Privacy Policy —
How rs9999 Protects Your Data

01 Introduction & Scope

This Privacy Policy ("Policy") is published by rs9999 ("we", "us", "our", "rs9999") and applies to all personal data collected, used, stored, or otherwise processed in connection with the rs9999 online casino and sports betting platform, accessible at rs9999.org and through any associated mobile applications or services.

This Policy sets out the categories of personal data rs9999 collects from players and visitors, the purposes for which that data is used, the circumstances in which it may be shared with third parties, the measures taken to protect it, and the rights available to individuals regarding their personal data.

This Policy should be read alongside the rs9999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the overall regulatory framework governing your use of the rs9999 platform. Where any conflict exists between this Policy and another rs9999 document, this Privacy Policy shall take precedence with respect to privacy and data protection matters.

This Policy was last updated on 1 January 2026. rs9999 reserves the right to amend this Policy at any time. The most current version is always available at rs9999.org/privacy-policy.

02 Data Controller

For the purposes of applicable data protection law, rs9999 is the data controller responsible for your personal data. rs9999 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable legal requirements.

If you have any questions regarding the processing of your personal data, or wish to exercise any of your rights described in this Policy, you may contact the rs9999 Data Protection team using the contact details set out in Section 14 of this Policy.

03 Personal Data We Collect

rs9999 collects personal data from you through several channels: directly when you register an account or contact support, automatically when you use the rs9999 platform, and occasionally from third parties such as payment processors and identity verification providers. The categories of personal data we collect are as follows:

Category	Examples	Source
Identity Data	Full legal name, date of birth, CNIC number, CNIC copy (front & back), selfie photograph	You directly / KYC provider
Contact Data	Email address, Pakistani mobile number, city of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad)	You directly
Financial Data	JazzCash / EasyPaisa account numbers, bank account details (HBL, UBL, Allied Bank), SadaPay wallet ID, USDT TRC20 wallet address, transaction history	You directly / payment processors
Account Data	Username, encrypted password, account balance, betting history, bonus history, game session records	Generated on registration / platform activity
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone	Automatically — platform logs
Usage Data	Pages visited, features used, session duration, bet placement patterns, game preferences	Automatically — analytics tools
Communications Data	Support chat transcripts, email correspondence, feedback submissions	You directly / support platform

04 How We Use Your Personal Data

rs9999 uses your personal data only for legitimate, clearly defined purposes directly related to the operation of the rs9999 platform and our regulatory obligations. The specific purposes for which we process personal data are:

• Account registration and management: To create and maintain your rs9999 player account, verify your eligibility, and administer your account settings and preferences.
• Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with our KYC obligations and responsible gaming commitments. This is a non-negotiable requirement under our international gaming licence.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, USDT TRC20, and Retail Cash channels. Financial data is processed by our PCI-DSS compliant payment partners.
• Service delivery: To provide access to rs9999 cricket betting, slots, live casino, e-sports, and all other gaming products available on the platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited activities on the rs9999 platform.
• Anti-money laundering (AML) compliance: To fulfil our obligations under applicable AML regulations, including transaction monitoring, suspicious activity reporting, and record-keeping requirements.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.
• Customer support: To respond to your enquiries, resolve complaints, and administer disputes through the rs9999 support team.
• Communications: To send you transactional notifications (account activity, deposit confirmations, withdrawal updates) and, where you have consented, promotional communications about rs9999 offers and new features.
• Platform improvement: To analyse usage patterns and technical performance data in order to improve the rs9999 user experience, fix technical issues, and develop new features.
• Legal and regulatory compliance: To fulfil our obligations under applicable laws and to respond to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.

05 Legal Bases for Processing

rs9999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — specifically, to create and manage your rs9999 account and to deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with our legal and regulatory obligations, including KYC, AML, and responsible gaming requirements under our international gaming licence.
• Legitimate interests: Processing carried out for purposes that rs9999 has a legitimate business interest in pursuing, provided those interests are not overridden by your privacy rights. This includes fraud detection, platform security, and internal analytics.
• Consent: Where we rely on your consent as the legal basis — for example, for sending you marketing communications — you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

06 Sharing Your Personal Data

rs9999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited circumstances and only to the extent necessary for each stated purpose:

• Payment processors: We share financial data with our payment processing partners (including JazzCash, EasyPaisa, and banking partners) solely for the purpose of processing your deposit and withdrawal transactions.
• KYC and identity verification providers: We share identity documents and biometric data with accredited KYC service providers to verify your identity and age in compliance with our licensing obligations.
• Game software providers: We share session data and account identifiers with our game content providers (live casino, slots, e-sports) to the extent necessary to deliver game content and resolve game disputes.
• IT infrastructure and security providers: We share technical data with cloud hosting, server management, and cybersecurity service providers who support the operation of the rs9999 platform under strict data processing agreements.
• Regulatory and law enforcement authorities: We may disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where we are required to do so by law or where we are compelled to do so by a valid court order.
• Fraud prevention networks: We may share account and transaction data with industry fraud prevention networks to identify and prevent cross-platform fraud, money laundering, and bonus abuse.

