Reddy Book Club GDPR Policy — Understanding Your Data Protection Rights

Under GDPR principles, the entity that determines the purpose and means of processing your personal data is referred to as the Data Controller. For users of Reddy Book Club, the platform operator acts as the Data Controller for all personal information collected through:

• The Reddybook register and account creation process
• Your Reddy Book login and ongoing account activity
• Sports betting, live cricket betting, and casino gaming sessions
• Payment transactions including deposits and withdrawals
• Communications with customer support

When you create a Reddy Book ID or use our platform, we may collect and process the following categories of personal data:

We collect only the data that is necessary for the specific purpose for which it is being used. We do not collect excessive or irrelevant information.

Under GDPR principles, personal data must be processed on a valid legal basis. Reddy Book Club relies on the following lawful bases when handling your information:

Where consent is the basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

As a user of Reddy Book Club, you are entitled to the following rights in relation to your personal data. These rights apply regardless of where you are based, as we apply GDPR-aligned standards platform-wide.

Your GDPR Rights as a User

1

Right to Access

You have the right to request a copy of the personal data we hold about you. This includes information collected during your Reddy Book register, account activity records, and any communications submitted to our support team.

2

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. This includes details such as your registered name, contact information, or account credentials.

3

Right to Erasure

Also referred to as the right to be forgotten, this allows you to request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, or if you withdraw your consent and there is no other lawful basis for processing.

Please note that erasure requests may be subject to legal retention obligations. Some data, such as transaction records, may need to be retained for a minimum period under applicable financial or regulatory requirements.

4

Right to Restriction of Processing

You may request that we temporarily limit how we process your data in situations where:

• You have contested the accuracy of the data and we are in the process of verifying it
• The processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing and we are reviewing that objection

5

Right to Data Portability

Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that this data be transferred to another service provider where technically feasible.

6

Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including profiling. If you raise an objection, we will assess whether our legitimate interests override your rights or whether we must stop the relevant processing.

You also have the right to object at any time to the processing of your personal data for direct marketing purposes. If you object, your data will no longer be processed for that purpose.

7

Right to Withdraw Consent

Where processing is based on your consent — such as receiving promotional updates or accepting optional cookies — you may withdraw that consent at any time. Withdrawal of consent does not affect any processing that took place prior to the withdrawal.

To exercise any of the rights listed above, please contact the Reddy Book Club support team through one of the following official channels:

When submitting a data request, please provide sufficient information to allow us to verify your identity and locate your account. We will acknowledge your request promptly and aim to respond within a reasonable timeframe in line with applicable data protection standards.

We will not charge a fee for handling legitimate data requests unless a request is clearly unfounded or excessive, in which case we reserve the right to apply a reasonable administrative charge or decline the request.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations.

The following general retention principles apply:

• ✓Account data is retained for the duration your Reddy Book ID remains active
• ✓Transaction and financial records may be retained for a longer period in line with legal requirements
• ✓Communication records submitted to support are retained for the period needed to resolve the matter and for a reasonable period thereafter
• ✓Where you request account deletion, we will take steps to remove or anonymise your data subject to any retention obligations that apply

Once the retention period has passed and there is no legal basis for continued storage, your data will be securely deleted or anonymised.

Reddy Book Club implements technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. These measures include:

• ✓SSL encryption applied across the platform, covering login sessions, transactions, and data transfers
• ✓Secure storage of account credentials and financial information
• ✓Access controls that limit internal data access to authorised personnel only
• ✓Monitoring for suspicious activity and potential data breaches

If your personal data is transferred outside the region in which it was collected — for example, to infrastructure or technology partners located in other countries — we take appropriate steps to ensure that such transfers are carried out in accordance with applicable data protection standards. This may include contractual safeguards or other approved transfer mechanisms.

We do not transfer personal data internationally without due consideration of user privacy and applicable legal requirements.

Reddy Book Club uses cookies and similar technologies on its platform. Non-essential cookies — such as analytics or functional cookies — are only placed with your consent where required by applicable law. You may withdraw cookie consent at any time through your browser settings, although doing so may affect certain features of the platform.

For full details on the types of cookies used and their purposes, please refer to the Privacy Policy page on the Reddy Book Club website.

This GDPR policy may be revised from time to time to reflect changes in applicable law, platform operations, or data handling practices. When updates are made, the revised policy will be published on this page. We encourage users to review this page periodically to remain informed of how their data is protected.

Continued use of the Reddy Book Club platform following any update to this policy constitutes acceptance of the revised terms.