Your Privacy Matters —
rrtopup Data Protection Policy

rrtopup collects personal data that is necessary to provide a secure, compliant, and enjoyable online gaming experience for players based in Bangladesh. We collect information in three primary ways: directly from you when you register or interact with the platform, automatically through your use of the site, and from trusted third-party sources where required for verification purposes.

The following table summarises the categories of personal data we collect and the reason for each:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information. If you voluntarily disclose such information in a support message or communication, it will be handled with strict confidentiality and used only to resolve the matter at hand.

rrtopup does not knowingly collect data from individuals under the age of 18. If we discover that a minor has submitted personal data during a registration attempt, that data will be deleted immediately and the registration will be rejected.

rrtopup processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The following outlines the primary reasons we process your personal information:

• Account Management: To create, maintain, and administer your rrtopup player account, including authentication, password recovery, and session management via OTP sent to your registered mobile number.
• Identity Verification (KYC): To verify your age, identity, and residential address in accordance with our responsible gaming commitments. Verification documents are reviewed by our compliance team and, in some cases, by trusted third-party KYC service providers.
• Payment Processing: To process deposits and withdrawals through approved payment channels including bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard. Transaction data is shared with payment processors solely to complete the requested transaction.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account sharing, bonus abuse, and any other conduct prohibited under our Terms & Conditions. This includes automated monitoring of betting patterns and IP address analysis.
• Responsible Gaming: To monitor player activity for signs of problem gambling behaviour, enforce self-exclusion requests, apply deposit limits, and provide support resources. This processing is carried out in the interest of player welfare.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of all support interactions for quality assurance and audit purposes.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) record-keeping requirements and responses to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the rrtopup platform, identify areas for improvement, and optimise game selection and user experience.
• Promotional Communications: To send you information about bonuses, promotions, and seasonal offers (such as BPL season promotions, Eid ul-Fitr bonuses, and Pohela Boishakh specials) where you have opted in to receive such communications. You may opt out at any time by contacting support.

rrtopup does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with third parties only where it is strictly necessary to operate the platform, fulfill a legal obligation, or protect the security of our players.

The categories of third parties with whom rrtopup may share your personal data are as follows:

• Game Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and NetEnt may receive limited session data (such as a pseudonymous player identifier and stake/win amounts) necessary to operate game rounds and calculate payouts. Game providers operate under their own data processing agreements and are bound by confidentiality obligations.
• Payment Service Providers: Mobile wallet operators (bKash, Nagad, Rocket, Upay, SureCash) and card networks (Visa, Mastercard) receive the transaction data necessary to process your deposit or withdrawal. rrtopup does not store full card numbers or mobile wallet PINs on its own servers.
• KYC and Identity Verification Providers: Where automated identity verification is used, your submitted documents may be processed by a trusted third-party KYC provider operating under a formal data processing agreement. These providers are prohibited from using your data for any purpose other than verifying your identity on our behalf.
• IT Infrastructure and Cloud Service Providers: rrtopup uses secure cloud hosting and content delivery infrastructure. Server operators have access only to encrypted data and are contractually bound to maintain strict data security standards.
• Legal and Regulatory Authorities: rrtopup will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a lawful order or when necessary to prevent serious harm, financial crime, or fraud.
• Anti-Fraud Networks: In cases of suspected fraud, money laundering, or multi-account abuse, rrtopup may share flagged account data with industry anti-fraud networks or shared exclusion registries to protect the wider player community.

rrtopup uses cookies and similar tracking technologies (including local storage and session storage) to ensure the platform functions correctly, to keep your session secure, and to gather anonymised analytics data that helps us improve the player experience. This section explains the types of cookies we use and how you can manage them.

You can manage or delete cookies through your web browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please be aware that disabling essential cookies will impair the rrtopup platform's core functionality, including the ability to log in and maintain a betting session.

rrtopup does not use cookies to serve third-party advertising or to track your activity across other websites. Our cookie usage is limited to the operational, analytical, and security purposes described in this policy.

rrtopup retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below provides our standard retention periods by data category:

When personal data is no longer required for any of the purposes described above, rrtopup will securely delete or anonymise it. Anonymised data (data from which individual identities cannot be reconstructed) may be retained indefinitely for statistical analysis and platform improvement.

As a player on rrtopup, you hold a number of rights in respect of the personal data we hold about you. rrtopup is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our data privacy team at support@rrtopup with the subject line "Privacy Rights Request" and your registered account username.

• Right of Access: You may request a copy of all personal data that rrtopup holds about you. We will provide this information in a readable format within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile information (such as your email address or contact number) directly from your account dashboard. For corrections to identity documents or address data, please contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request that rrtopup delete your personal data. Please note that this right is subject to limitations — we are required by law to retain certain financial and identity records for a minimum period, as described in the Data Retention section above. We will delete all data that we are not legally obligated to retain within 30 days of your request.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while a data accuracy dispute is being resolved. During a restriction, we will continue to store your data but will not process it for other purposes.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.
• Right to Object to Marketing: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Once you opt out, rrtopup will cease sending promotional communications within 5 business days.
• Right to Withdraw Consent: Where rrtopup processes your data on the basis of your consent (such as for optional marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

rrtopup employs a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

• SSL / TLS Encryption: All data transmitted between your browser or mobile device and rrtopup is encrypted using TLS 1.3 (Transport Layer Security). A valid SSL certificate is maintained at all times and can be verified via the padlock icon in your browser's address bar.
• Encryption at Rest: Personal data and sensitive account information stored on rrtopup servers is encrypted using AES-256 encryption. This means that even in the event of an unauthorised server access, data cannot be read without the encryption key.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal staff with access to player data undergo background checks, sign confidentiality agreements, and receive regular data protection training. Access logs are maintained and reviewed regularly.
• OTP Authentication: rrtopup uses one-time passwords (OTPs) sent to your registered mobile number as an additional layer of authentication during login and for sensitive account actions such as password changes and withdrawal requests.
• Automated Threat Monitoring: Our security systems continuously monitor for suspicious login attempts, unusual account activity, and potential fraud indicators. Accounts flagged by automated monitoring may be temporarily suspended pending review to protect the player's funds and data.
• Incident Response: In the event of a data security incident that may affect your personal data, rrtopup will notify affected players via their registered email address as soon as reasonably practicable and will take immediate steps to contain and remediate the breach.

While rrtopup takes every reasonable precaution to secure your personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their rrtopup account and to never share their login credentials with any other person.

rrtopup reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, registered players will be notified via their registered email address and a prominent notice will be displayed on the rrtopup website for a minimum of 14 days following the update.

The effective date shown at the top of this document and in the hero section above reflects the date on which the current version of the Privacy Policy came into force. Your continued use of the rrtopup platform following any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any material change, you should cease using the platform and request account closure.

Previous versions of this Privacy Policy are available on request by contacting our support team. We recommend reviewing this policy periodically to stay informed about how rrtopup protects and uses your personal data.

rrtopup is committed to resolving all privacy concerns in a fair, transparent, and timely manner. If you feel that your privacy rights have not been respected after contacting us directly, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.