ru99 Privacy Policy — Your Data, Explained

ru99 is the operator of the online casino and sports betting platform accessible at https://ru99.app (the "Platform"). For the purposes of this Privacy Policy, ru99 is the data controller — meaning we are the entity responsible for deciding how and why your personal data is processed. If you have any questions or concerns about this Privacy Policy or about how ru99 handles your personal data, please contact our support team.

Our contact email for all data-related matters is [email protected]. Please note that email addresses on this platform are displayed as plain text and are not clickable links. This is intentional — it helps ensure our contact details are not misappropriated by automated scrapers. Bangladesh Standard Time (BST, UTC+6) applies to all response time commitments.

ru99 collects personal data in the following categories when you register an account, make a deposit, place a bet, contact support, or otherwise interact with the platform:

• Registration data: your mobile phone number, username, password (stored in hashed form, never in plain text), date of birth, and any identity verification documents you provide during the KYC process.
• Financial data: deposit and withdrawal amounts, transaction timestamps, payment method identifiers (e.g. the last four digits of a bKash or Nagad account number), and transaction reference numbers. ru99 does not store full payment account credentials.
• Gameplay data: game session records, bet history, win/loss records, wagering activity, bonus usage, and session duration. This data is used for account management, dispute resolution, and responsible gaming monitoring.
• Technical data: IP address, device type and model, operating system, browser type and version, and session timestamps. This data is collected automatically and is used for security, fraud detection and platform performance monitoring.
• Communications data: records of any messages you send to ru99 customer support, including the content of those messages, timestamps and the resolution of your enquiry.
• Responsible gaming data: any deposit limits, time-out periods, or self-exclusion requests you make through the platform, along with the dates those requests were submitted and implemented.

ru99 processes your personal data only for specific, legitimate purposes. The lawful bases on which we rely include: performance of a contract (providing the betting and gaming service you signed up for), compliance with legal obligations (KYC and anti-money laundering checks), and our legitimate interests in operating a safe and reliable platform. We use your data for the following purposes:

• Account management: to create, maintain and secure your ru99 account, verify your identity, process deposits and withdrawals, and deliver customer support.
• Service delivery and improvement: to operate games, betting markets and promotional offers; to analyse platform usage patterns; and to develop and test new features.
• Fraud prevention and security: to detect and prevent fraudulent activity, money laundering, multiple account creation, and other prohibited conduct described in the Terms & Conditions.
• Legal compliance: to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements and any requests from competent regulatory or law enforcement authorities.
• Responsible gaming: to monitor gameplay for signs of problem gambling behaviour and to facilitate any responsible gaming tools (deposit limits, self-exclusion) that you activate or that we are required to apply.

ru99 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human oversight. Where automated tools are used (for example, in fraud screening), a human review is available upon request if a material decision is made about your account.

ru99 does not sell, rent or trade your personal data to third parties for marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: when you make a deposit or withdrawal via bKash, Nagad, Rocket or Upay, transaction data (such as amount, timestamp and your registered mobile number) is shared with that payment provider to process the transaction. This sharing is necessary to deliver the service you requested.
• Game providers: game session data (including bet amounts and game outcomes) is shared with game providers such as Evolution Gaming, Pragmatic Play and Spribe to the extent necessary to deliver the game, resolve disputes and verify RNG integrity.
• Legal and regulatory authorities: where required by applicable law, court order, or regulatory instruction, ru99 may disclose personal data to competent authorities. ru99 will notify you of any such disclosure where legally permitted to do so.
• Fraud prevention services: aggregated or anonymised signals (not full profile data) may be shared with fraud detection partners to identify patterns of prohibited conduct. Individual player profiles are not sold to fraud-detection networks.

Any third party with whom ru99 shares personal data is required to handle that data in a manner consistent with this Privacy Policy and applicable data protection requirements. ru99 does not permit third-party recipients to use player data for their own marketing purposes.

ru99 uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly necessary cookies: required for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking the platform.
• Performance and analytics cookies: used to understand how players navigate and use the platform, which pages are visited most, and where errors occur. This data is aggregated and does not identify individual users.
• Preference cookies: used to remember your platform preferences, such as language settings and responsible gaming limits you have set.

You may manage cookie preferences through your mobile browser settings. Please note that disabling strictly necessary cookies will prevent the ru99 platform from functioning correctly and you will not be able to log in to your account.

ru99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

• Account data: retained for the lifetime of your account and for a period of five years following account closure, to meet legal and regulatory obligations including anti-money laundering record-keeping requirements.
• Financial transaction records: retained for a minimum of six years following the transaction date to comply with financial record-keeping obligations.
• Customer support communications: retained for two years following the closure of the support enquiry, to facilitate any follow-up or dispute resolution.
• Responsible gaming records: retained for a minimum of five years following account closure, to maintain an accurate record of any self-exclusion, deposit limit or time-out requests in case of any future reactivation enquiry.
• Technical and log data: typically retained for 12 months from the date of collection, after which it is anonymised or deleted unless required for an ongoing security investigation.

