1. Overview
r999 is an online gaming platform built specifically for players in Pakistan, accessible at r999.world. This Privacy Policy applies to all registered users of r999 and to any person who visits the r999 website, whether or not they have created an account. It governs the collection, use, storage, sharing and protection of personal data in connection with the r999 platform and all its products — including sports betting, PSL betting, live casino, slots, Ludo Games and the VIP Club.
r999 takes data privacy seriously. We collect only the data we genuinely need to run the platform safely, process your transactions and comply with applicable obligations. We do not sell your personal data to third parties for marketing purposes. We do not share your data with anyone who does not need it to provide a service that is directly connected to your r999 account.
By registering an account on r999, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described. If you do not agree with any part of this policy, please do not create an account or use the r999 platform.
2. What Personal Data r999 Collects
The specific data r999 collects depends on how you interact with the platform. Below is a full breakdown organised by category.
2.1 Registration Data
When you create an r999 account, we collect:
- Your full legal name as it appears on your CNIC or other government-issued identity document
- Your date of birth (to verify that you are 18 years of age or older)
- Your Pakistani mobile number (used for account verification, transaction alerts and two-factor authentication)
- A username and password of your choosing
- Your city or province of residence (used for localisation and fraud detection)
2.2 Identity Verification (KYC) Data
When r999 requests identity verification — which may happen before a large withdrawal or as part of a routine security review — we may collect:
- A copy of your CNIC (front and back) or passport
- A selfie or live photo for facial verification purposes
- Proof of address (utility bill, bank statement or other official document dated within 3 months)
- Proof of payment method ownership (screenshot or statement showing your name on the Easypaisa, JazzCash or bank account used for deposits)
2.3 Transaction and Financial Data
Every financial transaction on r999 generates a record that is retained as part of your account history. This includes deposit amounts, withdrawal requests, bet stakes, winnings, bonus credits and any adjustments made by the r999 platform team. We do not store full payment card numbers — card transactions are processed by certified payment gateways that handle sensitive card data directly.
2.4 Gaming and Betting Activity
r999 records your complete gaming and betting history on the platform. This includes every bet placed on sports markets (including PSL), every hand or round played at live casino tables, every Ludo game joined, every slot spin and every tournament entry. This data is used for account management, dispute resolution, responsible gaming monitoring and fraud detection.
2.5 Technical and Device Data
r999 automatically collects certain technical data when you access the platform, including your IP address, browser type and version, device type and operating system, session timestamps, pages visited, features used and error logs. This data helps us maintain platform security and improve the user experience.
2.6 Communications Data
If you contact r999 support via email, live chat or any other channel, we retain a record of that communication. This includes your messages, the support agent's responses and any attachments or screenshots you provide.
3. How r999 Collects Your Data
r999 collects personal data through the following channels:
- Directly from you — when you register, complete KYC verification, make a deposit or withdrawal, contact support or participate in a promotion
- Automatically — through cookies and similar tracking technologies when you use the r999 website or platform (see Section 9 for full cookie details)
- From payment providers — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card processors confirm transaction details to r999 as part of the payment process
- From live casino providers — Evolution Gaming, Ezugi and Playtech may share session data related to your activity on their games hosted within the r999 platform
- From fraud prevention and identity verification services — third-party services used for KYC compliance and security screening may provide data that supplements your registration information
4. How r999 Uses Your Personal Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and identity verification | Name, DOB, mobile number, CNIC | Contractual necessity |
| Processing deposits and withdrawals in PKR | Transaction data, payment method details | Contractual necessity |
| Fraud detection and account security | IP address, device data, betting patterns | Legitimate interest |
| Responsible gaming monitoring | Gaming history, session data, deposit frequency | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Communications data, account history | Contractual necessity |
| Platform improvement and analytics | Technical data, usage patterns (anonymised) | Legitimate interest |
| Bonus and promotion management | Gaming history, deposit data, account status | Contractual necessity |
| Marketing communications (opt-in only) | Mobile number, email (if provided) | Consent |
| Compliance with legal obligations | All categories as required | Legal obligation |
6. Payment Data and Financial Security
r999 handles PKR transactions through trusted payment infrastructure. Here is how your financial data is protected at each stage:
- Easypaisa and JazzCash: Mobile wallet transactions are initiated through secure API connections. r999 does not store your Easypaisa or JazzCash PIN at any point. Transaction authorisation happens directly between your mobile wallet and the payment provider — r999 only receives a confirmation once the transaction is approved.
- Bank IBFT: Bank transfer details are shared only with the relevant financial institution to complete the transaction. r999 retains transaction reference numbers and amounts but does not store full account numbers.
- Visa and Mastercard: Card payment processing is handled by a PCI DSS-certified payment gateway. r999 does not store, process or transmit full card numbers. Tokenised references may be retained to facilitate future transactions if you choose to save a card.
- NayaPay and SadaPay: Digital wallet transactions follow the same secure API model as Easypaisa and JazzCash, with no sensitive wallet credentials stored by r999.
