rp55 Privacy Policy — How We Handle Your Personal Data

1 Introduction and Scope

This Privacy Policy (the "Policy") is issued by rp55 (referred to throughout as "rp55", "we", "us" or "our") and applies to all personal data collected from individuals (referred to as "you", "your" or "Player") who access, register on, or otherwise interact with the rp55 online betting and casino platform available at rp55.im and any associated mobile browser interface (collectively, the "Platform").

This Policy governs the collection, use, storage, sharing and protection of your personal data in connection with the rp55 Services, including cricket betting, live casino, slot games, table games, payment processing, customer support interactions, and any promotional or loyalty programmes operated by rp55.

By registering an account on rp55, making a deposit, or continuing to use the Platform following publication of this Policy, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must cease using the Platform and may request closure of your account by contacting our support team.

This Policy should be read alongside the rp55 Terms and Conditions, which form the primary agreement governing your use of the Platform. In the event of any conflict between this Policy and the Terms and Conditions on a data protection matter, this Policy shall prevail.

2 Data Controller Identity

rp55 acts as the data controller in respect of all personal data collected from Players via the Platform. As data controller, rp55 determines the purposes for which and the means by which your personal data is processed.

For all data protection enquiries, access requests, deletion requests, or complaints relating to how rp55 handles your personal data, the designated point of contact is:

• Platform: rp55 (rp55.im)
• Data Protection Contact: Privacy Team
• Email: [email protected] (mark your subject line "Privacy Request – [Your Account Username]")
• Response Time: rp55 aims to respond to all privacy-related enquiries within 10 business days of receipt.

Where rp55 engages third-party service providers (such as payment processors or identity verification providers) to process personal data on its behalf, those providers act as data processors and are bound by contractual data processing obligations that require them to handle your data securely, only for the purposes instructed by rp55, and in a manner consistent with this Policy.

3 Personal Data We Collect

rp55 collects only the personal data that is genuinely necessary for the lawful operation of the Platform and the delivery of the Services. The categories of personal data we collect are set out in the table below:

rp55 does not intentionally collect sensitive special-category personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) from Players. If you voluntarily disclose such information during a customer support interaction, it will be handled with additional care and deleted from our records as soon as it is no longer needed for the purpose for which it was provided.

4 How We Collect Your Data

rp55 collects personal data through the following channels and methods:

• Direct Submission: Information you provide when you register an account, complete KYC verification, submit a payment request, contact customer support, or respond to a promotion or survey on the Platform.
• Automated Technical Collection: Data collected automatically by our Platform infrastructure when you access the rp55 website or mobile browser interface, including IP address, device identifiers, browser fingerprinting for fraud prevention, and session analytics via first-party analytics tools.
• Payment Processing Partners: Confirmation data received from bKash, Nagad, Rocket, Upay, partner banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), Visa and Mastercard networks when you make a deposit or withdrawal, including transaction identifiers and confirmation status.
• Identity Verification Providers: Results of identity and age verification checks conducted by our third-party KYC service providers against the documents you submit. rp55 receives a verification outcome and, where applicable, a risk score — rp55 does not receive raw biometric data from these providers beyond what is contained in your submitted identity documents.
• Cookies and Similar Technologies: Data collected via essential session cookies, analytics cookies, and localisation cookies as described further in Section 8 of this Policy.
• Game Providers: Technical game-round data (bet amounts, outcomes, RTP results) provided to rp55 by certified third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Red Tiger, Play'n GO and Ezugi, solely for the purpose of settling bets, resolving disputes and maintaining gaming records.

5 Legal Basis for Processing

rp55 processes your personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contract Performance: Processing that is necessary to create and manage your rp55 account, process your deposits and withdrawals, deliver the games and betting services you request, and fulfil all obligations under the rp55 Terms and Conditions. Without this processing, rp55 cannot provide the Services to you.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud prevention duties, and responses to lawful requests from government authorities or law enforcement bodies.
• Legitimate Interests: Processing carried out in pursuit of rp55's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection and prevention, platform security, internal analytics to improve the Services, and responsible gaming monitoring. rp55 carefully balances its legitimate interests against the impact on your privacy before relying on this ground.
• Consent: Processing based on your explicit consent, such as the sending of promotional communications and marketing messages about rp55 bonuses, new games, or seasonal offers. You may withdraw consent to marketing communications at any time by contacting [email protected] or by following the unsubscribe instructions in any marketing message we send you. Withdrawal of consent to marketing does not affect the lawfulness of processing that occurred before the withdrawal.

