At rs999 we take your privacy seriously. This Privacy Policy explains in plain terms exactly what personal data we collect from Pakistani players, why we collect it, how we use and protect it, who we may share it with, and what rights you have over your own information. Your trust matters to us — and this document is how we earn it.
Our Privacy Commitments
These six commitments represent the principles that guide every data-handling decision at rs999. The full legal detail follows in the Policy sections below — but these are the promises we hold ourselves to.
rs999 applies a data minimisation principle across all collection points. We do not collect personal data speculatively or beyond what is required for account management, regulatory compliance, security, and delivering the platform services you signed up for. If we don't need it, we don't ask for it.
All personal data stored by rs999 — including your CNIC details, payment information, and account credentials — is encrypted at rest using AES-256 encryption. Data in transit between your browser and rs999 servers is protected by TLS 1.3. Our database infrastructure is hosted in secure, access-controlled environments subject to regular third-party security audits.
rs999 does not sell, rent, or commercially exploit your personal data to third parties. Full stop. Any data sharing we conduct is strictly limited to what is necessary for licensed service delivery, regulatory compliance, fraud prevention, and the operation of payment processing. No data broker relationships. No advertising data exchanges.
rs999 account holders have substantive rights over their personal data — including the right to access it, correct it, restrict how it is used, and in many cases request deletion. These rights can be exercised by contacting our data team. We will respond to all data rights requests within 30 days of receipt.
rs999 applies structured retention schedules to all categories of personal data. When the legal, regulatory, and operational basis for retaining your data expires, that data is securely deleted or anonymised. We do not retain personal data indefinitely out of habit or because deletion is inconvenient. Our retention schedule is detailed in Section 7 of this Policy.
In the event of a data security breach that is likely to result in risk to rs999 account holders, we will notify affected individuals promptly through their registered contact details. We will explain what happened, what data was involved, what we have done to contain the incident, and what steps — if any — you should take to protect yourself.
Transparency in Action
The table below summarises the categories of personal data rs999 collects, the primary purposes for which each category is used, and the legal basis that justifies the collection. Full details of each category are set out in Section 2 of the Privacy Policy below.
| Data Category | Examples | Primary Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC scan | Regulatory Fraud Prevention | Legal Obligation / Legitimate Interests |
| Contact Data | Pakistani mobile number, email address (if provided) | Account Management Communications | Contract Performance |
| Account Data | Username, login history, security settings, 2SV status, session records | Platform Access Security | Contract Performance / Legitimate Interests |
| Financial Data | JazzCash/EasyPaisa account references, bank account details, transaction history, deposit/withdrawal amounts | Payment Processing AML Compliance | Contract Performance / Legal Obligation |
| Gaming Data | Bets placed, games played, session duration, wagering history, bonus activity, win/loss records | Service Delivery Regulatory Reporting | Contract Performance / Legal Obligation |
| Technical Data | IP address, device type, browser, operating system, screen resolution, approximate location | Fraud Detection Platform Optimisation | Legitimate Interests |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, cool-off periods, responsible gaming tool usage | Player Protection Regulatory | Legal Obligation / Vital Interests |
| Communications Data | Live chat transcripts, support ticket content, complaint records | Customer Support Dispute Resolution | Contract Performance / Legal Obligation |
Your Rights
Under applicable data protection law, rs999 account holders hold the following rights with respect to their personal data. To exercise any of these rights, contact our data team at [email protected] with "Data Rights Request" in your subject line.
You have the right to request a copy of all personal data rs999 holds about you. We will provide this in a structured, commonly used, machine-readable format. Requests are fulfilled within 30 days of receipt. We may ask you to verify your identity before releasing data.
If personal data rs999 holds about you is inaccurate or incomplete, you have the right to request correction. Contact support with the specific data you believe is incorrect and we will review and update it accordingly, subject to verification requirements.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligations — certain financial and regulatory records must be retained for defined periods regardless of deletion requests.
You may request that rs999 restrict the processing of your personal data in circumstances where you contest the accuracy of the data, where processing is unlawful but you prefer restriction over deletion, or where rs999 no longer needs the data but you require it for legal claims.
Where processing is based on your consent or on contract performance, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data where rs999 relies on legitimate interests as the legal basis for processing. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time.
1.1 rs999 operates the online casino and sports betting platform at rs999.lol. We provide live dealer casino games, slots, sports betting (with particular depth across cricket including PSL markets), crash games, and related services to adult players aged 21 and above in Pakistan and other eligible jurisdictions.
1.2 rs999 holds an internationally recognised online gaming licence that imposes specific data protection and privacy obligations, including requirements around data collection, storage, sharing, and retention for regulatory compliance purposes. This Policy is drafted to reflect both those regulatory requirements and our broader commitment to player privacy.
1.3 For all privacy-related enquiries, data rights requests, or complaints regarding rs999's data handling practices, please contact us at: [email protected] — please include "Privacy" or "Data Rights" in your subject line to ensure prompt routing to the appropriate team.
2.1 Identity Data. At account registration and KYC verification, rs999 collects your full legal name, date of birth, CNIC (Computerised National Identity Card) number, and a scan or photograph of your CNIC. This data is collected to fulfil our legal obligations under our gaming licence, which requires us to verify the identity and age of all account holders prior to processing any withdrawal.
2.2 Contact Data. We collect your Pakistani mobile number at registration — this serves as your account identifier and the primary channel for account verification, OTP delivery, and support communications. Email address collection is optional but facilitates alternative communication channels if provided.
