Privacy Policy — How rs999 Collects, Uses & Protects Your Data

This Privacy Policy ("Policy") is published by rs999, the operator of the online casino and sports betting platform accessible at rs999.bar ("the Platform"). This Policy applies to all users who access, register on, or interact with the rs999 platform in any capacity, including Pakistani players who deposit via JazzCash, EasyPaisa, and other local payment channels.

The purpose of this Policy is to give you clear, honest information about what personal data rs999 collects, why we collect it, how long we keep it, who we share it with, and what rights you have in relation to that data. We have written this Policy in plain English — not buried in legalese — because we believe every rs999 player in Pakistan deserves to understand exactly how their information is handled.

By registering an account on rs999 or continuing to use the platform after this Policy has been updated, you confirm that you have read and understood its contents and consent to the data processing activities described herein. If you do not agree with any part of this Policy, you should cease using rs999 and contact us at [email protected] to request account closure.

This Policy is to be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which are published on rs999.bar and incorporated here by reference.

rs999 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through technical systems when you use the platform, and from third-party verification services as part of our KYC and AML compliance obligations. The categories of personal data we collect are as follows:

rs999 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent or establishing a new legal basis for processing.

• Account Creation & Management: To create, maintain, and administer your rs999 account, including processing your registration, verifying your identity, managing your wallet balance, and maintaining accurate records of all transactions in PKR.
• Payment Processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to reconcile transaction records. Payment data is shared with your chosen payment provider solely for the purpose of completing the transaction.
• Identity Verification & AML Compliance: To verify that you meet the minimum age requirement of 21 years, confirm your identity using CNIC or passport documentation, and monitor transactions for indicators of money laundering or fraud in line with our AML obligations.
• Platform Operations & Security: To detect and prevent fraudulent activity, identify multiple-account violations, maintain platform integrity, investigate disputes, and protect all rs999 players from abuse and exploitation.
• Customer Support: To investigate and resolve queries, complaints, and disputes submitted via live chat or email to [email protected], and to maintain records of support interactions for quality assurance purposes.
• Responsible Gaming: To administer the deposit limits, session time reminders, cooling-off periods, and self-exclusion tools that you set from within your account dashboard, and to flag accounts that may show patterns consistent with problem gambling.
• Marketing Communications: To send promotional emails about rs999 bonuses, PSL cricket promotions, and new game launches — but only where you have provided explicit opt-in consent. You may withdraw this consent at any time by clicking the unsubscribe link in any marketing email.
• Platform Improvement: To analyse aggregated, anonymised usage data and improve the rs999 platform's performance, game offering, and user experience for Pakistani players.

rs999 processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is required to deliver the services set out in our Terms and Conditions — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of the contract between you and rs999.
• Legal Obligation: Identity verification, AML transaction monitoring, age verification, and data retention for regulatory reporting are carried out because rs999 is legally obligated to conduct these activities under international gaming licensing requirements and applicable financial crime prevention standards.
• Legitimate Interests: Platform security monitoring, fraud detection, and the investigation of suspected policy violations are carried out on the basis of rs999's legitimate interest in protecting the integrity of the platform and the safety of all registered players.
• Consent: Marketing communications, optional analytics cookies, and any other non-essential data processing activities are carried out only where you have provided clear, affirmative, freely-given consent. You may withdraw consent for any consent-based processing at any time without penalty.

rs999 does not sell your personal data to any third party under any circumstances. Data is shared only in the limited, specific circumstances described below, and always under appropriate contractual data protection obligations:

• Payment Processors: Your transaction data is shared with the relevant payment provider — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or our USDT TRC20 processing partner — solely to complete your requested deposit or withdrawal transaction. Each payment provider handles your data under their own published privacy policy.
• KYC & Identity Verification Partners: Your identity documents (CNIC, passport) may be processed by a licensed third-party KYC verification service provider for the purpose of confirming your identity and age as required by our operating obligations. All such providers are bound by strict data processing agreements.
• Regulatory & Law Enforcement Authorities: rs999 will disclose player data to government authorities, financial intelligence units, or law enforcement agencies where required to do so by law — for example, where an account is subject to a suspicious transaction report or a court order.
• IT Infrastructure & Security Providers: Our platform hosting, database management, and cybersecurity services are provided by vetted third-party technology partners who process data solely on rs999's instructions and under data processing agreements that prohibit any independent use of the data.
• Business Transfers: In the event of a merger, acquisition, or sale of rs999 assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any resulting change to this Policy.