All third parties with whom rs9999 shares personal data are required to maintain appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific purpose for which it was shared.

07 Cookies & Tracking Technologies

rs9999 uses cookies and similar tracking technologies on the rs9999 website to ensure the platform functions correctly, to analyse usage patterns, and to deliver a personalised experience. The categories of cookies we use are:

• Strictly necessary cookies: These cookies are essential for the rs9999 platform to function. They enable core features such as session management, login authentication, and security checks. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Analytical cookies: These cookies help rs9999 understand how players interact with the platform by collecting aggregated, anonymised data about page visits, session durations, and feature usage. This data is used to improve the rs9999 user experience.
• Functional cookies: These cookies remember your preferences such as language settings, preferred payment method, and display preferences so that rs9999 can provide a more personalised experience on return visits.
• Marketing cookies: Where you have provided consent, rs9999 may use marketing cookies to deliver relevant promotional content about rs9999 offers and features. You may withdraw this consent at any time through your browser settings or by contacting support.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the rs9999 platform. For full details, refer to the cookie management settings available in your browser or contact our support team.

08 Data Retention

rs9999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal minimum retention requirements. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active rs9999 account plus a minimum of 5 years following account closure, as required by our AML and gaming licence obligations.
• Financial and transaction records: Retained for a minimum of 5 years from the date of the transaction in compliance with financial record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years following the end of the business relationship, in accordance with standard AML compliance requirements.
• Customer support records: Retained for 3 years from the date of the last support interaction, unless related to an ongoing dispute or legal matter.
• Technical and usage data (logs): Retained for 12 months in standard operational logs, and up to 3 years in security and fraud investigation archives.
• Marketing consent records: Retained for as long as your marketing consent remains active, plus 3 years after withdrawal for compliance audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be linked to an identifiable individual.

09 Your Privacy Rights

As an rs9999 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request":

• Right of access: You have the right to request a copy of the personal data rs9999 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data rs9999 holds about you. You may update basic account information directly through your rs9999 account settings.
• Right to erasure ("right to be forgotten"): You may request that rs9999 delete your personal data in certain circumstances. Please note that this right is subject to our legal obligations to retain certain data for AML and gaming licence compliance purposes.
• Right to restrict processing: You have the right to request that rs9999 restricts the processing of your personal data in certain circumstances, for example while a rectification or objection request is being considered.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to rs9999 in a structured, commonly used, machine-readable format, where the processing is based on consent or contract.
• Right to object: You have the right to object to rs9999 processing your personal data where we are relying on legitimate interests as our legal basis, including for direct marketing purposes.
• Right to withdraw consent: Where rs9999 has relied on your consent to process personal data (e.g. for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10 Children & Minors

The rs9999 platform is strictly intended for adults aged 21 years and above. rs9999 does not knowingly collect, store, or process personal data belonging to any person under the age of 21.

If rs9999 becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately and permanently deleted, the associated account will be closed without notice, and any funds deposited by the minor will be held pending investigation and returned to the originating payment method where technically possible.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an rs9999 account or provided personal data to rs9999, please contact us immediately at [email protected]. We will investigate and take appropriate action as a matter of urgency.

11 Security Measures

rs9999 maintains a comprehensive information security programme designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. The key security measures we apply include:

• 256-bit SSL/TLS encryption for all data in transit between your device and rs9999 servers.
• AES-256 encryption at rest for sensitive data categories including identity documents, CNIC copies, and financial records.
• Bcrypt password hashing — your rs9999 account password is never stored in plain text and cannot be recovered by rs9999 staff.
• Multi-factor authentication options for account access, strongly recommended for all Pakistani players.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms.
• Strict access controls ensuring that rs9999 staff can only access personal data on a need-to-know basis, with all access activity logged and audited.
• 24/7 security monitoring with automated alerting for suspicious access patterns or potential data breach indicators.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a significant risk to your rights and interests, rs9999 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

12 Third-Party Services & Links

The rs9999 platform integrates with a number of third-party service providers to deliver game content, payment processing, and identity verification functionality. While rs9999 carefully selects third-party partners and requires them to maintain appropriate data protection standards, rs9999 is not responsible for the privacy practices of third-party service providers once data is in their possession in accordance with a valid data processing agreement.

The rs9999 website may from time to time contain references to our internal policy pages. rs9999 is not responsible for the privacy practices of any external websites that may be accessible from third-party search results or referral links not controlled by rs9999. This Privacy Policy applies solely to the rs9999 platform and services.

13 Amendments to This Privacy Policy

rs9999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the expansion of our services. The effective date displayed at the top of this Policy will be updated whenever a material change is made.

Where a material change is made that significantly affects how we process your personal data, rs9999 will notify all registered players by email and display a prominent notice on the rs9999 platform at least 14 days before the change takes effect. Your continued use of the rs9999 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms.

We encourage all rs9999 players to review this Privacy Policy periodically to stay informed about how we are protecting and using your information. The most current version is always available at rs9999.org/privacy-policy.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way rs9999 processes your personal data, please contact our Data Protection team using the details below:

rs9999 takes all privacy-related complaints seriously and will investigate every concern raised in good faith. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction governing our international gaming licence.