rh999 Privacy Policy — How We Handle Your Personal Data

Privacy at a Glance

The six cards below summarise the key points of this Privacy Policy. They are provided as a quick reference only — the full binding text follows in the numbered sections below.

1. Introduction

rh999 ("we", "us", "our") operates the online gaming platform accessible at rh999.vip ("the Platform"). We are committed to protecting the privacy and personal data of every player who registers and uses the Platform. This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal information in connection with your use of rh999. It also describes your rights in relation to your personal data and how to exercise them.

By creating an account on rh999, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the rh999 Terms and Conditions, and the two documents should be read together. If you do not agree with any aspect of this Policy, you must not create an account or use the Platform.

2. Personal Data We Collect

rh999 collects personal data in three ways: data you provide directly when registering and using the Platform; data generated automatically through your use of the Platform; and data received from third parties in connection with payment processing and identity verification. The categories of data we collect are set out in the table below.

rh999 does not collect or process sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond the facial liveness check required for KYC. The liveness check image is processed solely for identity verification and is not stored beyond the KYC review period.

3. How We Use Your Personal Data

rh999 uses your personal data only for purposes that are directly related to the operation of the Platform and the delivery of our services to you as a player based in Bangladesh. The specific purposes for which we process your data are as follows.

• ▸Account creation and management: to register your account, verify your identity, process your login credentials, and maintain your account settings and preferences.
• ▸Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; to verify that payment accounts are registered in your name; to maintain transaction records as required for financial compliance.
• ▸KYC and responsible gaming compliance: to verify your age (21+), confirm your identity for anti-money laundering (AML) obligations, and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• ▸Platform security and fraud prevention: to detect, investigate, and prevent fraudulent activity, multiple account abuse, chargebacks, and other prohibited activities described in the rh999 Terms and Conditions.
• ▸Customer support: to respond to your support tickets, complaints, and account queries submitted to [email protected] or via live chat. Support conversation logs are retained for quality assurance and dispute resolution purposes.
• ▸Service improvement and analytics: to analyse aggregate (non-personally identifiable) usage patterns to improve the Platform's performance, game selection, and user experience. Individual player data is not used for behavioural profiling for advertising purposes.

4. Legal Basis for Processing

rh999 processes your personal data on the following legal bases, depending on the specific processing activity involved.

• ▸Contractual necessity: processing required to create and manage your account, process payments, and deliver the gaming services you have contracted for when accepting our Terms and Conditions.
• ▸Legal obligation: processing required to comply with age verification requirements, anti-money laundering obligations, and financial record-keeping requirements applicable to online gaming operators serving Bangladesh.
• ▸Legitimate interests: processing for fraud prevention, platform security, and aggregate analytics — where these interests do not override your fundamental privacy rights.
• ▸Consent: where rh999 sends you optional marketing communications (such as promotional SMS or bonus notifications), this is done on the basis of your consent, which you may withdraw at any time by contacting [email protected] or updating your notification preferences in account settings.

5. KYC and Identity Verification

rh999 is required to verify the identity of all players before processing withdrawal requests. This Know Your Customer (KYC) process involves collecting and reviewing a government-issued photo identification document — specifically, a Bangladesh National Identity Card (NID) or a valid passport. Players may also be asked to provide proof of address (such as a recent utility bill or bank statement) if the initial KYC review raises questions about the registered address.

KYC documents are processed securely and are accessible only to authorised rh999 compliance personnel. Documents are stored in encrypted form on secure servers. The facial liveness check image captured during KYC is used solely to match the submitted ID document to a live person and is permanently deleted after the KYC review is completed. KYC documents are retained for a minimum of 5 years after account closure as required for financial compliance, after which they are securely destroyed.

6. Sharing Your Personal Data

rh999 does not sell, rent, or trade your personal data. We share your data only with the limited categories of third parties described below, and only to the extent necessary for the stated purpose.

• ▸Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum transactional data required to process your deposit or withdrawal (wallet number, amount, transaction reference). These providers have their own privacy policies governing their handling of this data.
• ▸KYC and identity verification partners: rh999 may engage a third-party KYC service provider to assist with document verification and liveness checks. Any such provider is contractually bound to process your identity data solely for the purpose of verification and not to retain it beyond the verification period.
• ▸Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other integrated game studios receive only the session token and anonymised player identifier required to load game sessions. They do not receive your name, mobile number, or financial data.
• ▸Law enforcement and regulatory authorities: rh999 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities if required to do so by applicable law, court order, or lawful regulatory request. rh999 will notify you of any such disclosure where legally permitted to do so.

