Privacy Policy – r999 Pakistan Online Gaming Platform

r999 operates the online gaming platform available at r999.life. When this Privacy Policy refers to "r999", "we", "us", or "our", it means the operator of the r999 platform. When it refers to "you" or "your", it means any individual who accesses r999.life, registers an account, uses the platform's games or betting services, or interacts with r999 through any channel including email and live chat support.

This Privacy Policy governs the collection, use, storage, and protection of all personal data that r999 processes in connection with the operation of its platform. It applies equally to Pakistani players across all regions of Pakistan — whether you are in Karachi, Lahore, Islamabad, Peshawar, Quetta, or anywhere else.

By registering an account on r999 or continuing to use the platform after this policy was published, you acknowledge that you have read and understood its terms. If you have any questions about how r999 handles your data, please contact our support team at support@r999.life before continuing.

r999 collects personal data that falls into the following categories. Not all categories apply to every player — the data collected depends on which platform features you use and which verification steps apply to your account.

r999 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. The only exception is where a player voluntarily provides health information in the context of a responsible gaming support interaction — in which case that information is handled with the highest level of confidentiality and is not used for any purpose other than player welfare.

r999 collects personal data through the following channels and methods:

• Direct input at registration: When you create your r999 account, you provide your mobile number and create a password. This is the minimum data required to open an account.
• Identity verification submissions: When r999 requests KYC documentation, you upload images of your CNIC and a selfie. These are submitted through a secure upload interface and processed by r999's verification team or a licensed third-party verification provider.
• Payment transactions: When you make a deposit or withdrawal, r999 receives confirmation data from the payment provider including the amount, timestamp, and a reference to the payment account used. r999 does not receive or store full bank account numbers or Easypaisa/JazzCash PINs.
• Platform activity: All game activity, bet placement, and account navigation on r999 is logged automatically. This is necessary for game integrity, dispute resolution, and responsible gaming monitoring.
• Cookies and device data: When you visit r999.life, technical data about your device and session is automatically captured. See Section 7 for full cookie details.
• Support interactions: When you contact r999 via live chat or email, the content of those communications is stored as part of your account record for quality assurance and dispute resolution purposes.
• Third-party verification providers: Where r999 uses licensed identity verification services, those providers may return verified identity data to r999 as part of the KYC process. r999 does not receive raw data beyond what is needed for the verification outcome.

r999 uses your personal data only for purposes that are directly connected to operating the platform, meeting legal obligations, and protecting the interests of both players and the platform. Specifically:

• Account management: To create, maintain, and administer your r999 account including balance management, VIP tier tracking, and bonus crediting.
• Identity and age verification: To confirm that you are who you say you are, that you are at least 18 years old, and that your account is not a duplicate. This is a legal requirement for all licensed gaming operations and is not optional.
• Payment processing: To process deposits and withdrawals in PKR using your chosen payment method. r999 needs to know which payment account to send funds to and to verify that incoming funds are from an account in your name.
• Game delivery and integrity: To record game activity, settle bets correctly, generate game histories accessible in your account, and investigate any disputes about outcomes.
• Fraud prevention and anti-money-laundering: To detect and prevent fraudulent account creation, bonus abuse, collusion in poker, and money laundering activity. r999 has legal obligations in this area that require monitoring of transaction patterns and account behaviour.
• Responsible gaming: To monitor activity patterns for signs of problem gambling behaviour and to enforce the responsible gaming tools you have set on your account such as deposit limits or self-exclusion.
• Customer support: To respond to your queries, resolve complaints, and maintain a record of interactions for quality assurance.
• Platform improvement: Aggregated, anonymised activity data is used to understand how players use r999 and to improve the platform experience. This data cannot be used to identify individual players.
• Legal compliance: To comply with applicable laws and to respond to lawful requests from regulatory or law enforcement authorities where required.

r999 does not use your personal data for targeted advertising on third-party platforms. r999 does not use profiling algorithms to make automated decisions that significantly affect your account without human oversight. If your account is flagged by automated risk systems, a human reviewer assesses the case before any account action is taken.

Every use of your personal data by r999 is based on one of the following legal grounds:

• Contractual necessity: Processing that is necessary to deliver the services you signed up for — running your account, paying out winnings, processing deposits, and resolving support queries. Without this processing, r999 cannot operate your account.
• Legal obligation: Processing required to comply with applicable laws including anti-money-laundering regulations, know-your-customer requirements, and responding to lawful requests from authorities. r999 is legally required to perform this processing regardless of your preferences.
• Legitimate interests: Processing for fraud detection, platform security, game integrity monitoring, and aggregated analytics that improve the platform. r999 has assessed that these interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications (promotional emails, bonus notifications). You can withdraw this consent at any time through your account settings or by contacting support@r999.life. Withdrawal of marketing consent does not affect the lawfulness of any processing that occurred before you withdrew consent.

r999 does not sell, rent, or trade your personal data to third parties. Sharing of data only occurs where it is necessary for the operation of the platform or required by law. The following third parties may receive your data in limited, defined circumstances:

• Identity verification providers: Licensed KYC providers receive your identity documents and return a verification result to r999. These providers are contractually bound to use your data only for the verification purpose and to apply security standards equivalent to those of r999.
• Payment processors: When you deposit or withdraw, the relevant payment network (Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or Visa/Mastercard) receives the transaction data necessary to process the payment. This is unavoidable for financial transactions and is not within r999's control.
• Anti-fraud and risk services: Anonymised or pseudonymised technical data (IP addresses, device fingerprints) may be checked against shared fraud intelligence databases to identify known bad actors. Individual identity data is not shared through these channels.
• Game software providers: Where r999's game catalogue includes titles licensed from third-party game developers, those developers' software runs on your device and may collect technical session data. r999 only partners with providers who meet equivalent data protection standards.
• Legal and regulatory authorities: r999 will disclose personal data to government bodies, regulatory agencies, or law enforcement authorities when legally required to do so. r999 will not disclose data beyond what is specifically required by a lawful request.
• Business transfers: In the event that r999's business or platform is acquired by a new operator, your personal data may be transferred to the acquiring party as part of that transaction. You will be notified of any such transfer before it takes effect.

