rk44 Privacy Policy — How We Protect Your Personal Data

rk44 ("we", "us", "the Platform") is Bangladesh's leading online betting and casino platform, offering cricket betting, live casino games, slots, crash games, and fishing titles. We take the privacy and security of every player's personal data extremely seriously.

This Privacy Policy describes how rk44 collects, uses, stores, and protects personal data submitted by users in connection with their use of the rk44 platform. It also describes the rights you hold over your personal data and how you may exercise those rights.

This Privacy Policy is incorporated by reference into the rk44 Terms & Conditions and forms part of the complete agreement between each registered player and the rk44 platform. Defined terms used in this policy have the same meaning as in the Terms & Conditions unless otherwise stated here.

This policy was last updated on 1 January 2026. The current version supersedes all prior versions of the rk44 Privacy Policy.

For the purposes of applicable data protection law, rk44 acts as the data controller in respect of all personal data collected through the rk44 platform. As data controller, rk44 determines the purposes and means of processing your personal data.

Where rk44 engages third-party service providers (such as payment processors, KYC verification providers, or cloud infrastructure providers) who process personal data on rk44's behalf, those parties act as data processors and are bound by contractual obligations that require them to handle your data strictly in accordance with rk44's instructions and this Privacy Policy.

All data protection enquiries and rights requests should be directed to the rk44 support team. Contact details are provided in Section 15 of this policy.

rk44 collects several categories of personal data depending on the nature of your interaction with the platform. The following table summarises what we collect and why.

rk44 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers, except where identity documents submitted for KYC incidentally contain such information, in which case that information is not extracted or processed separately.

rk44 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in promotions, or update your profile settings.
• Automatically through the platform: Technical and usage data is collected automatically via server logs, session tracking, and analytics tools when you access and interact with the rk44 website or mobile-optimised platform.
• From third-party verification providers: Where you submit identity documents for KYC, our verification partner returns a verification result and document validity status to rk44. The raw document images are processed by the verification partner under their own privacy controls.
• From payment processors: Transaction confirmation data, including transaction reference numbers and payment status, is received from bKash, Nagad, Rocket, Upay, and card payment processors when you make deposits or request withdrawals.
• From fraud and risk detection systems: Device fingerprint data and behavioural signals may be assessed by our risk management systems to detect account takeover, multi-accounting, or suspicious betting patterns.

rk44 uses personal data for the following purposes. We only use your data for a purpose that is compatible with the reason it was originally collected.

• Creating and maintaining your rk44 account, and verifying your identity and age in accordance with the platform's 21+ policy.
• Processing deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer).
• Delivering the gaming and betting services you request, including settling bets, crediting winnings, and applying bonuses and promotions.
• Communicating with you about your account, including transaction notifications, security alerts, and responses to support requests.
• Conducting anti-money laundering (AML), Know Your Customer (KYC), and counter-fraud checks as required by applicable law and our internal compliance policies.
• Monitoring gameplay for signs of problem gambling and, where appropriate, applying responsible gaming tools or initiating contact with the player.
• Improving platform performance, fixing bugs, and developing new features based on aggregated usage analytics.
• Sending you promotional communications about rk44 offers, bonuses, and tournaments — but only where you have not opted out of such communications. You may unsubscribe at any time.
• Resolving disputes, enforcing the Terms & Conditions, and responding to legal or regulatory requests.

rk44 processes personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between rk44 and the registered player — for example, processing deposits, delivering game outcomes, and settling withdrawals.
• Legal obligation: Processing is required to comply with legal obligations applicable to rk44, including AML regulations, KYC requirements, and financial record-keeping obligations.
• Legitimate interests: Processing is necessary for rk44's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and product improvement, provided these interests are not overridden by your rights.
• Consent: Where rk44 relies on your consent (for example, for sending promotional emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

rk44 does not sell your personal data to any third party. We may share your data with the following categories of recipient, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners receive transaction-related data strictly as required to execute deposits and withdrawals.
• Identity verification providers: Our KYC partner receives identity document data solely for the purpose of verifying your identity and age as required under our compliance obligations.
• Game content providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymous player identifier and game session data required to run their games within the rk44 platform.
• Cloud and infrastructure providers: rk44 uses trusted cloud hosting and database services to store and process platform data. These providers act as data processors bound by contractual data protection obligations.
• Fraud and risk management services: Anonymised or pseudonymised technical data may be shared with fraud detection systems to identify suspicious activity across the platform.
• Legal and regulatory authorities: rk44 will disclose personal data to law enforcement, financial intelligence units, or regulatory bodies when required to do so by a valid legal obligation, court order, or regulatory instruction. rk44 will notify the affected player of any such disclosure where permitted by law to do so.
• Business succession: In the event of a merger, acquisition, or sale of all or part of rk44's business, personal data held by rk44 may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this policy.

rk44 primarily stores and processes player data on servers located in Asia. Some of our third-party service providers (including certain cloud infrastructure and analytics providers) may process data in countries outside Bangladesh.

