rr786 Privacy Policy — How We Protect Your Personal Data

01 Introduction & Scope

rr786 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with the rr786 online casino and sports betting platform at rr786.net. This Privacy Policy describes our data practices in plain, accessible language while meeting the requirements of applicable data protection frameworks under which rr786's international gaming license operates.

This Policy applies to:

• All registered rr786 account holders, regardless of their country of access.
• Visitors to the rr786.net website who have not yet registered an account.
• Individuals who contact rr786 through any support channel, including live chat, email, and social media.
• Individuals who participate in rr786 promotions, competitions, or surveys.

This Policy does not apply to third-party websites, services, or platforms that may be linked from rr786 content. rr786 is not responsible for the privacy practices of any third-party service, and players should review the privacy policies of any external service they access independently.

02 Data Controller

rr786 acts as the data controller for all personal data collected and processed in connection with the rr786 platform. As data controller, rr786 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection obligations under our international gaming license.

For all data protection queries, requests, or complaints, please contact the rr786 data protection contact at [email protected] with the subject line "Privacy / Data Protection Query".

03 Personal Data We Collect

rr786 collects personal data across several categories. The following table summarises the categories of data we collect and the context in which each category is gathered:

04 How We Collect Your Data

rr786 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to rr786 when you: register an rr786 account; complete the KYC identity verification process; make a deposit or request a withdrawal; contact the rr786 customer support team; participate in a promotion or competition; or complete any survey or feedback form on the platform.

4.2 Automated Collection

Technical data and usage data are collected automatically when you access the rr786 platform. This includes data collected via cookies and similar tracking technologies (described in Section 11), server logs that record IP addresses and access timestamps, device fingerprinting for fraud prevention purposes, and session analytics that record your navigation behaviour within the platform.

4.3 Third-Party Sources

rr786 may receive data about you from third-party sources in the following circumstances:

• From payment providers such as JazzCash and EasyPaisa, to confirm deposit and withdrawal transaction details.
• From identity verification and KYC service providers, to assist in validating the information you have provided during registration.
• From fraud prevention and anti-money laundering screening services, which check your details against sanctions lists and fraud databases as required under our gaming license obligations.
• From responsible gaming databases maintained by self-exclusion registries, to assist in identifying individuals who have requested exclusion from online gambling services.

05 How We Use Your Personal Data

rr786 uses your personal data for the following defined purposes. We do not use your data for purposes incompatible with those listed below without obtaining your consent or establishing a new lawful basis for processing.

• Account Administration: Creating, managing, and maintaining your rr786 account, including processing login requests, updating account details, and managing account security settings.
• Identity Verification: Conducting KYC checks to verify your identity and age in compliance with our international gaming license requirements. rr786 is legally required to confirm that all account holders are aged 21 or over before allowing withdrawals.
• Payment Processing: Processing your PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and processing your withdrawal requests to the same payment method.
• Regulatory Compliance: Meeting our obligations under anti-money laundering (AML) regulations, counter-terrorist financing (CTF) requirements, gaming license reporting obligations, and applicable tax reporting requirements.
• Customer Support: Responding to your queries, complaints, and support requests through live chat, email, and other supported channels. Support interaction records are retained to maintain service quality and continuity.
• Platform Security and Fraud Prevention: Monitoring account activity for signs of fraud, bonus abuse, money laundering, multiple account operation, and other prohibited activities. Technical data including IP addresses and device fingerprints are used for these security purposes.
• Responsible Gaming: Monitoring betting patterns and account usage to identify potential signs of problem gambling behaviour, and administering self-exclusion, deposit limit, and responsible gaming tool requests.
• Platform Improvement: Analysing anonymised and aggregated usage data to improve the rr786 platform, game library, payment experience, and customer support quality.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform news where you have opted in to receive marketing communications. You may withdraw this consent at any time.

06 Legal Basis for Processing

rr786 processes your personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contract Performance: Processing necessary to fulfil our obligations under the rr786 Terms & Conditions, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with gaming license conditions, AML/CTF regulations, and other applicable legal requirements, including KYC verification and regulatory reporting.
• Legitimate Interests: Processing carried out for rr786's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where these interests do not override your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

07 Data Sharing & Disclosure

rr786 does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

7.1 Payment Service Providers

Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard solely to process your deposits and withdrawals. These providers act as independent data controllers for their own payment processing operations and are subject to their own privacy policies.

7.2 Identity Verification and KYC Providers

Identity documents and personal details provided during KYC verification may be shared with accredited third-party identity verification service providers retained by rr786 to assist with automated document checks. These providers are contractually bound to process data only on rr786's instructions and in accordance with applicable data protection requirements.

7.3 Game Providers

Anonymised session and gameplay data is shared with rr786's game content providers for the purpose of game performance monitoring and jackpot administration. Game providers do not receive personally identifiable information about individual players.

7.4 Regulatory and Law Enforcement Authorities

rr786 is required to disclose personal data to gaming regulators, financial intelligence units, and law enforcement authorities where legally required to do so — including in connection with AML investigations, gaming license audit requirements, and court orders. Such disclosures are made without prior notice to the account holder where legally required.

7.5 Professional Advisors

Personal data may be disclosed to legal counsel, auditors, and compliance consultants retained by rr786, on a strictly need-to-know basis and subject to professional confidentiality obligations.

