rk222 Privacy Policy

1Introduction

rk222 ("rk222", "we", "us", "our") operates the online casino and sports betting platform accessible at https://rk222.io and all associated subdomains, mobile interfaces, and service channels (collectively the "Platform"). In the course of providing these services to players in Bangladesh, rk222 processes certain personal data about you ("Player", "User", "you").

This Privacy Policy sets out in clear, plain English the categories of personal data we collect, the purposes for which that data is processed, the legal bases on which processing rests, the parties with whom data may be shared, the periods for which data is retained, and the rights you hold as a data subject. This Policy applies to all registered rk222 accounts and to visitors to the rk222 Platform who have not yet completed registration.

This Privacy Policy must be read in conjunction with the rk222 Terms & Conditions and the rk222 Responsible Gaming Policy, both of which are incorporated herein by reference. All processing described in this Policy is conducted in English, and all communications with rk222 regarding data privacy should be made in English to ensure accurate and timely handling.

2Data We Collect

rk222 collects personal data in the following categories. We collect only the minimum information necessary to fulfil the specific purpose identified for each category.

2.1 Identity Data

This includes your full legal name as it appears on your government-issued identification document, your date of birth, your National ID card (NID) or passport number, and any other identity verification documentation submitted during the KYC process.

2.2 Contact Data

This includes your email address, Bangladeshi mobile phone number, and any correspondence you send to rk222 via the support channel at [email protected] or via live chat. We also record the dates and times of support interactions for quality and training purposes.

2.3 Financial Data

This includes your preferred BDT payment method details (bKash mobile wallet number, Nagad account number, Rocket account number, Upay account number, or bank account information for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank), transaction histories, deposit and withdrawal amounts, and balance records.

2.4 Account & Gaming Data

This includes your rk222 username, account creation date, rk222 login history (timestamps, IP addresses, device identifiers), gaming activity records (game sessions, wager amounts, outcomes, bonus usage), responsible gaming settings you have applied, and any self-exclusion or cooling-off periods you have activated.

2.5 Technical & Device Data

This includes your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited on the rk222 Platform, session duration, and error logs generated during your use of the Platform.

2.6 Communications Data

This includes records of all emails, live chat transcripts, and other written communications between you and rk222. We retain these records to ensure continuity of support and to evidence compliance with regulatory obligations.

3How We Collect Data

rk222 collects personal data through the following channels:

• Direct interactions: Data you provide when registering your rk222 account, completing identity verification, making deposits or withdrawals, claiming bonuses, contacting customer support, or updating your account settings.
• Automated technologies: Technical and device data collected automatically when you visit and interact with the rk222 Platform, including via cookies, web beacons, server logs, and session recording tools.
• Third-party sources: Identity verification data received from our KYC service providers when you submit documents for account verification. Fraud screening data received from anti-fraud technology partners. Payment confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners to confirm the status of transactions.
• Public sources: In limited circumstances, rk222 may verify certain information against publicly available records, for example to confirm the validity of an identity document or to conduct sanctions screening.

4How We Use Your Data

rk222 processes your personal data for the following purposes, each of which rests on a defined legal basis:

4.1 Account Registration & Management

We use your identity and contact data to create and maintain your rk222 account, verify your eligibility to play (including confirming you are aged 21 or above and located in Bangladesh), and communicate with you about account-related matters. The legal basis for this processing is the performance of a contract between you and rk222.

4.2 Payment Processing

We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain accurate transaction records. The legal basis is performance of contract and compliance with applicable financial record-keeping obligations.

4.3 Identity Verification (KYC)

We use your identity data to verify your identity in accordance with our Know Your Customer obligations, to prevent underage gambling, and to detect and prevent fraud and money laundering. The legal basis is legal obligation and legitimate interests.

4.4 Customer Support

We use your contact and communications data to respond to your enquiries, resolve account issues, and improve our support quality. The legal basis is performance of contract and legitimate interests.

4.5 Responsible Gaming

We use your gaming activity data and account data to monitor for signs of problem gambling, enforce self-exclusions and deposit limits you have set, and proactively reach out where our responsible gaming monitoring systems identify a concern. The legal basis is legal obligation and legitimate interests in player wellbeing.