2.3 Financial Data. To process deposits and withdrawals, rs999 collects and retains payment method references including JazzCash and EasyPaisa account identifiers, bank account details for bank transfer transactions, and a complete record of all financial transactions conducted through your rs999 account. Financial records are retained for extended periods to satisfy anti-money laundering (AML) regulatory requirements.
2.4 Gaming and Activity Data. rs999 maintains comprehensive records of all gaming and betting activity on your account — including bets placed, games played, session duration, wagering amounts, bonus activity, and win/loss outcomes. This data is used for service delivery, dispute resolution, regulatory reporting, and responsible gaming monitoring.
2.5 Technical and Device Data. When you access rs999.lol, we automatically collect technical data including your IP address, device type, browser type and version, operating system, screen resolution, and connection type. This data is used for fraud detection, security monitoring, and platform performance optimisation.
2.6 Responsible Gaming Data. All interactions with rs999's responsible gaming tools — including deposit limits set, cool-off periods activated, self-exclusion requests, and responsible gaming tool usage patterns — are recorded and maintained as part of our regulatory obligations and player protection programme.
3.1 Directly from you: When you register an account on rs999.lol; when you complete KYC verification; when you make deposits or request withdrawals; when you contact rs999 customer support; when you complete any form, survey, or feedback mechanism on the platform; and when you update your account information.
3.2 Automatically during platform use: Session data, gaming activity records, and technical/device data are collected automatically as you use the rs999 platform through our logging infrastructure, session management systems, and fraud detection technology.
3.3 From third-party service providers: rs999 may receive identity verification data from third-party KYC service providers during the verification process, fraud risk indicators from our payment processing partners, and technical security indicators from our security infrastructure providers.
3.4 From cookies and tracking technologies: rs999 uses cookies and similar technologies to collect technical and usage data as described in Section 9 of this Policy.
4.1 rs999 uses the personal data it collects for the following specific purposes:
5.1 rs999 processes personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are:
6.1 rs999 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:
7.1 rs999 retains personal data for only as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by law or our gaming licence conditions. Our retention schedule is as follows:
7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.
8.1 rs999 implements comprehensive technical and organisational security measures to protect the personal data of our Pakistani account holders against unauthorised access, loss, destruction, or alteration. Our security measures include:
8.2 Despite these measures, no security system is impenetrable. In the event of a data security breach that poses risk to account holders, rs999 will notify affected individuals promptly as described in our Commitment 6 above.
8.3 You can contribute to the security of your rs999 account by using a strong, unique password, enabling two-step verification in your Account Settings, and logging out from shared devices after each session.
9.1 rs999 uses cookies and similar tracking technologies when you access rs999.lol. Cookies are small text files stored in your browser that allow the platform to recognise your browser across sessions and deliver certain functionality.
9.2 rs999 uses the following categories of cookies:
9.3 You can control cookie preferences through your browser settings. Please note that disabling cookies beyond strictly necessary cookies may affect the functionality of the rs999 platform and your ability to access certain features.
10.1 To exercise any of the data rights described in the Rights section above — including access, rectification, erasure, restriction, portability, or objection — please contact rs999 at [email protected] with "Data Rights Request" in the subject line.
10.2 We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.
10.3 We may need to verify your identity before acting on a data rights request to ensure that we do not disclose or modify personal data in response to a request from an unauthorised party. Verification typically requires confirmation of your registered mobile number and, for access requests involving KYC data, a short identity check.
11.1 rs999 does not knowingly collect personal data from individuals under the age of 21. The rs999 platform is strictly for adults aged 21 and above. Age verification is conducted at registration and through KYC procedures to enforce this requirement.
11.2 If rs999 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all data collected from the minor will be securely deleted, and the incident will be documented in accordance with our regulatory obligations.
11.3 Parents and guardians in Pakistan are encouraged to ensure that minors in their household cannot access the rs999 platform through their devices. If you are a parent or guardian who believes a minor has created an rs999 account, please contact us immediately at [email protected].
12.1 As an internationally licensed gaming platform, rs999 may process or store personal data on infrastructure located outside of Pakistan. Where personal data is transferred to countries outside Pakistan, rs999 ensures that appropriate safeguards are in place to protect that data to a standard consistent with this Privacy Policy and applicable data protection law.
12.2 These safeguards may include contractual data transfer agreements incorporating standard contractual clauses, adequacy determinations in respect of the receiving country's data protection framework, or other applicable data transfer mechanisms. Details of specific transfer safeguards are available on request.
13.1 rs999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform services, legal obligations, or regulatory requirements. The updated Policy will always be published at rs999.lol/privacy-policy with a revised "Last Updated" date.
13.2 Where changes are material — particularly changes that affect how we collect, use, or share personal data — we will provide advance notice to registered account holders via their registered mobile contact at least 7 days before the change takes effect.
13.3 Continued use of the rs999 platform following the effective date of any Policy update constitutes acceptance of the updated Privacy Policy. If you do not agree to the updated Policy, please cease using the platform and contact support to close your account.
14.1 For any questions, concerns, or requests relating to this Privacy Policy or rs999's data handling practices, please contact us through the following channels:
14.2 rs999 takes all privacy enquiries seriously and will respond to all contacts within 5 business days. For data rights requests as described in Section 10, the substantive response timeline is 30 calendar days from receipt.
Our support team is available 24/7 to respond to any privacy query, data rights request, or question about how your personal information is used on the rs999 platform.
21+ rs999 is for adults aged 21 and above. Gambling involves financial risk. Please play responsibly.
21+ rs999 is strictly for adults aged 21 and above. Gambling involves risk — please play responsibly. If gambling is causing you harm, visit our Responsible Gaming page or contact 24/7 live support.