rtk99 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

rtk99 ("we", "us", "our") operates the online betting and casino platform accessible at rtk99.io. We are committed to protecting the personal data of our registered players and website visitors in Bangladesh with the highest standards of care, transparency, and security.

This Privacy Policy explains what personal information rtk99 collects when you use our platform, how that information is used and stored, the circumstances under which we may share it with third parties, how long we keep it, and what rights you have in relation to your data. This policy applies to all users of the rtk99 platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team.

By creating an account, making a deposit, or continuing to use the rtk99 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the platform and contact [email protected] to request account closure.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

2.1 Registration Data

When you create an rtk99 account, we collect the following personal information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to confirm you meet the 21+ age requirement).
• Mobile phone number registered in Bangladesh (used as your primary account identifier and for two-factor authentication).
• Email address (used for account communications and verification).
• Residential address in Bangladesh.
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to process withdrawals, we collect:

• A copy of your National Identity Card (NID), passport, or other government-issued identification document.
• Proof of address documentation (where required).
• Evidence of ownership of the payment method associated with your account (e.g., a screenshot showing your bKash, Nagad, or Rocket mobile wallet number matching your registered details).
• A selfie or video verification in cases where our fraud-prevention systems require additional identity confirmation.

2.3 Financial Data

When you make deposits or withdrawal requests, we collect transactional data including:

• Mobile wallet numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used for transactions.
• Deposit amounts, withdrawal amounts, transaction dates, and transaction reference numbers.
• Account balance history for audit and compliance purposes.

rtk99 does not store full card numbers. Card payment data is processed by our certified third-party payment processors and is not retained on rtk99 servers.

2.4 Gameplay and Betting Data

We record all betting and gaming activity on your account, including:

• Bets placed, markets selected, odds accepted, and bet outcomes.
• Casino and slot game sessions, including games played, wagers, and results.
• Bonus credits awarded, wagering progress, and bonus expiry events.
• Responsible gaming settings applied to your account, including deposit limits, cooling-off periods, and self-exclusion status.

2.5 Technical and Device Data

When you access the rtk99 platform, our servers automatically collect certain technical data, including:

• IP address and approximate geolocation data derived from it.
• Device type, operating system, browser type, and version.
• Pages visited, time spent on each page, click-stream data, and referring URLs.
• Session identifiers and authentication tokens.

2.6 Communications Data

When you contact rtk99 customer support via email or live chat, we retain records of those communications, including the content of your messages, the date and time of contact, and any resolution actions taken. This data is used to maintain service quality and to resolve disputes.

rtk99 collects your personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, place a bet, adjust account settings, or contact our support team.
• Automatically: Through cookies, server logs, and similar tracking technologies when you browse or use the rtk99 platform. See Section 7 for full details on our cookies policy.
• From third-party service providers: Our KYC verification partners and payment processors may share data with us as part of the identity verification and transaction processing workflow. We only receive from these partners the data necessary for the specific service they provide.
• From fraud and security monitoring tools: Our security systems may cross-reference technical data (such as IP addresses and device fingerprints) with fraud databases to detect and prevent abuse.

rtk99 processes your personal data only for the following defined purposes:

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account profile.
• Payment processing: To execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard and to maintain accurate financial records.
• Identity verification and KYC compliance: To verify that you meet the minimum age requirement of 21 years and to satisfy our anti-money-laundering obligations.
• Service delivery: To make our sportsbook, casino, slots, and other gaming products available to you and to personalise your experience based on your preferences and history.
• Customer support: To respond to your enquiries, resolve complaints, and maintain a record of your interactions with our support team.
• Responsible gaming: To monitor betting patterns, apply account restrictions where requested, and identify accounts that may require responsible gaming intervention.
• Fraud prevention and security: To detect and prevent fraud, collusion, bonus abuse, money laundering, and unauthorised access to accounts.
• Legal compliance: To meet our obligations under applicable law, including responding to lawful requests from law enforcement or regulatory authorities.
• Marketing communications (with your consent): To send you promotional offers, bonus notifications, and news about new features or games on the rtk99 platform. You may opt out at any time. See Section 11 for details.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the functionality and content of the rtk99 platform.

rtk99 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing your registration data, KYC information, and financial data is necessary to enter into and perform the contract between you and rtk99 (i.e., the Terms & Conditions you agreed to upon registration).
• Legal obligation: We are required to collect and retain certain data to comply with anti-money-laundering laws, age verification requirements, and other applicable regulations.
• Legitimate interests: We process technical and usage data on the basis of our legitimate interest in maintaining platform security, preventing fraud, improving our services, and protecting the safety of all platform users.
• Consent: We process your data for marketing communications only where you have given explicit, informed consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rtk99 does not sell or rent your personal data to any third party. We share your data only in the following circumstances and only to the extent necessary for each specific purpose:

6.1 Payment Service Providers

We share your financial and identity data with our payment processing partners — including bKash, Nagad, Rocket, Upay, and our card processing provider — solely to execute deposit and withdrawal transactions. These providers are contractually bound to process your data only for the purposes of completing your transactions.

6.2 KYC and Identity Verification Partners

We engage third-party KYC verification services to validate identity documents and confirm your age and residency. These partners receive only the data necessary to complete the verification process and are prohibited from retaining or using your data for any other purpose.

