Privacy Policy
of rk888

This Privacy Policy ("Policy") describes how rk888 ("rk888", "we", "us", or "our") collects, uses, stores, shares, and protects personal information relating to individuals ("Player", "User", or "you") who register for and use the rk888 online betting and casino platform accessible at https://rk888.io (the "Platform").

rk888 is committed to protecting your personal data and handling it with transparency, integrity, and respect. We process personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality.

By creating a rk888 account, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any aspect of this Policy, please discontinue your use of the Platform and contact us at support@rk888.io to request account closure.

This Policy should be read alongside the rk888 Terms & Conditions and Responsible Gaming guidelines, both of which form part of the agreement between you and rk888.

rk888 acts as the data controller in respect of personal data collected from players using the Platform. As data controller, rk888 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with applicable data protection obligations.

rk888 operates as an offshore-licensed gaming platform. The entity operating rk888 is responsible for all data processing activities described in this Policy. For any data-related enquiries, requests, or complaints, you may contact the rk888 Data Protection team directly at support@rk888.io.

rk888 collects personal data from you directly (information you provide when registering or contacting us), automatically (information generated by your use of the Platform), and from third parties (such as identity verification and payment processing partners). The categories of personal data we collect include the following:

3.1 Registration and Identity Data

When you create a rk888 account, we collect the information you provide during registration, including your full legal name, date of birth, residential address, mobile phone number, and email address. If you undergo Know Your Customer (KYC) verification, we may additionally collect copies of your national identity card (NID), passport, driving licence, proof of address, and any other document we reasonably require to verify your identity and age.

3.2 Financial and Transaction Data

We collect information about your deposits, withdrawals, betting activity, and account balances. This includes transaction amounts, timestamps, payment method details (such as your bKash or Nagad mobile wallet number or bank account reference), and transaction identifiers. We do not store full card numbers or complete mobile banking PINs — sensitive payment credentials are handled by our regulated third-party payment processors.

3.3 Technical and Device Data

When you access the rk888 Platform, we automatically collect technical data about your device and connection, including your IP address, device type, operating system, browser type and version, screen resolution, time zone, referring URL, and pages visited. This data helps us secure the Platform, prevent fraud, and optimise your experience.

3.4 Usage and Behavioural Data

We collect data about how you interact with the Platform, including the games you play, bets you place, session duration, features you use, and your navigation patterns. This data is used to improve our services, personalise your experience, and identify potentially problematic gambling behaviour so that we can apply responsible gaming interventions where appropriate.

3.5 Communications Data

If you contact rk888 customer support, we retain records of that communication — including the content of messages, the channel used (live chat, email), and timestamps — for quality assurance, dispute resolution, and legal compliance purposes.

3.6 Marketing Preferences

If you opt in to receive marketing communications from rk888, we retain your consent record and marketing preferences. You may update or withdraw your marketing preferences at any time by contacting support@rk888.io.

rk888 uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the original reason it was collected, and we never sell your personal data to unrelated third parties for their own commercial purposes.

• Account creation and management: To register your account, verify your identity and age, maintain your account profile, and provide you with access to the rk888 Platform.
• Service delivery: To process your deposits, execute bets, calculate and pay out winnings, process withdrawal requests, and manage your account balance.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gaming regulations, and any other applicable legal obligations. This includes retaining transaction records and reporting suspicious activity where required by law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, bonus abuse, and other illegal or prohibited activities on the Platform.
• Responsible gaming: To monitor your gambling patterns and identify indicators of problematic gambling behaviour, so that we can apply responsible gaming tools, send wellbeing check-ins, or implement account restrictions where warranted.
• Customer support: To respond to your queries, process complaints, and resolve disputes in a fair and timely manner.
• Platform improvement: To analyse usage data and identify opportunities to improve the performance, stability, security, and user experience of the rk888 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant updates about rk888 services, where you have provided explicit consent to receive such communications. You may opt out at any time.
• Legal proceedings: To establish, exercise, or defend legal claims involving rk888, including in the context of regulatory investigations or court proceedings.

rk888 processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing is necessary to perform the contract we have with you (the rk888 Terms & Conditions). This covers account registration, service delivery, payment processing, and account management.
• Legal obligation: Processing is necessary for rk888 to comply with applicable legal and regulatory requirements, including AML/KYC obligations, responsible gaming requirements, and financial record-keeping mandates.
• Legitimate interests: Processing is necessary for the purposes of rk888's legitimate interests — including fraud prevention, platform security, IT infrastructure management, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Where processing is based on consent (for example, direct marketing communications), you have the right to withdraw that consent at any time by contacting support@rk888.io. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

rk888 does not sell, rent, or trade your personal data to unrelated third parties. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

6.1 Payment Processors

To process your deposits and withdrawals, we share relevant financial data with our regulated payment processing partners, including mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank). These partners operate under their own privacy policies and are subject to applicable financial regulations.

