rs77 Privacy Policy —
How We Protect Your Personal Data

1.1 Data Controller. rs77 (accessible at rs77.bid) is the data controller responsible for the personal data collected from players who register accounts on and use the rs77 online gaming platform. As data controller, rs77 determines the purposes for which personal data is collected and the means by which it is processed.

1.2 Platform Overview. rs77 is Pakistan's premier online casino and cricket sportsbook, offering a range of gambling products including cricket betting, live dealer casino games, and slot titles. All platform services are directed at and used by players based in Pakistan. All transactions are conducted in Pakistani Rupees (PKR).

1.3 Licensing. rs77 operates under an internationally recognised gaming licence. As a condition of that licence, rs77 is subject to data protection and player privacy obligations that are monitored by the issuing regulatory authority. Compliance with this Privacy Policy is both a legal obligation and a core operational commitment of rs77.

1.4 Scope. This Privacy Policy applies to all personal data collected by rs77 in connection with the operation of the rs77 platform — including data collected during account registration, KYC verification, payment processing, gameplay, customer support interactions, and marketing communications. It applies to all registered rs77 account holders and to visitors to rs77.bid who have not registered an account.

rs77 collects the following categories of personal data from players and platform visitors. The specific data collected from any individual player will depend on the services they use and the interactions they have with the platform.

rs77 collects personal data through the following channels:

• Direct submission: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated collection: Technical and cookie data collected automatically when you access rs77.bid via your mobile device or browser, including IP address, device identifiers, and session activity logs.
• Payment partners: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other accepted payment processors when you make a deposit or withdrawal.
• Third-party game providers: Gameplay data generated during your use of slot titles, live dealer games, or virtual sports provided by licensed third-party software suppliers integrated into the rs77 platform.
• Fraud prevention services: Risk signals and data flags received from fraud detection partners used by rs77 to protect the integrity of the platform and its player community.

3.1 Voluntary Provision. Where personal data is provided voluntarily (for example, your email address, which is optional at registration), you may choose not to provide it. However, certain data — such as your mobile number, date of birth, and CNIC — is mandatory for account registration and KYC completion, and the platform cannot function for you without it.

rs77 uses the personal data it collects for the following specific, documented purposes:

• Account creation and management: To create, maintain, and operate your rs77 player account, including managing your wallet balance, betting history, and account preferences.
• Age and identity verification (KYC): To confirm that you are 21 years of age or older and that your identity matches the account details provided, as required by our gaming licence.
• Payment processing: To facilitate deposits into your rs77 Wallet and process withdrawal requests to your registered PKR payment account.
• Fraud detection and prevention: To monitor account activity, detect suspicious patterns, and prevent fraudulent transactions, bonus abuse, multiple-account violations, and money laundering on the platform.
• Responsible gaming compliance: To monitor player behaviour for signs of problem gambling and to enforce deposit limits, loss limits, session limits, and self-exclusion orders set by players or required by our licence.
• Customer support: To respond to enquiries, investigate complaints, and resolve disputes raised by registered players through rs77's support channels.
• Regulatory compliance: To fulfil reporting obligations imposed by rs77's gaming licence, including the provision of player data to the issuing regulatory authority where legally required.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and feature set of the rs77 platform over time.
• Marketing communications (with consent): To send promotional offers, bonus notifications, and PSL season campaign communications to players who have opted in to receive marketing from rs77. Marketing consent may be withdrawn at any time.

rs77 processes personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing that is necessary to create and maintain your rs77 account, process your transactions, and deliver the platform services you have contracted to use. This covers account management, wallet operations, KYC verification, and payment processing.
• Legal obligation: Processing required for rs77 to comply with its gaming licence conditions, anti-money laundering (AML) obligations, and any reporting requirements imposed by regulatory or law enforcement authorities. This includes KYC document retention and suspicious activity reporting.
• Legitimate interests: Processing undertaken to pursue the legitimate interests of rs77 in operating a secure, fair, and commercially viable gaming platform — including fraud detection, responsible gaming monitoring, platform security, and product improvement. Such processing is carried out only where it does not unduly override the privacy interests of individual players.
• Consent: Processing based on your explicit, freely given consent — specifically, the sending of marketing communications and the use of non-essential cookies. Consent-based processing may be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

6.1 General Principle. rs77 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data sharing with external parties is limited to what is strictly necessary for the operation of the rs77 platform and compliance with legal obligations.

