rr44 Privacy Policy
At rr44, protecting your personal data is a core responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold as a player based in Bangladesh or anywhere else you access our platform.
How rr44 Protects Your Privacy
Before diving into the full policy, here are the six core privacy commitments rr44 makes to every player on our platform.
Data Minimisation
We collect only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively.
No Unauthorised Sale of Data
rr44 does not sell, rent, or trade your personal data to third-party marketers. Data is shared only with service partners directly required to operate the platform — and only under strict contractual controls.
SSL Encryption in Transit
All data transmitted between your device and rr44.bio is protected by industry-standard TLS/SSL encryption. Your login credentials, payment details, and personal information are never sent in plain text.
Your Rights Are Respected
You have the right to access, correct, and request deletion of your personal data at any time. rr44 responds to all verified data subject requests within 30 days of receipt, free of charge for the first request per 12-month period.
Defined Retention Periods
We do not hold your data indefinitely. Retention periods are tied to the purpose for which data was collected and to applicable legal obligations. When data is no longer needed, it is securely deleted or anonymised.
Breach Notification
In the unlikely event of a data breach that materially affects your personal information, rr44 will notify affected players promptly and take immediate steps to contain the incident and mitigate any harm.
Information We Collect
rr44 collects personal data through several channels: directly from you when you register or use our services, automatically when you interact with our platform, and occasionally from third-party service providers involved in payment processing or fraud prevention.
1.1 Information You Provide Directly
- Registration data: Your full legal name, date of birth, email address, mobile phone number (Bangladeshi number preferred for OTP verification), and a chosen username and password.
- KYC verification documents: National Identity Card (NID), passport, driving licence, or other government-issued photo ID; proof of address such as a utility bill or bank statement dated within three months; and in some cases, a live selfie with the presented ID document.
- Payment information: bKash mobile number, Nagad mobile number, Rocket or Upay account details, bank account or card details (Visa/Mastercard) used to fund your rr44 wallet. rr44 does not store full card numbers — payment card data is handled by our PCI-compliant payment partners.
- Communications: Any messages, emails, live chat transcripts, or feedback you send to rr44 support, including the content and metadata of those communications.
- Responsible gaming declarations: Self-exclusion requests, deposit limit settings, session time preferences, and any other voluntary disclosures you make via the responsible gaming tools.
1.2 Information Collected Automatically
- Device and technical data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and mobile device identifiers.
- Usage and gameplay data: Pages visited, games played, wagers placed, bet amounts, session start and end times, in-game actions, and navigation paths through the platform.
- Geolocation data: Country and approximate region inferred from your IP address, used to apply access restrictions where required and to detect suspicious activity inconsistent with your usual location.
- Cookies and similar technologies: Session cookies, persistent cookies, and local storage objects. See Section 5 for full details of our cookie practices.
1.3 Information From Third Parties
- Payment service providers: Confirmation of transaction status, payment method ownership verification, and fraud-risk signals from bKash, Nagad, Rocket, Upay, and our card processing partners.
- Identity verification partners: Where rr44 uses a third-party KYC provider, we may receive a verified identity score or document-authenticity assessment alongside the underlying document data you submitted.
- Fraud prevention and anti-money-laundering (AML) tools: Risk scores, watchlist screening results, and device fingerprint analysis from third-party security providers engaged by rr44.
How We Use Your Data
rr44 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose incompatible with the ones listed below without first obtaining your explicit consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, mobile number, username, password | Contract performance |
| Identity verification (KYC) | Government ID, proof of address, selfie | Legal obligation; contract performance |
| Payment processing | bKash/Nagad/Rocket details, bank/card data, transaction history | Contract performance |
| Customer support | Account data, communication history, gameplay logs | Contract performance; legitimate interest |
| Fraud prevention and security | IP address, device data, behavioural patterns, AML screening results | Legitimate interest; legal obligation |
| Responsible gaming compliance | Gameplay activity, deposit history, self-exclusion status | Legal obligation; vital interest |
| Marketing communications (opt-in only) | Email, mobile number, game preference data | Consent |
| Platform analytics and improvement | Usage data, navigation paths, device/browser data | Legitimate interest |
| Legal and regulatory compliance | All categories as required | Legal obligation |
Marketing Communications
rr44 will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your consent at any time by updating your communication preferences in your account or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
Automated Decision-Making
rr44 uses automated systems for certain purposes including fraud detection, AML screening, and bonus abuse identification. Where a fully automated decision produces a legal or similarly significant effect on you — such as account suspension — you have the right to request human review of that decision by contacting our support team.
