rtk999 Privacy Policy
At rtk999, your privacy is a core commitment — not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and secured, and what rights you hold over your own information as a player based in Bangladesh.
Section 01
Data We Collect
rtk999 collects personal data to provide a secure, compliant, and fully personalised gaming experience for players across Bangladesh. We collect only data that is necessary for a specific, identified purpose. Below is a clear breakdown of the categories of personal data we collect, their sources, and the lawful basis for collection.
Registration & Identity Data
When you create an rtk999 account, we collect the following information to verify your identity and comply with our Know Your Customer (KYC) obligations:
- Full legal name (as it appears on your Bangladesh National Identity Card or passport)
- Date of birth (to confirm you are 18 years of age or older)
- Residential address within Bangladesh (city, district, postal code)
- Valid email address (used for account communications, notifications, and support)
- Bangladesh mobile number (used for OTP two-factor authentication and account alerts)
- Government-issued ID document images — NID front and back, or passport photo page
Financial & Transaction Data
To process deposits and withdrawals and to comply with anti-money laundering (AML) obligations, rtk999 collects:
- Payment method identifiers — registered bKash number, Nagad number, Rocket account, Upay account, or masked Visa/Mastercard number
- Transaction records — deposit amounts, withdrawal amounts, dates, and reference numbers
- Account balance history and betting ledger records
- Source of funds documentation where required under our AML policy
Behavioural & Usage Data
rtk999 automatically collects certain technical and behavioural data when you use the platform, including:
- IP address and approximate geolocation derived from IP
- Device type, operating system version, and browser type
- Session start and end times, session duration, and login frequency
- Pages visited, games played, bet amounts, game outcomes, and feature interactions
- Click-path and navigation patterns within the platform
Communications Data
When you contact our support team or respond to promotional communications, we retain:
- The content of emails, live chat transcripts, and support ticket exchanges
- Marketing preference records (opt-in/opt-out status per channel)
- Feedback, survey responses, and complaint records
Summary of Data Categories
| Data Category | Examples | Lawful Basis |
|---|---|---|
| Identity | Name, DOB, NID, address | Legal obligation (KYC/AML), contract performance |
| Financial | bKash/Nagad number, transaction history | Contract performance, legal obligation |
| Behavioural | IP, device, session data, game history | Legitimate interest, fraud prevention |
| Communications | Support tickets, marketing preferences | Contract performance, consent (marketing) |
| Cookies | Session tokens, analytics identifiers | Consent, legitimate interest |
Section 02
How We Use Your Data
rtk999 uses your personal data exclusively for lawful purposes that are proportionate to the data collected. We do not sell your personal data to third parties for their own marketing purposes. The specific purposes for which we process your data are set out below.
Account Management & Service Delivery
- Creating, maintaining, and securing your rtk999 player account
- Verifying your identity and age (18+) in compliance with our KYC requirements
- Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard
- Settling bets, calculating winnings, and managing bonus balances
- Providing customer support and responding to queries via email at [email protected]
Legal & Compliance Obligations
- Complying with anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations
- Detecting and preventing fraud, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions
- Maintaining transaction records for audit and regulatory review purposes
- Enforcing self-exclusion requests and responsible gaming restrictions
- Responding to lawful requests from competent authorities
Platform Improvement & Analytics
- Analysing aggregate gameplay and navigation data to improve platform performance, game selection, and user experience
- Conducting A/B testing on platform features and promotional layouts
- Monitoring platform stability, load performance, and error rates
- Generating anonymised statistical reports on platform usage (these reports contain no individually identifiable data)
Responsible Gaming Monitoring
- Tracking session lengths, deposit frequency, and betting patterns to identify players who may be exhibiting signs of problem gambling
- Sending automated responsible gaming alerts and check-in prompts where our systems flag at-risk behaviour
- Enforcing deposit limits, loss limits, and cooling-off periods set by players on their own accounts
Marketing Communications (with Consent)
Where you have explicitly opted in to receive marketing communications from rtk999, we use your contact data to send:
- Promotional offers, deposit bonuses, and seasonal campaign notifications (Eid, Pohela Boishakh, BPL season, IPL season, etc.)