6.2 Identity Verification Providers

To fulfil our KYC and AML obligations, we may share identity documents and verification data with regulated third-party identity verification service providers. These providers assist us in confirming your identity, age, and the authenticity of the documents you submit.

6.3 Fraud Prevention and Security Partners

We share technical and behavioural data with fraud detection and cybersecurity partners to protect the integrity of the Platform and prevent unauthorised access, account takeovers, and financial crime.

6.4 Regulatory and Law Enforcement Authorities

rk888 may be required to disclose personal data to regulatory bodies, law enforcement agencies, courts, or other public authorities where such disclosure is required or permitted by applicable law. This includes disclosures made in connection with AML reporting obligations or in response to lawful requests from competent authorities.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rk888's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via a prominent notice on the rk888 website.

rk888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, rk888 will securely delete or anonymise your personal data such that it can no longer be attributed to you as an identifiable individual.

rk888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the rk888 Platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols.
• Data encryption at rest: Sensitive personal data stored in rk888 databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within rk888's internal systems is restricted on a strict need-to-know basis. All internal access is logged and monitored.
• Two-factor authentication (2FA): rk888 supports OTP-based two-factor authentication for player accounts to reduce the risk of unauthorised access.
• Regular security assessments: rk888 conducts regular vulnerability assessments and penetration testing to identify and remediate potential security weaknesses.
• Incident response: rk888 maintains an incident response plan to ensure that any personal data breach is detected, contained, and — where required — reported to affected individuals and relevant authorities without undue delay.
• Segregation of player funds: Player account balances are maintained separately from rk888's operational funds to ensure financial protection.

rk888 uses cookies and similar tracking technologies on the Platform to support essential functionality, improve performance, and understand how players use our services. A cookie is a small text file stored on your device by your web browser when you visit a website. The following categories of cookies are used by rk888:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as session management, login authentication, and security token validation. Strictly necessary cookies cannot be disabled without breaking the Platform's core functionality.

9.2 Performance and Analytics Cookies

These cookies collect anonymised data about how players interact with the rk888 Platform — such as which pages are most visited, session duration, and error occurrences. This information is used solely to improve the performance and reliability of our services. No personally identifiable information is transmitted via these cookies.

9.3 Functional Cookies

These cookies remember your preferences — such as your preferred language, display settings, or previously entered account details — to provide a more personalised and convenient experience when you return to the Platform.

9.4 Managing Cookies

You may control or delete cookies through your browser settings at any time. Please note that disabling certain categories of cookies may limit your ability to use some features of the rk888 Platform. For detailed guidance on managing cookies in your browser, refer to your browser's help documentation.

Subject to applicable law, you have the following rights in relation to the personal data that rk888 holds about you. To exercise any of these rights, please contact us at support@rk888.io with a clear description of your request. We will respond within a reasonable timeframe, and in any case within 30 days of receiving a verifiable request.

• Right of access: You have the right to request a copy of the personal data that rk888 holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request that rk888 delete your personal data. This right is subject to limitations where retention is required for legal or regulatory compliance purposes.
• Right to restriction of processing: You may request that rk888 restrict the processing of your personal data in specific circumstances, for example where you contest the accuracy of the data or object to its processing.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that rk888 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes. Where you object to direct marketing, rk888 will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

The rk888 Platform is strictly for adults aged 21 and above. rk888 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification procedures are applied at registration and may be reinforced at any point during a player's account lifecycle.

If rk888 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds in accordance with our responsible gaming protocols.

If you are a parent or guardian and believe your child may have registered with rk888, please contact us immediately at support@rk888.io so that we can investigate and take the necessary corrective action without delay.

rk888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the structure of our services. When we make material changes to this Policy, we will notify registered players via email and/or by posting a prominent notice on the rk888 Platform prior to the change taking effect.

The most current version of this Privacy Policy will always be accessible at https://rk888.io/privacy-policy, with the effective date clearly displayed at the top of the document. Your continued use of the rk888 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you do not agree with the revised Policy, you must discontinue your use of the Platform and may request account closure by contacting support@rk888.io.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way rk888 processes your personal data, please reach out to our support and data protection team using the contact details below. We are committed to handling all privacy-related enquiries fairly, transparently, and promptly.

rk888 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you may have the right to escalate your concern to the relevant data protection authority or regulatory body applicable in your jurisdiction.