Legal Basis for Processing
Every instance of personal data processing at rr44 is grounded in one of the following lawful bases. We identify and document the applicable basis before any new processing activity is initiated.
- Contract performance: Processing is necessary to provide the services you requested when you created your rr44 account — including account management, game access, and payment handling. Without this processing, we cannot fulfil our obligations to you under our Terms & Conditions.
- Legal obligation: Certain processing activities are required by applicable law, including KYC identity verification, AML transaction monitoring, age verification, and record-keeping obligations. rr44 must carry out this processing regardless of your consent.
- Legitimate interest: Where rr44 has a genuine and proportionate business interest in processing your data — such as fraud prevention, platform security, customer support quality improvement, and internal analytics — and that interest is not overridden by your fundamental rights. You have the right to object to processing based on legitimate interest.
- Consent: For optional activities such as marketing communications, personalised game recommendations, and non-essential cookies, rr44 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your account standing.
- Vital interest: In rare circumstances, rr44 may process data to protect a person's life — for example, if a player discloses a mental health crisis in a responsible gaming interaction.
Contract Performance Is the Primary Basis
The vast majority of rr44's personal data processing is necessary to deliver the services you signed up for. Without this processing, we cannot operate your account, accept deposits, or pay out winnings.
Consent Is Always Optional and Reversible
Where rr44 relies on consent — primarily for marketing — you are never penalised for withholding or withdrawing it. Your account and gameplay access are unaffected by marketing consent status.
Data Sharing & Disclosure
rr44 does not sell your personal data. We share data only in the following strictly limited circumstances, and only with parties who are contractually bound to handle it with equivalent levels of care:
Payment Service Providers
To process deposits and withdrawals, rr44 shares necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and our Visa/Mastercard processing partners. These providers receive only the data required to complete the specific transaction and are prohibited from using it for any other purpose.
Identity and KYC Verification Partners
Where rr44 employs a third-party identity verification or document authentication service, your KYC documents and associated personal data are transmitted to that provider over encrypted channels. The provider processes the data solely for the purpose of delivering a verification result to rr44 and does not retain it beyond the period necessary to complete verification.
Fraud Prevention and AML Partners
rr44 may share device fingerprint data, IP address, transaction patterns, and account behavioural data with fraud prevention and anti-money-laundering technology providers. These disclosures are necessary to meet our legal obligations and protect the integrity of the platform for all players.
Game Software Providers
Game studios and software providers whose games are available on rr44 (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) receive a session token and player identifier to enable gameplay. These providers do not receive your full name, payment details, or contact information unless you have separately registered with them directly.
Legal and Regulatory Disclosures
rr44 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. We will, where legally permitted, notify you of such a disclosure before it occurs.
Business Transfers
In the event that rr44's business or assets are acquired, merged, or transferred to another entity, player data may form part of the transferred assets. Affected players will be notified in advance and given the opportunity to exercise their data rights before any such transfer takes effect.
rr44 will never share your personal data with third-party advertisers, data brokers, social media platforms, or unrelated commercial entities.
Data Retention & Deletion
rr44 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies as a general guide:
- Account and registration data: Retained for the duration of your active account, plus a minimum of five (5) years following permanent account closure, in compliance with financial record-keeping and AML obligations.
- KYC documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable AML legislation or an ongoing regulatory investigation.
- Transaction and payment records: Retained for a minimum of five (5) years following the date of the transaction, consistent with financial audit and AML requirements.
- Customer support communications: Retained for three (3) years from the date of the interaction, unless the matter relates to a dispute or legal claim, in which case records are retained until final resolution plus one (1) year.
- Marketing consent records: Retained from the date of opt-in until the point of consent withdrawal, plus two (2) years as evidence of consent history.
- Analytics and usage data: Aggregated and anonymised after 24 months. Individual-level usage data is not retained beyond this period.
- Cookies: As described in the duration column of the Cookie table in Section 5 above.