- New game announcements and platform feature updates
- Personalised offers based on your game preferences and historical activity
You may withdraw your marketing consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Section 03
Data Sharing & Disclosure
rtk999 does not sell, rent, or trade your personal data to any third party for commercial gain. However, we do share your data with a limited set of trusted partners and service providers where it is necessary to operate the platform, fulfil our legal obligations, or provide services you have requested. All third-party data processors engaged by rtk999 are contractually required to process your data only on our instructions and to maintain appropriate technical and organisational security measures.
Categories of Third-Party Recipients
- Payment processing partners: bKash, Nagad, Rocket, Upay, and card payment processors (Visa/Mastercard network acquirers) receive transaction-level data necessary to process your deposits and withdrawals. These providers operate under their own published privacy policies.
- Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymised player identifier to deliver game content. They do not receive your full name, NID, or financial account details.
- Identity verification services: Our KYC and document verification partners receive copies of your submitted identity documents solely for the purpose of confirming their authenticity and your eligibility to play.
- Analytics and fraud detection platforms: Aggregated and pseudonymised behavioural data may be shared with our fraud detection and analytics service providers to improve platform security and performance.
- Cloud infrastructure and hosting providers: Our platform data is stored on encrypted servers provided by our hosting partners. These providers have access to infrastructure but cannot access the content of your data without our authorisation.
- Legal and regulatory authorities: rtk999 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by law or where we reasonably believe disclosure is necessary to prevent or investigate serious criminal activity, including money laundering or fraud.
Section 05
Data Retention
rtk999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.
Retention Periods by Data Category
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents | 5 years from account closure | AML regulatory obligation |
| Financial transaction records | 5 years from transaction date | AML regulatory obligation, tax records |
| Betting & gameplay history | 3 years from account closure | Dispute resolution, responsible gaming monitoring |
| Support correspondence | 2 years from last interaction | Complaint handling, legal claims |
| Marketing preferences | Until consent is withdrawn, then deleted within 30 days | Consent-based processing |
| Analytics data (pseudonymised) | 13 months from collection | Platform improvement |
| Self-exclusion records | Minimum 7 years from exclusion end date | Responsible gaming obligation, fraud prevention |
Upon account closure, your active profile will be deactivated. However, the underlying identity, financial, and compliance records will be retained for the periods described above before being permanently deleted or irreversibly anonymised. You will not be able to access these records after account closure unless they are required for an active legal claim or dispute.
Section 06
Data Security
Protecting your personal data from unauthorised access, alteration, disclosure, or destruction is a top priority at rtk999. We implement a multi-layered security architecture that covers data in transit, data at rest, and the access controls governing who within our organisation can view or process your data.
Technical Security Measures
- 256-bit SSL/TLS encryption across all data transmitted between your device and the rtk999 platform — including login credentials, payment data, and personal information fields
- Encrypted data storage — sensitive fields including identity document data, payment method identifiers, and account passwords are stored using strong encryption at rest
- Password hashing — account passwords are never stored in plain text; they are salted and hashed using industry-standard algorithms
- Two-factor authentication (2FA) — available to all rtk999 players and mandatory for account-level changes such as withdrawal method updates and password resets
- Automated intrusion detection — our systems continuously monitor for unusual access patterns, brute-force login attempts, and other indicators of unauthorised access
- Penetration testing — rtk999's platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited
Organisational Security Measures
- Strict role-based access controls — only authorised personnel with a documented business need can access personal player data
- All staff with access to personal data are trained on data protection principles and are bound by confidentiality obligations
- Third-party data processors are assessed for their security posture before engagement and are contractually bound to maintain security standards equivalent to our own
- A formal data breach response procedure is in place — in the event of a breach affecting your personal data, rtk999 will notify affected players at their registered email address as soon as reasonably practicable
Section 07
Your Privacy Rights
As a player on rtk999, you hold a meaningful set of rights over your personal data. rtk999 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our data protection point of contact at [email protected] with the subject line "Privacy Rights Request", along with your registered account name and email address for identity verification.