4.6 Marketing Communications

We may use your contact data to send you promotional offers, bonus notifications, and information about rk222 seasonal campaigns (including BPL, IPL, Eid, and Pohela Boishakh promotions) where you have consented to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

4.7 Platform Improvement & Analytics

We use aggregated and anonymised technical and gaming data to analyse Platform usage patterns, identify technical issues, improve game performance, and develop new features. Where data used for analytics is genuinely anonymised such that you cannot be identified, it falls outside the scope of this Privacy Policy.

4.8 Legal & Regulatory Compliance

We use your data to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, fraud prevention obligations, and record-keeping duties. The legal basis for this processing is legal obligation.

5Sharing Your Data

rk222 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum financial data necessary to process your deposit and withdrawal transactions.
• KYC & identity verification providers: Third-party verification services receive identity documents you submit in order to confirm your identity and age in connection with our KYC obligations.
• Game software suppliers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game providers may receive your account identifier and session data to the extent required to deliver their games on the rk222 Platform.
• Fraud prevention & AML partners: Anti-fraud and AML screening service providers receive relevant transaction and identity data to help us detect and prevent financial crime.
• Legal authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where we are legally required or compelled to do so by a valid legal order or where disclosure is necessary to protect the rights, property, or safety of rk222, its players, or the public.
• Business successors: In the event of a merger, acquisition, or sale of all or part of rk222's business, your personal data may be transferred to the successor entity, who will be required to honour the commitments made in this Privacy Policy.

All third parties with whom rk222 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific service they are engaged to provide to rk222.

6Payment Data

rk222 takes the security of your financial data with the utmost seriousness. Payment transactions on rk222 are processed exclusively through established BDT payment channels including bKash, Nagad, Rocket, and Upay mobile financial services, as well as selected local bank transfer routes. The following specific protections apply to your payment data:

• All payment pages on the rk222 Platform are served over HTTPS with 256-bit SSL encryption
• rk222 does not store full payment card numbers, CVV codes, or mobile banking PINs on its servers
• Payment data shared with processors is transmitted using tokenisation where technically supported by the payment channel
• Transaction records are retained for the period required by applicable financial record-keeping obligations and then securely deleted
• All withdrawals are returned to the same BDT payment method used for the corresponding deposit wherever technically possible, as an additional AML control measure

7Data Retention

rk222 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or for such longer period as is required by applicable law or legitimate business necessity. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active rk222 account plus a minimum of 5 years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years following the date of each transaction, in accordance with applicable financial regulations.
• KYC verification documents: Retained for the duration of your account plus 5 years following account closure.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless the interaction relates to a dispute or legal matter, in which case the relevant records are retained until final resolution plus 1 year.
• Gaming activity logs: Retained for 2 years from the date of activity for responsible gaming monitoring purposes, and for 5 years where the records are relevant to a dispute or regulatory matter.
• Marketing consent records: Retained until consent is withdrawn, plus 1 year following withdrawal to evidence compliance.
• Technical and device logs: Retained for 12 months on a rolling basis for fraud prevention and Platform security purposes.

Upon expiry of the applicable retention period, rk222 will securely delete or permanently anonymise the relevant data. Where anonymisation is not technically feasible, data will be securely destroyed using industry-standard methods.

8Cookies & Tracking Technologies

rk222 uses cookies and similar tracking technologies on the Platform to ensure core functionality, improve your user experience, and analyse how the Platform is used. A "cookie" is a small text file placed on your device by a website server. Cookies cannot execute programmes or transmit viruses. The following categories of cookies are used on the rk222 Platform:

8.1 Strictly Necessary Cookies

These cookies are essential for the rk222 Platform to function. They enable core features such as maintaining your rk222 login session, remembering your language preference, and ensuring the security of your browsing session. These cookies cannot be disabled without materially impairing the Platform's functionality.

8.2 Performance & Analytics Cookies

These cookies collect anonymised information about how visitors use the rk222 Platform, including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps rk222 improve Platform performance and user experience. No personally identifiable information is collected via performance cookies.

8.3 Functionality Cookies

These cookies remember choices you have made on the Platform — such as your preferred game lobby view, table stake preferences, and notification settings — so that rk222 can deliver a more personalised experience on your return visits.

