rm777 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how rm777, operating under the domain rm777.ws ("we", "us", "our", "rm777", "the Platform"), collects, uses, stores, and shares personal data relating to individuals who register, visit, or otherwise interact with the rm777 platform ("you", "Player", "User"). This Policy forms part of the rm777 Terms and Conditions and should be read together with them. By registering an account or using the rm777 platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.

rm777 is committed to handling your personal data with transparency, care, and respect. We collect only what is necessary to deliver our services, keep your data secure, and never sell your information to third parties for marketing purposes. This Policy applies to all personal data collected through the rm777 website, mobile platform, customer support channels, and any other touchpoints through which you interact with rm777.

Our Privacy Commitments at a Glance

The following six principles summarise how rm777 approaches the privacy of every player account. Full details are set out in the sections below.

Information We Collect

rm777 collects personal data through three main channels: information you provide directly when registering or using the platform, information generated by your use of the platform, and technical information collected automatically by our systems. The categories of data we collect are as follows:

Information You Provide to Us

• Registration details: your Bangladesh mobile number, chosen username, and password (stored in hashed form only — never in plaintext).
• Identity documents: National Identity Card (NID) or passport submitted as part of KYC verification.
• Payment information: bKash, Nagad, Rocket, or Upay account numbers used for deposits and withdrawals. We do not store your mobile wallet PIN.
• Support communications: messages, emails, and live chat transcripts submitted to rm777 customer support.
• KYC documentation: any additional documents requested during the identity or source-of-funds verification process.

Information Generated by Your Use of rm777

• Gameplay data: games played, bet amounts, session duration, wins and losses, game preferences, and betting history.
• Transaction records: full deposit and withdrawal history including amounts, timestamps, and payment method references.
• Bonus and promotion activity: bonuses claimed, wagering progress, and promotional offer interactions.
• Account activity logs: login timestamps, device types, and session information used for security monitoring.

Technical Information Collected Automatically

• IP address and approximate geographic location (country/city level only — rm777 does not collect GPS coordinates).
• Device and browser information: operating system, browser type, screen resolution, and device model.
• Cookie and session data: as further described in the Cookies and Tracking section of this Policy.

How We Use Your Information

rm777 uses personal data only for the specific purposes listed below. We do not use your data for purposes incompatible with those for which it was originally collected without obtaining your consent.

Legal Basis for Processing

rm777 processes personal data only where a valid legal basis exists. The legal bases applicable to rm777's processing activities are:

• Contractual necessity: processing required to fulfil our obligations under the rm777 Terms and Conditions — including account management, payment processing, and service delivery.
• Legal obligation: processing required to comply with applicable anti-money laundering, KYC, data protection, and financial regulation requirements.
• Legitimate interests: processing conducted for fraud prevention, platform security, abuse detection, and operational improvement — where these interests are not overridden by your rights.
• Consent: processing for purposes such as sending optional promotional communications, where we have obtained your explicit prior consent. You may withdraw consent at any time by contacting support.

How We Share Your Data

rm777 does not sell, rent, or trade your personal data. We share data only where strictly necessary for the operation of the platform, compliance with legal obligations, or protection of our legitimate interests. The circumstances in which we share data are set out below.

Service Providers

rm777 engages third-party service providers to assist in operating the platform. These providers are permitted to access personal data only to the extent necessary to perform their specific service function, and are contractually bound to process data only in accordance with rm777's instructions and applicable data protection obligations. Our service provider categories include:

• Game studios and platform technology providers (e.g., Pragmatic Play, Evolution Gaming, Spribe) who supply the games available on rm777.
• Payment processing partners who facilitate deposits and withdrawals via bKash, Nagad, Rocket, and other supported methods.
• KYC and identity verification providers who assist in processing identity documents and confirming player eligibility.
• Customer support technology providers who power our live chat and ticketing infrastructure.

Legal and Regulatory Disclosures

rm777 may be required by law to disclose personal data to competent authorities, regulatory bodies, law enforcement agencies, or courts. Such disclosures will be made only to the extent required by applicable law and will be documented internally. rm777 will endeavour to notify affected players of any such disclosure where legally permitted to do so.