6.2 Categories of Recipients. rs77 may share your personal data with the following categories of third parties:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and debit card processors — for the purposes of facilitating deposits and withdrawals. These providers receive only the financial and identity data necessary to process your specific transaction.
• Game software providers: Licensed third-party providers whose games are integrated into the rs77 platform (such as slot studios and live dealer suppliers) — these providers receive gameplay data necessary to run the games and certify their fairness.
• Fraud prevention and KYC services: Third-party identity verification and fraud detection services used by rs77 to verify player identities and detect fraudulent account activity.
• Regulatory authorities: The gaming regulatory authority that issued rs77's operating licence, and any other regulatory body that has legal authority to request player data from rs77.
• Law enforcement agencies: Pakistani and international law enforcement agencies, where rs77 is required by law, court order, or lawful authority to disclose player information in connection with criminal investigations.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers that process data on behalf of rs77 under strictly controlled data processing agreements.

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit rs77.bid. They allow the platform to remember your session, preferences, and usage patterns, enabling a more personalised and efficient experience across visits.

7.2 Types of Cookies Used by rs77.

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your rs77 account and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your stated preferences — such as language settings and game lobby display options — so that they persist across sessions without requiring re-entry each time.
• Analytics cookies: Used by rs77 to understand how players navigate the platform, which features are most used, and where technical issues occur. All analytics data is aggregated and anonymised before being reviewed by the rs77 team.
• Marketing cookies: Used, with your consent only, to deliver rs77 promotional messages that are relevant to your platform usage and sporting interests (for example, PSL season offers). These may be disabled at any time through your browser settings.

7.3 Managing Cookies. You can control and disable cookies through your mobile browser or device settings. Disabling strictly necessary cookies will impair your ability to use the rs77 platform. Disabling functional or analytics cookies will not prevent you from using rs77 but may affect certain personalisation features.

7.4 No Cross-Site Tracking. rs77 does not use tracking technologies to monitor your activity on websites or platforms other than rs77.bid. Our cookies and session data are scoped exclusively to the rs77 domain.

8.1 Retention Periods. rs77 retains personal data for the minimum period necessary for the stated purpose of collection, or as required by applicable law and our gaming licence obligations, whichever is longer.

• Account and identity data: Retained for the duration of your active rs77 account plus a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable to licensed gaming operators.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements under our gaming licence.
• KYC documents (CNIC scans): Retained for a minimum of five (5) years from the date of submission, as mandated by our licensing authority's AML compliance framework.
• Gaming history: Retained for the duration of your account plus three (3) years following closure, for dispute resolution and compliance purposes.
• Customer support correspondence: Retained for three (3) years from the date of the final interaction, to support potential follow-up or dispute escalation.
• Marketing consent records: Retained for three (3) years from the date of consent or withdrawal, as evidence of the lawful basis for marketing communications sent during that period.

8.2 Anonymisation. Where personal data is retained beyond the applicable active retention period for research or platform improvement purposes, it is anonymised in a manner that permanently prevents re-identification of the individual player.

