rk555 Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes the data-processing practices of rk555 ("we", "us", "our", "the Platform") in relation to all individuals ("you", "the Player") who visit, register on, or use the rk555 website at https://rk555.io and all associated services, games, payment functions, and support channels.

By creating an rk555 Account or otherwise using the Platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the rk555 Terms & Conditions and should be read alongside them. If any conflict arises between this Policy and the Terms & Conditions in respect of data-protection matters, this Policy shall prevail.

This Policy applies to all players accessing rk555 from Bangladesh, including players located in Dhaka, Chittagong, Syl het, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh. It covers all data collected through the rk555 website, mobile browser interface, customer support channels, and payment processing flows.

2 Data Controller

rk555 acts as the data controller in respect of all personal data collected through the Platform. As data controller, rk555 determines the purposes for which and the means by which personal data is processed. If you have any questions or concerns about how your personal data is handled, please contact our dedicated privacy team using the details provided in Section 12 of this Policy.

rk555 is committed to processing personal data lawfully, fairly, and transparently, and to holding data only for as long as is necessary for the purposes described in this Policy.

3 Categories of Personal Data We Collect

rk555 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the website, and from third-party service providers such as payment processors. The categories of data we collect are as follows:

rk555 does not collect any special categories of sensitive personal data (such as health records, biometric data, religious beliefs, or political opinions) unless this is strictly required by applicable law or explicitly consented to by the Player for a specific purpose.

4 How We Use Your Personal Data

rk555 processes your personal data only where there is a lawful basis for doing so. The lawful bases we rely on are: performance of a contract (operating your Account), compliance with a legal obligation, legitimate business interests, and your explicit consent where applicable. The specific purposes for which we use your personal data are:

• Account Management: To create, verify, maintain, and close your rk555 Account; to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported bank transfers; and to apply responsible gaming limits and restrictions you have requested.
• Identity Verification (KYC): To verify that you are at least 21 years of age and to confirm your identity before processing withdrawals, in accordance with anti-money-laundering (AML) obligations. rk555 enforces a strict 21+ age policy across the entire Platform.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, money laundering, and other prohibited conduct as defined in the rk555 Terms & Conditions. Technical and usage data are integral to this process.
• Customer Support: To respond to your enquiries, resolve complaints, handle responsible gaming requests, and communicate important account notifications — all in English, 24 hours a day, 7 days a week.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including cooperation with regulatory authorities and law enforcement agencies in Bangladesh where lawfully required.
• Platform Improvement: To analyse aggregated usage data in order to improve the rk555 game library, payment flows, user interface, and overall player experience.
• Promotional Communications: To send you information about bonuses, seasonal promotions (such as Eid, Pohela Boishakh, BPL, and IPL promotions), and relevant rk555 offers — but only where you have opted in to receive such communications. You may withdraw this consent at any time by contacting [email protected].

5 Cookies and Tracking Technologies

rk555 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse site performance. The categories of cookies used on rk555 are as follows:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable core features such as secure login sessions, page navigation, and access to protected account areas. These cookies cannot be disabled.
• Performance and Analytics Cookies: These collect anonymised information about how Players use rk555 — such as which pages are visited most frequently and how long sessions last. This data helps us improve the Platform. No personally identifiable information is shared with analytics providers.
• Functionality Cookies: These remember your preferences such as preferred language (English), regional settings (Bangladesh Standard Time, BST/UTC+6), and interface layout choices, so you do not need to reset them on every visit.
• Security Cookies: These support our fraud detection and session integrity systems, helping us identify and block suspicious login attempts, session hijacking, and other security threats to your Account.

By continuing to use the rk555 Platform after being presented with our cookie notice, you consent to our use of non-essential cookies as described above. You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may impair the functionality of the rk555 Platform.

6 Sharing Your Personal Data

rk555 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances, and only to the extent strictly necessary for the specified purpose:

• Payment Processors: Your financial data (wallet numbers, transaction references) is shared with the relevant mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) solely to process your deposits and withdrawals in BDT.
• Game Providers: Certain technical and usage data (such as Player ID, session token, and wager history) is transmitted to our certified Game Providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to facilitate game delivery, results certification, and technical support. These providers process data under their own certified data-protection frameworks.
• Identity Verification Partners: Where KYC verification is required, your identity documents may be processed by a third-party identity verification service operating under strict data-processing agreements with rk555. Documents are used solely for age and identity verification and are not retained beyond the period required by applicable law.
• Legal and Regulatory Authorities: rk555 may disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh where required to do so by applicable law, a valid legal order, or to protect the rights and safety of rk555, its Players, or third parties.
• Business Successors: In the event of a merger, acquisition, or sale of all or substantially all of rk555's assets, your personal data may be transferred to the successor entity, subject to equivalent data-protection commitments.

All third parties with whom rk555 shares personal data are required, by contract, to process that data only for the specified purposes, to maintain appropriate security standards, and to comply with all applicable data-protection obligations.