Payment Data and Financial Information

rm777 takes special care with financial information. When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, we receive confirmation of the transaction from the payment provider along with the sending account number. We do not receive, and do not store, your mobile wallet PIN, OTP codes, or card CVV numbers at any point. Payment account numbers are stored in encrypted form and are used solely to process your transactions and to verify that withdrawals are directed to a payment account registered in your name.

For anti-money laundering compliance purposes, rm777 retains full transaction records — including deposit and withdrawal amounts, timestamps, and payment method references — for a minimum of five years from the date of each transaction, regardless of whether the associated account is subsequently closed. This retention period reflects standard financial services compliance practice and is not negotiable.

Cookies and Tracking

rm777 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and understand how players interact with the site. We do not use third-party advertising cookies or behavioural tracking for ad-targeting purposes. The cookies rm777 uses fall into three categories:

Cookie Categories

• Strictly necessary cookies: required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these without also disabling your ability to use the platform.
• Functional cookies: used to remember your preferences such as language settings, display options, and last-played game category. These improve your experience but are not essential to platform operation.
• Analytics cookies: used to collect aggregated, anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data helps rm777 improve the platform and is not linked to individual player identities.

You can manage cookie preferences through your device browser settings. Note that disabling functional or analytics cookies will not prevent you from using rm777, but may affect your platform experience. Disabling strictly necessary cookies will impair platform functionality.

Data Retention

rm777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer minimum periods required by applicable law. The following retention guidelines apply:

• Active account data: retained for the lifetime of your rm777 account and for a minimum of five years following account closure, to support dispute resolution, fraud investigations, and regulatory inquiries.
• Transaction and financial records: retained for a minimum of five years from the date of each transaction in accordance with anti-money laundering compliance requirements.
• KYC and identity documents: retained for the duration of the account and for a minimum of five years following account closure, in line with applicable regulatory requirements.

When a retention period expires and no legal basis for continued retention exists, rm777 will securely delete or anonymise the relevant personal data. Anonymised or aggregated data from which individual players cannot be identified may be retained indefinitely for statistical and analytical purposes.

Security Measures

rm777 applies a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between player devices and rm777 servers.
• Encrypted storage of sensitive account data including hashed passwords and payment account references.
• Access controls limiting internal staff access to personal data on a strict need-to-know basis, with all access logged and auditable.
• Active fraud detection and anomaly monitoring systems that flag unusual account activity for review by our security team.

While rm777 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. If you become aware of any security concern related to your rm777 account — including suspected unauthorised access — please contact our support team immediately at [email protected] so we can investigate and take prompt action.

Your Rights Over Your Personal Data

As a player on the rm777 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with your registered mobile number and a brief description of your request. We will acknowledge your request within 48 hours and aim to fulfil it within 30 days.

• Right of access: request a copy of all personal data rm777 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification: request correction of any personal data that is inaccurate, outdated, or incomplete.
• Right to erasure: request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction: request that rm777 restrict processing of your personal data — for example, while a correction request is being investigated.
• Right to data portability: request that rm777 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: object to the processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming purposes.

rm777 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive. Where rm777 is unable to fulfil a request — for example, because doing so would conflict with a legal retention obligation — we will explain the reason in writing.

Children's Privacy

The rm777 platform is strictly intended for adults aged 21 and above. rm777 does not knowingly collect or process personal data from individuals under the age of 21. Our registration process requires age confirmation, and all accounts are subject to KYC verification which includes age verification through identity documents.

Changes to This Policy

rm777 reserves the right to update this Privacy Policy at any time. When the Policy is updated, the "Last Updated" date at the top of this page will be revised. For material changes — those that meaningfully affect how we collect, use, or share your personal data — rm777 will endeavour to notify active account holders via their registered contact details in advance of the change taking effect, where reasonably practicable to do so.

Your continued use of the rm777 platform following the publication of any update to this Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the platform and may request account closure in accordance with the rm777 Terms and Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way rm777 processes your personal data, please contact our support team. We are available 24 hours a day, 7 days a week. Our team will acknowledge your privacy-related query within 48 hours and aim to resolve it within 30 days.