rune88 Privacy Policy

Our Privacy Commitments

Six core principles that govern how rune88 handles every piece of data we hold about you.

Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by rune88 ("we", "us", "the Operator") in connection with the online casino and sports betting services available at rune88.pro. It applies to all registered players, prospective players who visit the platform without registering, and any other individuals whose personal data we process in the course of operating our services.

By registering an account or using any feature of the rune88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This policy should be read alongside the rune88 Terms and Conditions, which together form the complete agreement governing your use of the platform.

rune88 is the data controller for personal data collected via rune88.pro. We are responsible for ensuring that your data is handled lawfully, fairly, and transparently, in accordance with applicable data protection law and the principles set out in this policy.

Personal Data We Collect

rune88 collects personal data through several channels: directly from you during registration and account activity, automatically through your use of the platform, and from third-party partners where necessary for verification or payment processing purposes. The categories of personal data we may collect include:

• Identity data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., National ID card, passport number) collected during account registration and KYC verification.
• Contact data: Mobile phone number, email address, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Financial data: Mobile financial service account details (bKash, Nagad, Rocket, Upay), bank account information (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), transaction history, deposit and withdrawal records, and account balance information.
• Account activity data: Login timestamps, game history, betting records, session duration, bonus usage, wagering activity, and account preferences.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and connection information collected automatically when you access the platform.
• Communications data: Records of your correspondence with rune88 customer support, including chat transcripts, email exchanges, and complaint records.
• Verification documents: Copies of identity documents, utility bills, bank statements, or other supporting documents submitted as part of the KYC process.

How We Use Your Personal Data

rune88 processes personal data only where there is a lawful basis for doing so. The primary legal bases we rely on are: performance of a contract (operating your account), compliance with legal obligations (KYC, anti-money laundering), legitimate interests (fraud prevention, platform security), and your consent (where specifically sought). The following table sets out the main purposes for which we use your data:

rune88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent. We do not carry out automated decision-making that produces legal or similarly significant effects on you without providing an opportunity for human review.

Sharing Your Data with Third Parties

rune88 does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, in order to deliver our services effectively and meet our legal obligations, we may share your data with the following categories of trusted third parties:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners require transaction data to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulation.
• Identity verification providers: Third-party KYC and age verification services receive identity documents and personal data solely for the purpose of verifying account holder identity. These partners are bound by strict confidentiality obligations.
• Game technology providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive your account identifier and game session data necessary to deliver gameplay functionality. Game providers do not receive your full identity or financial data.
• Fraud prevention and security services: Specialised fraud analytics providers may receive technical and activity data (IP address, device fingerprint, betting patterns) to identify and prevent fraudulent activity on the platform.
• Legal and regulatory authorities: rune88 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by law or in response to a lawful request. We will notify you of such disclosure where legally permitted to do so.
• IT infrastructure providers: Cloud hosting, database management, and content delivery partners who process data on our behalf under binding data processing agreements that restrict their use of your data to service delivery only.

Cookies and Tracking Technologies

rune88 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how players use our service so we can continue improving it. A cookie is a small text file stored on your device by your browser. Cookies do not contain viruses or executable code and cannot access other data on your device.

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language, currency display, and interface settings. Disabling these will not prevent access but may affect your experience.
• Analytics cookies: Collect anonymised data about how players navigate the platform — pages visited, time spent, and errors encountered. This data is used in aggregate form only and cannot be used to identify you personally.
• Security cookies: Help detect and prevent fraudulent activity, multiple simultaneous sessions from different locations, and automated bot activity.

You may control cookie settings through your browser preferences at any time. Please note that disabling cookies categorised as strictly necessary will prevent you from logging into your rune88 account and accessing gameplay features. rune88 does not currently use third-party advertising or retargeting cookies.

Data Retention

rune88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your active account relationship with rune88 plus a minimum of 5 years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction data is retained for a minimum of 7 years from the date of the transaction, in accordance with applicable financial regulations.
• KYC and identity documents: Retained for a minimum of 5 years from account closure or from the date of the last transaction, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Technical logs: IP addresses and access logs are retained for up to 12 months and are used solely for security and fraud prevention purposes.
• Marketing consent records: Retained for the duration of your consent or until you withdraw it, plus 1 year for compliance auditing purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymised data is retained for statistical or analytical purposes, it is no longer considered personal data and is not subject to this policy.

Your Data Rights

As a registered player on the rune88 platform, you hold the following rights in respect of your personal data. These rights may be exercised by contacting our support team at [email protected]. rune88 will respond to all data rights requests within 30 calendar days of receipt.

• Right of access: You may request a copy of the personal data rune88 holds about you, along with information about how it is processed and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal obligations that require us to retain certain data.
• Right to restrict processing: You may request that rune88 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending a determination of legitimate grounds.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where rune88 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object at any time to processing of your personal data that is based on rune88's legitimate interests, including profiling for fraud prevention purposes, unless rune88 can demonstrate compelling legitimate grounds that override your interests.

Data Security Measures

rune88 implements a layered, defence-in-depth approach to data security. Our technical and organisational measures include, but are not limited to:

• Transport security: All communication between your device and rune88 servers is protected using TLS 1.2 or higher with 256-bit encryption. HTTPS is enforced on all pages.
• Data at rest: Stored personal data and financial records are encrypted using AES-256 encryption at the database level.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection: rune88 operates continuous network monitoring and automated intrusion detection systems to identify and respond to security threats in real time.
• Penetration testing: The platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: rune88 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, you will be notified without undue delay.

While rune88 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for logging out of your account after each session, particularly when using shared devices.

Children and Minors

The rune88 platform is strictly intended for adults aged 21 and above. rune88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21 years of age, we will immediately suspend the account, void any associated transactions, and delete the personal data of the minor as expeditiously as possible.

If you are a parent or guardian and believe that your child has registered an account or provided personal data to rune88 without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

Updates to This Privacy Policy

rune88 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, or our business practices. Any material changes will be posted on this page with a revised effective date. Where changes are significant, we will notify registered players via email or through an in-platform notification at least 7 days before the changes take effect.

Continued use of the rune88 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should contact support to close your account before the new policy takes effect.