r4777 Privacy Policy & Data Protection

Introduction

This Privacy Policy (hereinafter referred to as "Policy") describes how r4777 (hereinafter referred to as "r4777", "We", "Us", or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals (hereinafter referred to as "Player", "User", or "You") who access and use the r4777 online betting and gaming platform available at https://r4777.io and all associated subdomains and mobile-optimised pages.

r4777 is committed to protecting the privacy and personal data of all players. We handle all personal data in a manner consistent with applicable data protection standards and with the expectations of our players in Bangladesh and beyond.

By registering an account on the r4777 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, processing, and use of your personal data as described herein. This Policy forms part of the r4777 Terms and Conditions, which are available at r4777.io/terms-conditions.

Data Controller

r4777 acts as the data controller in respect of the personal data collected from players through the r4777 platform. As data controller, r4777 determines the purposes for which personal data is collected and the means by which it is processed.

For all data protection-related enquiries, requests, or complaints, players may contact r4777 directly using the contact details provided in Section 14 of this Policy. r4777 aims to respond to all data-related correspondence within a reasonable timeframe and, in any event, within 30 days of receipt.

Personal Data We Collect

r4777 collects the following categories of personal data from players, depending on how they interact with the platform:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identity document details (such as National Identity Card number or passport number) collected during account registration and KYC verification.
• Contact Data: Email address, mobile phone number, and city or district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Financial Data: Mobile financial service account references (bKash, Nagad, Rocket, Upay), bank account references where applicable, deposit and withdrawal transaction history, and account balance records. r4777 does not store full payment credentials — transactions are processed via secure third-party payment gateways.
• Account Credentials: Username and encrypted password. r4777 never stores passwords in plain text — all passwords are hashed using industry-standard cryptographic methods.
• Technical Data: IP address, device type and model, operating system, browser type and version, time zone setting, and connection type. This data is collected automatically when you access the platform.
• Usage Data: Pages visited, games played, betting history, session start and end times, bet amounts, game outcomes, bonus activity, and feature interactions. This data is used to monitor platform performance, support responsible gaming obligations, and improve the user experience.
• Communication Data: Records of all communications between you and the r4777 support team, including live chat transcripts, email correspondence, and any formal complaint submissions.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications and your preferred communication channel (email or SMS), where provided.

How We Collect Your Data

r4777 collects personal data through the following channels:

• Direct Submissions: Data you actively provide when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting support, or updating your account profile settings.
• Automated Technical Collection: Technical and usage data collected automatically by our platform systems when you access or interact with any part of the r4777 website or application. This includes server log data, IP address records, and session analytics.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, pixel tags, and similar tracking technologies placed on your device when you visit the r4777 website. See Section 07 of this Policy for full details of our cookie practices.
• Third-Party Verification Providers: Identity and age verification data received from KYC service providers engaged by r4777 to assist in confirming the identity of players during the account verification process.
• Payment Processors: Transaction confirmation data received from mobile financial service providers (bKash, Nagad, Rocket, Upay) and bank partners as part of the deposit and withdrawal processing workflow.
• Fraud and Risk Management Tools: Risk signals and fraud indicators received from third-party fraud prevention services that assist r4777 in identifying and preventing fraudulent account activity.

How We Use Your Personal Data

r4777 uses the personal data it collects for the following purposes:

• Account Management: To create and maintain your r4777 account, process your login credentials, and manage account settings and preferences.
• Identity Verification (KYC): To verify your identity, confirm your age (minimum 21 years), and complete the Know Your Customer process required for regulatory compliance and responsible gaming obligations.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), including the verification of payment account ownership.
• Platform Delivery: To provide access to all r4777 platform features, including sports betting, live casino, slots, and crash games, and to deliver a personalised, localised experience tailored to players in Bangladesh.
• Customer Support: To respond to support enquiries, investigate complaints, resolve disputes, and communicate with you regarding your account.
• Responsible Gaming: To monitor betting behaviour and account activity for signs of problem gambling, to apply player-requested responsible gaming tools (deposit limits, cool-off periods, self-exclusion), and to fulfil r4777's duty of care obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as defined in the r4777 Terms and Conditions.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, financial record-keeping obligations, and responses to lawful requests from law enforcement or regulatory authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the performance, design, and feature set of the r4777 platform.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have actively opted in to receive such communications. Marketing communications are never sent to players who have not provided consent.

Sharing Your Personal Data

r4777 does not sell, rent, or trade your personal data to any third party for that party's own commercial purposes. Personal data is shared only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: Personal data necessary to process deposits and withdrawals is shared with relevant payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) solely for the purpose of executing your requested financial transaction.
• KYC and Identity Verification Providers: Identity documents and personal details are shared with third-party KYC service providers engaged by r4777 to conduct identity and age verification checks on new and existing players.
• Game Content Providers: Where necessary for game delivery, limited technical session data may be shared with third-party game studios and content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive or process personally identifiable data beyond what is technically required for game session management.
• Fraud Prevention and Risk Services: Risk signals and account behaviour data may be shared with third-party fraud detection services for the purpose of identifying and preventing fraudulent activity on the platform.
• Legal and Regulatory Authorities: r4777 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory instruction. r4777 will, where legally permissible, notify affected players of such disclosure.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of r4777's business, player data may be transferred to the relevant acquiring entity, subject to that entity assuming the same data protection obligations as set out in this Policy.

Cookies & Tracking Technologies

r4777 uses cookies and similar tracking technologies to enhance platform functionality, maintain session security, analyse usage patterns, and deliver a more personalised experience to players. The following types of cookies are used on the r4777 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They maintain your login session, preserve your account preferences, and enable core security features. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players interact with the r4777 platform — such as which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve platform performance and is not used to identify individual players.
• Functional Cookies: These cookies remember your preferences and settings (such as language preference and notification settings) to provide a more personalised experience on repeat visits.
• Marketing and Targeting Cookies: These cookies are only placed with your consent and are used to deliver promotional messages and bonus offers relevant to your betting interests and activity history. You may withdraw your consent to marketing cookies at any time by updating your account preferences.

