r2bet Privacy Policy
At r2bet, the privacy and security of your personal data is a fundamental commitment, not an afterthought. This Privacy Policy explains exactly what data we collect from Bangladesh players, why we collect it, how we use and protect it, and what rights you have over your information at every stage of your r2bet journey.
Privacy at a Glance
How r2bet Protects Your Personal Data
Every data exchange between your browser or mobile device and the r2bet platform is secured using industry-standard TLS/SSL encryption. This ensures that your account credentials, payment details, and personal information cannot be intercepted during transmission.
r2bet does not sell, rent, or trade your personal information to third-party marketing organisations. Your data is used exclusively for platform operation, compliance, payment processing, and improving your experience on r2bet — nothing beyond that.
All player data held by r2bet is stored on access-controlled, encrypted servers. Access is restricted to authorised r2bet personnel on a strict need-to-know basis. Regular security audits and penetration testing are conducted to maintain infrastructure integrity.
r2bet collects only the personal data that is strictly necessary for the purposes described in this policy. We do not collect excessive or irrelevant information. Where data is no longer needed for its original purpose, it is securely deleted or anonymised in accordance with our retention schedule.
r2bet recognises your right to access, correct, restrict, and request deletion of your personal data. All such requests are handled promptly by our support team. Bangladesh players can submit data rights requests at any time by contacting [email protected] in English.
r2bet uses cookies and similar tracking technologies only for essential platform functionality, session management, fraud prevention, and aggregate analytics. We do not place third-party advertising cookies without your knowledge. Full details are provided in the Cookies section of this policy.
Section 1
Data We Collect
r2bet collects personal data from you in the course of providing its online casino and sports betting services to Bangladesh players. The categories of data we collect, and the circumstances in which each category is collected, are described in full below.
Registration Data: When you create an r2bet account, we collect your full legal name, date of birth, email address, mobile phone number, and country of residence (Bangladesh). This information is required to create and authenticate your account, verify your age eligibility (18+), and comply with our Know Your Customer (KYC) obligations. Without this data, we are unable to open an account for you.
Identity Verification Data: As part of our KYC process, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof-of-address documents such as utility bills or bank statements. These documents are used exclusively for identity verification and anti-money laundering compliance purposes.
Financial Data: When you make a deposit or request a withdrawal, r2bet collects transaction details including the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank name), the transaction reference number, the amount in BDT, and the timestamp of the transaction. r2bet does not store full card numbers or mobile banking PINs — payment processing is handled by our payment partners whose own privacy policies also apply to those transactions.
Bangladesh Players Note: All account data for r2bet Bangladesh players is processed and stored in English. r2bet does not require you to submit documentation in Bengali — English-language documents are accepted for all KYC purposes.
Usage and Behavioural Data: r2bet automatically collects data about how you use the platform, including pages visited, games played, bet amounts and outcomes, session duration, device type, browser type, operating system, and IP address. This data is used for fraud prevention, responsible gaming monitoring, platform improvement, and aggregate analytics. It is not used to build individual advertising profiles.
Communications Data: When you contact r2bet's customer support team — whether by email, live chat, or any other channel — we retain records of those communications, including the content of your messages and the responses provided. This data is used for quality assurance, dispute resolution, and to ensure continuity of support when you contact us again in the future.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, date of birth, phone number | Account creation, age verification, KYC |
| Identity Documents | NID, passport, utility bill | KYC compliance, AML compliance |
| Financial Data | Payment method, transaction reference, BDT amount | Deposit/withdrawal processing, AML monitoring |
| Usage Data | Pages visited, games played, session logs, IP address | Fraud prevention, responsible gaming, analytics |
| Communications Data | Support emails, chat transcripts | Customer service, dispute resolution |
| Cookie Data | Session tokens, preference cookies, analytics identifiers | Platform functionality, session management |
Section 2
How We Use Your Data
r2bet processes your personal data only for clearly defined, legitimate purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The following is a comprehensive description of how r2bet uses the data it holds about you.
Account Management: Your registration data is used to create, maintain, authenticate, and administer your r2bet account. This includes processing login sessions, managing account settings, sending account-related notifications, and verifying your identity when you contact customer support.
Service Delivery: r2bet uses your data to deliver the core services of the platform — including enabling you to place bets, play casino games, participate in promotions, and conduct financial transactions. Without processing the necessary data, these services cannot be provided.
Compliance and Legal Obligations: r2bet is required to process certain categories of personal data in order to comply with anti-money laundering (AML) obligations, responsible gaming requirements (including age verification and self-exclusion management), and responses to lawful requests from regulatory or law enforcement authorities. This processing is a legal necessity and cannot be waived.
Fraud Prevention and Platform Security: r2bet uses usage data, IP addresses, device identifiers, and transaction patterns to detect and prevent fraud, unauthorised account access, bonus abuse, collusion, and other forms of platform misuse. This processing is in r2bet's legitimate interest and in the interest of the broader player community.
Responsible Gaming Monitoring: r2bet uses behavioural data — including session frequency, session duration, bet sizing patterns, and deposit frequency — to monitor for indicators of problem gambling. Where concerning patterns are detected, r2bet may intervene with responsible gaming prompts, temporary cooling-off periods, or direct contact from our player welfare team.
Platform Improvement and Analytics: Aggregated, anonymised usage data is analysed to understand how players interact with the r2bet platform, which features are most used, where usability improvements can be made, and how the overall player experience can be enhanced. Individual players are never identified in this analytical process.
Customer Support: Communications data is used to respond to your support queries, investigate complaints, and maintain a record of your support history so that our team can assist you effectively every time you contact us. Support communications are retained for a minimum of 12 months.
Marketing Communications: r2bet will only send you promotional emails or SMS messages if you have explicitly opted in to receive marketing communications. You may withdraw your consent to receive marketing at any time by contacting [email protected] or updating your account notification preferences. Withdrawing marketing consent does not affect the lawfulness of any processing that occurred before you withdrew consent.
- r2bet does not use automated decision-making that produces legal or similarly significant effects on players without human review.
- Profiling carried out by r2bet for responsible gaming or fraud purposes is subject to internal oversight and regular review.
- r2bet never uses your data to create advertising profiles for sale to third-party advertisers.
- All data processing by r2bet has a defined legal basis — contract performance, legal obligation, legitimate interest, or consent — and these bases are documented in r2bet's internal data processing records.
Section 3
Data Sharing and Disclosure
r2bet does not sell your personal data to any third party, and does not share it with external organisations for their own marketing or commercial purposes. However, in order to operate the platform effectively and meet legal obligations, r2bet does share certain data with a limited set of trusted service providers and authorities as described below.
Payment Processors: When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, the minimum necessary transaction data is shared with the relevant payment provider to facilitate the transaction. Each payment provider operates under its own privacy policy and data processing agreement. r2bet selects payment partners who maintain appropriate security standards.
Game Technology Providers: r2bet's casino game content is provided by licensed third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, among others. These providers may receive your player identifier and game session data to render games correctly, manage fair play, and process game outcomes. These providers do not receive your full name, payment details, or identity documents.
KYC and Identity Verification Partners: r2bet may use specialist third-party identity verification services to assist with document review and age verification as part of our KYC process. Any data shared with such partners is subject to strict contractual data processing agreements and is used exclusively for the verification purpose.
Regulatory and Law Enforcement Authorities: r2bet may be required by applicable law or a binding order from a competent authority to disclose personal data about specific players. r2bet will comply with such obligations but will, where legally permitted, notify the affected player of the disclosure requirement. r2bet does not proactively share player data with any government body beyond what is strictly required by law.
No Cross-Border Data Sales: r2bet does not transfer, sell, or license your personal data to data brokers, marketing networks, lead generation companies, or any other commercial data aggregators — whether located in Bangladesh or overseas.
- All third-party service providers who process data on r2bet's behalf are bound by contractual data processing agreements that restrict them from using your data for any purpose beyond the specific service they provide to r2bet.
- r2bet conducts due diligence on the data security practices of its service providers before entering into a data sharing relationship.
- Where personal data is transferred internationally as part of a service provider relationship, r2bet ensures that appropriate safeguards are in place to protect that data during transfer and storage.
- r2bet will update this Privacy Policy if any material changes to its data sharing practices occur. Continued use of the platform following such an update constitutes acceptance of the revised policy.
Section 4
Cookies and Tracking
r2bet uses cookies and similar technologies — including local storage identifiers and session tokens — to operate the platform, maintain your logged-in session, remember your preferences, prevent fraud, and collect aggregate analytics about platform usage. This section explains what cookies we use, why, and how you can manage them.
Essential Cookies: These cookies are strictly necessary for the r2bet platform to function. They include your session authentication token (which keeps you logged in), CSRF protection tokens (which protect your account from cross-site request forgery attacks), and load-balancing cookies (which ensure your requests are routed to the correct server). Essential cookies cannot be disabled without breaking the platform's core functionality. They are set automatically when you visit r2bet.
Preference Cookies: These cookies remember settings and choices you have made on the platform — such as your preferred language display, notification settings, and game layout preferences. Preference cookies improve your experience by ensuring the platform remembers your choices between sessions. They can be cleared via your browser settings, but doing so will reset your preferences to their defaults.
Analytics Cookies: r2bet uses anonymised analytics data to understand aggregate usage patterns on the platform. Analytics cookies record information such as which pages are most visited, how long sessions last, and which device types are most commonly used. This data does not identify individual players. It is used solely to inform platform development decisions.
Fraud Prevention Identifiers: r2bet uses device fingerprinting and persistent identifiers as part of its fraud and multi-account detection systems. These identifiers help r2bet detect when a single individual is attempting to operate multiple accounts or conduct suspicious activity from the same device. This processing is in r2bet's legitimate interest and in the interest of all players on the platform.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Session | Login session, CSRF protection, server routing | No — platform breaks without these |
| Preference | Language, layout, notification settings | Yes — via browser settings (resets preferences) |
| Analytics | Aggregate usage statistics, page performance | Yes — via browser settings |
| Fraud Prevention | Multi-account detection, suspicious activity flags | No — required for platform security |
You can manage or delete cookies at any time through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, or clear cookies on a per-site basis. Please note that disabling certain cookies may impair your ability to use some features of the r2bet platform. r2bet does not respond to Do Not Track (DNT) browser signals, as there is no consistent industry standard for implementing them.
Section 5
Data Retention
r2bet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, compliance, or regulatory obligations. When data is no longer required, it is securely deleted or irreversibly anonymised.
Active Account Data: While your r2bet account remains open and active, all registration data, financial transaction records, game history, and communications data are retained in full. This retention is necessary for the ongoing delivery of services, dispute resolution, responsible gaming monitoring, and AML compliance.
Closed Account Data: Following the closure of your r2bet account — whether voluntary or as a result of a Terms violation — r2bet retains your personal data for a minimum period of five years from the date of closure. This retention period is required for AML compliance, audit purposes, and to handle any disputes or legal claims that may arise after account closure. After the five-year retention period, data is securely deleted unless an ongoing legal obligation requires extended retention.
Identity Documents: Copies of identity documents submitted for KYC purposes are retained for a minimum of five years following account closure. Where a legal investigation or regulatory inquiry is ongoing, retention may be extended until that matter is fully resolved.
Analytics Data: Anonymised aggregate analytics data, which contains no personally identifiable information, may be retained indefinitely for historical platform performance analysis. Because this data cannot be linked back to any individual, it falls outside the scope of personal data retention obligations.
Support Communications: Customer support communications — including email threads and live chat transcripts — are retained for a minimum of 24 months from the date of the last communication. Where a communication is related to a dispute or formal complaint, retention is extended until the matter is fully resolved and any applicable appeal period has expired.
- r2bet does not retain financial card numbers, mobile banking PINs, or full payment credentials at any point — these are processed exclusively by our payment partners.
- Players may request confirmation of how long specific categories of their data will be retained by contacting [email protected].
- Where r2bet anonymises data rather than deleting it, the anonymisation process is irreversible and the resulting data cannot be re-linked to any individual.
- Backup copies of data held for disaster recovery purposes are subject to the same retention schedule as live data and are deleted on the same timeline.
Section 6
Your Privacy Rights
r2bet respects your rights over your personal data. You have the right to know what data we hold about you, to correct inaccuracies, to restrict processing in certain circumstances, and to request deletion of your data subject to our legal retention obligations. All rights requests are handled by r2bet's support team at no cost to you.
Right of Access: You have the right to request a copy of all personal data that r2bet holds about you. This is sometimes called a Subject Access Request (SAR). r2bet will respond to all valid access requests within 30 days of receipt. Requests can be submitted by email to [email protected] with the subject line "Data Access Request" and your registered account email address. r2bet may ask you to verify your identity before processing the request.
Right to Rectification: If any personal data r2bet holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For routine data corrections — such as an updated email address or phone number — you can make changes directly through your account settings. For corrections to identity documents or sensitive account data, please contact [email protected].
Right to Erasure: You may request that r2bet delete your personal data. r2bet will action erasure requests where there is no overriding legal obligation to retain the data — for example, where your account has been closed and the applicable AML retention period has expired. Where data must be retained for legal compliance reasons, r2bet will explain this clearly and confirm when deletion will take place.
Right to Restrict Processing: In certain circumstances — such as where you contest the accuracy of data we hold, or where you have objected to processing — you have the right to request that r2bet restricts its processing of your data to storage only while the matter is resolved. r2bet will confirm any restriction within five business days of your request.
Right to Object: You have the right to object to r2bet processing your data on the basis of legitimate interests — for example, for direct marketing purposes. Where you object to marketing processing, r2bet will stop that processing immediately. Where you object to other legitimate interest processing, r2bet will assess the objection and provide a reasoned response within 30 days.
Right to Data Portability: Where r2bet processes your data by automated means on the basis of your consent or a contract with you, you have the right to receive that data in a structured, commonly used, machine-readable format and to request that it be transferred to another controller where technically feasible. Portability requests should be submitted to [email protected].
How to Submit a Privacy Rights Request: All privacy rights requests for r2bet Bangladesh players should be submitted in English by email to [email protected]. Please include your full name, your registered r2bet account email address, and a clear description of the right you wish to exercise. r2bet will acknowledge all requests within 48 hours and complete them within 30 days unless a shorter or longer period is required by law.
Section 7
Data Security Measures
r2bet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Security is not treated as a checkbox — it is an ongoing operational commitment that is reviewed and updated regularly.
Encryption in Transit: All data transmitted between your device and r2bet's servers is encrypted using TLS 1.2 or TLS 1.3 protocols. The r2bet website enforces HTTPS-only connections and uses HSTS (HTTP Strict Transport Security) headers to prevent protocol downgrade attacks. You can verify the security of your connection by checking for the padlock icon in your browser's address bar when visiting r2bet.bio.
Encryption at Rest: Sensitive personal data stored on r2bet's servers — including identity documents, financial transaction records, and account credentials — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are subject to strict access controls.
Access Controls: Access to personal data held by r2bet is restricted to authorised personnel whose roles require it. r2bet applies the principle of least privilege — each staff member can only access the minimum amount of data necessary for their specific job function. All data access is logged and subject to regular audit review.
Incident Response: r2bet maintains a documented data breach response procedure. In the event of a security incident that results in the unauthorised access to or disclosure of personal data, r2bet will assess the incident, take immediate containment measures, and notify affected players as required. Players are encouraged to report any suspicious activity related to their r2bet account immediately to [email protected].
- r2bet conducts regular internal security reviews and periodic independent penetration testing of its platform infrastructure.
- r2bet staff who handle personal data receive data protection training as part of their onboarding and on an ongoing basis.
- r2bet's servers are hosted in data centres that maintain physical security controls including restricted access, CCTV monitoring, and environmental protections against fire and flood.
- r2bet uses multi-factor authentication for administrative access to systems that process player personal data.
- Players are strongly encouraged to use a strong, unique password for their r2bet account and to enable two-factor authentication where available to protect their own account security.
Account Security Reminder: r2bet will never ask you for your password by email, live chat, or phone. If you receive any communication claiming to be from r2bet and requesting your password, account PIN, or full payment credentials, treat it as fraudulent and report it to [email protected] immediately.
Section 8
Policy Updates and Contact
r2bet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. This section explains how we communicate policy changes and how you can reach us with any privacy-related question or concern.
Policy Updates: When r2bet makes a material change to this Privacy Policy — meaning a change that affects the way we collect, use, share, or retain your personal data in a manner that is meaningfully different from what is described in the current version — we will notify registered players by email to the address on file and by a prominent notice on the r2bet platform. Minor clarifications, such as grammar corrections or improved wording that does not alter the substance of the policy, may be made without advance notice.
Effective Date: The effective date of the current version of this Privacy Policy is January 2026. The version date is displayed at the top of the Data We Collect section. You should check this page periodically to stay informed about how r2bet protects your information. Continued use of the r2bet platform after a revised Privacy Policy has been posted constitutes your acceptance of the updated terms.
Children and Minors: r2bet's platform is strictly for adults aged 18 and above. r2bet does not knowingly collect personal data from any person under the age of 18. If r2bet discovers that a user under the age of 18 has registered an account, that account will be suspended immediately, all associated funds will be reviewed in line with our Terms and Conditions, and all personal data for that user will be deleted as soon as reasonably practicable. If you believe a minor has registered on r2bet, please contact [email protected] immediately.
Third-Party Links: The r2bet platform may contain links to third-party websites or services — for example, links to game provider information pages or payment partner portals. r2bet is not responsible for the privacy practices of those third-party sites. We encourage you to read the privacy policy of any third-party site you visit via a link from the r2bet platform.
Contact Us: If you have any question about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how r2bet handles your personal data, please contact our support team in English. Our team is available 24 hours a day, seven days a week, and will respond to all privacy enquiries promptly.
Privacy Contact: Available 24/7 · Bangladesh Standard Time (UTC+6)
- All privacy enquiries submitted to r2bet are acknowledged within 48 hours and fully resolved within 30 calendar days unless a legal extension applies.
- r2bet does not charge any fee for handling privacy rights requests under normal circumstances.
- Where r2bet declines to act on a privacy rights request — for example, because legal retention obligations apply — we will provide a written explanation of the reason for refusal and inform you of any available remedies.
- This Privacy Policy is governed by and construed in accordance with applicable law. Any disputes relating to this policy should be submitted to r2bet's support team in the first instance for resolution.
- r2bet is committed to resolving all privacy concerns raised by Bangladesh players fairly, transparently, and in a timely manner consistent with the principles set out in this policy.
Ready to Play?
Your Data Is Safe with r2bet
Now that you understand how r2bet protects your privacy, explore everything the platform has to offer — from live cricket betting to hundreds of slots and live casino games, all secured and trusted by Bangladesh players.
SSL Secured · 18+ Only · 24/7 Support · Instant BDT Payments