RS 999 Privacy Policy – How We Protect Your Data in Pakistan

Overview — What This Policy Covers

This Privacy Policy explains how RS 999 ("we," "our," "us," the "Platform") — operating at rs999.life — collects, stores, uses and protects the personal information of players who register or interact with the Platform. It applies to every Pakistani player who:

• Creates or holds an account at rs 999.
• Deposits or withdraws PKR funds through any method.
• Places a bet on any sports, casino, slot, Teen Patti or virtual sports market.
• Contacts rs 999 support through live chat, email or any other channel.
• Browses rs999.life without registering.

By using the Platform in any of the above ways, you confirm that you have read and understood this policy. If you disagree with any aspect of how we handle your data, please do not use rs 999 and contact us at support@rs999.life to close any existing account.

1. Personal Data We Collect

RS 999 collects the minimum data necessary to operate the Platform properly, comply with our legal obligations and keep Pakistani players safe. Below is a complete breakdown of the categories of data we hold.

1.1 Registration Data

When you create an account at rs 999, we collect:

• Your Pakistani mobile number (used as your account identifier and for OTP verification).
• Date of birth (to verify that you are 18 or older).
• Your chosen username or display name.
• Your account password (stored as an encrypted hash — rs 999 staff cannot read it).

1.2 Identity Verification (KYC) Data

When you reach certain withdrawal thresholds or when our compliance systems flag a review, rs 999 may request:

• A copy of your CNIC (Computerised National Identity Card), valid Pakistani passport or driving licence.
• A selfie or live photo for identity confirmation.
• Proof of residential address (utility bill, bank statement or similar document dated within 90 days).

KYC documents are used solely for identity verification and anti-fraud purposes. They are not shared with any marketing or advertising party.

1.3 Transaction Data

Every deposit, withdrawal and bet placed at rs 999 generates a transaction record. We retain:

• Transaction amounts in PKR.
• Payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard).
• Transaction timestamps and reference numbers.
• Betting history — markets, stakes, odds and outcomes.
• Bonus transactions — credits, wager contributions and expiry records.

1.4 Technical and Device Data

When you access rs999.life, our servers automatically receive certain technical information:

• IP address and approximate geographic location (city level).
• Device type, operating system version and browser type.
• Session duration, pages visited and features accessed.
• Referring URL (the page or search result that brought you to rs 999).

1.5 Communications Data

When you contact rs 999 support or respond to a survey, we retain the content of those communications — including live chat transcripts, email threads and support ticket history. This data is used to resolve disputes, improve support quality and detect patterns of platform misuse.

2. How We Collect Your Data

RS 999 collects personal data through three main channels:

2.1 Information You Provide Directly

This covers everything you enter into the Platform yourself — registration details, KYC documents you upload, the details you enter when making a deposit or withdrawal, and anything you write in a support chat or email.

2.2 Automated Collection

When you use rs999.life, our servers, cookies and analytics tools automatically collect technical and behavioural data as described in Section 1.4 above. This happens regardless of whether you are logged in. The purpose is to keep the Platform functioning correctly, identify security threats and understand how Pakistani players use different parts of the site so we can improve it.

2.3 Third-Party Sources

In limited circumstances, rs 999 may receive data about you from third parties — primarily payment processors confirming the success or failure of a transaction, or identity verification services we use for KYC purposes. We do not purchase personal data lists from data brokers or marketing companies.

3. How RS 999 Uses Your Personal Data

We use the data we collect only for legitimate purposes related to operating rs 999 as a safe, fair and compliant online gaming platform for Pakistani players. The specific purposes are:

4. Legal Basis for Processing

RS 999 processes your personal data under one or more of the following legal grounds:

• Contract performance: Processing necessary to open your account, accept deposits, settle bets and pay withdrawals in PKR.
• Legal obligation: Processing required by our gaming licence conditions — including KYC, age verification, anti-money laundering checks and responsible gaming monitoring.
• Legitimate interest: Processing that is necessary to protect the Platform from fraud, maintain technical security, prevent bonus abuse and analyse Platform performance — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications where you have expressly opted in. This consent is freely given and freely withdrawable at any time.

5. Who We Share Your Data With

RS 999 does not sell your personal data to any third party for commercial or marketing purposes. Ever. We share data only in the following limited and necessary circumstances:

5.1 Payment Processors

To process your PKR transactions, rs 999 shares the minimum necessary transaction data with our payment processing partners — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks and card processors for Visa/Mastercard transactions. These providers operate under their own privacy frameworks and are bound by data processing agreements with rs 999.

5.2 Identity Verification Providers

When KYC verification is required, rs 999 may use certified third-party identity verification services. Your documents are shared only for the purpose of verifying your identity and are not retained by those services beyond their verification process.

5.3 Regulatory and Law Enforcement Authorities

RS 999 is required by its gaming licence conditions to report certain activity to relevant regulatory authorities. We may also be legally obliged to share data with Pakistani law enforcement authorities if directed to do so by a valid court order or regulatory instruction. In such cases, rs 999 will share only the minimum data required.

