rv999 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy (hereinafter "Policy") describes how rv999 (hereinafter "rv999", "the Company", "we", "us" or "our"), the operator of the online gaming and sports betting platform accessible at rv999.biz, collects, processes, stores, shares and protects personal data relating to users of the Platform (hereinafter "Player", "User", "you" or "your").

This Policy applies to all data processing activities carried out by rv999 in connection with the operation of the Platform, including account registration, identity verification, payment processing, customer support, marketing communications and regulatory compliance. It applies regardless of whether you access rv999 from a desktop browser, mobile browser or any other device.

By registering an account on rv999, using the Platform or submitting any personal information to rv999, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the rv999 Platform.

This Policy should be read alongside the rv999 Terms & Conditions, which govern the overall legal relationship between you and rv999. In the event of any conflict between this Policy and the Terms & Conditions, this Policy shall prevail with respect to data protection matters.

For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal data is rv999, the licensed operator of the rv999 Platform at rv999.biz. rv999 determines the purposes and means of processing personal data collected through the Platform and is accountable for that processing under its international gaming licence obligations.

Where rv999 engages third-party processors (such as payment service providers, KYC verification partners or cloud hosting providers) to process your data on its behalf, those processors act under binding data processing agreements that require them to process your data only on rv999's documented instructions and to implement appropriate technical and organisational security measures.

rv999's designated Data Protection contact can be reached via [email protected] (plain text — not a clickable link). Please include "Data Protection Query" in the subject line of your email to ensure prompt routing to the relevant team.

rv999 collects personal data through several channels: directly from you when you register, verify, deposit or contact support; automatically through your use of the Platform; and from third parties such as payment processors and KYC verification services where applicable. The categories of personal data we collect include:

rv999 does not collect or store full payment card numbers. Where card payment processing is offered, card data is handled exclusively by a PCI-DSS compliant payment processor and rv999 receives only a masked card reference token.

rv999 uses the personal data it collects for the following specific purposes:

• Account registration and management: To create and administer your rv999 Account, authenticate your identity at login, manage your PKR Wallet balance and process your account settings changes.
• KYC and age verification: To verify that you are at least 21 years of age using your Pakistani CNIC, to confirm your identity in compliance with AML (Anti-Money Laundering) requirements, and to validate payment method ownership.
• Payment processing: To process deposits to and withdrawals from your rv999 PKR Wallet via JazzCash, EasyPaisa, HBL, UBL and Meezan Bank, and to maintain accurate transaction records.
• Game and sportsbook operation: To operate casino games, live dealer tables, fishing games, dice games and sports betting markets; to calculate and credit winnings; to settle bets; and to maintain complete gaming and betting records.
• Responsible gaming: To enforce deposit limits, loss limits, cooling-off periods and self-exclusion requests you have set; to monitor for indicators of problem gambling behaviour and to take appropriate protective action where warranted.
• Customer support: To respond to your queries, complaints and requests submitted via live chat or email; to investigate disputes; and to improve support quality through review of interaction records.
• Security and fraud prevention: To detect, investigate and prevent fraudulent account activity, bonus abuse, money laundering, unauthorised access and other violations of rv999's Terms & Conditions.
• Regulatory compliance: To fulfil rv999's obligations under its international gaming licence, including record-keeping for AML compliance, reporting obligations and cooperation with lawful requests from regulatory and law enforcement authorities.
• Marketing communications (with consent only): To send you promotional emails or notifications about rv999 bonuses, new games, sporting events and special offers, where you have explicitly opted in to receive such communications.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how Pakistani players interact with the Platform and to guide product development and UX improvements.

rv999 processes your personal data under the following legal bases, each of which applies to the relevant processing activities described in Section 4:

• Performance of a contract: The majority of rv999's data processing — including account operation, payment processing, game operation and customer support — is necessary for rv999 to fulfil its contractual obligations to you under the Terms & Conditions.
• Legal obligation: KYC / AML verification, age verification, transaction record-keeping and cooperation with regulatory and law enforcement authorities are required by applicable law and rv999's licensing obligations.
• Legitimate interests: Fraud detection, security monitoring, technical data analysis, Platform improvement and certain customer communications are processed on the basis of rv999's legitimate business interests, balanced against your privacy rights. rv999 has assessed these interests and determined that they do not override your fundamental rights and freedoms.
• Consent: Marketing communications and optional cookies are processed only where you have provided clear, informed and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rv999 does not sell, rent or trade your personal data to any third party. However, rv999 may share your data with specific categories of recipients where necessary for the purposes set out in this Policy:

• Payment service providers: JazzCash, EasyPaisa and partner banking institutions (HBL, UBL, Meezan Bank) receive the payment details necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and applicable financial services regulation.
• KYC and identity verification providers: rv999 uses licensed third-party identity verification services to conduct CNIC-based age and identity checks. These providers receive identity documents and biometric data strictly for verification purposes under binding data processing agreements.
• Game content providers: Third-party game studios that supply slot titles, live dealer casino streams and other game content to rv999 may receive anonymised session identifiers necessary to serve game content and calculate RTP. They do not receive personally identifiable information such as your CNIC or payment details.
• Regulatory and licensing authorities: rv999 may be required to disclose personal data to its licensing authority, financial intelligence units, law enforcement agencies or other government bodies where lawfully required or where rv999 has a legitimate duty to report suspected criminal activity.
• Technology and hosting providers: Cloud infrastructure and hosting providers that store rv999 Platform data operate under strict contractual data processing obligations and implement security standards commensurate with the sensitivity of the data processed.
• Legal and professional advisors: rv999 may share relevant personal data with legal counsel, auditors or compliance consultants under professional confidentiality obligations where necessary to obtain advice or conduct audits.

As an internationally licensed online gaming platform, rv999 may process and store personal data in countries other than Pakistan. This may include cloud server infrastructure, KYC verification services and game content delivery systems located in various international jurisdictions.

Where personal data is transferred outside of Pakistan, rv999 takes appropriate steps to ensure that such transfers are subject to adequate safeguards. These safeguards may include: binding contractual clauses requiring the overseas recipient to protect your data to an equivalent standard; processing data only with providers whose jurisdictions have been assessed as providing an adequate level of data protection; or other transfer mechanisms appropriate under applicable law.

If you would like more specific information about the international transfer safeguards applicable to your personal data, you may contact rv999 at [email protected].

rv999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with rv999's data disposal procedures. Anonymised, aggregated data (from which you cannot be individually identified) may be retained indefinitely for statistical and analytical purposes.

rv999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rv999 servers, ensuring that data in transit cannot be intercepted.
• Encryption at rest for sensitive personal data including CNIC scans, payment details and identity verification records stored on rv999 infrastructure.
• Access controls restricting access to personal data on a strict need-to-know basis, with all staff access subject to authentication, role-based permissions and activity logging.
• Two-factor authentication (2FA) available to all Player Accounts to add an additional layer of protection against unauthorised login.
• Intrusion detection and monitoring systems that continuously monitor rv999's infrastructure for unauthorised access attempts, anomalous activity and security threats.
• Penetration testing and vulnerability assessments conducted on a regular basis by qualified security professionals.
• Incident response procedures to identify, contain and remediate any data security incidents promptly, with notification to affected players and relevant authorities where required.

Whilst rv999 maintains robust security measures, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your rv999 login credentials and for ensuring that your own devices are adequately protected.

rv999.biz uses cookies and similar tracking technologies to operate the Platform, improve the user experience and, where you have consented, to personalise marketing communications. Cookies are small text files placed on your device when you visit rv999.biz.

rv999 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These cookies maintain your login session, remember your PKR Wallet state and ensure the security of your Account. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Collect anonymised data about how players use rv999.biz — which pages are visited most, where errors occur and how sessions flow — to allow rv999 to improve the Platform. These cookies are activated on the basis of legitimate interest and do not identify you personally.
• Functional cookies: Remember your preferences (such as language settings and responsible gaming reminder configurations) to provide a personalised experience on return visits.
• Marketing cookies (consent required): Used to deliver relevant promotional content about rv999 and to measure the effectiveness of marketing campaigns. These cookies are only placed where you have explicitly consented via the cookie consent mechanism on rv999.biz.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse all cookies, accept only certain categories, or delete existing cookies. Disabling strictly necessary cookies will impair your ability to use rv999 and may prevent login and payment functions from working correctly.

