r778 Privacy Policy

This Privacy Policy ("Policy") describes how r778 ("r778", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("you", "your", "Player") who access or use the r778 online betting and casino platform available at r778.io, including all associated subdomains, mobile interfaces, and services (collectively, the "Platform").

r778 is committed to safeguarding the privacy of every person who interacts with our Platform. We recognise that the trust you place in us when sharing your personal information carries a significant responsibility, and we take that responsibility seriously. This Policy is intended to be clear, honest, and written in plain English so that you fully understand how your data is handled.

This Privacy Policy is incorporated by reference into the r778 Terms and Conditions. By creating an account, making a deposit, or otherwise using the r778 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

r778 collects the following categories of personal data from users of the Platform. Not all data types are collected in every instance — the specific data collected depends on how you interact with r778 and the services you use.

2.1 Identity & Contact Data

• Full legal name as it appears on government-issued identification.
• Date of birth (used for age verification — r778 is strictly for adults aged 21 and above).
• Residential address, including city, district, and country of residence.
• Mobile phone number, including the number associated with your bKash, Nagad, or other mobile money account.
• Email address used for account correspondence and, where applicable, promotional communications.
• Copies of identity documents submitted during the KYC verification process, such as your National Identity Card (NID), passport, or driving licence.

2.2 Financial Data

• Mobile money account identifiers (bKash number, Nagad number, Rocket number, Upay number).
• Card information where payment is made by Visa or Mastercard (card number, expiry date, and cardholder name — CVV is never stored by r778).
• Transaction history including deposit amounts, withdrawal amounts, dates, and associated payment method references.
• Source-of-funds documentation where requested as part of enhanced due diligence or anti-money laundering review.

2.3 Betting & Gaming Data

• Full betting history across all sportsbook markets, including stakes, odds, selections, and outcomes.
• Casino game session data, including games played, session duration, wagers placed, and results.
• Bonus and promotion usage history, including bonuses claimed, wagering progress, and expiry details.
• Account balance history and transaction ledger.

2.4 Technical & Usage Data

• IP address and approximate geolocation data derived from your IP address.
• Device type, operating system, browser type and version.
• Session timestamps, login history, and duration of Platform visits.
• Pages visited, features used, and navigation patterns on the Platform.
• Crash reports and error logs generated during Platform use.

2.5 Communications Data

• Records of your communications with r778 support via live chat, email, and WhatsApp, including the content of those communications and their timestamps.
• Feedback, complaints, and dispute correspondence.
• Survey responses where you voluntarily participate in research or feedback exercises.

r778 collects personal data through the following channels and mechanisms:

3.1 Directly From You

The majority of personal data r778 holds is provided directly by you during the course of your use of the Platform. This includes data submitted during account registration, KYC verification, deposit and withdrawal requests, contact form submissions, live chat interactions, and any other direct communication with r778.

3.2 Automatically During Platform Use

r778 automatically collects certain technical and usage data when you access the Platform. This includes your IP address, browser fingerprint, device identifiers, session activity, and navigation data. This data is collected through server logs, session tracking systems, and, where cookies are in use, through your browser's cookie storage. See Section 7 (Cookies & Tracking) for more detail.

3.3 From Third-Party Service Providers

r778 may receive data about you from third-party partners who assist in delivering our services. These include:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa/Mastercard acquirers): transaction confirmation data.
• KYC / identity verification providers: identity document authenticity data and fraud screening results.
• Fraud detection and anti-money laundering partners: risk scores and flagged transaction alerts.
• Game studio providers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe): game round outcome data and session records required for dispute resolution.

r778 uses the personal data it collects for the following specific purposes. We process your data only where a legitimate purpose exists and only to the extent necessary to fulfil that purpose.

Purpose	Data Used
Account registration and authentication	Identity, contact, and login credential data
Age and identity verification (KYC)	Identity documents, date of birth, address
Processing deposits and withdrawals	Financial data, payment method identifiers
Providing betting and casino services	Betting/gaming history, account balance
Customer support and dispute resolution	Communications data, account history
Fraud prevention and AML compliance	Financial data, IP/device data, identity data
Responsible gaming monitoring	Betting/gaming activity, session data
Platform security and abuse prevention	Technical data, login history, IP data
Promotional communications (where consented)	Contact data, gaming preferences
Platform analytics and improvement	Usage and technical data (anonymised)

r778 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human oversight. Where automated tools are used in fraud or AML screening, flagged cases are reviewed by r778's compliance team before any account action is taken.

r778 processes your personal data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: The majority of data processing by r778 is necessary to perform the contract between you and r778 — namely, to provide you with access to the betting and casino services you have registered to use, to process your transactions, and to maintain your account. Without this processing, r778 cannot provide its services to you.
• Legal Obligation: r778 is required to process certain data to comply with applicable legal obligations including anti-money laundering requirements, fraud prevention standards, and Know Your Customer verification obligations. This includes retention of transaction records and identity verification documents for the periods required under applicable law.
• Legitimate Interests: r778 processes certain data on the basis of its legitimate interests in operating a safe, secure, and commercially viable platform. This includes fraud detection, platform security monitoring, and internal analytics used to improve our services. When relying on legitimate interests, r778 ensures that its interests do not override your fundamental privacy rights.
• Consent: Where r778 relies on your consent as the legal basis for processing — for example, when sending promotional emails or using non-essential cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

r778 does not sell your personal data to any third party. We do not share your personal information for third-party marketing purposes. Data is shared only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers

r778 shares data with carefully selected third-party service providers who assist in delivering the Platform's core functionality. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa and Mastercard acquirers), KYC and identity verification providers, fraud and AML screening services, customer support software providers, and cloud infrastructure and hosting providers. All such providers are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to r778.