5.4 Technology Service Providers

RS 999 uses third-party technology vendors for services such as cloud hosting, platform analytics, fraud detection and customer support software. These vendors process data on our behalf and are contractually bound to use it only for the purposes we specify, to maintain appropriate security standards, and never to use rs 999 player data for their own commercial purposes.

6. How We Handle Payment Data

Pakistani players trust rs 999 with their PKR transactions, and we take that responsibility seriously. Here is exactly how payment data is handled on the Platform:

• Card transactions are processed through a PCI-DSS certified payment gateway. RS 999 receives only a transaction reference and a success/failure status — we never see or store full card numbers, CVV codes or PIN information.
• Easypaisa and JazzCash transactions are processed through direct API integrations with those services. RS 999 stores only the masked mobile wallet number, transaction amount and reference for your account records.
• IBFT transfers — rs 999 stores the account title and last four digits of the bank account number for withdrawal verification purposes only.
• All payment data in transit between your device and rs 999 is protected by TLS 1.3 encryption.
• Payment data at rest in rs 999 databases is encrypted using AES-256.

7. Data Security

RS 999 implements technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. Our security infrastructure includes:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and rs999.life is encrypted in transit.
• AES-256 encryption at rest: Sensitive data stored in our databases — including passwords and KYC documents — is encrypted.
• Access controls: Only authorised rs 999 staff with a specific operational need can access player account data. All access is logged and regularly audited.
• Multi-factor authentication: Internal rs 999 administrative systems require multi-factor authentication for all staff access.
• Regular security testing: RS 999's platform undergoes regular penetration testing and security assessments by independent cybersecurity firms.
• Intrusion detection: Automated systems monitor our infrastructure 24/7 for unusual access patterns or potential security threats.

No security system is impenetrable. In the unlikely event of a data breach that poses a risk to Pakistani players at rs 999, we will notify affected players and relevant authorities within the timeframes required by applicable law.

You can also protect your own account by using a strong, unique password, never sharing your OTP codes and logging out of rs 999 when using a shared device.

8. How Long We Keep Your Data

RS 999 keeps personal data only for as long as it is necessary for the purposes described in this policy or required by our legal obligations. The general retention periods are:

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. Anonymised analytical data may be retained indefinitely as it cannot be linked back to any individual player.

9. Cookies and Similar Technologies

RS 999 uses cookies — small data files stored on your device — and similar technologies to make the Platform function properly, keep your session active, detect fraud and understand how Pakistani players use the site. Below is a summary of the cookie categories used at rs 999:

You can manage optional cookies through your browser settings. Disabling optional cookies will not prevent you from using rs 999, but may affect your experience — for example, your preferences may not be saved between sessions. Essential and security cookies cannot be disabled as they are required for the Platform to function safely.

10. Your Data Rights as a Pakistani Player

As a player at rs 999, you have specific rights in relation to your personal data. We take these rights seriously and will respond to all requests promptly — within 30 days in most cases.

To exercise any of these rights, contact us at support@rs999.life with the subject line "Data Rights Request." We will verify your identity before processing the request and will respond within 30 days. Note that some rights are limited by our legal obligations — for example, we cannot delete transaction records during a mandatory regulatory retention period — but we will explain any such limitation clearly.

11. Minors and Under-18s

RS 999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is performed at registration and before significant withdrawals. If rs 999 discovers that a player account belongs to a person under 18, we will:

• Immediately suspend the account.
• Void any outstanding bets and reverse any bonus credits.
• Return any genuine deposits to the original payment method.
• Delete the account data, subject to any mandatory reporting obligations.

Parents and guardians who believe a minor may have registered at rs 999 should contact us immediately at support@rs999.life. We will act within 24 hours of receiving a verified report.

12. Changes to This Privacy Policy

RS 999 reviews and updates this Privacy Policy whenever there are changes to how we process data, changes in the law or changes to our platform operations. The most current version is always available at rs999.life/privacy-policy.

Where a change materially affects your rights or our obligations, we will notify registered players via SMS to their registered Pakistani mobile number or via an on-platform notification before the change takes effect. Minor clarifications and formatting updates may be made without formal notification.

Your continued use of rs 999 following any update constitutes your acceptance of the revised policy. If you do not agree with a change, you should contact us to close your account before the effective date.

13. Contact and Complaints

For any privacy-related query, data rights request or complaint about how rs 999 handles your personal data, please contact our Data Protection team:

• Email: support@rs999.life (subject: "Privacy / Data Request")
• Live Chat: Available 24/7 in your rs 999 account dashboard
• Response Time: Data requests responded to within 30 days · Urgent complaints within 48 hours

RS 999 is committed to resolving privacy complaints directly and promptly. If you believe your complaint has not been addressed adequately by our internal process, you have the right to raise the matter with the relevant data protection authority under the jurisdiction of our operating licence.