will respond to all valid data rights requests without undue delay and, in any event, within a reasonable timeframe. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity.
Right of Access
You have the right to request a copy of the personal data rf77 holds about you, along with information about how it is being used and who it has been shared with.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data that rf77 holds about you. Some corrections can be made directly via your account settings dashboard.
Right to Erasure
You may request deletion of your personal data. This right is subject to rf77's legal retention obligations; data required for AML or regulatory compliance cannot be deleted before the mandatory retention period expires.
Right to Object
You may object to the processing of your personal data where rf77 relies on legitimate interests as the legal basis. You may also opt out of direct marketing communications at any time via your account settings.
Right to Restriction
You may request that rf77 restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed or while an objection is under review.
Right to Portability
Where processing is based on your consent or on contractual necessity, you may request that rf77 provide your personal data in a structured, machine-readable format for transfer to another service provider.
10 Children and Minors
The rf77 platform is strictly intended for individuals aged 21 and above. rf77 does not knowingly collect personal data from any person under the age of 21. If rf77 discovers or has reasonable grounds to believe that personal data has been collected from a person under the minimum age, that account will be closed immediately, all associated funds will be reviewed, and any personal data pertaining to the underage individual will be deleted from rf77's systems as promptly as possible, subject only to any legal retention obligations that may apply.
rf77 employs age verification checks as part of the registration and KYC process to reduce the risk of underage account creation. Parents or guardians who believe that their child may have accessed or registered on the rf77 platform should contact our support team immediately at [email protected]. rf77 will investigate and act promptly on all such reports.
11 Security Measures
rf77 applies a layered approach to data security, combining technical controls, organisational procedures, and ongoing staff awareness to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:
- SSL/TLS encryption applied to all data transmitted between your device and the rf77 platform, preventing interception during transit.
- Encryption of sensitive data fields — including passwords and identity document content — at rest using industry-standard encryption algorithms.
- Two-factor authentication (2FA) via SMS OTP available to all account holders, adding a second layer of protection to the login process beyond the account password alone.
- Role-based access controls ensuring that rf77 staff can only access personal data that is strictly relevant to their operational role. Access logs are maintained and reviewed regularly.
- Automated fraud detection systems that monitor account activity in real time for patterns indicative of unauthorised access or suspicious behaviour.
- Regular internal security assessments and third-party penetration testing to identify and remediate vulnerabilities in the platform's infrastructure before they can be exploited.
- Secure backup and disaster recovery procedures to ensure the availability and integrity of personal data in the event of a system failure or other unexpected incident.
While rf77 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure: use a strong, unique password for your rf77 account, enable two-factor authentication, and contact our support team immediately if you suspect that your account has been accessed without your authorisation.
12 Policy Updates and Contact
rf77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Where a material change is made to this Policy, rf77 will use reasonable efforts to notify registered users via their registered email address or mobile number prior to the change taking effect. The updated Policy will be published on this page with a revised effective date at the top of the document.
Your continued use of the rf77 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how rf77 protects your personal data. If you do not agree with any change to this Policy, you should cease using the platform and contact our support team to request account closure.
This Privacy Policy should be read alongside the rf77 Terms & Conditions and the rf77 Responsible Gaming Policy, both of which are available on this site. Together, these documents form the complete framework governing your relationship with rf77 and your rights and obligations as a platform user.
Questions About Your Data or Account?
Our support team is available around the clock to answer any privacy-related questions, help you exercise your data rights, or guide you through our responsible gaming tools.
21+ only. Please play responsibly. Gambling involves risk.