6.2 Game Studio Partners

When you play games powered by third-party studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, or Spribe, certain gameplay data including your player identifier and game session information is shared with the relevant studio in order to render and record your game session. This is a technical requirement of delivering live and RNG-based casino games and is covered under the Terms of Service of those providers.

6.3 Legal and Regulatory Disclosure

r778 may disclose your personal data to law enforcement authorities, regulatory bodies, or other third parties where required to do so by applicable law, court order, or where such disclosure is necessary to prevent fraud, protect the safety of individuals, or defend r778's legal rights and interests.

6.4 Business Transfers

In the event that r778 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is handled as a result.

r778 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve performance, and — where you have provided consent — to deliver a more personalised experience.

Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable features such as maintaining your login session, remembering your account currency preference (BDT), and processing secure payment transactions. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: These cookies collect anonymised information about how users interact with the Platform — including pages visited, time spent, and error messages encountered. This data helps r778 identify usability issues and improve the Platform experience. These cookies do not identify you personally.
• Functional Cookies: These cookies remember your preferences — such as language and display settings — to provide a more tailored experience on return visits.
• Marketing Cookies: Where you have given explicit consent, r778 may use cookies to track your interaction with promotional content and to measure the effectiveness of marketing campaigns. You may withdraw consent for marketing cookies at any time by contacting our support team.

Most web browsers allow you to manage your cookie preferences through the browser's settings menu. You can delete existing cookies and set your browser to block future cookies. Note that blocking all cookies may prevent certain features of the r778 Platform from functioning as intended.

r778 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active r778 account is retained for the duration of the account's existence and for a minimum period after account closure as required for legal, compliance, and dispute resolution purposes.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five years following the transaction date in accordance with anti-money laundering record-keeping standards.
• KYC Documents: Identity verification documents submitted during the KYC process are retained for the duration of your account and for a period of at least five years after account closure, in line with applicable legal requirements.
• Support Communications: Records of live chat, email, and WhatsApp support interactions are retained for a minimum of two years to support dispute resolution and service quality improvement.
• Marketing Data: Where you have consented to receive promotional communications, your contact details are retained for marketing purposes until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

r778 respects your rights over your personal data. Depending on your circumstances and the applicable data protection principles, you may have the following rights:

• Right of Access: You have the right to request a copy of the personal data r778 holds about you, along with information about how that data is processed. We will respond to access requests within 30 days.
• Right to Rectification: If any of the personal data r778 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your account settings, or contact support for assistance with KYC-linked data.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing has been unlawful. Please note that r778 may be required to retain certain data for legal and regulatory compliance purposes even after an erasure request is received.
• Right to Restrict Processing: In certain circumstances, you may request that r778 restrict the processing of your personal data — for example, while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where r778 relies on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where r778 processes your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact r778's support team at [email protected] (plain text — not a clickable link) or via live chat at r778.io. r778 will aim to respond to all privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be informed of the extension and its reason.

r778 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data in transit between your device and r778's servers.
• Encryption at rest for sensitive personal data fields stored on r778's databases, including identity document references and payment method identifiers.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Regular internal security reviews and vulnerability assessments of the r778 Platform infrastructure.
• Two-factor authentication (2FA) available for r778 player accounts as an additional layer of login security.
• Real-time monitoring systems that detect and alert on suspicious login activity, unusual transaction patterns, and potential account compromise events.

While r778 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in significant risk to affected individuals, r778 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

r778 is strictly an adult platform. The r778 Platform is intended solely for individuals who are 21 years of age or older. r778 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

During account registration, all users are required to confirm their date of birth and agree that they meet the minimum age requirement. r778 conducts age verification checks as part of its KYC process and will immediately close and refund any account found to belong to an individual who is under 21 years of age at the time of registration.

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account with r778, please contact our support team immediately at [email protected] (plain text — not a clickable link). r778 will investigate and take appropriate action, including account closure and return of any deposits made, as quickly as possible.

The r778 Platform may, from time to time, contain references to third-party services such as game studio providers and payment method partners. While r778 takes care to work only with reputable partners, r778 does not control the privacy practices of third-party websites or services and is not responsible for the content or privacy policies of any external platform.

If you navigate away from r778.io to a third-party website — for example, to the website of a payment provider such as bKash or Nagad — the privacy policy of that third-party site governs the collection and use of any data you submit to them. r778 recommends that you review the privacy policy of any third-party service you use in connection with your r778 account.

r778 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services offered on the Platform. When material changes are made to this Policy, r778 will notify registered players by email and will post a notice on the r778.io website indicating that the Policy has been updated.

The revised Privacy Policy will specify the effective date of the changes at the top of the document. Your continued use of the r778 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure by contacting our support team.

r778 recommends that all players review this Privacy Policy periodically to remain informed about how their data is handled. The current version is always available at r778.io/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way r778 handles your personal data, please contact our support team using any of the following methods. All contact details are provided as plain text for reference only and are not clickable links.

• Email: [email protected]
• Live Chat: Available 24/7 via r778.io (Bangladesh Standard Time, UTC+6)
• WhatsApp: +880 1700-000000 (WhatsApp only — not a voice call number)

r778 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days of receipt. For urgent matters relating to suspected account compromise or data breach, please use the live chat channel for the fastest response — our team typically responds within 2 minutes via live chat.

When submitting a privacy rights request, please include your registered account username, the email address associated with your account, and a clear description of your request. This helps our team locate your records and process your request efficiently.