6 How We Use Your Data

rp55 uses the personal data it collects for the following specific purposes, each of which is grounded in one or more of the legal bases described in Section 5:

• Account Creation and Management: To register your rp55 account, verify your identity and age (minimum 21 years), maintain your account settings and preference profile, and process account closure requests.
• Payment Processing: To process deposits to your rp55 wallet and withdrawals to your registered bKash, Nagad, Rocket, Upay or bank account, to verify that payment methods belong to the account holder, and to maintain a complete transaction record as required by financial compliance obligations.
• Service Delivery: To make available the full suite of rp55 games and betting markets (cricket, live casino, slots, table games), to settle bets and games in real time, to credit winnings to your account, and to deliver customer support.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent transactions, duplicate accounts, money laundering activity, bonus abuse, and unauthorised access to accounts. This includes automated risk scoring based on behavioural and technical data patterns.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, to apply deposit limits, session limits and cooling-off periods set by you or imposed by rp55, to action self-exclusion requests, and to contact you with responsible gaming information where our monitoring indicates a potential concern.
• Legal Compliance: To retain transaction records, gaming history and identity documents for the periods required by applicable anti-money laundering legislation and to respond to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify platform performance issues, improve game loading times, optimise the mobile browser experience for players in Dhaka, Chittagong, Sylhet and other locations across Bangladesh, and develop new features.
• Marketing and Promotions: To send you information about rp55 bonuses, seasonal promotions (such as Eid, Pohela Boishakh or BPL tournament offers), new game launches and other offers where you have consented to receive such communications. You may opt out at any time.

7 Data Sharing and Disclosure

rp55 shares your personal data only in the following limited circumstances:

• Game Providers: rp55 shares your account identifier and, where required for fair-play and dispute resolution purposes, your game history with certified third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Red Tiger, Play'n GO, Ezugi and others). These providers receive the minimum data necessary to operate their games within the rp55 platform and are contractually obligated to maintain the confidentiality of that data.
• Payment Processors: rp55 shares the transaction data necessary to execute your deposit and withdrawal instructions with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and the Visa and Mastercard networks. These processors are subject to their own regulatory frameworks and privacy obligations.
• Identity Verification Providers: rp55 shares the identity documents and personal data you submit for KYC purposes with contracted third-party identity verification service providers. These providers process your data solely on rp55's instructions and are bound by confidentiality and data security obligations.
• Analytics Providers: rp55 may share anonymised, aggregated technical and behavioural data with analytics service providers for the purpose of platform performance analysis. No personally identifiable information is shared with analytics providers in a form that could identify an individual player.
• Legal and Regulatory Authorities: rp55 will disclose personal data to government bodies, law enforcement agencies, regulators, courts or other competent authorities where required to do so by applicable law, court order, or lawful regulatory request. Where permissible, rp55 will notify you of any such disclosure.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of rp55's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to that entity assuming the obligations set out in this Policy with respect to your data.

All third parties with whom rp55 shares personal data are required, by contract, to implement appropriate technical and organisational security measures to protect that data and to use it only for the purposes specified by rp55.

8 Cookies and Tracking Technologies

rp55 uses cookies and similar web tracking technologies on the Platform. A cookie is a small text file placed on your device by the Platform when you visit. Cookies enable the Platform to recognise your device, maintain your login session, and remember your preferences between visits.

rp55 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies (which keep you logged in to your rp55 account), security tokens (which protect against cross-site request forgery), and load-balancing cookies. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your platform preferences such as your chosen display language, notification settings and responsible gaming limit configurations. Disabling these cookies may affect your platform experience but will not prevent you from accessing the Services.
• Analytics Cookies: rp55 uses first-party analytics cookies to collect aggregated, anonymised data about how Players navigate the Platform — for example, which game categories are most visited and where users drop off during the registration process. This data is used solely to improve the Platform and is not shared with third-party advertising networks.
• Fraud Prevention Tokens: rp55 uses device fingerprinting and session tokens as part of its fraud detection and duplicate account prevention system. These are essential security measures that cannot be disabled without compromising platform integrity.

You can manage or delete cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or clear existing cookies. Please note that disabling cookies other than strictly necessary ones may impair certain features of the rp55 Platform, including automatic login and preference retention. rp55 does not place third-party advertising or retargeting cookies on your device.

