runex Privacy Policy

runex ("we", "us", "our") is committed to protecting the privacy and personal data of everyone who uses our online betting and casino platform at runex.im. This Privacy Policy sets out in clear, accessible English exactly what personal information we collect, why we collect it, how we use and protect it, with whom we share it, and what rights you have in relation to it.

This Policy applies to all users of the runex Platform, including registered account holders, visitors who browse the site without registering, and individuals who contact us through our support channels. It covers data collected through the runex website, mobile-optimised pages, and any associated customer support or communications.

By accessing the runex Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, you should not use the Platform. This Privacy Policy should be read together with the runex Terms & Conditions, available at runex.im/terms-conditions.

For the purposes of this Privacy Policy, runex acts as the data controller in respect of personal data collected through the Platform. As data controller, runex determines the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to contact us in relation to any privacy matter, you may do so by writing to us at:

runex collects several categories of personal data depending on how you interact with our Platform. The table below summarises the types of data we may collect and hold about you:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes, except where identity verification specifically requires a government-issued photograph (e.g., a national ID card scan), and only to the minimum extent necessary to confirm your identity and age.

runex collects your personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automated technologies: As you navigate the Platform, we automatically collect Technical Data via cookies, server logs, and similar tracking technologies. This includes your IP address, the pages you visit, the time and duration of your visits, and the device and browser you use.
• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, we receive confirmation data from those providers confirming the transaction. We do not receive or store your full payment account passwords or PINs.
• Identity verification providers: Where we use third-party KYC (Know Your Customer) services to verify your identity and age, those providers return a verification result and may share certain identity data with us as part of that process.
• Game providers: Our third-party game software suppliers (including Pragmatic Play, Evolution Gaming, Spribe, and others) may share session and gaming data with us for the purposes of game integrity monitoring and responsible gaming compliance.
• Fraud prevention services: Specialist fraud detection partners may share risk signals or flagged indicators with us where a transaction or account activity pattern triggers an automated review.

runex processes your personal data only where we have a valid legal basis for doing so. The legal bases we rely upon are as follows:

• Performance of a contract: Processing is necessary to provide you with the Services you have requested — including account management, deposits, withdrawals, game access, and customer support. Without this processing, we cannot deliver the Platform.
• Legal obligation: Certain processing activities are required in order for runex to comply with applicable law, including anti-money laundering (AML) obligations, age verification requirements, and the retention of financial transaction records.
• Legitimate interests: We process certain data where it is in our legitimate interests to do so and those interests are not outweighed by your privacy rights. This includes fraud prevention, security monitoring, platform performance analysis, and responsible gaming monitoring.
• Consent: Where we rely on your consent — most notably for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

runex uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your runex account, verify your identity and age, and process your login credentials.
• Service delivery: To process your deposits and withdrawals, settle bets and game outcomes, apply bonuses to your account, and deliver the full range of Platform features.
• Identity & age verification: To confirm that you meet the minimum age requirement of 21 years and to comply with our Know Your Customer (KYC) obligations before processing your first withdrawal.
• Fraud prevention & security: To monitor account activity for signs of fraud, money laundering, multi-accounting, collusion, or other prohibited conduct outlined in the runex Terms & Conditions.
• Responsible gaming: To monitor gaming behaviour patterns, enforce deposit limits and self-exclusion restrictions you have set, and identify users who may be exhibiting signs of problem gambling so that appropriate support can be offered.
• Customer support: To respond to your queries, complaints, and requests, and to maintain a record of communications for quality assurance and dispute resolution purposes.
• Marketing & promotions: Where you have opted in, to send you personalised offers, bonus notifications, and promotional content related to runex products and services — including cricket betting promotions tied to BPL and IPL seasons, and seasonal offers for Eid and other occasions.
• Platform improvement: To analyse user behaviour patterns (in aggregated, anonymised form where possible) to improve the Platform's design, performance, and product offering.
• Legal compliance: To retain records and respond to lawful requests from regulatory authorities or law enforcement bodies in accordance with applicable law.

runex uses cookies and similar tracking technologies to make the Platform function correctly, to remember your preferences, and to help us understand how users interact with our site. Cookies are small text files stored on your device by your browser when you visit a website.

The types of cookies used on the runex Platform are as follows:

• Strictly necessary cookies: These are essential for the Platform to function and cannot be switched off. They include session cookies that maintain your logged-in state, security tokens, and cookies that enable payment processing. No consent is required for these cookies.
• Performance and analytics cookies: These help us understand how users navigate the Platform — which pages are most visited, how long sessions last, and where errors occur. The data collected is aggregated and does not directly identify individual users.
• Functional cookies: These remember your preferences — such as your preferred language, notification settings, or responsible gaming limits — so that you do not need to re-enter them each time you visit.
• Responsible gaming cookies: These track your session duration and wagering activity to support the delivery of reality check notifications and to enforce session time limits where you have set them.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers are available on the respective browser's support pages.

runex shares your personal data with third parties only where necessary to deliver the Services, to comply with legal obligations, or to protect the security and integrity of the Platform. We do not sell your personal data to any third party, and we do not share it for third-party advertising purposes.

