Privacy & Management of Personal Data

Introduction and scope

Rkgg acts as the data controller for personal data collected in connection with its online gambling platform. This Privacy & Personal Data Management Policy explains what information we collect, how we use it to operate and improve our services, with whom we share it, and how you may exercise your rights under applicable data protection laws.

Data we collect

• Account and identity information: name, date of birth, residential or billing address, email address, phone number, and government-issued identity documents when required for verification.
• Financial information: payment method details and transaction records necessary to process wagers, deposits, withdrawals, and prize payments.
• Wagering and game activity: histories of wagers, game choices, bets placed, winnings, and odds or outcomes related to gaming.
• Communications and feedback: correspondence with customer support, surveys, promotions, and user-provided content.
• Technical data: device identifiers, IP address, browser type, and usage data collected to maintain security and optimize the service.
• Identification and compliance data: information required to verify identity and comply with applicable anti‑money laundering, counter‑terrorism, and gaming regulations.
• Cookies and similar technologies: data generated through cookies, web beacons, and log files to manage your session and tailor your experience.

How we collect personal data

• Direct collection: when you create an account, place a wager, make a payment, participate in promotions, or contact us.
• Automated technologies: through cookies and similar technologies to monitor site usage and enhance security and performance.
• From third parties: identity verification services, payment processors, fraud prevention partners, and regulatory or law enforcement when required by law.

Purposes and legal basis for processing

• Provide and administer the platform: to enable deposits, wagers, settlements, payouts, and account management (contractual necessity).
• Identity verification and fraud prevention: to comply with legal obligations and to protect the integrity of the service (legitimate interests and legal obligations).
• Security and risk management: to detect unauthorized access, prevent cheating, and protect users and the platform (legitimate interests).
• Communication and service improvement: to respond to inquiries, deliver updates, and tailor content and offers (legitimate interests; consent where required for marketing).
• Compliance with law: to meet regulatory reporting, licensing, and auditing requirements (legal obligations).
• Marketing and promotions: to provide information about products, events, and offers with your consent or as permitted by applicable law (consent/legitimate interests).

International transfers and data storage

We may transfer personal data to service providers located outside your country. When transfers occur, we apply safeguards appropriate under applicable data protection laws, including contractual terms and any other recognized transfer mechanisms. Data may be stored on servers in regions where we or our processors operate, subject to local requirements and protections.

Sharing and disclosure

• Service providers: payment processors, identity verification services, hosting and IT service providers, analytics and marketing partners bound by contractual obligations to protect data.
• Regulators and law enforcement: as required by law or to protect the rights and safety of users or the platform.
• Corporate events: in the context of a merger, acquisition, or asset sale, with appropriate notice where legally required.
• Other permitted disclosures: to comply with legal processes, prevent fraud, or protect vital interests.

Cookies and tracking technologies

We use cookies for strictly necessary purposes to provide the service, for preferences to improve user experience, for analytics to understand usage, and for marketing where permitted. You may manage cookies via your browser settings. Some features may not function properly if cookies are disabled. We do not use cookies to store payment credentials.

Data retention and deletion

We retain personal data for as long as necessary to fulfill the purposes described and to comply with legal obligations. Typical retention periods include: account data for the duration of the active relationship plus a minimum of five years for audit, tax, and dispute resolution purposes; anonymized aggregated data may be preserved for analytical uses after personal data deletion. When data is no longer required, we securely delete or anonymize it.

Security of personal data

We implement appropriate technical, organizational, and physical measures to protect personal data against unauthorized access, alteration, loss, or disclosure. Data in transit is encrypted with TLS; data at rest is protected through access controls, encryption where feasible, and routine security assessments. Access to personal data is restricted to personnel with a legitimate need to know, and all personnel are bound by confidentiality obligations.

Your rights and how to exercise them

• Right of access: you may request confirmation of whether we process your personal data and obtain a copy of the data.
• Right to rectify: you may request corrections to inaccurate or incomplete data.
• Right to erasure: you may request deletion of personal data where no ongoing legitimate reason justifies continued processing (subject to legal obligations).
• Right to restriction: you may request restriction of processing under certain circumstances.
• Right to data portability: you may request a machine-readable copy of your data where applicable.
• Right to object: you may object to processing for direct marketing or where processing is based on legitimate interests, subject to legal exceptions.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any rights, you may use the in‑account Privacy settings or contact our Privacy Team at [email protected]. We will respond within 30 days, with extensions up to 90 days for complex requests, and will provide status updates as appropriate.

Marketing communications and opting out

You may opt out of marketing communications by using the unsubscribe option in any email, updating preferences in your account, or contacting [email protected]. Even if you opt out of marketing, transactional communications related to your account will continue to be sent as necessary.

Children and minors

Rkgg does not knowingly collect personal data from individuals under the applicable gambling age. We employ age verification practices and may suspend or terminate accounts found to involve underage participants in gambling activities, in accordance with our Terms and applicable law.

Data subject requests and response timelines

Requests submitted under this policy will be acknowledged promptly and responded to within 30 days. For complex requests, we may extend the response period by up to 60 additional days with notice to you where required by law.

Breach notification

In the event of a personal data breach, we will investigate, take appropriate remedial action, and notify affected individuals and regulators where legally required within applicable time limits.

Changes to this policy

We may update this policy from time to time. We will publish the effective date of material changes and, where required by law, provide additional notice. Continued use of our services constitutes acceptance of the updated policy.

Contact information

If you have questions about this policy or wish to exercise your rights, please contact the Privacy Team at [email protected]. You may also submit inquiries via the in‑app Privacy section or through the contact options available in your account.