rk33 Privacy Policy

rk33 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by rk33.

rk33 operates as an internationally licensed online gaming and sports betting platform, with a primary audience base in Bangladesh. We recognise that our players trust us with sensitive personal and financial information, and we take that responsibility extremely seriously. Every aspect of our data handling is designed to ensure transparency, security, and respect for your personal privacy.

This Privacy Policy should be read alongside the rk33 Terms and Conditions, which are available at /terms-conditions. Where any conflict exists between this Privacy Policy and the Terms and Conditions regarding data handling matters, this Privacy Policy shall take precedence.

All references to "Bangladesh Standard Time" or "BST" in this document refer to UTC+6, the official time zone of Bangladesh. All references to currency amounts refer to Bangladeshi Taka (৳).

rk33 collects different categories of personal data depending on how you interact with our platform. The categories of data we may collect are described below:

2.1 Identity Data. This includes your full legal name, date of birth, gender, nationality, and copies of government-issued identification documents such as your Bangladesh National ID Card, Passport, or Driving Licence. This data is collected as part of our mandatory Know Your Customer (KYC) verification process.

2.2 Contact Data. This includes your email address, mobile phone number, and, where provided, your residential address including city (such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and postal code.

2.3 Financial Data. This includes your bKash account number, Nagad account number, Rocket number, Upay details, or bank account information for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank. We do not store full payment credentials on our own servers — financial data is processed via PCI-DSS compliant payment processors.

2.4 Technical Data. This includes your IP address, browser type and version, device type, operating system, screen resolution, and internet service provider. This data is collected automatically when you access the rk33 platform.

2.5 Usage Data. This includes information about how you navigate and interact with the rk33 platform: pages viewed, games played, bets placed, session durations, click paths, search queries entered within the platform, and features accessed.

2.6 Transaction Data. This includes details of all deposits, withdrawals, bonuses received, wagers placed, and winnings credited to your rk33 account, together with timestamps expressed in Bangladesh Standard Time (UTC+6).

2.7 Responsible Gaming Data. This includes any deposit limits, session time limits, cool-off periods, or self-exclusion requests you have set through your account dashboard. This data is treated with the highest level of confidentiality.

2.8 Communications Data. This includes the content of any messages exchanged with our customer support team via live chat, email, or other channels, together with records of promotional emails opened and links clicked.

We collect personal data through the following methods:

• Direct provision by you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to surveys or promotions.
• Automated technical collection: through cookies, pixel tags, server logs, and similar tracking technologies when you browse the rk33 platform. See Section 7 (Cookies & Tracking) for full details.
• Third-party sources: from our identity verification partners who confirm the authenticity of your KYC documents; from payment processors who confirm the status of financial transactions; and from fraud prevention services that flag patterns associated with known fraudulent activity.
• Game providers: certified studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may pass game session and result data to rk33 for dispute resolution, fairness auditing, and responsible gaming monitoring purposes.

The table below summarises the key purposes for which rk33 processes your personal data, the category of data involved, and the legal basis for that processing:

rk33 does not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5.1 Active Accounts. While your rk33 account remains active, we retain all personal data associated with your account for as long as is necessary to provide you with the Services and to comply with applicable legal and regulatory obligations.

5.2 Closed or Terminated Accounts. Following the closure or termination of your rk33 account, we retain your personal data for a minimum period of 5 years. This retention period is necessary to satisfy our anti-money laundering obligations, to resolve any outstanding disputes, and to respond to regulatory enquiries.

5.3 KYC Documents. Copies of government-issued identity documents submitted for KYC verification are retained for a minimum of 5 years from the date of submission, or from the date of account closure, whichever is later.

5.4 Transaction Records. All financial transaction records, including deposits, withdrawals, and wager histories, are retained for a minimum of 7 years in accordance with standard financial record-keeping requirements.

5.5 Technical and Usage Data. Anonymised technical and usage data collected via cookies and server logs may be retained for up to 2 years for the purposes of platform analytics. Where this data is identifiable to your account, it is subject to the same retention periods as other account data.

5.6 Deletion After Retention Period. Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised in accordance with our internal data deletion procedures.

rk33 does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

• Payment Processors: We share financial data with our payment processing partners (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank) strictly for the purpose of executing deposits and withdrawals you have requested. These partners are contractually bound to keep your data confidential and to use it only for the specified purpose.
• Identity Verification Services: We share identity and document data with third-party KYC verification providers to confirm your identity and age. These providers operate under strict data processing agreements with rk33.
• Certified Game Studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and game result data to enable gameplay. They do not receive your full personal profile.
• Fraud Prevention and Security Services: We may share technical and identity data with fraud detection services to protect the rk33 platform and its users from criminal activity, including money laundering and account takeover fraud.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so, where we are responding to a valid legal process, or where disclosure is necessary to protect the rights, safety, or property of rk33 or its users.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of rk33's business, your personal data may be transferred to the acquiring entity. We will notify affected users by email and publish a notice on the platform prior to any such transfer.

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function efficiently and to provide information to the site operator. rk33 uses cookies and similar tracking technologies including pixel tags and local storage to operate and improve the platform.

7.2 Types of Cookies We Use.

• Strictly Necessary Cookies: These are essential for the rk33 platform to function. They enable core features such as session authentication, security tokens, and load balancing. You cannot opt out of strictly necessary cookies while using the platform.
• Functional Cookies: These remember your preferences, such as your preferred language, display settings, and responsible gaming tool configurations, to provide a more personalised experience.
• Analytics Cookies: These collect anonymised information about how visitors use the rk33 platform — which pages are visited most frequently, how users navigate between sections, and where errors occur. This data helps us improve platform performance and user experience.
• Marketing Cookies: Where you have provided consent, these cookies allow us to deliver targeted promotional content relevant to your interests and gaming habits. You may withdraw consent for marketing cookies at any time.