All third-party service providers engaged by rh999 are required to implement appropriate technical and organisational security measures to protect your personal data. rh999 does not transfer personal data to countries outside Bangladesh unless adequate data protection safeguards are contractually in place.

7. Cookies and Tracking Technologies

rh999 uses cookies and similar tracking technologies (local storage tokens, session identifiers) to operate core platform features and to understand how players use the Platform. We do not use third-party advertising cookies or cross-site tracking tools that profile your behaviour across websites unrelated to rh999.

You can control or disable cookies through your browser settings. Disabling strictly necessary session cookies will prevent you from remaining logged in to your rh999 account and will affect the Platform's core functionality. Disabling analytics cookies will not affect your ability to use the Platform. For detailed guidance on managing cookies in popular mobile browsers used in Bangladesh, please contact [email protected].

8. Data Security

rh999 implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Technical safeguards in place include: SSL/TLS encryption for all data in transit between your device and rh999 servers; AES-256 encryption for sensitive data fields stored at rest (including KYC documents and financial data); two-factor authentication (2FA) available for all player accounts; rate limiting and brute-force protection on login endpoints; and regular security vulnerability assessments.

Organisational safeguards include: access to personal data restricted on a strict need-to-know basis to rh999 personnel whose roles require it; all staff with access to personal data bound by confidentiality obligations; and periodic internal security training. Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. rh999 will notify affected players promptly in the event of a data breach that is likely to result in a risk to their rights and freedoms.

9. Data Retention

rh999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply: active account data (registration details, transaction history, game history) is retained for the duration of your account and for a minimum of 5 years after account closure; KYC documents are retained for a minimum of 5 years after account closure; customer support records are retained for 3 years after the support case is closed; analytics data is aggregated and anonymised within 12 months and is retained indefinitely in anonymised form.

When personal data is no longer required for any lawful purpose, rh999 will securely destroy or permanently anonymise it. Secure destruction of physical documents (printed KYC copies, if any) is carried out by cross-cut shredding. Electronic records are deleted using secure erasure procedures that prevent recovery. Players may request early deletion of their personal data (subject to overriding legal retention obligations) by submitting a written deletion request to [email protected].

10. Your Data Rights

As a player on rh999, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and include your registered mobile number for account verification. rh999 will respond to all data rights requests within 5 business days.

• ▸Right of access: you have the right to request a copy of all personal data rh999 holds about you. rh999 will provide this in a readable electronic format (PDF or CSV) within 5 business days of a verified request.
• ▸Right to rectification: if any personal data rh999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information (username, notification preferences) directly in your account settings; changes to registered identity data require a support request.
• ▸Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations (e.g., the 5-year KYC retention requirement).
• ▸Right to restriction: you may request that rh999 restrict the processing of your personal data (i.e., continue to store it but not actively use it) where you contest the accuracy of the data, where processing is unlawful but you prefer restriction to erasure, or while a complaint is under investigation.
• ▸Right to object: you have the right to object to processing of your personal data for direct marketing purposes. If you object to marketing communications, rh999 will cease sending them immediately. You may also object to processing based on legitimate interests, though rh999 may have compelling grounds to continue in certain cases.

rh999 will not charge a fee for handling data rights requests and will not require you to use a specific form. However, rh999 may ask you to verify your identity (by confirming your registered mobile number or providing a brief account detail) before fulfilling any data rights request, to prevent unauthorised access to another player's data.

11. Children and Minors

rh999 is strictly an adult platform. The minimum age to register and use the Platform is 21 years. rh999 does not knowingly collect personal data from individuals under the age of 21. If rh999 discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all data associated with the account will be permanently deleted (subject to any legal obligation to retain evidence of the underage access), and any deposits will be refunded to the payment source used. Parents or guardians who believe a minor has registered on rh999 should contact [email protected] immediately.

12. Third-Party Links

The rh999 Platform does not contain links to external third-party websites. However, integrated game providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others) operate their own software environments within the game window. rh999 is not responsible for the privacy practices of these game providers' own systems, and players are encouraged to review the relevant provider's privacy policy if they have concerns about how their session data is handled within a specific game.

13. Changes to This Privacy Policy

rh999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where practicable, send a notification to your registered mobile number.

Your continued use of the Platform after any changes to this Privacy Policy are posted constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure as described in our Terms and Conditions. rh999 recommends bookmarking this page and checking it periodically.

14. Contact and Data Enquiries

For all privacy-related enquiries, data rights requests, or complaints regarding rh999's handling of your personal data, please contact our support team. We aim to respond to all privacy enquiries within 5 business days. rh999 customer support is available 24 hours a day, 7 days a week including Bangladeshi public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).

Email: [email protected]