r999.life uses cookies and similar technologies to make the platform function correctly, understand how players use the site, and improve the overall experience. A cookie is a small text file stored in your browser when you visit a website. r999 uses the following categories of cookies:

• Strictly necessary cookies: These are required for the platform to function. They include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance cookies: These collect anonymised data about how pages on r999.life are used — which sections are visited most, where players spend time, and where errors occur. This data is used solely to improve the platform. It cannot be used to identify you personally.
• Functionality cookies: These remember your preferences such as language settings, display preferences, and whether you have dismissed information banners. Disabling them may reduce your experience but will not prevent you from using r999.
• Security cookies: These help r999 identify suspicious login attempts and unusual session behaviour that may indicate account compromise or fraud. They are part of the platform's security infrastructure.

r999 does not use third-party advertising cookies that would track you across other websites for the purpose of building an advertising profile.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent r999 from functioning correctly. If you have questions about specific cookies used by r999, contact support@r999.life.

r999 does not retain personal data for longer than is necessary for the purpose for which it was collected, subject to applicable legal minimum retention requirements. The following retention periods apply:

After these retention periods expire, data is securely deleted or irreversibly anonymised so that it can no longer be linked to your identity. Anonymised aggregated data may be retained indefinitely for platform analytics without any privacy implications.

r999 takes data security seriously and implements technical and organisational measures proportionate to the risks involved in processing personal data on a financial gaming platform. Specific security measures in place include:

• TLS/SSL encryption: All data transmitted between your device and r999.life is encrypted using TLS 1.2 or higher. This protects your credentials, financial data, and session activity from interception.
• Encrypted data storage: Personal data stored on r999 servers is encrypted at rest. This means that even in the event of a server breach, stored data cannot be read without decryption keys that are held separately.
• Access controls: Personal data is accessible only to r999 staff and systems that have a defined operational need for it. All internal access is logged, and access to sensitive data such as KYC documents requires elevated authorisation.
• Two-factor authentication: r999 offers two-factor authentication (2FA) for all player accounts. r999 strongly recommends enabling 2FA. It is available under your account security settings.
• Penetration testing and security audits: r999 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: r999 maintains a data breach response process. In the event of a breach affecting your personal data, r999 will notify affected players and relevant authorities within the timeframes required by applicable law.

As an r999 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact r999 at support@r999.life with the subject line "Data Rights Request". r999 will respond within 30 days.

r999 is an adult gaming platform. It is not directed at, designed for, or intended to be used by anyone under the age of 18. r999 does not knowingly collect personal data from individuals under 18. Registration on r999 requires you to confirm that you are 18 or older, and r999 actively verifies age through KYC checks.

If r999 determines or reasonably suspects that an account belongs to a person under 18, the account will be immediately suspended, all balances will be frozen, and the matter will be escalated to the compliance team. Any deposits made to such an account will be returned to the depositing payment method after deduction of any winnings, which will be forfeited.

If you believe that a minor has registered on r999, please contact support@r999.life immediately with any information you can provide. r999 treats reports of underage access as a priority and will investigate without delay.

r999 may send you promotional communications — bonus offers, tournament announcements, new game notifications — via the contact details you provided at registration. These communications are sent based on your consent, which you give when you opt in to marketing during registration or at any point through your account settings.

You can withdraw your marketing consent at any time through one of these methods:

• Go to account settings on r999 and toggle off marketing communications.
• Click the unsubscribe link in any marketing email from r999.
• Contact support@r999.life with the request to stop marketing communications.

Withdrawal of marketing consent is processed within 48 hours. After opting out, you may still receive transactional communications — account activity notifications, withdrawal confirmations, security alerts, and support responses. These are not marketing communications and are sent regardless of your marketing preferences because they are necessary for operating your account.

r999 may update this Privacy Policy from time to time to reflect changes in how personal data is processed, changes in applicable law, or improvements to the platform that affect data handling. The current version will always be published at r999.life/privacy-policy with an updated "Last Updated" date.

For material changes — those that significantly affect how your data is used or your rights as a data subject — r999 will provide advance notice via your registered contact address at least 14 days before the new policy takes effect. Examples of material changes include new sharing arrangements with third parties, significant changes to retention periods, or new processing purposes that were not covered in the previous version.

Minor updates such as wording clarifications, formatting corrections, or addition of examples that do not change the substantive meaning of any section will be published without advance notice. Your continued use of r999 after any update to this policy constitutes acceptance of the revised terms. If you do not agree with changes to this policy, please contact support@r999.life to discuss your options, which may include account closure with withdrawal of eligible balances.

For any question, concern, or formal complaint about how r999 handles your personal data, please contact us through the following channels. All privacy queries are handled by trained staff and given priority treatment.

• Email: support@r999.life — use the subject line "Privacy Query" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 from your logged-in r999 account. Ask to be connected to the data protection team for privacy-specific matters.

r999 aims to acknowledge all privacy queries within 24 hours and to resolve them within 30 days. For complex data subject access requests, r999 may extend this to 60 days where necessary and will notify you of the extension and the reason before the initial 30-day period expires.

If you are not satisfied with r999's response to a privacy complaint, you have the right to escalate the complaint to the relevant data protection authority in your jurisdiction. r999 will cooperate fully with any such regulatory investigation and will not penalise you for raising a regulatory complaint.