rtk999 Privacy Policy

About This Privacy Policy

rtk999 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits or registers with rtk999.app. This Privacy Policy ("Policy") describes in clear terms the categories of personal data we collect, the lawful basis on which we process that data, the purposes for which it is used, the circumstances under which it may be shared with third parties, and the rights available to you as a data subject.

This Policy applies to all users of the rtk999 Platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team. By continuing to use the Platform after the effective date stated above, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

This Policy should be read alongside the rtk999 Terms and Conditions, which are available at /terms-conditions and are incorporated by reference. In the event of any conflict between this Policy and the Terms and Conditions on matters of data processing, this Policy shall prevail.

If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately and may request deletion of your account and associated data by contacting our support team.

Identity of the Data Controller

For the purposes of applicable data protection law, the data controller responsible for personal data collected through the rtk999 Platform is the legal entity operating rtk999.app. All enquiries regarding this Policy, requests to exercise your data rights, or concerns about data processing should be directed to our support team at the contact address provided in Section 13 of this Policy.

Categories of Personal Data Collected

rtk999 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically when you use our services, and from third-party payment providers as part of transaction processing. The categories of data we may collect are as follows:

Registration and Account Data

• Identity data: Full name, date of birth, gender, and nationality as provided during account registration or KYC verification.
• Contact data: Email address, mobile phone number, and residential address (city, district, and postcode within Bangladesh).
• Authentication data: Username and encrypted password hash. rtk999 never stores passwords in plain text.
• Identity verification documents: Scanned copies or photographs of government-issued ID (National ID card, passport, driving licence) and proof-of-address documents submitted during the KYC process.

Financial and Transaction Data

• Payment method identifiers: The mobile number associated with your bKash, Nagad, Rocket, or Upay wallet; or the last four digits and expiry date of a Visa or Mastercard used for deposits.
• Transaction records: Deposit amounts, withdrawal amounts, dates and times, transaction reference numbers, and payment provider confirmation codes.
• Wallet balance history: A running record of credits, debits, bonus allocations, and wagering activity associated with your account wallet.

Usage and Technical Data

• Device data: Device type, operating system, browser type and version, screen resolution, and device identifier.
• Log data: IP address, pages visited, time spent on each page, referring URL, and error logs generated during your session.
• Cookies and tracking data: Session cookies, preference cookies, and analytics identifiers. See Section 9 (Cookies) for full details.
• Geolocation data: General location derived from IP address. rtk999 does not collect precise GPS coordinates.

Communications Data

• Records of correspondence between you and the rtk999 support team, including email exchanges, live chat transcripts, and any documents or screenshots you submit.
• Records of marketing communications sent to you and your response or opt-out preferences.

Responsible Gaming Data

• Deposit limit settings, session time limits, cooling-off periods, and self-exclusion requests you have made through the Platform's Responsible Gaming tools.
• Internal risk-assessment flags generated by the Platform's automated responsible gaming monitoring system.

Purposes of Processing and Lawful Basis

rtk999 processes your personal data only where a lawful basis exists. The table below summarises the primary processing purposes and the corresponding lawful basis for each:

rtk999 does not use your personal data for automated decision-making that produces significant legal effects without human review, except where fraud-detection systems flag an account for investigation, in which case a human reviewer will assess the case before any account action is taken.

Sharing of Personal Data with Third Parties

rtk999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients only to the extent strictly necessary for the stated purpose:

Payment Service Providers

To process deposits and withdrawals, we share necessary transaction data (name, mobile number, transaction amount) with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers are bound by their own privacy policies and applicable financial-services regulations.

Game Technology Providers

Game studios and platform technology providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymous player identifier and session data strictly for the purpose of delivering game content and resolving game-related disputes. These providers do not receive your full identity data.

Identity Verification Services

Where rtk999 uses a third-party KYC service to verify identity documents, the minimum necessary data (document image and key identity fields) is transmitted to that service over encrypted channels. Verification results are returned to rtk999 and the document image is not retained by the third party beyond the verification process.

Legal and Regulatory Authorities

rtk999 will disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are under a legal obligation to do so or where disclosure is necessary to protect the rights, property, or safety of rtk999, our users, or the public. We will notify affected users of any such disclosure where legally permitted to do so.

Business Transfers

In the event that rtk999 or a substantial portion of its assets are acquired by or merged with another entity, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data going forward.

