rc999 Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") is published by rc999 ("rc999", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "the player") who access or use the rc999 platform, including the website, mobile-optimised interface, all games, sports betting markets, casino products, promotional features, and customer support services.

This Policy explains our data practices in plain, readable language without removing any legal substance. It should be read alongside the rc999 Terms & Conditions and the rc999 Responsible Gaming Policy, both of which form part of the overall agreement between you and rc999.

By registering a player account, completing the rc999 Login, making a deposit, or otherwise using any part of the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the rc999 platform.

2 Data We Collect

rc999 collects personal data in the following categories. We collect only what is necessary for the purposes described in this Policy.

rc999 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If any such information is voluntarily disclosed in a support communication, it will not be stored or processed beyond what is strictly necessary to resolve the relevant enquiry.

3 How We Collect Your Data

rc999 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing the rc999 Login, submitting a deposit or withdrawal request, filling in verification forms, or contacting our support team.
• Automated collection: Technical and behavioural data collected automatically as you use the Platform, including IP addresses, session data, game play logs, and clickstream analytics via cookies and similar tracking technologies.
• Third-party sources: Identity verification data returned by our KYC and AML service providers when we run checks against your submitted documents. We may also receive fraud-risk signals from payment processors such as JazzCash and EasyPaisa where relevant to transaction processing.
• Public records: In limited circumstances, rc999 may cross-reference publicly available information (such as sanctions lists or politically exposed persons databases) as part of our legal compliance obligations.

4 Why We Use Your Data

rc999 processes your personal data for the following purposes:

• Account creation and management: To register your player account, manage your rc999 Login credentials, process account settings changes, and maintain an accurate record of your account history.
• Identity and age verification: To confirm that you are at least 21 years of age and that you are who you say you are, in compliance with our licensing obligations and responsible gaming commitments.
• Transaction processing: To process deposits, withdrawals, bonus credits, and bet settlements accurately and in a timely manner.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, chargebacks, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Regulatory compliance: To fulfil our obligations under applicable gaming licences, anti-money laundering (AML) regulations, and counter-terrorist financing (CTF) requirements.
• Customer support: To respond to your enquiries, resolve disputes, and process complaints in a fair and timely manner.
• Platform improvement: To analyse aggregated, anonymised usage data that helps us improve the rc999 platform, fix bugs, and optimise the user experience for Pakistani players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling behaviour and to administer self-exclusion, cooling-off, and deposit limit requests submitted by players.

5 Legal Basis for Processing

rc999 processes personal data on the following legal grounds, depending on the purpose of each processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the rc999 Terms & Conditions — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and the conditions of our international gaming licence — including AML checks, age verification, and regulatory reporting.
• Legitimate interests: Processing carried out to pursue rc999's legitimate business interests, such as fraud detection, platform security, and platform analytics — provided these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — such as receiving marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

rc999 does not sell your personal data to any third party. We may share your data with the following categories of third parties only to the extent necessary for the stated purpose:

• Identity verification providers: KYC and AML service providers who verify the authenticity of identity documents and perform sanctions screening. These providers process your data solely on rc999's instructions and under binding data processing agreements.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing infrastructure providers receive transaction data necessary to process your deposits and withdrawals. They do not receive your full gaming history or any data beyond what is needed to complete the specific payment transaction.
• Platform technology providers: Game content providers, live casino studio operators, sports data feed providers, and cloud infrastructure services may process certain technical and transactional data to deliver their services on the rc999 platform. All such providers are bound by data processing agreements.
• Fraud and security services: Third-party fraud detection tools may receive device fingerprint data, IP addresses, and session metadata to assist in identifying suspicious activity across the Platform.
• Regulatory and legal authorities: rc999 may disclose personal data to licensing authorities, financial intelligence units, law enforcement agencies, or courts where required to do so by law, court order, or regulatory direction. In such cases, rc999 will disclose only the minimum data necessary to comply with the relevant legal requirement.
• Business transfers: In the event of a merger, acquisition, or sale of rc999's business or assets, player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer that affects their personal data.

7 Cryptocurrency & Payment Data

rc999 supports Bitcoin (BTC), USDT (TRC20 and ERC20), JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank as deposit and withdrawal methods. The following specific privacy considerations apply to each channel:

Cryptocurrency (Bitcoin & USDT):

• rc999 records the wallet address you use to deposit funds for the purposes of transaction matching, AML compliance, and withdrawal processing. This wallet address is stored securely and is not shared with any third party except where legally required.
• Blockchain transactions are publicly visible on the respective network by their nature. rc999 has no control over blockchain-level data visibility. However, rc999 does not publish or broadcast your wallet address beyond what is necessary for transaction processing.
• rc999 does not link your cryptocurrency wallet to your real-world identity beyond what is necessary to satisfy our AML and KYC obligations under applicable licensing requirements.

Local Payment Methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank):

• When you deposit or withdraw via a local payment method, rc999 receives a transaction reference, the amount, and the account identifier (mobile number or bank account number) associated with the transaction. This data is retained for the period described in Section 9 of this Policy.
• All local payment method transactions are processed through PCI-DSS compliant payment gateways. rc999 does not store full bank account numbers or sensitive authentication credentials on its own servers.