08 International Data Transfers

The operation of the rr786 platform may involve the transfer of personal data to countries outside Pakistan, including countries where rr786's servers, data processors, or gaming license regulatory bodies are located. Where such transfers occur, rr786 takes appropriate measures to ensure that your personal data receives an adequate level of protection, including through contractual safeguards with data processors and compliance with the international data transfer obligations applicable under our gaming license.

rr786 engages only with data processors who provide sufficient guarantees regarding their technical and organisational data protection measures and who process personal data only on documented instructions from rr786.

09 Data Retention

rr786 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Active Account Data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, as required under gaming license and AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date, in compliance with anti-money laundering and financial reporting requirements.
• KYC Documents: Retained for five (5) years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Records: Retained for three (3) years following the resolution of the support interaction.
• Marketing Consent Records: Retained for the period during which consent is active, plus three (3) years following withdrawal of consent.
• Technical and Log Data: Retained for twelve (12) months from the date of collection, unless retained for longer as part of a security investigation or regulatory inquiry.

Where rr786 is required by law to retain data beyond these standard periods, the data will be retained for the legally mandated period and then deleted in accordance with this Policy.

10 Data Security

rr786 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and rr786 servers.
• Encryption at rest for sensitive personal data stored in rr786 databases, including passwords (stored as salted hashes), CNIC information, and financial data.
• Role-based access controls limiting access to personal data to authorised rr786 personnel on a strictly need-to-know basis.
• Two-factor authentication options for rr786 account login to protect against unauthorised account access.
• Regular independent security audits and penetration testing of the rr786 platform infrastructure.
• Fraud detection systems monitoring account activity for signs of unauthorised access and suspicious behaviour.

While rr786 takes comprehensive steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your rr786 login credentials secure and for notifying rr786 immediately if you suspect unauthorised access to your account.

11 Cookies & Tracking Technologies

rr786 uses cookies and similar tracking technologies on the rr786.net website to support platform functionality, improve user experience, and gather analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core platform functionality, including session management, login authentication, and payment security. These cookies cannot be disabled without impairing basic platform functionality.
• Functional Cookies: Used to remember your platform preferences, language settings, and previously viewed content to provide a more personalised experience on subsequent visits.
• Analytics Cookies: Used to collect anonymised data about how visitors navigate and use the rr786 platform, including page visit frequency, session duration, and navigation paths. This data is used in aggregate form to improve platform design and content.
• Security Cookies: Used for fraud detection, bot prevention, and device fingerprinting purposes to protect the platform and player accounts against unauthorised access.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or using core platform features. rr786 does not use third-party advertising or retargeting cookies.

12 Your Data Rights

As an rr786 account holder or platform visitor, you have the following rights with respect to your personal data, subject to applicable legal limitations and gaming license retention obligations:

• Right of Access: You may request a copy of the personal data rr786 holds about you. Access requests are processed within 30 days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For changes to core identity data (name, date of birth), supporting documentation is required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to rr786's legal obligations to retain certain data under gaming license and AML requirements.
• Right to Restrict Processing: You may request that rr786 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
• Right to Data Portability: Where processing is based on your consent or contract performance and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where rr786 relies on legitimate interests as the legal basis, unless rr786 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the rr786 compliance team at [email protected] with the subject line "Data Rights Request". rr786 will respond within 30 days and may request identity verification before processing your request.

13 Children & Minors

The rr786 platform is strictly for individuals aged 21 years or older. rr786 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the rr786 account registration and KYC process.

If rr786 becomes aware that personal data has been collected from an individual under the age of 21, the associated account will be immediately suspended, all data relating to the underage individual will be deleted in accordance with our data protection obligations, and the matter will be reported to the relevant regulatory authorities. If you believe that a minor has accessed or registered an rr786 account, please contact the rr786 support team immediately at [email protected].

14 Marketing Communications

rr786 may send you promotional emails, bonus notifications, and platform news if you have opted in to receive marketing communications at the time of account registration or subsequently through your account settings. Marketing communications from rr786 will always be clearly identified as coming from rr786 and will include an unsubscribe mechanism.

You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in the rr786 account settings dashboard, or by contacting the rr786 support team. Withdrawal of marketing consent will not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent regardless of marketing preferences as they are necessary for account operation.

rr786 does not share your contact details with third parties for their own marketing purposes. Any third-party marketing permissions you have granted to payment providers such as JazzCash or EasyPaisa are governed by those providers' own privacy policies and are separate from your rr786 marketing preferences.

15 Changes to This Privacy Policy

rr786 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Material changes to this Policy — meaning changes that substantively affect how we process your personal data or your data rights — will be communicated to registered account holders by email to the registered address at least seven (7) days before taking effect.

Non-material changes, including corrections of typographical errors and clarifications that do not change the substance of the Policy, may be made without prior notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the rr786 platform after the effective date of a Policy update constitutes acceptance of the revised terms.

Archived versions of previous Privacy Policy documents are available upon written request to the rr786 compliance team.

16 Contact & Complaints

For all privacy-related queries, data rights requests, and complaints, please contact the rr786 data protection team through the following channels:

• Email: [email protected] — Subject line: "Privacy / Data Rights Request"
• Live Chat: Available 24/7 through the rr786 platform dashboard. For complex data requests, we recommend email to ensure a full written record.

rr786 will acknowledge all privacy-related correspondence within 24 hours and will provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, rr786 may extend the response period by an additional 60 days, with notice provided to the requester within the initial 30-day window.

If you are not satisfied with how rr786 has handled a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction, or to the dispute resolution body under rr786's international gaming license. Details of the applicable escalation body are available upon request from the rr786 compliance team.