-
Right of Access: You have the right to request a copy of the personal data rtk999 holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
-
Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Note that corrections to KYC identity data require re-submission of valid supporting documents.
-
Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. This right is subject to our legal retention obligations — for example, AML regulations require us to retain KYC and transaction data for a minimum of 5 years regardless of an erasure request. We will inform you of any data we are legally required to retain when responding to your request.
-
Right to Restrict Processing: In certain circumstances (e.g., while a data accuracy dispute is being resolved), you may request that we temporarily restrict how we use your data.
-
Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
-
Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests — including the use of your data for platform analytics and behavioural profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
-
Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
rtk999 will acknowledge all privacy rights requests within 5 business days (Bangladesh Standard Time) and will fully respond within 30 calendar days. If a request is complex or we receive a high volume of requests simultaneously, we may extend this period by a further 30 days — in which case we will notify you within the initial 30-day window.
Section 08
Contact & Policy Updates
If you have any questions, concerns, or requests relating to this Privacy Policy or the way rtk999 processes your personal data, please contact us at:
- Email: [email protected] (subject line: "Privacy Policy Enquiry")
- Response time target: Within 24 hours during normal operating hours (Bangladesh Standard Time, UTC+6)
- Platform: rtk999 — Bangladesh's trusted online casino and sports betting destination
Changes to This Privacy Policy
rtk999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will:
- Update the "Last Updated" date at the top of this page and within the hero section
- Notify all registered players via their registered email address with a clear summary of what has changed
- Where required by law, seek fresh consent before processing your data under any new basis introduced by the updated policy
We encourage you to review this Privacy Policy periodically to stay informed about how rtk999 is protecting your personal data. Continued use of the rtk999 platform following notification of a policy update constitutes acceptance of the revised terms, to the extent permitted by applicable law.
This Privacy Policy was last reviewed and updated on 1 January 2026 and applies to all players registered on the rtk999 platform as of that date. It supersedes all prior versions of the rtk999 Privacy Policy.
Our Privacy Commitments
How rtk999 Protects Your Data
Your trust is the foundation of everything we do at rtk999. These six commitments define how we approach data privacy across every part of the platform.
256-Bit SSL Encryption
Every connection between your device and rtk999 is protected by 256-bit SSL encryption — the same standard used by international banks. Your login credentials, payment details, and personal information are never transmitted in plain text.
Minimal Data Collection
rtk999 collects only the personal data that is strictly necessary for account management, KYC compliance, and service delivery. We do not request information beyond what our legal obligations and operational requirements demand.
No Data Sales — Ever
rtk999 has never sold, rented, or traded player personal data to any third party for their commercial gain, and we never will. Your data is used solely to deliver and improve the rtk999 platform and to meet our legal obligations.
Full Consent Control
You are in control of your marketing consent at all times. Opt in or out of promotional communications with a single email request. Withdrawing consent takes effect within 30 days and never affects the operation of your rtk999 account.
Breach Response Protocol
In the unlikely event of a data breach affecting your personal information, rtk999's incident response team will notify you at your registered email address as soon as practicable, with clear guidance on the steps you should take to protect your account.
Your Rights, Respected
Access, correct, erase, or export your personal data at any time by contacting [email protected]. All privacy rights requests are acknowledged within 5 business days and fully resolved within 30 calendar days by our dedicated compliance team.
Your Privacy Is Protected — Now Play
Enjoy rtk999 With Full Confidence
Now that you know exactly how rtk999 handles your data, explore everything the platform has to offer — from live cricket betting and premium slots to a full live casino experience, all secured with SSL encryption and trusted by players across Bangladesh.
18+ For adults aged 18 and above only. Please gamble responsibly.