You may control non-essential cookie preferences through your account settings or through your browser's native cookie management tools. Please note that disabling certain cookies may affect the functionality of the r4777 platform.

Data Retention Periods

r4777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: All personal data associated with an active r4777 account is retained for the duration of the account's active status and for a minimum period of five (5) years following the date of account closure.
• Financial Transaction Records: Records of all deposits, withdrawals, and betting transactions are retained for a minimum of five (5) years following the date of the transaction, in compliance with applicable financial record-keeping requirements.
• KYC Documents: Identity verification documents submitted during the KYC process are retained for a minimum of five (5) years following account closure, or longer if required by applicable anti-money laundering regulations.
• Support and Communication Records: Customer support correspondence and communication records are retained for three (3) years following the closure of the relevant support case, or for the duration of any ongoing dispute resolution process.
• Marketing Data: Marketing preference data and communications history are retained until you withdraw your marketing consent, after which marketing communications will cease within a reasonable timeframe. Historical records of consent and withdrawal may be retained for compliance purposes.
• Technical and Usage Data: Anonymised and aggregated usage analytics data may be retained indefinitely for platform improvement purposes. Personally identifiable technical data (such as IP address logs) is retained for a maximum of twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with r4777's data destruction procedures.

Data Security Measures

r4777 employs a comprehensive range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the r4777 platform is protected by 256-bit SSL/TLS encryption, the same standard used by major financial institutions.
• Password Hashing: Account passwords are never stored in plain text. All passwords are hashed using industry-standard cryptographic algorithms before storage.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication via mobile OTP to provide an additional layer of protection for their account login process.
• Access Controls: Access to personal data within r4777's internal systems is strictly limited to authorised personnel who require access in order to perform their legitimate job functions. All internal access is logged and monitored.
• Regular Security Audits: The r4777 platform undergoes regular internal and third-party security assessments to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: r4777 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to player data, r4777 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Your Data Subject Rights

As a player on the r4777 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact r4777 at [email protected] with the subject line "Data Privacy Request":

• Right of Access: You have the right to request a copy of all personal data that r4777 holds about you. r4777 will provide this information in a clear, accessible format within 30 days of receiving a valid access request.
• Right to Rectification: If you believe that any personal data r4777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as updating a phone number) can typically be made directly from your account settings page.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interest and your interests override r4777's. This right is subject to r4777's legal retention obligations — r4777 may be required to retain certain data even following an erasure request.
• Right to Restrict Processing: You may request that r4777 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where r4777 processes your personal data based on your consent or for the performance of a contract, and that processing is carried out by automated means, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to r4777's processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming monitoring purposes. r4777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where r4777 processes your personal data based on your consent (for example, for marketing communications or non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.

Minors & Age Verification

The r4777 platform is strictly intended for adults aged 21 years and above. r4777 does not knowingly collect personal data from any individual under the age of 21 and does not permit persons under 21 to register an account or access any part of the platform.

As part of the account registration and KYC process, r4777 requires all new players to provide proof of age. Players who cannot demonstrate that they are aged 21 or above will be refused access to the platform and any data collected during the attempted registration will be deleted.

International Data Transfers

The r4777 platform serves players primarily based in Bangladesh. However, some of the third-party service providers engaged by r4777 — including KYC verification providers, fraud prevention services, and game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may process personal data on servers located outside Bangladesh.

Where personal data is transferred to a third party operating in a different jurisdiction, r4777 takes steps to ensure that appropriate safeguards are in place to protect the security and integrity of that data. These safeguards may include:

• Contractual Protections: Data processing agreements that impose binding data protection obligations on the receiving party equivalent to those applied by r4777 under this Privacy Policy.
• Security Standards: Requirements that receiving parties maintain security measures at least equivalent to those described in Section 09 of this Policy, including encryption in transit and at rest.
• Purpose Limitation: Contractual restrictions that prohibit the receiving party from using transferred personal data for any purpose other than the specific service they are providing to r4777.

By using the r4777 platform and providing your personal data, you acknowledge that your data may be transferred to, stored in, and processed in jurisdictions outside Bangladesh in accordance with the safeguards described above.

Changes to This Privacy Policy

r4777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform services. When material changes are made to this Policy, r4777 will notify registered players by email to their registered email address and by displaying a prominent notice on the r4777 platform for a period of no less than 14 days prior to the changes taking effect.

Non-material amendments — such as corrections of typographical errors, clarifications that do not alter the substance of any section, or updates to contact details — may be made without prior notice and will take effect upon publication on the r4777 website.

The most current version of this Privacy Policy will always be available at r4777.io/privacy-policy. The "Last Updated" date displayed at the top of this Policy reflects the date on which the most recent version was published. Your continued use of the r4777 platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data r4777 holds about you, please contact the r4777 data protection team using the details below:

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Privacy Request"
• Subject Line for Formal Complaints: "Formal Privacy Complaint"
• Support Hours: 24 hours a day, 7 days a week, including public holidays
• Response Time: r4777 aims to respond to all data-related enquiries within 30 days of receipt. Simple requests (such as marketing opt-out) are typically actioned within 48 hours.
• Language: All data protection communications are conducted in English.

For responsible gaming support, self-exclusion requests, or deposit limit adjustments, please also contact [email protected] and state your request clearly in the subject line. These requests are treated as priority matters and will be actioned as quickly as possible, and in any event within 24 hours of receipt.