8.4 Marketing & Targeting Cookies

Where you have consented to receive marketing communications from rk222, we may use marketing cookies to record your visit to the rk222 Platform and to deliver relevant promotional content. These cookies do not store sensitive personal information and are used only to improve the relevance of rk222 promotions presented to you.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect your ability to use some features of the rk222 Platform, including the maintenance of your rk222 login session between pages.

9Data Security

rk222 has implemented a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied across the entire rk222 Platform, including all login, deposit, withdrawal, and account management pages
• Encrypted storage of all personal data at rest, using industry-standard encryption algorithms
• Role-based access controls ensuring that rk222 staff can access personal data only to the extent required for their specific job function
• Multi-factor authentication requirements for internal rk222 systems that process personal data
• Regular security audits and penetration testing conducted by independent security professionals
• Automated intrusion detection and monitoring systems operating on a continuous basis
• Staff training on data protection obligations and secure data handling practices
• An incident response procedure enabling rk222 to detect, contain, and respond to data security incidents promptly

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. rk222 cannot warrant absolute security of your data. In the event of a data breach that poses a material risk to your rights, rk222 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10Your Rights

As an rk222 player, you hold the following rights in respect of your personal data. rk222 will respond to all valid rights requests within 30 days of receipt. Requests should be submitted in English to [email protected] with the subject line "Data Rights Request".

• Right of access: You have the right to request a copy of all personal data rk222 holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data rk222 holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You have the right to request that rk222 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to rk222 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to rk222 demonstrating compelling grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

rk222 will not charge a fee for handling rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case rk222 may charge a reasonable administrative fee or decline to act on the request. rk222 will notify you of any such decision.

11Minors & Age Policy

The rk222 Platform is strictly intended for individuals aged 21 years and older. rk222 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. If rk222 becomes aware that personal data has been collected from an individual under 21, that account will be immediately suspended, all data relating to the underage individual will be deleted, and any associated funds will be returned to the original payment source.

Parents and guardians are encouraged to make use of internet filtering and parental control tools to restrict access to online gambling platforms. rk222 recommends resources such as GamBlock and Betfilter for households with minors present.

12International Data Transfers

rk222's primary operations and data processing infrastructure are oriented towards serving the Bangladesh market. However, some of rk222's third-party service providers — including game software suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming — operate data processing infrastructure located outside Bangladesh. In such cases, rk222 ensures that any transfer of personal data to a third country is subject to appropriate safeguards, including contractual clauses that require the recipient to apply data protection standards equivalent to those described in this Privacy Policy.

rk222 does not transfer your personal data to any third country or international organisation except where necessary to deliver the services described in this Privacy Policy, and in each case only subject to the safeguards described above. If you require further information about the specific mechanisms rk222 relies upon for any particular international transfer, please contact our support team at [email protected].

13Policy Amendments

rk222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. When material changes are made to this Policy, rk222 will notify registered players by email to the address on file and will display a prominent notice on the Platform upon your next rk222 login. The revised Policy will take effect from the date stated in the notification.

We encourage you to review this Privacy Policy periodically to remain informed of how rk222 protects your personal data. The version number and effective date displayed at the top of this document will be updated each time a revision is published. Your continued use of the rk222 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

If you do not accept an amended Privacy Policy, you must discontinue use of the rk222 Platform and may request account closure by contacting [email protected]. Upon closure, your data will be retained only for the periods required by our legal obligations as described in Section 7 of this Policy.

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to rk222's handling of your personal data, please contact our dedicated data privacy support team using the details below. All privacy-related enquiries are handled by English-speaking staff with specific data protection responsibilities.

For data erasure or account closure requests, please include your registered rk222 username and the email address associated with your account in your message to enable us to locate and action your request promptly. rk222 may request additional verification of your identity before processing certain rights requests in order to ensure that we are responding to the genuine account holder.

If you are dissatisfied with rk222's response to a privacy-related complaint, you have the right to escalate your concern to our senior management team by emailing [email protected] with the subject line "Formal Privacy Complaint" along with full details of your concern and any relevant correspondence.