9.1 Technical Measures. rs77 implements the following technical security measures to protect player personal data:

• SSL/TLS encryption on all data transmitted between your device and the rs77 platform
• Encryption of sensitive data fields (including CNIC numbers and financial account identifiers) in the rs77 database
• Firewalls and intrusion detection systems protecting the rs77 server infrastructure
• Regular penetration testing and vulnerability assessments by independent security specialists
• Multi-factor authentication requirements for rs77 administrative access to player data systems
• Automated anomaly detection for unusual data access patterns within the rs77 operational team

9.2 Organisational Measures. Access to player personal data within the rs77 organisation is restricted to personnel who require it for their specific operational role — for example, customer support agents, KYC reviewers, and the financial operations team. All rs77 personnel with data access undergo data protection training and are bound by confidentiality obligations.

9.3 Your Responsibilities. The security of your rs77 account credentials is your responsibility. rs77 will never ask for your password via email, chat, or phone. If you suspect your account credentials have been compromised, you must notify rs77 immediately at [email protected] and change your password without delay.

9.4 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and interests, rs77 will notify affected players and relevant regulatory authorities within the timeframes required by our licensing and legal obligations.

As a player whose personal data is processed by rs77, you hold the following rights with respect to your information. To exercise any of these rights, contact us at [email protected]. rs77 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data rs77 holds about you, including details of how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data rs77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to our legal and regulatory retention obligations — rs77 cannot erase financial and identity data that we are legally required to retain.
• Right to Restriction of Processing: You may request that rs77 restrict the active processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that personal data you have provided to rs77 be transferred to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data that is based on rs77's legitimate interests — including profiling for responsible gaming monitoring. rs77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

11.1 Age Restriction. The rs77 platform is strictly for users aged 21 years and above. rs77 does not knowingly collect personal data from individuals under the age of 21. The platform does not direct any marketing, content, or services at individuals below this age threshold.

11.2 Discovery of Underage Accounts. If rs77 discovers that personal data has been collected from a player who is under 21 years of age, it will immediately suspend the account, delete the personal data associated with it (to the extent not required to be retained for legal purposes), and forfeit any account balance in accordance with the rs77 Terms & Conditions.

11.3 Parental Concerns. If a parent or guardian believes that their child has registered an account on the rs77 platform, they should contact [email protected] immediately with the subject line "Underage Account Report". rs77 will investigate the report and take appropriate action as a priority.

12.1 Cross-Border Processing. As rs77 operates under an international gaming licence, some personal data processing activities may involve the transfer of data to servers or third-party service providers located outside of Pakistan. Such transfers may occur in connection with cloud hosting infrastructure, game software provision, or fraud detection services.

12.2 Safeguards. Where personal data is transferred internationally, rs77 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding that applied within Pakistan. These safeguards include contractual data processing agreements with all international recipients and, where applicable, the use of standard contractual clauses recognised by applicable data protection frameworks.

12.3 Player Consent. By registering an rs77 account and using the platform, you acknowledge that your personal data may be transferred, stored, and processed in jurisdictions outside of Pakistan as described in this section, subject to the safeguards described above.

13.1 Right to Update. rs77 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, platform operations, or applicable legal requirements. The effective date displayed at the top of this document will be updated whenever the policy is revised.

13.2 Notification of Material Changes. Where changes to this Privacy Policy are material — meaning they significantly affect how rs77 uses your personal data or the rights available to you — rs77 will notify registered players via the platform's notification system or via the mobile number registered to their account, no less than 14 days before the changes take effect.

13.3 Continued Use as Acceptance. Your continued use of the rs77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision to this policy, you should cease using the platform and contact [email protected] to close your account and request data deletion.

14.1 Privacy Enquiries. If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how rs77 is handling your personal data, please contact the rs77 privacy team using the details below:

14.2 Complaints. If you are dissatisfied with rs77's response to a privacy concern or data rights request, or if you believe rs77 has not handled your personal data in compliance with this Privacy Policy, you have the right to escalate your complaint to the relevant data protection authority or to the gaming regulatory authority that issued rs77's operating licence.

14.3 Related Policies. This Privacy Policy should be read alongside the rs77 Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to the rights and obligations of rs77 players.