Where personal data is transferred outside Bangladesh, rk44 takes appropriate steps to ensure an adequate level of protection is in place, including:

• Using contractual clauses with the recipient that require them to protect the data to the same standard as rk44 is required to under this Privacy Policy.
• Transferring data only to recipients operating in jurisdictions that provide adequate data protection standards.
• Ensuring that any transfer is limited to the minimum data necessary for the specific purpose of the transfer.

By using the rk44 platform, you acknowledge that your data may be transferred to, stored, and processed in countries outside Bangladesh in accordance with the safeguards described above.

rk44 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following permanent account closure, to satisfy financial record-keeping and AML compliance requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 7 years from the date of the transaction, as required by financial regulations.
• KYC documentation: Identity verification documents are retained for a minimum of 5 years after the termination of the business relationship between rk44 and the player.
• Support and complaints records: Communications related to formal complaints are retained for 3 years from the date of resolution.
• Technical and usage data: Server logs and usage analytics are retained for up to 12 months and are then anonymised or deleted.
• Marketing consent records: Records of your consent or opt-out from marketing communications are retained for as long as the consent or preference remains relevant and for 3 years thereafter.

Once the applicable retention period expires, rk44 securely deletes or irreversibly anonymises the relevant personal data so that it can no longer be linked to you as an individual.

rk44 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and rk44 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage for sensitive fields including financial data, identity document references, and authentication credentials. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Role-based access controls that limit access to personal data to only those rk44 staff and systems with a documented, legitimate need. Access logs are maintained and reviewed regularly.
• Multi-factor authentication (MFA) available to all registered players and required for all rk44 administrative access accounts.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Automated fraud and anomaly detection systems that monitor platform activity in real time and flag suspicious account behaviour for investigation.
• Data breach response procedures: In the event of a personal data breach that poses a risk to affected individuals, rk44 will notify impacted players and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.

While rk44 takes all reasonable steps to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. Please notify rk44 support immediately if you suspect your account has been compromised.

As a user of the rk44 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact rk44 support with your identity verification so we can process your request securely.

rk44 will acknowledge all data rights requests within 48 hours and will provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, rk44 may extend this period by a further 30 days with prior notice. rk44 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive.

rk44 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how the platform is used. The following categories of cookies are used:

• Essential cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, store security tokens, and enable the platform to remember your preferences during a session. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: rk44 uses anonymised analytics to understand aggregated usage patterns — for example, which pages are most visited, where users encounter errors, and how long sessions last. This data helps us improve the platform. Individual users are not identifiable from analytics data.
• Security cookies: Cookies used to detect and prevent fraudulent activity, including cross-site request forgery (CSRF) protection tokens and device fingerprinting for account security.
• Preference cookies: These cookies remember your platform preferences such as display settings and notification choices, so you do not need to reconfigure them on every visit.

rk44 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from logging in or using key platform features.

The rk44 platform is strictly for adults aged 21 and above. rk44 does not knowingly collect personal data from individuals under the age of 21. 21+

During registration, all users are required to confirm that they are at least 21 years old. rk44 reserves the right to request age verification documentation at any time. If rk44 discovers that personal data has been submitted by or on behalf of a person under 21, the following actions will be taken immediately:

• The associated account will be suspended and all access to the platform will be blocked.
• Any personal data collected in connection with the underage account will be securely deleted from rk44's systems, except where retention is required by law for fraud investigation or AML compliance purposes.
• Any deposits made to the account will be returned to the originating payment method after identity verification of the account holder.
• The incident will be reviewed by rk44's compliance team to determine whether any regulatory reporting obligation is triggered.

If you believe a minor has registered on rk44, please report this immediately to rk44 support at [email protected] so that we can investigate and act without delay.

rk44 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, the services we offer, or the third-party providers we work with. When we make changes to this policy:

• The revised policy will be published on this page at rk44.io/privacy-policy with an updated effective date at the top of the document.
• For material changes that significantly affect how we use your personal data or the rights available to you, rk44 will provide advance notice by displaying a prominent notification upon your next login before the changes take effect.
• Where required by law, rk44 will seek fresh consent from registered players before applying material changes to the way we process their personal data.
• Your continued use of the rk44 platform after any changes to this Privacy Policy take effect constitutes your acknowledgement of the updated policy. If you do not agree to a revised policy, you may close your account under the procedure described in the Terms & Conditions.

We encourage you to review this Privacy Policy periodically so that you remain informed about how rk44 protects your personal data. The date at the top of this policy always reflects when it was last revised.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how rk44 handles your personal data, please contact our support team:

• Email: [email protected] — please include "Privacy Request" or "Data Rights" in your subject line so your message is routed to the correct team promptly.
• Response time: rk44 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days of receipt.
• Identity verification: To protect your data, rk44 will ask you to verify your identity before processing any data rights request. This typically involves confirming your registered email address and one additional identity factor.

If you are not satisfied with rk44's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. rk44 is committed to co-operating with such authorities in good faith to resolve any privacy disputes.

rk44 takes all privacy complaints seriously and will investigate every concern thoroughly and impartially. We are committed to resolving privacy disputes fairly and in a timely manner.