rr77 Privacy Policy

This Privacy Policy ("Policy") describes how rr77 ("rr77", "we", "us", "our") collects, uses, discloses, stores, and protects the personal information of users ("you", "your", "Player") who access or use the rr77 website available at rr77.buzz and its associated services (collectively, the "Service"). This Policy applies to all users of the Service regardless of the device or method used to access it.

By registering an account on rr77 or by continuing to use the Service, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Service immediately. This Policy should be read together with rr77's Terms and Conditions, which are incorporated by reference.

rr77 collects personal information in three principal ways: information you provide directly when registering or using the Service, information generated automatically by your use of the Service, and information received from trusted third-party partners. The specific categories of information collected are described below.

Information You Provide Directly

• Registration information: your Bangladesh mobile number, chosen username, date of birth, and any optional profile details you provide at sign-up.
• Identity verification documents submitted for KYC purposes, including National Identity Document (NID), passport, or other government-issued photo identification.
• Financial information: your mobile wallet details (bKash, Nagad, Rocket, Upay) or bank account information provided for the purpose of processing deposits and withdrawals. rr77 does not store full payment credentials — these are handled by encrypted third-party payment processors.
• Support communications: messages, complaints, or enquiries you send to the rr77 support team, including the content of those communications and any supporting documentation you attach.

Information Generated Automatically

• Technical data: your IP address, device type, operating system, browser version, and network information collected automatically when you access rr77.
• Usage data: pages visited, features used, games played, time spent on the platform, and interaction patterns. This data is used in aggregate to improve the rr77 experience.
• Cookies and similar tracking technologies as described in Section 5 of this Policy.

Information from Third Parties

• Identity and age verification results from KYC verification service providers engaged by rr77 to confirm your eligibility to use the Service.
• Transaction verification data from payment processors (bKash, Nagad, Rocket, Upay, and bank partners) confirming the status of deposits and withdrawals.
• Fraud and risk signals from specialised fraud-prevention partners, used solely to protect the security of your account and the integrity of the rr77 platform.

rr77 uses your personal information only for the purposes described in this Policy. The table below summarises the primary purposes and the corresponding data used for each:

rr77 processes your personal data on the following legal bases. Where more than one legal basis applies, the most relevant basis is identified for each processing activity:

• Contractual necessity: processing required to perform the contract between rr77 and you — including account registration, deposit and withdrawal processing, game participation, and customer support.
• Legal obligation: processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC verification, and tax reporting obligations.
• Legitimate interests: processing carried out for rr77's legitimate business interests, including fraud detection and prevention, platform security, abuse monitoring, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: processing based on your explicit consent, including the sending of optional promotional communications. You may withdraw consent at any time by contacting [email protected] without affecting the lawfulness of processing carried out before withdrawal.

rr77 does not sell your personal data. rr77 shares personal information only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: rr77 shares the minimum account and transaction information necessary with bKash, Nagad, Rocket, Upay, and banking partners to process your deposits and withdrawals securely.
• KYC and identity verification providers: rr77 shares document images and personal details with specialist identity verification partners to confirm your eligibility to use the Service. These partners are contractually bound to process your data only for the purposes of identity verification.
• Fraud prevention and security partners: rr77 shares device and usage signals with specialist fraud-prevention services for the purpose of protecting the platform and its users from fraudulent activity.
• Law enforcement and regulatory authorities: rr77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or to protect the rights and safety of rr77, its users, or the public.

All third parties with whom rr77 shares personal data are required to implement appropriate technical and organisational security measures to protect that data, and to process it only for the purposes for which it was shared. rr77 does not permit third-party partners to use your personal data for their own commercial purposes.

rr77 uses cookies and similar tracking technologies to operate the Service, remember your preferences, and improve your experience. The following types of cookies are used on rr77:

• Essential cookies: strictly necessary for the Service to function, including session authentication, security tokens, and load balancing. These cannot be disabled without breaking the Service.
• Functional cookies: used to remember your language preference, display settings, and other customisation choices so that you do not need to reset them each session.
• Analytics cookies: used in aggregate, anonymised form to understand how users navigate the platform, which features are most used, and where the user experience can be improved. rr77 does not use analytics data to identify individual users.
• Security cookies: used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These cookies are essential to account security and cannot be disabled.