Deletion Requests
You may request deletion of your personal data at any time by contacting [email protected]. rr44 will action verified deletion requests within 30 days, subject to the following limitations: we are legally required to retain certain data (particularly KYC documents and financial transaction records) regardless of a deletion request. In such cases, we will confirm which data categories are subject to mandatory retention and why, and delete all other data that is not legally required.
Your Privacy Rights
As a player on rr44's platform, you hold the following rights with respect to your personal data. rr44 is committed to facilitating the exercise of these rights promptly and without creating unnecessary barriers.
Right of Access
You may request a copy of the personal data rr44 holds about you, along with information about how it is used, where it came from, and with whom it has been shared. We will respond within 30 days.
Right to Rectification
If any personal data rr44 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly in your account settings or by contacting support.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you have withdrawn consent. Mandatory legal retention obligations apply — see Section 6.
Right to Restriction
You may ask rr44 to pause processing of your data — for example, while the accuracy of that data is being contested or a legitimate interest objection is being assessed — without requesting full deletion.
Right to Data Portability
Where processing is based on consent or contract performance and is carried out by automated means, you may request your data in a structured, machine-readable format suitable for transfer to another service provider.
Right to Object
You have the right to object to processing based on legitimate interest, including profiling. rr44 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
How to Exercise Your Rights
To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing the request. There is no charge for a first request within any 12-month period. Where a request is manifestly unfounded or excessive, rr44 reserves the right to charge a reasonable administrative fee or decline to action it, with a written explanation provided.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without adverse consequence to your account standing. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
Data Security Measures
rr44 takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to prevent unauthorised access, accidental loss, destruction, or disclosure. Key measures include:
- Transport Layer Security (TLS): All data in transit between your browser and rr44.bio is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed without interruption.
- Password hashing: Player passwords are never stored in plain text. rr44 uses a strong, salted cryptographic hashing algorithm to store password credentials, meaning that even internal personnel cannot retrieve your original password.
- Two-factor authentication (2FA): OTP-based two-factor authentication is applied at login and for sensitive account actions such as withdrawal requests and contact detail changes.
- Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All internal data access is logged and subject to periodic audit.
- Encrypted storage: Sensitive data categories — including KYC documents, payment method details, and identity verification records — are stored with encryption at rest.
- Penetration testing and vulnerability management: rr44 conducts periodic security assessments of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
- Incident response plan: rr44 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player data, affected players will be notified as promptly as possible with clear information about what data was affected and what steps are being taken.
While rr44 applies robust security measures, no online platform can guarantee absolute security. You play an important role in keeping your account secure: use a strong, unique password, never share your login credentials, and contact us immediately if you suspect your account has been compromised.
Changes to This Policy
rr44 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or improvements to our platform. The effective date at the top of this page will be updated whenever material changes are made.
Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — rr44 will provide advance notice to registered players via their registered email address, or by displaying a prominent notice on rr44.bio, no less than 14 days before the change takes effect. Non-material changes (such as editorial clarifications, improved readability, or minor administrative updates) may be made without prior notice.
Continued use of rr44 following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should cease using the platform and request account closure as described in our Terms & Conditions.
Governing Language
This Privacy Policy is published in English. In the event of any inconsist ency between any translated version and the English original, the English version shall prevail.
Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or rr44's handling of your personal data, please reach out using the contact details below. rr44 is committed to responding to all privacy-related enquiries within five (5) business days.
Data Controller
rr44 acts as the data controller for all personal data collected through rr44.bio. As data controller, rr44 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.
How to Contact Us
For all privacy-related enquiries, data subject access requests, consent withdrawal requests, or general data protection questions, please write to:
- Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing
- Response time: Within 5 business days for general enquiries; within 30 calendar days for formal data subject requests
- Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
Complaints
If you are not satisfied with rr44's response to a privacy concern or data subject request, you have the right to escalate the matter to an appropriate supervisory authority. rr44 encourages players to contact us directly in the first instance so we have the opportunity to resolve your concern before escalation.
Privacy Enquiries
Email [email protected] with subject line "Privacy Enquiry" for data rights requests, consent withdrawal, or questions about how your data is used.
Response Commitment
rr44 acknowledges all privacy enquiries within 2 business days and provides a full response within 30 calendar days for formal data subject requests, at no charge for the first request per year.
Ready to Play at rr44?
Now that you understand how rr44 protects your data, explore our full range of games and sports betting options — all designed for players in Bangladesh with fast bKash and Nagad payments.