7. How Long r999 Keeps Your Data
r999 retains personal data for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal and regulatory obligation |
| KYC documents | Duration of account + 5 years post-closure | Anti-money laundering compliance |
| Transaction records (deposits, withdrawals) | 7 years from transaction date | Financial record-keeping requirements |
| Betting and gaming history | Duration of account + 3 years post-closure | Dispute resolution, responsible gaming |
| Support communications | 3 years from last interaction | Dispute resolution and service improvement |
| Technical and device logs | 12 months from collection | Security monitoring and fraud detection |
| Marketing consent records | Until consent withdrawn + 1 year | Evidence of consent for compliance |
When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised aggregate data (for example, platform usage statistics that do not identify any individual player) may be retained indefinitely for analytical purposes.
8. How r999 Protects Your Data
r999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction.
8.1 Technical Measures
- SSL/TLS Encryption: All data transmitted between your device and the r999 platform is encrypted using industry-standard TLS 1.2 or higher. The padlock in your browser confirms this encryption is active.
- Password Hashing: Your r999 account password is stored as a salted hash — not as plain text. Even if our database were compromised, your actual password could not be extracted.
- Two-Factor Authentication: r999 offers 2FA via SMS to your registered Pakistani mobile number. We recommend enabling this for maximum account security.
- Access Controls: Internal access to player data at r999 is restricted on a need-to-know basis. Staff members who have no operational reason to access your account data cannot do so.
- Intrusion Detection: r999's infrastructure includes automated monitoring for unusual access patterns, failed login attempts and potential data exfiltration attempts.
8.2 Organisational Measures
All r999 staff and contractors with access to personal data are subject to confidentiality obligations. r999 conducts regular internal security reviews and training. In the event of a confirmed data breach that is likely to result in a risk to affected players, r999 will notify the affected players without undue delay and take all reasonable steps to limit the impact of the breach.
9. Cookies and Tracking Technologies
r999 uses cookies and similar browser-based technologies to deliver a consistent and secure experience on the platform. A cookie is a small file stored in your browser that allows the website to remember certain information about your session or preferences. Here is what r999 uses and why:
You can control cookie behaviour through your browser settings. Blocking essential cookies will prevent the r999 platform from functioning correctly — you will not be able to log in, place bets or make transactions. Blocking analytics and preference cookies will not affect core functionality but may mean the platform behaves less consistently between visits.
10. Your Rights Over Your Personal Data
As an r999 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact r999 support at support@r999.world with the subject line "Data Rights Request".
Right to Access
You can request a copy of all personal data r999 holds about you. We will respond within 30 days of a verified request.
Right to Correction
If any personal data r999 holds about you is inaccurate or incomplete, you can request a correction through your account settings or by contacting support.
Right to Deletion
You can request deletion of your personal data. Deletion may be limited where r999 has a legal obligation to retain certain records (e.g., financial transaction records for 7 years).
Right to Restrict Processing
You can request that r999 restrict processing of your data in specific circumstances — for example, while a disputed account matter is being investigated.
Right to Data Portability
You can request a machine-readable export of the personal data you provided to r999 directly — such as your registration information and transaction history.
Right to Object
You can object to processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interest grounds, subject to r999's legitimate operational needs.
r999 will verify your identity before processing any data rights request to ensure that we are responding to the account holder and not a third party. We aim to respond to all verified requests within 30 calendar days.
11. Minors and Under-18 Players
r999 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If r999 discovers or is notified that a registered account belongs to a minor, we will immediately suspend the account, void any bets placed and return any deposits made. All personal data associated with the account will be deleted as soon as the investigation is complete, except where we are legally required to retain evidence of the breach for compliance purposes.
If you are a parent or guardian and you believe your child has created an r999 account, please contact us immediately at support@r999.world. We take underage gambling seriously and will act on any credible report without delay.
12. Third-Party Links and Services
The r999 platform may contain references or links to third-party services — for example, links to the official Pakistan Cricket Board website for match schedules. r999 has no control over the privacy practices of external websites and is not responsible for the content or data handling of any site that is not r999.world. If you follow a link to an external website, please review that site's own privacy policy before providing any personal information.
Within the r999 platform, certain games and features are powered by certified third-party providers including Evolution Gaming, Ezugi and Playtech. These providers operate under their own certified data protection standards and are contractually bound to process data only as directed by r999 for the purpose of delivering their gaming services.
13. Changes to This Privacy Policy
r999 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in the services we offer, or changes in applicable law. When we make material changes, we will notify registered players by sending a message to their registered mobile number and by displaying a prominent notice on the r999 platform for at least 14 days before the changes take effect.
The date at the top of this page will always reflect the date of the most recent update. We encourage you to review this policy periodically. Continued use of the r999 platform after any update takes effect constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated policy, you should close your account and withdraw your balance before the changes take effect.
14. Contact r999 About Privacy
If you have any questions about this Privacy Policy, want to exercise your data rights or wish to report a privacy concern, please contact the r999 data team. All privacy-related queries are handled with priority by a dedicated member of the r999 team.