You may manage non-essential cookies through your browser settings. Please note that disabling functional cookies may affect your experience on rr77, as certain preferences will no longer be saved between sessions. rr77 does not use third-party advertising or retargeting cookies.

rr77 retains personal data for as long as is necessary for the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: retained for the full duration of your account relationship with rr77 and for a minimum of five (5) years after permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and identity documents: retained for a minimum of five (5) years after account closure or the date of the last transaction, whichever is later, in accordance with applicable financial crime prevention regulations.
• Support communications: retained for a minimum of three (3) years from the date of the communication to enable complaint resolution and audit purposes.

When personal data is no longer required for any legitimate purpose and no legal retention obligation applies, rr77 will securely delete or anonymise that data. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

rr77 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. The key security measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between your device and rr77 servers, preventing interception of data during transmission.
• Passwords stored exclusively in hashed, salted form using industry-standard cryptographic algorithms. rr77 staff cannot access your password in plain text at any time.
• Access controls ensuring that rr77 employee access to personal data is restricted on a strict need-to-know basis, with all access activity logged and audited.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, rr77 will notify affected users as soon as reasonably practicable and will take all appropriate steps to contain, investigate, and remediate the breach.

rr77 respects your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting the rr77 support team at [email protected]:

• Right of access: the right to request a copy of the personal data rr77 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: the right to request correction of any personal data rr77 holds about you that is inaccurate, incomplete, or out of date.
• Right to erasure: the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: the right to request that rr77 restricts the processing of your personal data in certain circumstances, for example while a correction request is being investigated.
• Right to data portability: the right to receive a copy of the personal data you have provided to rr77 in a structured, commonly used, machine-readable format, where processing is based on your consent or the performance of a contract.
• Right to object: the right to object to the processing of your personal data where rr77 is relying on legitimate interests as the legal basis, including the right to object to processing for direct marketing purposes.

rr77 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case rr77 will notify you of the extension and the reason for it within the initial 30-day period. rr77 will not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive.

rr77 is strictly an adult platform. The Service is available only to persons aged 21 years and above. rr77 does not knowingly collect personal information from persons under the age of 21. Age verification is a mandatory component of the rr77 KYC process for all account holders.

If rr77 becomes aware that personal data has been collected from a person under the age of 21 without the verification procedures having been correctly followed, rr77 will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered on rr77, please contact [email protected] immediately.

The rr77 platform may reference or interact with third-party services such as payment gateways (bKash, Nagad) and game content providers (Pragmatic Play, Evolution Gaming, Spribe). These third parties operate their own privacy policies and rr77 is not responsible for the data practices of any third-party service. When you interact with a third-party service in connection with rr77 — for example by completing a mobile wallet transaction — that service's own privacy policy governs how your data is handled on their side. rr77 encourages you to review the privacy policies of any third-party service you use in connection with the rr77 platform.

rr77 may update this Privacy Policy from time to time to reflect changes in the Service, applicable law, or rr77's data processing practices. When material changes are made, rr77 will notify registered users via their associated mobile number at least seven (7) days before the updated Policy takes effect. The date of the most recent update is shown at the top of this Policy.

Continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes to this Policy, you should discontinue use of the Service and contact [email protected] to request account closure. The current version of this Policy is always available on the rr77 website.

If you have any questions, concerns, or complaints about this Privacy Policy or about how rr77 handles your personal data, please contact the rr77 support team by email at [email protected]. All privacy enquiries are acknowledged within 24 hours. Formal data rights requests are processed within 30 days as described in Section 8 above.

rr77 does not operate a telephone support line. All privacy and data protection queries must be submitted by email to [email protected]. Please include your registered mobile number, a description of your query or request, and any relevant account details in your communication so that the support team can respond promptly and accurately.