9 Data Retention

rp55 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, to maintain your active rp55 account, and to comply with legal and regulatory retention obligations. The key retention periods applicable to rp55 data are as follows:

• Active Account Data: All personal data associated with an active rp55 account (identity data, contact data, financial data, gaming history, preference data) is retained for the duration of the account's active status.
• Closed Account Data: Following closure of a rp55 account, identity documents, KYC verification records, and transaction histories are retained for a minimum of five (5) years from the date of account closure. This retention is required for compliance with anti-money laundering and financial record-keeping obligations.
• Communications Data: Live chat transcripts and email correspondence are retained for a minimum of two (2) years for customer service quality assurance and dispute resolution purposes.
• Responsible Gaming Records: Self-exclusion records and responsible gaming tool usage histories are retained for a minimum of five (5) years to prevent re-registration by self-excluded players and to support responsible gaming monitoring obligations.
• Technical and Analytical Data: IP address logs, device identifiers and session analytics are retained for a maximum of twelve (12) months before being anonymised or deleted, unless a specific fraud investigation or legal proceeding requires longer retention.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for the duration of your account and for two (2) years following account closure, to demonstrate compliance with consent obligations.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with rp55's internal data disposal procedures. Anonymised data (from which no individual can reasonably be identified) may be retained indefinitely for statistical and platform improvement purposes.

10 Data Security

rp55 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Key security measures in place include:

• TLS/SSL Encryption: All data transmitted between your device and the rp55 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The rp55 website operates exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data — including identity documents, payment credentials and KYC records — is stored in encrypted form on rp55's infrastructure. Encryption keys are managed using industry-standard key management practices.
• Access Controls: Access to personal data within rp55's systems is restricted on a strict need-to-know basis. All personnel who have access to personal data are subject to confidentiality obligations and undergo data protection training.
• Two-Factor Authentication: rp55 offers two-factor authentication (2FA) via SMS OTP for all player accounts and requires 2FA for administrative access to systems containing personal data.
• Fraud Detection Systems: rp55 operates automated fraud detection systems that monitor transactions and login activity in real time to identify and block suspicious behaviour before it results in harm to players or the Platform.
• Penetration Testing and Audits: The rp55 Platform and infrastructure undergo regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate security weaknesses.
• Incident Response: In the event of a confirmed data security incident that may affect your personal data, rp55 will take immediate steps to contain the incident, assess its scope, and notify affected players within a reasonable timeframe, along with guidance on any protective steps you should take.

11 Your Rights and Choices

Subject to applicable law and the conditions set out below, you have the following rights with respect to the personal data rp55 holds about you:

• Right of Access: You have the right to request a copy of the personal data that rp55 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared. rp55 will provide this information within 30 days of a verified request.
• Right to Rectification: You have the right to request correction of any personal data that rp55 holds about you that is inaccurate or incomplete. You may update basic account information (such as your email address or mobile number) directly through your rp55 account settings. For corrections to identity data, please contact [email protected] with documentary evidence of the correct information.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. This right is subject to rp55's legal obligation to retain certain data (such as KYC records and transaction histories) for the minimum retention periods described in Section 9.
• Right to Restriction: You have the right to request that rp55 restricts its processing of your personal data in certain circumstances — for example, while rp55 investigates a rectification request or considers an objection you have raised.
• Right to Object: You have the right to object to processing based on rp55's legitimate interests. rp55 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise or defence of legal claims.
• Right to Withdraw Consent: Where rp55 processes your data on the basis of your consent (principally for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To opt out of marketing, email [email protected] with the subject line "Marketing Opt-Out – [Your Username]".
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to rp55 in a structured, commonly used and machine-readable format, and to have that data transmitted to another service provider where technically feasible.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Request – [Your Account Username]". rp55 may require you to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party. rp55 will respond to all verified requests within 30 days. In complex cases this period may be extended by a further 30 days, in which case you will be notified.

12 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how rp55 has handled your personal data, please contact us using the details below:

• Email: [email protected] (subject line: "Privacy Request – [Your Account Username]")
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 via the rp55 platform
• Response Time: rp55 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 days.

rp55 takes all privacy complaints seriously. If you submit a complaint, our Privacy Team will investigate the matter and provide you with a written response. If you are not satisfied with rp55's response to your complaint, you have the right to escalate the matter further in accordance with the dispute resolution process described in the rp55 Terms and Conditions.

rp55 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following any update constitutes acceptance of the revised Policy.