rc666 Privacy Policy — How We Handle Your Data

rc666 ("we", "us", "our") operates the online casino and sports betting platform accessible at rc666.pro. As the operator of this platform, rc666 acts as the data controller in respect of all personal data collected from users ("Players", "you") in connection with their use of the platform. This Privacy Policy sets out the categories of personal data we collect, the purposes for which that data is processed, the legal bases on which we rely, the circumstances in which data may be shared with third parties, and the rights that Players have in respect of their personal data.

This Privacy Policy should be read alongside the rc666 Terms and Conditions, which govern the overall contractual relationship between rc666 and its Players. In the event of any conflict between this Privacy Policy and the Terms and Conditions on a matter relating to personal data, this Privacy Policy shall take precedence. rc666 reserves the right to update this Privacy Policy at any time. Where a material change is made, rc666 will notify registered Players via their registered email address or via a prominent notice on the platform.

Personal data collected by rc666 is used for the following purposes:

• Account registration, verification, and ongoing account management, including the processing of deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity and age verification, including KYC document review, to ensure compliance with the 21+ age restriction and to prevent underage access to the platform.
• Fraud detection, account security monitoring, and prevention of money laundering and other financial crime — including the identification of suspicious transaction patterns and the enforcement of anti-money laundering controls.
• Responsible gaming monitoring — including tracking of account activity to identify patterns that may indicate problem gambling behaviour, and proactive outreach to Players where such patterns are observed.
• Customer support — including responding to queries, resolving disputes, and providing assistance in connection with account-related matters, payment processing issues, and gameplay queries.
• Platform improvement and technical optimisation — including analysis of device and session data to ensure that rc666 performs reliably on the mobile handsets and network connections most commonly used by Players in Bangladesh.
• Promotional communications — where a Player has not opted out, rc666 may use contact details to send relevant promotional information about bonuses, new games, seasonal offers (including Eid and Pohela Boishakh promotions), and platform updates. Players may opt out of promotional communications at any time by contacting support.

rc666 does not use personal data for purposes beyond those listed above without first obtaining the Player's explicit consent. In particular, rc666 does not sell, rent, or trade personal data to third-party marketers or data brokers under any circumstances.

rc666 processes personal data on the basis of one or more of the following lawful grounds, depending on the category of data and the purpose for which it is processed:

• Contract performance — processing that is necessary to fulfil our contractual obligations to the Player under the rc666 Terms and Conditions, including account management, deposit and withdrawal processing, and dispute resolution.
• Legitimate interests — processing that is necessary for the legitimate interests of rc666, including platform security, fraud prevention, responsible gaming monitoring, and technical improvement of the platform, where those interests are not overridden by the Player's own rights and interests.
• Legal obligation — processing that is required to comply with applicable legal obligations, including anti-money laundering requirements, age verification obligations, and responses to lawful requests from competent authorities.
• Consent — processing that is based on the Player's freely given, specific, informed, and unambiguous consent, including the sending of promotional communications and the processing of any sensitive personal data categories. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

rc666 may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment service providers — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners. Data shared with payment providers is limited to what is strictly necessary to process the relevant transaction and is governed by the payment provider's own privacy terms.
• Game studio providers — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other certified studios whose games are made available on the rc666 platform. Game data (session identifiers and game outcomes) is shared with the relevant studio for the purpose of operating the game and resolving game-related disputes.
• KYC and identity verification partners — third-party services engaged by rc666 to assist with the verification of Player identity and age. These partners process identity documents under strict confidentiality obligations and may not use the data for any purpose other than the verification service provided to rc666.
• Competent authorities and regulatory bodies — where rc666 is required by law, court order, or regulatory direction to disclose personal data, rc666 will comply with that obligation. Where legally permissible, rc666 will notify the affected Player before making such a disclosure.

rc666 does not transfer personal data to third parties located outside the jurisdictions in which rc666 operates except where strictly necessary to provide the payment or gaming services described above and subject to appropriate data transfer safeguards. All third-party service providers engaged by rc666 are contractually required to maintain data security standards consistent with those adopted by rc666.

rc666 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you access the rc666 website. Cookies allow rc666 to recognise your browser, remember your session preferences, and collect technical data about your interaction with the platform.

rc666 uses three categories of cookies. Strictly necessary cookies are essential to the operation of the platform and cannot be disabled without affecting core functionality. Performance and analytics cookies help rc666 understand how Players interact with the platform so that the user experience can be improved. Functional cookies remember your preferences (such as language selection) to provide a more personalised experience. You may configure your browser to refuse or delete cookies, but doing so may affect your ability to use certain features of the rc666 platform.

rc666 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include access controls limiting data access to authorised personnel only, encrypted storage of sensitive data fields, regular security assessments, and monitoring of platform access logs for anomalous activity. Despite these measures, no internet-based platform can guarantee absolute security, and rc666 cannot accept liability for security breaches that are outside its reasonable control.

In the event that rc666 becomes aware of a personal data breach that is likely to result in a risk to the rights and freedoms of affected Players, rc666 will take prompt remedial action and will notify affected Players without undue delay. Players who believe that the security of their account has been compromised should contact rc666 support immediately via the email address shown in the footer of this page.

rc666 retains personal data for as long as is necessary for the purposes for which it was collected, taking into account applicable legal retention obligations. For active Player accounts, personal data is retained for the duration of the account relationship. For closed or suspended accounts, rc666 retains transaction records, KYC documentation, and account history for a minimum period of five years following account closure, in accordance with anti-money laundering record-keeping requirements.

Once the applicable retention period has expired, personal data is securely deleted or anonymised in a manner that prevents re-identification. Players who wish to request early deletion of their personal data (subject to applicable legal retention obligations) may do so by contacting rc666 support via the email address in the footer. Note that rc666 may be unable to fulfil an early deletion request where retention of the data is required by law or is necessary to defend a legal claim.

rc666 will respond to all rights requests within a reasonable timeframe and in any event within 30 days of receipt of the request. Where a request is complex or where rc666 receives a high volume of requests, this period may be extended by a further 30 days, in which case rc666 will notify the Player of the extension and the reasons for it. rc666 does not charge a fee for processing rights requests, except where a request is manifestly unfounded or excessive.

If rc666 becomes aware that personal data belonging to a person under the age of 21 has been collected through the platform, rc666 will take immediate steps to delete that data and close the associated account. Any parent or guardian who believes that their child or dependent under the age of 21 may have registered an account on rc666 is strongly encouraged to contact rc666 support immediately via the email address shown in the footer of this page.

rc666 may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable law, or the services offered on the platform. The date of the most recent update is displayed at the top of this page. Where a material change is made to this Privacy Policy — meaning a change that meaningfully affects Players' rights or the way their data is processed — rc666 will notify registered Players via the email address associated with their account, or via a prominent notice on the platform, at least 14 days before the change takes effect.

Continued use of the rc666 platform after the effective date of any update to this Privacy Policy constitutes the Player's acceptance of the updated policy. If you do not agree with the updated Privacy Policy, you must cease using the rc666 platform and may request closure of your account by contacting support. Your continued use will be taken as informed acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way in which rc666 has handled your personal data, please contact the rc666 Data Support team using the email address displayed in the footer of this page. When making a data rights request, please include your registered mobile number and a clear description of the right you wish to exercise so that your request can be handled promptly.

rc666 is committed to resolving privacy concerns promptly and fairly. If you remain dissatisfied with the outcome of a privacy complaint after contacting rc666 directly, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.