7.3 Managing Cookies. Most web browsers allow you to control cookie settings through the browser's preferences menu. You can choose to block all cookies, accept only certain types, or delete existing cookies. Please note that blocking strictly necessary cookies may prevent some features of the rk33 platform from functioning correctly. For detailed guidance on managing cookies in your specific browser, refer to the help documentation for your browser.

7.4 Session Duration. Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period — typically between 30 days and 12 months — unless deleted earlier by you.

8.1 Technical Safeguards. rk33 employs a comprehensive set of technical security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include 256-bit SSL/TLS encryption for all data transmitted between your device and the rk33 servers; AES-256 encryption for sensitive data stored at rest; firewalls and intrusion detection systems operating 24 hours a day, 7 days a week; and regular independent security audits and penetration testing.

8.2 Organisational Safeguards. Access to personal data within rk33 is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are required to complete data protection training and are bound by confidentiality obligations. Access rights are reviewed regularly and revoked promptly when no longer required.

8.3 Payment Security. rk33 does not store full payment card numbers, mobile financial service PINs, or online banking passwords on its own servers. All payment transactions are handled by PCI-DSS compliant third-party processors. rk33 stores only the last four digits of account numbers and payment method type for reference purposes.

8.4 Data Breach Response. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, rk33 will notify affected users by email within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories of data affected, the steps rk33 is taking to address the breach, and the recommended actions for affected users.

8.5 Your Responsibility. While rk33 implements robust security measures on our side, the security of your account also depends on how you manage your own credentials. You are responsible for keeping your rk33 username and password confidential, for using a strong and unique password, and for logging out of your account on shared or public devices. Contact [email protected] immediately if you suspect your account has been accessed without your authorisation.

As a user of the rk33 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of all personal data rk33 holds about you. We will provide this in a structured, commonly used, machine-readable format.
• Right to Rectification: If any personal data rk33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to our legal retention obligations described in Section 5.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a portable format and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. rk33 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.1 Minimum Age Policy. rk33 strictly enforces a minimum age requirement of 21 years for all registered users. The rk33 platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

10.2 Age Verification. All prospective users are required to confirm their age at registration and to submit government-issued identification during KYC verification. Any account found to belong to a user under 21 years of age will be immediately suspended, all real-money funds will be returned, and all bonus balances will be forfeited.

10.3 Reporting Underage Access. If you have reason to believe that a minor has registered an account on rk33 or has gained access to the platform, please contact us immediately at [email protected]. rk33 takes underage gambling extremely seriously and will act promptly on any such report.

11.1 Cross-Border Processing. rk33 operates as an internationally licensed platform. Your personal data may be stored and processed in data centres located outside of Bangladesh, including in jurisdictions where the data protection laws may differ from those in Bangladesh. In all cases, rk33 ensures that appropriate safeguards are in place to protect your personal data in accordance with the standards described in this Privacy Policy.

11.2 Transfer Safeguards. Where personal data is transferred to our service providers or partners in other jurisdictions, we ensure that such transfers are governed by binding data processing agreements containing appropriate technical and organisational security measures. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing compensating controls.

11.3 Payment Data Localisation. Financial transaction data processed through Bangladeshi payment partners — including bKash, Nagad, Rocket, and Upay — is handled in accordance with the terms and data policies of those respective providers, which are regulated entities operating under Bangladesh Bank guidelines.

12.1 Consent to Marketing. By registering an rk33 account, you provide your consent to receive promotional communications from rk33 by email. These communications may include information about new games, seasonal promotions (such as those tied to Eid, Pohela Boishakh, BPL season launches, or IPL campaigns), bonus offers, and platform updates.

12.2 Opt-Out. You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included in the footer of every marketing email sent by rk33; or
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Opt-out requests will be processed within 5 business days (Bangladesh Standard Time). Following opt-out, you will continue to receive essential transactional emails such as deposit confirmations, withdrawal notifications, password reset emails, and security alerts — these are not marketing communications and cannot be opted out of while your account remains active.

12.3 Profiling for Marketing. rk33 may use usage data and transaction data to build a general profile of your gaming preferences for the purpose of delivering more relevant promotional offers. You have the right to object to this type of profiling at any time by contacting [email protected]. See also Section 9 (Your Rights) for further details.

13.1 Right to Amend. rk33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. The "Last updated" date at the top of this page and in the table of contents will be revised whenever the policy is updated.

13.2 Notification of Material Changes. Where changes to this Privacy Policy are material — for example, changes to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — rk33 will notify registered users by email at least 14 days before the revised policy takes effect. Continued use of the rk33 platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

13.3 Historical Versions. Previous versions of this Privacy Policy are available upon request. If you wish to review a previous version, please contact our support team at [email protected] and specify the approximate date of the version you wish to review.

14.1 Data Enquiries. For any questions, concerns, or requests relating to this Privacy Policy or to the personal data rk33 holds about you, please contact our dedicated data protection team using the details below. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

Email: [email protected]

Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" so your message is directed to the correct team immediately.

14.2 Response Commitment. rk33 is committed to acknowledging all privacy-related contact within 2 business days and to providing a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

14.3 Complaints. If you are not satisfied with how rk33 has handled your personal data or responded to a data rights request, you have the right to escalate your complaint to our senior compliance team by emailing [email protected] with the subject line "Privacy Complaint — Escalation". rk33 takes all privacy complaints seriously and will conduct a thorough internal review of any escalated matter.