rc333 Privacy Policy — How We Handle Your Data

Introduction

rc333 operates the online casino and sports betting platform accessible at rc333.app and is committed to protecting the privacy of all users who access its services. This Privacy Policy describes how rc333 collects, uses, stores, shares, and protects personal information provided by or generated by players who use the rc333 platform, including users in Bangladesh and any other location from which the platform is accessed.

By creating an account with rc333, depositing funds, placing bets, or otherwise accessing the rc333 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal information as described herein. If you do not agree to the terms of this Privacy Policy, you must not use the rc333 platform. This Privacy Policy should be read alongside rc333's Terms & Conditions, which govern your use of the platform as a whole.

1. Information We Collect

rc333 collects personal information in several ways — information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third parties such as payment processors and identity verification services.

rc333 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. If rc333 is ever required to process sensitive personal data in specific circumstances (for example, for responsible gaming purposes), it will do so only with your explicit consent and will explain why that data is required at the time of collection.

2. How We Use Your Information

rc333 uses the personal information it collects for the following purposes. In each case, rc333 uses only the minimum data necessary for the specified purpose.

• Account creation and management: to register your account, verify your identity and age, process your KYC documentation, and maintain your account in good standing on the rc333 platform.
• Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to verify that payment methods are registered in your name; and to maintain a complete and accurate transaction history for your account.
• Game delivery and platform operation: to deliver casino games, sports betting markets, and live dealer sessions; to record game outcomes and betting results accurately; and to ensure that the platform functions correctly on your device and network.
• Responsible gaming and player protection: to monitor gaming activity for indicators of problem gambling; to enforce deposit limits and self-exclusion settings you have activated; to carry out age verification checks; and to identify and assist players who may need support.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and abuse of bonus promotions; to carry out anti-money-laundering checks; and to protect the integrity of the rc333 platform and other players.
• Customer support: to respond to your support enquiries, to resolve disputes, to communicate important account notifications (such as security alerts, policy changes, and withdrawal confirmations), and to improve the quality of the rc333 support service.

3. Legal Basis for Processing

rc333 processes your personal data only where it has a legitimate legal basis for doing so. The primary legal bases on which rc333 relies are: (a) the performance of a contract — where processing is necessary to deliver the services you have requested when creating a rc333 account and agreeing to the Terms & Conditions; (b) compliance with legal obligations — where processing is required to comply with applicable laws including anti-money-laundering regulations and age verification requirements; (c) legitimate interests — where processing serves rc333's legitimate business interests in preventing fraud, maintaining platform security, and improving its services, provided those interests are not overridden by your rights and freedoms; and (d) consent — where you have provided explicit consent for a specific processing activity, such as receiving promotional communications.

Where rc333 relies on your consent as the legal basis for a specific processing activity, you have the right to withdraw that consent at any time by contacting rc333 support. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. In some cases, withdrawal of consent for certain processing activities may mean that rc333 is unable to continue providing its services to you, in which case rc333 will explain the consequences at the time of the withdrawal request.

4. Sharing Your Information

rc333 does not sell your personal data to third parties. rc333 shares personal data only in the circumstances described below, and only to the extent necessary for the specified purpose.

• Game providers and platform technology partners: rc333 shares session and betting data with licensed game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Spribe, Microgaming, and Ezugi) for the purpose of delivering games, recording outcomes, and resolving disputes. These providers operate under their own privacy and data protection obligations and are not permitted to use your data for any purpose unrelated to game delivery.
• Payment processors: rc333 shares the payment data necessary to process your deposit and withdrawal transactions with the payment providers you use (bKash, Nagad, Rocket, Upay, Visa, Mastercard). These providers process your payment data under their own terms and privacy policies, which you should review independently.
• Identity verification and anti-money-laundering service providers: rc333 may share your identity documents and personal details with third-party KYC verification services for the purpose of verifying your identity and age and fulfilling anti-money-laundering obligations. These providers are bound by strict confidentiality and data protection requirements.
• Legal and regulatory authorities: rc333 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where it is legally required to do so, or where disclosure is necessary to protect the safety of rc333, its users, or third parties.

5. Payment Data and Third-Party Processors

When you make a deposit or withdrawal on rc333 using bKash, Nagad, Rocket, or Upay, the transaction is processed directly between your mobile financial services account and rc333's payment infrastructure. rc333 stores a record of the transaction (amount, timestamp, reference number, and wallet number used) for account management and audit purposes, but rc333 does not store your full mobile banking PIN or any credentials that would allow rc333 to initiate transactions from your wallet without your action.