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you hold the following rights in relation to your personal data held by rv999:

To exercise any of these rights, submit a written request to [email protected] with "Data Rights Request" in the subject line. You will be required to verify your identity before rv999 can action a data rights request. rv999 will respond within thirty (30) calendar days, and will notify you promptly if an extension is required for complex requests.

The rv999 Platform is strictly for persons aged 21 years and above. rv999 does not knowingly collect or process personal data from individuals under 21 years of age. Age verification using a valid Pakistani CNIC is mandatory before any real-money activity is permitted on the Platform.

In the event that rv999 discovers or is notified that personal data has been collected from a person under 21, rv999 will immediately close the Account, delete the relevant personal data to the extent permissible under legal retention obligations, and return any deposited funds to the payment source where possible.

Parents and guardians in Pakistan are encouraged to use parental control software to prevent minors from accessing online gaming websites, including rv999.biz. If you believe that a minor has created an rv999 Account, please notify us immediately at [email protected].

rv999 will only send you direct marketing communications — including emails and in-Platform notifications about bonuses, new games, cricket betting specials and promotional events — where you have provided explicit opt-in consent at the time of registration or through your Account settings.

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your rv999 Account settings;
• Clicking the "unsubscribe" link included in every marketing email rv999 sends;
• Contacting rv999 support via [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal. It also does not affect service-related communications that rv999 is required to send you — such as transaction confirmations, security alerts, responsible gaming notifications and material changes to Terms or this Policy — which are sent on the basis of contractual and legal obligation regardless of marketing consent status.

Players who have activated self-exclusion on their rv999 Account are automatically and immediately removed from all marketing lists. No promotional communications will be sent to self-excluded players under any circumstances.

The rv999 Platform may include links to third-party websites or services — for example, in the context of responsible gaming resources referenced in the rv999 Responsible Gaming page. rv999 is not responsible for the privacy practices of any third-party websites, and this Privacy Policy does not apply to any data processing carried out by those third parties.

rv999 encourages you to review the privacy policies of any third-party services you access via links from rv999.biz before providing them with any personal information. Third-party game studios whose content is integrated into the rv999 Platform are engaged as data processors under contracts that restrict their data use to the specific purpose of providing game services to rv999 players.

rv999's payment partners — JazzCash, EasyPaisa, HBL, UBL and Meezan Bank — are independent data controllers in respect of the payment transactions they process. Their processing of your financial data is governed by their own privacy policies and applicable Pakistani banking and financial services regulations.

rv999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, the services offered on the Platform, or guidance issued by regulatory authorities. Material changes to this Policy will be notified to you by email to your registered address and/or by a prominent notice on rv999.biz no less than seven (7) days before the changes take effect.

Non-material changes — such as corrections to typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact information — may be made without prior notice and with immediate effect. The date shown at the top of this Policy will always reflect when the most recent revision was made.

Your continued use of the rv999 Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should close your Account before the amendment takes effect. The current version of this Policy is always available at rv999.biz/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how rv999 handles your personal data, please contact us through any of the following channels:

• Email (Data Protection enquiries): [email protected] — please include "Privacy Policy" or "Data Rights Request" in the subject line to ensure your message is routed correctly.
• Live Chat: Available 24/7 from your rv999 member dashboard. Suitable for urgent account-related privacy queries.
• FAQ: Common privacy and data questions are addressed on the FAQ page.

rv999 aims to respond to all data protection enquiries within five (5) business days. For formal data rights requests, the statutory response period is thirty (30) calendar days, extendable by a further two months for complex requests with notification to you.

If you are not satisfied with rv999's response to a privacy concern, you have the right to escalate the matter to the data protection authority or regulatory body associated with rv999's international gaming licence. Details of the relevant authority will be provided upon request.