8 Cookies & Tracking Technologies

rc999 uses cookies and similar technologies (including local storage and session tokens) on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in to your rc999 account, CSRF protection tokens, and load balancing cookies. These cannot be disabled without preventing basic Platform functionality.
• Analytics cookies: Anonymised usage statistics that help rc999 understand how players navigate the Platform, which games are most popular, and where technical issues occur. Analytics data is aggregated and cannot be used to identify individual players.
• Fraud prevention cookies: Device fingerprinting and session consistency checks used to detect suspicious login attempts, multi-accounting behaviour, and automated bot activity.
• Preference cookies: Cookies that remember your language settings, game display preferences, and notification settings between sessions.

rc999 does not use third-party advertising cookies or behavioural tracking pixels that share your data with external advertising networks. You can control non-essential cookie use through your browser settings. Disabling essential cookies will affect your ability to log in and use the Platform.

9 Data Retention

rc999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data: Retained for the full duration of your registered account's existence on rc999 plus a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements under applicable gaming licence conditions.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support thread, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved plus two (2) additional years.
• Marketing consent records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with applicable consent requirements.
• Technical and analytics data: Anonymised analytics data may be retained indefinitely as it cannot be linked to individual players. Non-anonymised technical logs are retained for twelve (12) months.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised. If you request deletion of your data before the end of the applicable retention period, rc999 will delete all data that it is not legally required to retain and will restrict processing of any data that must be kept for legal compliance purposes.

10 Data Security

rc999 implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and the rc999 platform is encrypted using TLS 1.2 or higher. This includes your rc999 Login session, deposit submissions, and support communications.
• Encryption at rest: Personal data stored in rc999 databases is encrypted using AES-256. Passwords are hashed using a strong one-way hashing algorithm — rc999 staff cannot view your password in plaintext.
• Access controls: Access to personal data is restricted to rc999 personnel who require it to perform their specific job functions. All staff with data access operate under strict confidentiality obligations.
• Infrastructure security: rc999's platform infrastructure is hosted on enterprise-grade cloud servers with automated threat detection, regular penetration testing, and 24/7 system monitoring.
• Incident response: In the event of a data security incident that poses a risk to your personal data, rc999 will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

11 Your Data Rights

As a registered player on rc999, you have the following rights with respect to your personal data. To exercise any of these rights, contact the rc999 Data Support team at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data rc999 holds about you, along with information about how it is being used. rc999 will respond within 30 days of a valid request.
• Right to rectification: If any personal data rc999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request that rc999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Erasure requests are subject to rc999's legal data retention obligations.
• Right to restriction: You may request that rc999 restrict the processing of your data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request.
• Right to data portability: You may request a copy of the personal data you have provided to rc999 in a structured, commonly used, machine-readable format, and request that it be transferred to another data controller where technically feasible.
• Right to object: You may object to rc999 processing your personal data on the basis of legitimate interests, and you may withdraw consent for marketing communications at any time.

rc999 will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case rc999 will notify you of the extension and the reasons for it.

12 Children & Minors

The rc999 platform is strictly intended for adults aged 21 and above. rc999 does not knowingly collect personal data from individuals under the age of 21. If rc999 discovers or reasonably suspects that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all personal data associated with that account will be flagged for deletion, and any deposits will be returned subject to identity verification.

If you are a parent or guardian and have reason to believe that a minor has accessed rc999 and provided personal data, please contact us immediately at [email protected] so that we can take prompt action to remove that data and close the account.

13 International Data Transfers

rc999 operates under an international gaming licence and its platform infrastructure may involve data processing in multiple jurisdictions. Where personal data is transferred outside your country of residence to a country that may not have equivalent data protection laws, rc999 ensures appropriate safeguards are in place, including:

• Standard contractual clauses approved by applicable data protection authorities, incorporated into agreements with data processors located in third countries.
• Binding data processing agreements with all third-party service providers that receive personal data, requiring them to maintain security standards equivalent to those described in this Policy.
• Transfers to game content providers and live casino studio operators are governed by the data processing terms within rc999's content licensing agreements.

By registering an account with rc999, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan. rc999 takes reasonable steps to ensure that such transfers are conducted lawfully and that your data remains appropriately protected throughout.

14 Policy Amendments

rc999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the Platform. When material changes are made, rc999 will update the "Last Updated" date at the top of this page and, where reasonably practicable, notify registered players by email or via an in-platform notification.

Your continued use of the rc999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting support at [email protected].

We recommend bookmarking this page and reviewing it periodically — particularly when you receive a notification from rc999 regarding policy updates.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how rc999 has handled your personal data, please contact the rc999 Data Support team using the details below:

• Email: [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 within your logged-in rc999 account. For data rights requests, please follow up by email to create a written record.
• Response Time: rc999 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.

If you are not satisfied with rc999's response to a privacy complaint, you have the right to escalate the matter to the data protection authority or dispute resolution body designated by rc999's licensing jurisdiction. Details of the applicable escalation pathway are available upon request from the support team.