When the applicable retention period expires, ru99 will securely delete or anonymise your personal data so that it can no longer be attributed to you. Where deletion is not technically possible (for example, backup archives), the data is isolated and protected until deletion becomes possible.

Subject to applicable law, you have the following rights in relation to the personal data ru99 holds about you. To exercise any of these rights, please contact our support team at [email protected]:

• Right of access: you have the right to request a copy of the personal data ru99 holds about you, along with information about how it is used.
• Right to rectification: if any personal data ru99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: in certain circumstances you have the right to request that ru99 delete your personal data. This right may be limited where we are required to retain data by law or for legitimate operational purposes such as dispute resolution.
• Right to restrict processing: you may request that ru99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: where technically feasible and legally applicable, you may request a copy of your personal data in a structured, commonly used and machine-readable format.

ru99 will respond to all data rights requests within 30 days of receipt. In cases of complexity or volume, we may extend this period by a further 30 days, in which case we will notify you. We may need to verify your identity before processing your request. There is no charge for exercising your data rights.

ru99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include: SSL/TLS encryption for all data in transit between your device and our servers; encrypted storage of passwords using industry-standard hashing algorithms; access controls that limit which staff members can view account data; regular security assessments of the platform's infrastructure; and incident response procedures to detect, contain and notify users of any data breach in a timely manner.

While ru99 takes data security seriously, no online platform can guarantee absolute security. You also have a responsibility to keep your account credentials secure. ru99 strongly recommends using a unique password for your ru99 account that is not reused on other services, enabling any available two-factor authentication features, and logging out of your account when using shared or public devices. If you believe your account has been compromised, contact ru99 support immediately.

The ru99 platform is strictly for adults aged 21 and above. ru99 does not knowingly collect personal data from individuals under the age of 21. If ru99 discovers or is notified that personal data has been collected from a person under 21, that account will be immediately closed and all associated personal data permanently deleted. If you are a parent or guardian and believe that a person under 21 in your care has created a ru99 account, please contact [email protected] immediately so we can take prompt action.

• Age verification checks are conducted as part of the KYC process. Players are required to confirm they are 21 or older at the point of registration.
• ru99 operates technical age-gating measures on the platform and monitors account activity for indicators consistent with underage use. Where such indicators are detected, the account will be suspended pending verification.
• Parental control software is available for households where minors may have access to internet-connected devices. ru99 recommends that parents and guardians in Bangladesh install such software to prevent underage access to gambling platforms.

ru99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, ru99 will endeavour to notify registered players via SMS to their registered mobile number at least seven days before the updated Privacy Policy takes effect, unless the change is required immediately for security or legal reasons.

The current version of this Privacy Policy is always available on the ru99 website. The "Last updated" date shown at the top of this page reflects the most recent revision. Your continued use of the ru99 platform following any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the updated policy, you should stop using the platform and may request account closure by contacting support.

This Privacy Policy is governed by and construed in accordance with applicable law. Any disputes arising in connection with this Privacy Policy that cannot be resolved through the ru99 support channel will be subject to the exclusive jurisdiction of competent courts. ru99 is committed to resolving data-related complaints promptly and fairly. If you feel that a complaint you have raised with ru99 has not been resolved satisfactorily, you may seek independent advice or escalate through available legal channels in your jurisdiction.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a concern about how ru99 handles your personal data, please contact our support team. Our dedicated support team is available 24 hours a day, 7 days a week, and will handle all privacy-related requests with the priority and confidentiality they deserve.

You can reach us at [email protected]. Please note this address is displayed as plain text only and is not a clickable link. ru99 will never contact you first to ask for your account password, PIN, or full payment details. ru99 aims to acknowledge all privacy-related enquiries within 24 hours Bangladesh Standard Time (BST, UTC+6) and to resolve them fully within 30 days.

The ru99 platform may feature content delivered by third-party game providers and payment processors. These third parties operate their own privacy policies and data practices, which are independent of ru99's Privacy Policy. ru99 is not responsible for the data practices of third-party game providers such as Evolution Gaming, Pragmatic Play, Spribe or Ezugi, nor for the data practices of payment providers such as bKash, Nagad, Rocket or Upay. We encourage you to review the privacy policies of any third-party services with which you interact in connection with your use of the ru99 platform.

ru99 does not control and is not responsible for the content, data practices or privacy policies of any third-party service. Any personal data you provide directly to a third-party provider — for example, when linking your bKash wallet — is subject to that provider's privacy policy and is outside ru99's control.