How Long We Keep Your Data

rtk999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with rtk999, plus a minimum of five (5) years following account closure to satisfy financial-record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by anti-money-laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for three (3) years from the date of the last communication in a given support thread, unless the matter involves a dispute, in which case records are retained until the dispute is fully resolved plus one (1) additional year.
• Marketing preferences: Retained until you withdraw consent, at which point marketing communications cease promptly and preference records are updated. Core account data remains unaffected by marketing opt-out.
• Cookies and session logs: Session cookies expire at the end of each browsing session. Analytics data derived from cookies is retained in aggregated, pseudonymised form for up to twenty-four (24) months.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Security Measures

rtk999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rtk999 servers.
• Encryption at rest for sensitive data fields including identity document images, KYC data, and payment method identifiers stored in our databases.
• Hashed and salted password storage — your password is never stored in a recoverable form.
• Access controls — internal access to personal data is restricted on a need-to-know basis and subject to role-based permissions.
• Regular security assessments of the Platform's infrastructure and codebase, including penetration testing.
• Incident response procedures — in the event of a confirmed data breach affecting your personal data, rtk999 will notify affected users without undue delay and take immediate steps to contain and remediate the breach.

While rtk999 takes all reasonable precautions, no transmission over the internet or electronic storage system is entirely risk-free. You are responsible for keeping your own login credentials secure and for notifying us immediately if you suspect any unauthorised access to your account.

Your Data Rights

As a data subject, you have the following rights with respect to your personal data held by rtk999. To exercise any of these rights, contact our support team at the address in Section 13:

• Right of access: You may request a copy of the personal data rtk999 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (such as updating a mobile number) can be made directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations (such as financial record-keeping requirements) that require us to retain certain data.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances, for example while you contest the accuracy of the data.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to rtk999, where processing is based on your consent or performance of a contract.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing of your data carried out on the basis of legitimate interests, including profiling for responsible gaming purposes.

rtk999 will respond to all valid data rights requests within thirty (30) days of receipt. We may request proof of identity before processing a request to ensure that personal data is not disclosed to, or amended at the request of, an unauthorised individual.

Cookies and Tracking Technologies

The rtk999 Platform uses cookies and similar tracking technologies to enable core functionality, remember your preferences, analyse usage patterns, and deliver relevant content. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core features such as login and wallet access.
• Functional cookies: Used to remember your preferences (such as language and notification settings) across sessions. These expire after a defined period.
• Analytics cookies: Used to collect aggregated, pseudonymised data about how users interact with the Platform, which pages are most visited, and where errors occur. This data helps rtk999 improve the user experience.
• Marketing cookies: Used to track engagement with promotional content and to avoid showing you the same promotional message repeatedly. These are only set where you have given consent.

You may manage cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some features of the Platform. Strictly necessary cookies cannot be disabled via browser settings without affecting core Platform functionality.

Children and Minors

The rtk999 Platform is strictly for adults aged 21 years and over. rtk999 does not knowingly collect or process personal data of individuals under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, that account will be closed immediately, any deposited funds returned where verifiably belonging to the minor, and all associated personal data deleted without undue delay.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling platforms. If you believe a minor has accessed the rtk999 Platform, please contact our support team immediately.

International Data Transfers

Some of the third-party service providers used by rtk999 (including game studios and technology infrastructure providers) may process data in jurisdictions outside Bangladesh. Where such transfers occur, rtk999 takes appropriate steps to ensure that the transfer is subject to adequate safeguards, which may include standard contractual clauses, binding corporate rules, or equivalent data protection measures. By using the rtk999 Platform, you consent to such transfers to the extent necessary to deliver the services you have requested.

Changes to This Privacy Policy

rtk999 reserves the right to update this Privacy Policy at any time. Material changes — meaning changes that meaningfully affect the way your data is collected, used, or shared — will be communicated to registered users via a notice on the Platform or by email at least seven (7) days before the updated Policy takes effect. Non-material changes (such as clarifications of existing language) may be made without prior notice, subject to updating the effective date at the top of this page.

Your continued use of the Platform after the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not accept the changes, you must cease using the Platform and may request account closure and data deletion as described in Section 8.

Privacy Enquiries and Contact

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by rtk999, please contact our support team. The support email address is provided below as plain text only and is not a clickable element:

Email: [email protected]

Our support team is available 24 hours a day, 7 days a week. We aim to respond to all privacy-related enquiries within two (2) Bangladesh Standard Time (BST, UTC+6) business days. For formal data rights requests under Section 8, our response commitment is thirty (30) days from the date of receipt of a verified request.