r788 Privacy Policy — Your Data, Protected

1. Information We Collect

When you register an account, make a deposit, place a bet, contact customer support or otherwise interact with the r788 Platform, we collect certain categories of personal information. The categories of information we collect include:

• Identity information: full name, date of birth, gender, nationality and a copy of a government-issued identity document where KYC verification is required.
• Contact information: email address and any contact details voluntarily provided when communicating with our support team.
• Financial information: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account references) used for deposits and withdrawals, transaction history and account balance records. r788 does not store full payment credentials — transactions are processed through the relevant mobile wallet provider's own infrastructure.
• Technical and usage data: IP address, device type, operating system, browser type and version, session duration, pages visited, game activity logs, and betting history.
• Communications data: records of communications you send to r788 via live chat or email, including support requests, complaints and responsible gaming enquiries.

We collect only the information that is necessary for the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless this is strictly required to comply with a legal obligation.

2. How We Use Your Information

r788 uses the personal information we collect for the following purposes:

• Account management: to create, maintain and administer your r788 account, verify your identity, and ensure you meet the Platform's eligibility requirements including the 21+ age restriction.
• Transaction processing: to process deposits and withdrawals via bKash, Nagad, Rocket and Upay, verify payment sources, and maintain accurate financial records.
• Platform improvement: to analyse usage patterns, diagnose technical issues, improve game performance and optimise the user experience for Bangladesh players on mobile devices.
• Fraud prevention and security: to detect, investigate and prevent fraudulent activity, bonus abuse, money laundering, multi-accounting and other conduct prohibited under our Terms and Conditions.
• Responsible gaming: to monitor gaming behaviour for signs of problem gambling and to administer the responsible gaming tools available through your account dashboard, including deposit limits and self-exclusion.
• Legal and regulatory compliance: to fulfil our obligations under applicable law, respond to lawful requests from competent authorities, and maintain records required for audit and compliance purposes.

We do not use your personal information for automated individual decision-making that produces significant legal effects without human review. We do not use your data to serve third-party advertising or to build advertising profiles for external marketing purposes.

3. Legal Basis for Processing

r788 processes your personal data on the following legal bases:

• Contractual necessity: the processing is necessary to perform the contract between you and r788 — specifically, to operate your account, process transactions and provide access to the Platform's games and services.
• Legal obligation: the processing is necessary to comply with applicable laws, including anti-money laundering regulations, KYC requirements, and the age verification obligations that apply to online gaming platforms.
• Legitimate interests: the processing is necessary for r788's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring and improving the quality of the service we deliver to Bangladesh players.
• Consent: where we process data for purposes not covered by the above bases — for example, sending you optional promotional communications — we will request your explicit consent at the relevant point. You may withdraw consent at any time by contacting our support team via live chat.

4. Payment Data and Mobile Wallet Processing

When you deposit or withdraw funds using bKash, Nagad, Rocket or Upay, your transaction is processed through that mobile wallet provider's own payment infrastructure. r788 receives confirmation of the transaction outcome and retains a record of the transaction amount, date, time and the wallet reference associated with your account.

Transaction records are retained in accordance with the data retention periods described in Section 7 of this Policy. These records are used to investigate payment disputes, comply with financial record-keeping requirements and support any KYC or anti-money laundering reviews that may be required.

5. Cookies and Technical Tracking

r788 uses cookies and similar tracking technologies to operate the Platform, maintain session continuity, and collect the usage data described in Section 1. The types of cookies we use include:

• Essential cookies: these are strictly necessary for the Platform to function. They enable session management, account authentication and the delivery of core gaming and payment services. These cookies cannot be disabled without breaking Platform functionality.
• Analytics cookies: these collect aggregated, anonymised data about how users navigate the Platform. This data is used to identify usability issues, improve page load performance on Bangladesh mobile networks, and prioritise product development. Analytics data is not used to identify individual users.
• Preference cookies: these remember user-specific settings such as language preference and responsible gaming tool configurations, so these settings are preserved across sessions without requiring you to reconfigure them each time.

Most mobile browsers allow you to manage cookie preferences through their settings. Disabling essential cookies will impair or prevent your use of the Platform. r788 does not use cookies to track your activity on third-party websites or to serve targeted advertising outside of the r788 Platform.