7 Data Security

rk555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the rk555 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Password Hashing: Account passwords are stored using industry-standard cryptographic hashing algorithms (bcrypt or equivalent). rk555 does not store passwords in plain text, and support staff never have access to your password.
• Two-Factor Authentication (2FA): rk555 offers SMS OTP-based two-factor authentication for all accounts. We strongly recommend that all Players enable 2FA to add an additional layer of protection to their Account.
• Continuous Fraud Monitoring: rk555 employs automated and manual fraud detection systems that continuously monitor Account activity for signs of unauthorised access, unusual transaction patterns, or suspicious behaviour.
• Access Controls: Access to personal data within rk555's internal systems is restricted on a need-to-know basis. Staff who access Player data are bound by confidentiality obligations and receive regular data-protection training.
• Data Minimisation: rk555 collects and retains only the minimum personal data necessary for the purposes described in this Policy. Data that is no longer needed is securely deleted or anonymised in accordance with our retention schedules.

8 Data Retention

rk555 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, to maintain your active Account, and to comply with applicable legal, regulatory, and audit obligations. The following general retention principles apply:

• Active Accounts: Personal data associated with an active rk555 Account is retained for the full duration of the Account's existence and for a period of at least five (5) years following Account closure, to satisfy anti-money-laundering and financial record-keeping requirements.
• Identity Verification Documents: Copies of identity documents submitted for KYC purposes are retained for a minimum of five (5) years from the date of submission, or longer if required by applicable law.
• Transaction Records: Complete records of all deposit and withdrawal transactions in BDT are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Records of support tickets, live-chat transcripts, and email correspondence are retained for two (2) years from the date of each interaction, or longer where the subject matter of the communication is relevant to an ongoing dispute or investigation.
• Technical and Usage Data: Anonymised or aggregated usage data may be retained indefinitely for platform analytics purposes. Non-anonymised technical data (such as IP logs) is retained for up to twelve (12) months.
• Self-Exclusion Records: Records of self-exclusion requests and responsible gaming tool settings are retained for the duration of the exclusion period and for five (5) years thereafter, to prevent re-registration during an active exclusion.

When retention periods expire, data is securely deleted using methods appropriate to the sensitivity of the data in question. Data that cannot be immediately deleted (for example, where it forms part of a backup set) will be isolated from active processing until it can be permanently removed.

9 Your Rights Over Your Personal Data

As an rk555 player in Bangladesh, you have the following rights in respect of your personal data. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Privacy Rights Request" and include your full registered name and Account mobile number for verification purposes. rk555 will respond to all privacy rights requests within 30 calendar days of receipt.

• Right to Access: You have the right to request a copy of the personal data rk555 holds about you, along with information about how that data is being used and with whom it has been shared.
• Right to Rectification: If any of the personal data rk555 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update your contact details directly through your Account settings; other corrections require a support request.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent. This right is subject to rk555's legal obligations to retain certain data as described in Section 8.
• Right to Restrict Processing: You have the right to request that rk555 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of rk555's legitimate grounds.
• Right to Data Portability: Where rk555 processes your personal data on the basis of your consent or for the performance of a contract, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where rk555 relies on your consent to process personal data (for example, for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact [email protected].
• Right to Object: You have the right to object to rk555's processing of your personal data where that processing is based on legitimate interests, including profiling based on legitimate interests. rk555 will cease processing unless compelling legitimate grounds can be demonstrated that override your interests.

10 Children and Minors

The rk555 Platform is strictly restricted to individuals who are 21 years of age or older. rk555 does not knowingly collect, process, or retain personal data from any individual under the age of 21. If you are under 21 years of age, you must not register an Account, access the Platform, or submit any personal data to rk555.

If rk555 becomes aware that personal data has been collected from an individual under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. If you are a parent or guardian and believe that your child under 21 may have registered on rk555, please contact us immediately at [email protected].

11 Changes to This Privacy Policy

rk555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, changes in applicable law, or updates to the rk555 Platform and services. Material changes to this Policy will be communicated to registered Players via a notification displayed upon next login, or via the email address registered to the Player's Account, at least 7 days before the changes take effect — except where immediate changes are required for security or legal-compliance reasons.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to remain informed about how rk555 protects your personal data. Your continued use of the rk555 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

Previous versions of this Privacy Policy are available upon request by contacting [email protected]. All previous versions are held in English and are governed by the same legal framework as the current version.

12 Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by rk555, please contact our privacy and support team using the details below. All privacy-related enquiries are handled in English by our dedicated team, 24 hours a day, 7 days a week, including all Bangladesh public holidays:

• Email: [email protected] — Please use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request" for faster routing.
• Support Hours: 00:00 – 24:00 BST (UTC+6) — Every day of the year, including Eid, Victory Day (16 December), Independence Day (26 March), and all other Bangladesh public holidays.
• Response Time: Privacy rights requests acknowledged within 48 hours; fully resolved within 30 calendar days of receipt.
• Coverage: All eight divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh.

Please note: rk555 staff will never ask for your Account password, OTP codes, or payment PINs during any privacy rights interaction. Any communication requesting such information should be treated as fraudulent and reported to [email protected] immediately.