6.3 Game Software Providers

Our casino and slot games are supplied by third-party studios including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming. These providers may receive your account identifier and session data as part of game delivery. They do not receive your full personal profile or financial data.

6.4 Fraud Prevention and Security Services

We work with third-party fraud detection and security monitoring providers. Technical data such as IP addresses, device identifiers, and behavioural patterns may be shared with these providers to detect and prevent fraudulent activity, account takeovers, and platform abuse.

6.5 Law Enforcement and Regulatory Authorities

rtk99 will disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities when required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm, fraud, or criminal activity.

6.6 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of rtk99's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy policy applicable to your data going forward.

rtk99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, keep you logged in securely, and analyse how the platform is used. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They manage your login session, security tokens, and basic account preferences. These cookies cannot be disabled without breaking core platform functionality.
• Analytical and performance cookies: We use analytics tools to understand how players navigate the platform, which pages are most visited, and where technical issues arise. This data is aggregated and anonymised wherever possible.
• Functional cookies: These cookies remember your account settings and preferences, such as your preferred language, display settings, and last-visited game category, to personalise your experience on return visits.
• Marketing cookies (consent-based): Where you have given consent, we may use cookies to track your engagement with promotional content and to deliver relevant offers. You may withdraw consent for marketing cookies at any time through your browser settings.

Most browsers allow you to view, manage, and delete cookies through their settings menu. Please be aware that disabling strictly necessary cookies will affect the core functionality of the rtk99 platform, including your ability to log in and maintain an active session.

rtk99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the duration of your account and for a minimum of 5 years following account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay and betting records: Retained for a minimum of 3 years to support dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for a minimum of 2 years from the date of the interaction.
• Marketing preferences: Retained until you withdraw consent or until your account is closed, whichever comes first.
• Technical and device data: Retained for up to 12 months from the date of collection, unless required for longer to investigate a specific security or fraud incident.

Once the applicable retention period has expired, rtk99 will securely delete or anonymise your personal data. Where anonymisation is used, the resulting data is no longer associated with you as an individual and may be retained indefinitely for statistical purposes.

rtk99 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it from unauthorised access, loss, misuse, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rtk99 servers.
• Encryption of sensitive personal data and financial records stored on rtk99 servers.
• Role-based access controls ensuring that staff access to personal data is restricted to those with a legitimate need.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for rtk99 system administrators with access to personal data.
• Secure backup systems and disaster recovery procedures to protect against data loss.
• Staff training on data protection obligations and secure data-handling practices.

While rtk99 takes every reasonable step to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact [email protected] immediately.

As a user of the rtk99 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered account username and mobile number.

• Right of access: You have the right to request a copy of all personal data rtk99 holds about you. We will provide this information within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address) can be made directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. Please note that this right is subject to our legal obligations to retain certain data for compliance purposes. Data that is required by law to be retained cannot be erased on request, but will be deleted as soon as the mandatory retention period expires.
• Right to restriction of processing: You may request that we restrict our processing of your data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request a copy of the personal data you have provided to rtk99 in a structured, machine-readable format, where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of our legitimate interests, including profiling for fraud prevention. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where we process your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

rtk99 will respond to all verified data rights requests within 30 days. In complex cases this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

With your consent, rtk99 may send you marketing communications including promotional offers, bonus notifications, tournament announcements, and news about new games and features. Marketing communications are sent via email and SMS to the contact details registered on your account.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email.
• Replying "STOP" to any marketing SMS sent from rtk99.
• Updating your communication preferences in your account settings.
• Contacting [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect transactional and account communications, such as deposit confirmations, withdrawal notifications, KYC requests, security alerts, and account policy updates, which we are obliged to send regardless of your marketing preferences.

Please allow up to 5 business days for your opt-out preference to take full effect across all marketing channels.

The rtk99 platform is strictly intended for adults aged 21 and above. rtk99 does not knowingly collect personal data from any individual under the age of 21. Age verification is performed at registration and prior to first withdrawal.

If rtk99 discovers that an account has been registered by or on behalf of a person under 21 years of age, the account will be closed immediately, any balance will be forfeited, and all personal data associated with the account will be deleted in accordance with applicable law.

If you believe that a minor has registered an account on the rtk99 platform, please contact [email protected] immediately so that appropriate action can be taken without delay.

The rtk99 platform may contain references to third-party game studios and payment providers. Where interaction with a third-party service involves the collection of your data by that third party directly (for example, when completing a bKash or Nagad mobile wallet transaction), the privacy policy of that third party will apply to the data collected by them.

rtk99 is not responsible for the data practices, privacy policies, or security measures of any third party. We encourage you to review the privacy policies of any third-party service provider with whom you interact through or alongside the rtk99 platform.

rtk99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The date of the most recent revision is displayed at the top of this page.

Where changes are material — for example, if we begin processing your data for a new purpose or sharing it with a new category of third party — we will notify you by email to your registered address before the change takes effect. For minor clarifications or administrative updates, the revised policy will be published on the platform without specific advance notice.

Your continued use of the rtk99 platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the platform and request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data rtk99 holds about you, please contact our data support team using the details below. Include your registered account username and the mobile number associated with your account to help us verify your identity and respond promptly.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 via the rtk99 platform (login required)
• Response Target: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries

rtk99 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to a privacy concern, you have the right to raise the matter through any applicable formal dispute resolution process described in our Terms & Conditions.