6. Sharing Your Information

r788 does not sell, rent or trade your personal data. We share your information only in the following limited circumstances:

• Service providers: we share data with carefully selected third-party service providers who assist us in operating the Platform, including game content providers (such as Pragmatic Play, Evolution Gaming and Ezugi), payment processing infrastructure partners, and fraud detection and KYC verification service providers. These providers are contractually bound to process your data only as instructed by r788, in accordance with this Policy, and with appropriate technical and organisational security measures in place.
• Legal and regulatory authorities: we disclose data to law enforcement agencies, regulatory bodies or other competent authorities when required to do so by applicable law, court order or lawful governmental request. r788 will notify you of any such disclosure unless prohibited from doing so by law.
• Business transfers: in the event of a merger, acquisition, restructuring or sale of assets involving r788, your personal data may be transferred as part of that transaction. We will notify you of any such transfer and of any material changes to how your data is handled as a result.
• With your consent: we may share your data with third parties for purposes not described above where you have provided explicit prior consent. You may withdraw that consent at any time.

Where we transfer personal data to third-party service providers, we ensure that appropriate contractual safeguards are in place. r788 remains responsible for the handling of your personal data and will not permit any service provider to use your data for their own purposes beyond those described in their service agreement with r788.

7. Data Retention

r788 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with our legal and regulatory obligations. Specifically: account data and transaction records are retained for a minimum of five years following account closure, in accordance with standard financial record-keeping requirements. Communications data (support interactions) is retained for a minimum of two years. Technical and usage data collected via cookies and session logs is retained for up to twelve months, after which it is anonymised or deleted.

Where you have requested account closure and there are no outstanding legal or regulatory obligations requiring us to retain your data, r788 will delete or anonymise your personal data within a reasonable period. Requests for early deletion may be submitted via live chat support and will be reviewed in accordance with our legal obligations.

8. Data Security

r788 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Our security measures include:

• SSL/TLS encryption on all data transmissions between your device and the r788 Platform, ensuring that your personal and financial data cannot be intercepted in transit.
• Access controls: only authorised r788 personnel with a legitimate operational need are permitted access to personal data. All access is logged and subject to regular audit review.
• Data storage security: personal data is stored on secure servers with appropriate physical and network security controls. Sensitive account data is stored in encrypted form.
• Incident response: r788 maintains a data breach response procedure. In the event of a security incident that affects your personal data, we will notify you promptly and take all reasonable steps to contain and remediate the breach.

While r788 takes data security seriously and employs industry-standard safeguards, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of data transmitted over the internet. You are responsible for keeping your r788 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

9. Your Data Rights

As a user of the r788 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or by email at [email protected]:

• Right of access: you may request a copy of the personal data r788 holds about you. We will provide this within a reasonable period, subject to identity verification.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. You may also update certain account details directly via your account dashboard.
• Right to erasure: you may request that we delete your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent (where consent was the legal basis), or where you object to processing and there is no overriding legitimate interest.
• Right to restrict processing: in certain circumstances you may request that we restrict the processing of your data — for example, while a correction request is being resolved, or while an objection to processing is under review.
• Right to object: you may object to the processing of your personal data where we rely on legitimate interests as the legal basis for that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

r788 will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request. Where a request cannot be fully complied with — for example, because retaining the data is required by law — we will explain the reason and the extent to which we are able to assist.

10. Protection of Minors

The r788 Platform is strictly for persons aged 21 years and above. r788 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will delete that data immediately and close the associated account. Any funds deposited by an underage user will be returned to the source payment method after identity investigation.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an r788 account or provided personal data to r788 without your knowledge, please contact us immediately via live chat support so that we can take appropriate action.

11. Third-Party Links and Services

The r788 Platform may reference third-party services such as mobile wallet providers (bKash, Nagad, Rocket, Upay) and game content providers. r788 is not responsible for the privacy practices of these third parties. When you interact with a third-party service — for example, when you initiate a bKash payment — you are subject to that provider's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party services you use in connection with your r788 account.

12. Changes to This Privacy Policy

r788 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last updated" date at the top of this document and, where appropriate, notify registered account holders via a notice displayed on the Platform or a communication sent to the contact details associated with your account.

Your continued use of the r788 Platform following the posting of any changes to this Policy constitutes your acceptance of the revised Policy. We recommend that you review this Policy periodically to stay informed about how r788 protects your personal data. If you disagree with any amendment, you must cease using the Platform and may request account closure via live chat support.

13. Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to the way r788 handles your personal data, please contact our support team via live chat, available 24 hours a day, 7 days a week. Our team is trained to handle data enquiries and will assist you with any rights request, correction, deletion or objection efficiently and confidentially.

You may also reach r788 by email at [email protected]. For data access or deletion requests, email is the recommended channel as it allows you to submit your request in writing and provides a record of the correspondence. r788 will acknowledge all data-related requests within one business day and aim to resolve them fully within thirty days.