If you use a card payment method (Visa or Mastercard) on rc333, your card details are handled by the payment processor under PCI DSS compliant conditions. rc333 does not store your full card number on its own servers. Card transactions are tokenised by the payment processor, and rc333 receives only a transaction reference and masked card details for record-keeping purposes. Any disputes regarding card transactions should be raised with rc333 support in the first instance, and rc333 will work with the payment processor to resolve the issue.

6. Cookies and Tracking Technologies

rc333 uses first-party cookies — small text files stored on your device by your browser — to maintain your login session, remember your preferences, and collect anonymous usage analytics that help rc333 understand how the platform is used and identify areas for improvement. rc333 does not use third-party advertising cookies or cross-site tracking technologies that follow your activity across other websites.

Most web browsers allow you to control cookies through the browser settings. You can set your browser to refuse cookies, delete existing cookies, or notify you when a new cookie is set. However, disabling cookies on rc333 may prevent you from logging in, maintaining your session, or using certain features of the platform. Session cookies required for login and platform operation are not optional — they are technically necessary for the service to function. You may delete these cookies at any time, but doing so will end your current session and you will be required to log in again.

7. Data Retention

rc333 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to minimum retention periods required by law. For active accounts, rc333 retains your account data, transaction history, gaming records, and KYC documentation for the duration of your account and for a period of at least five years following account closure. This retention period is required to comply with anti-money-laundering regulations and to resolve any disputes or legal claims that may arise after account closure.

After the applicable retention period has expired and there is no legal or legitimate business reason to retain your data further, rc333 will securely delete or anonymise your personal data. Technical logs and aggregated analytics data from which individual users cannot be identified may be retained indefinitely for platform improvement and security monitoring purposes. If you request deletion of your data before the minimum retention period has elapsed, rc333 will restrict active use of your data but may be unable to delete it entirely until the minimum retention period has been satisfied.

8. Your Rights Over Your Personal Data

As a user of rc333, you have the following rights with respect to your personal data. To exercise any of these rights, please contact rc333 support using the email address shown in the footer of this page.

rc333 will respond to all data rights requests within 30 days of receipt. In complex cases, rc333 may extend this period by a further 30 days, in which case rc333 will inform you of the extension and the reason for it within the initial 30-day period. rc333 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case rc333 reserves the right to charge a reasonable administrative fee or refuse to act on the request, with written reasons provided.

9. Data Security

rc333 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the rc333 platform, encrypted storage of sensitive account data including identity documents and payment records, access controls that limit which rc333 personnel can access personal data and under what circumstances, regular security testing and vulnerability assessments of the rc333 platform infrastructure, and account security features including password hashing and session management controls.

While rc333 takes reasonable precautions to protect your data, no security system is entirely impenetrable, and rc333 cannot guarantee the absolute security of your personal data in all circumstances. In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, rc333 will notify you as promptly as practicable and will take all reasonable steps to investigate and contain the incident, minimise its impact, and prevent a recurrence.

10. Minors and Age Restriction

The rc333 platform is strictly intended for persons aged 21 years and above. rc333 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the rc333 account registration and KYC process. If rc333 discovers that it has collected personal data from a person under the age of 21, it will immediately suspend the associated account, void all activity on that account, and take steps to securely delete the personal data of the underage individual as promptly as possible. If you are a parent or guardian and you believe that a minor in your care has registered with rc333 or provided personal data to rc333, please contact rc333 support immediately via the email address shown in the footer so that rc333 can take appropriate action.

11. Changes to This Privacy Policy

rc333 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or the features and services offered on the rc333 platform. When rc333 makes material changes to this Privacy Policy — meaning changes that could reasonably be expected to affect your rights or the way your personal data is processed — rc333 will notify you via the platform or by email to your registered address, and will update the "Last updated" date at the top of this page.

rc333 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being handled. If you continue to use the rc333 platform after a revised Privacy Policy has come into effect, you will be deemed to have accepted the revised policy. If you do not agree to a revised Privacy Policy, you must stop using the rc333 platform and may request account closure by contacting rc333 support.

12. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how rc333 has handled your personal data, please contact rc333 using the email address displayed in the footer of this page. rc333 aims to respond to all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6). When submitting a data rights request, please include your registered account username and a description of the right you wish to exercise so that rc333 can locate your data and respond efficiently. rc333 may need to verify your identity before processing certain data rights requests to ensure that your data is not disclosed to an unauthorised party.