Given that rs999 processes all transactions in Pakistani Rupees (PKR) through widely-used local payment channels including JazzCash and EasyPaisa, we apply a heightened level of care to the handling of payment-related personal data. The following standards apply specifically to financial data processed on the rs999 platform:

• Full payment account numbers and mobile wallet credentials are never stored on rs999 servers. Only partial identifiers (such as the last four digits of a mobile number associated with a JazzCash or EasyPaisa account) are retained for transaction reference purposes.
• All payment transactions are conducted over encrypted connections using TLS 1.2 or higher. Payment data in transit is never transmitted over unencrypted channels.
• rs999 complies with PCI-DSS-aligned data security standards for the handling of payment card data, where applicable to supported payment methods.
• Transaction records — including deposit amounts, withdrawal amounts, payment method references, and timestamps — are retained for a minimum of five years in line with AML record-keeping obligations.
• rs999 operates a strict same-method withdrawal policy: funds may only be returned to the same payment method used for the original deposit, as a fraud prevention measure.

rs999 uses cookies and similar tracking technologies on the rs999.bar platform. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how players use the site. The following categories of cookies are used on rs999:

• Strictly Necessary Cookies: These cookies are essential for the rs999 platform to function. They manage your login session, keep your betting slip active, and maintain your account preferences. These cookies cannot be disabled as the platform cannot function without them.
• Performance & Analytics Cookies: These optional cookies collect aggregated, anonymised data about how players navigate the rs999 platform — which game categories are most visited, how long players spend on the site, and which pages generate the most errors. This data is used purely to improve platform performance and user experience.
• Functional Cookies: These optional cookies remember your preferences such as language settings, preferred payment method, and responsible gaming limit configurations, so you do not need to re-enter them on each visit.
• Session Integrity Cookies: These strictly necessary cookies prevent cross-site request forgery (CSRF) attacks and ensure that your active session cannot be hijacked by malicious third parties.

You may manage your cookie preferences at any time through your browser settings or through the cookie preference centre accessible from the rs999 platform footer. Disabling non-essential cookies will not affect your ability to place bets, make deposits, or access your account.

rs999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include but are not limited to the following:

• Encryption at Rest and in Transit: All personal data stored in rs999 databases is encrypted at rest using AES-256 encryption. All data transmitted between your device and rs999 servers is protected by TLS 1.2 or TLS 1.3 protocols.
• Access Controls: Access to systems containing personal data is restricted to authorised rs999 personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and receive regular data security training.
• Two-Factor Authentication (2FA): Internal administrative systems holding player data are protected by mandatory two-factor authentication. We also recommend that all rs999 players enable 2FA on their own accounts for additional personal security.
• Regular Security Audits: rs999 conducts periodic security assessments of its platform infrastructure, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response Protocol: rs999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, we will notify impacted users without undue delay and take immediate remediation action.

rs999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply to key categories of personal data:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual player. Where data is anonymised rather than deleted, the resulting aggregated data may be retained indefinitely for platform analytics purposes.

As a registered rs999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and your registered username. We will respond within 30 days.

• Right of Access: You have the right to request a copy of all personal data rs999 holds about you. We will provide this in a structured, commonly-used, machine-readable format (such as PDF or CSV).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where we no longer have a legal basis to retain it. Note that some data must be retained for the regulatory periods described in Section 9 above, and this statutory retention obligation overrides erasure requests for that specific data.
• Right to Restriction of Processing: You may request that rs999 restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transferred directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on rs999's legitimate interests at any time. Where you object to marketing communications, opt-out will be processed immediately.
• Right to Withdraw Consent: Where rs999 processes your data based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The rs999 platform is strictly for individuals aged 21 years and above. rs999 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as a mandatory step during the account registration and KYC process, and any account where the holder is found to be under 21 will be immediately closed and all associated balances refunded to the originating payment method.

Where rs999 discovers that personal data has been collected from a person under 21 without appropriate parental consent, that data will be deleted immediately and the account permanently closed. We do not retain any data collected from underage individuals beyond what is necessary to complete the account closure process and meet our legal reporting obligations .

rs999 reserves the right to update or modify this Privacy Policy at any time. Changes may be required due to updates in applicable data protection law, changes in our payment processing arrangements, new features added to the rs999 platform, or feedback from our player community across Pakistan.

When material changes are made to this Policy, rs999 will notify registered players by sending an email to the address associated with your account at least 14 days before the updated Policy takes effect. The updated Policy will also be published on this page with a revised effective date clearly displayed at the top of the document.

We recommend that you review this Privacy Policy periodically to stay informed about how rs999 is protecting your personal data. The version history of this Policy is maintained internally and is available on request from our compliance team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rs999 handles your personal data, please contact our support and compliance team using the details below. All privacy-related enquiries are treated with strict confidentiality and will receive a response within 30 business days.

• General Support & Data Rights Requests: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your rs999 Username]"
• Response Time: Within 30 days of receipt of a verified request
• Support Hours: 24/7 live chat available on rs999.bar — average response time 3–5 minutes, staffed in PKT (Pakistan Standard Time)

rs999 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection obligations. The DPO can be reached via the same support email address above, with the subject line "Attention: Data Protection Officer".