The categories of third parties with whom we may share your data are:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, DBBL, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive transactional data necessary to process your deposits and withdrawals. These providers are bound by their own data protection obligations and our contractual data processing agreements.
• Identity verification providers: Third-party KYC services receive your identity documents and return a verification result to runex. These providers operate under strict contractual obligations and are not permitted to use your data for any purpose other than identity verification.
• Game software providers: Suppliers including Pragmatic Play, Evolution Gaming, Spribe, JDB Gaming, Ezugi, and Microgaming receive gaming session data necessary to deliver and settle game outcomes. These providers are contractually prohibited from using your data for their own marketing or profiling purposes.
• Fraud prevention and security services: Specialist providers that assist runex in detecting and preventing fraud, money laundering, and prohibited conduct receive flagged transaction data and risk indicators on a need-to-know basis.
• Legal and regulatory authorities: Where required by applicable law or in response to a lawful request from a regulatory body, law enforcement agency, or court order, runex will disclose personal data to the extent required and permitted by law.
• Professional advisers: Lawyers, auditors, and other professional advisers who assist runex in the operation of its business may have access to personal data where strictly necessary for the performance of their advisory role, subject to professional confidentiality obligations.

Some of the third-party service providers with whom runex works — including certain game software providers and fraud prevention services — are based outside Bangladesh. Where your personal data is transferred to a recipient in another country, runex takes steps to ensure that appropriate safeguards are in place to protect your data during and after the transfer.

These safeguards may include:

• Contractual data processing agreements that require the recipient to protect your data to a standard equivalent to the protections applied within Bangladesh.
• Transfers to countries that offer an adequate level of data protection as assessed by applicable standards.
• Technical measures such as encryption to protect data in transit.

By using the runex Platform, you acknowledge that your data may be processed in countries other than Bangladesh as described above. If you have questions about the specific safeguards applied to any particular transfer, please contact us at [email protected].

runex retains your personal data for as long as your account remains active and for the period required thereafter to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide:

When your data is no longer required for any of the purposes described in this Policy, runex will securely delete or anonymise it. Where anonymisation is used, the resulting data cannot be used to identify you and may be retained indefinitely for statistical analysis.

runex takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the runex Platform is encrypted in transit using SSL/TLS protocols, ensuring that your login credentials, payment information, and personal data cannot be intercepted by third parties.
• Access controls: Access to personal data within runex is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role, and all access is logged and audited.
• Secure server infrastructure: runex stores personal data on secured servers with physical and network access controls, regular vulnerability assessments, and intrusion detection systems.
• Password security: Account passwords are stored in hashed form using industry-standard cryptographic algorithms. runex staff cannot view your password in plain text.
• Fraud detection systems: Automated monitoring systems flag unusual account activity — such as login from an unrecognised device or location, or unusual deposit/withdrawal patterns — for review by our security team.
• Regular security reviews: runex conducts periodic security assessments to identify and address potential vulnerabilities in the Platform and its underlying infrastructure.

You have a number of rights in relation to the personal data that runex holds about you. These rights are summarised below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request".

• Right of access: You have the right to request a copy of the personal data runex holds about you, along with information about how it is used and with whom it is shared. We will respond to access requests within 14 business days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your email address or phone number) directly through your account settings.
• Right to erasure: In certain circumstances, you have the right to request that runex delete the personal data it holds about you. This right is subject to limitations where retention is required by law — for example, we are required to retain financial transaction records and KYC documents for a minimum period regardless of an erasure request.
• Right to restriction of processing: You have the right to request that runex restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transferred to another data controller where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. runex will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims.
• Right to withdraw consent: Where processing is based on your consent — such as receiving marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

runex may send you promotional emails, SMS messages, or in-platform notifications about new games, bonuses, seasonal offers (such as Eid promotions, BPL season bonuses, or Pohela Boishakh special events), and other runex products and services — but only where you have explicitly opted in to receive such communications during registration or through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email you receive from runex.
• Updating your communication preferences directly in the "Notifications" section of your account settings.
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Please note that opting out of marketing communications does not affect transactional communications that are necessary to manage your account — such as deposit and withdrawal confirmations, account security alerts, identity verification requests, and responses to your support queries. These communications are not marketing and will continue to be sent regardless of your marketing preferences.

The runex Platform is strictly for adults aged 21 years and above. runex does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and accounts suspected of belonging to minors are suspended immediately pending investigation.

If you are a parent or guardian and believe that your child has registered an account with runex or has provided personal data to us, please contact us immediately at [email protected]. We will promptly investigate the matter and, if confirmed, delete the relevant data and close the account without delay.

runex reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the introduction of new Platform features, changes in applicable law, or feedback from users and advisers. When we make changes, we will update the "Last updated" date at the top of this Policy.

Where changes are material — meaning they significantly affect your rights or how your personal data is used — we will provide advance notice through one or more of the following channels:

• A prominent notice on the runex Platform homepage or login screen.
• An email notification to your registered email address (where the change specifically affects how your data is used).
• An in-platform notification in your account dashboard.

Your continued use of the runex Platform following notification of any change to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes, you should stop using the Platform and may request closure of your account by contacting us at [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how runex protects your data. Previous versions of this Policy are available upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way runex handles your personal data, please do not hesitate to contact our Privacy team. We take all privacy enquiries seriously and are committed to responding in a timely and transparent manner.

You may contact us by email at:

Our team will acknowledge your message within 48 hours (Bangladesh Standard Time, UTC+6) on business days. A full written response will be provided within 14 business days. For complex requests — such as large data access requests or erasure requests involving multiple data categories — we may require additional time, in which case we will notify you of the extended timeline and keep you informed of progress.

If you believe that runex has not handled your personal data in accordance with this Privacy Policy or applicable law, and you are not satisfied with our response to your complaint, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction.