r789 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy applies to all personal data collected and processed by r789 in connection with the operation of r789.bid, including data collected from:

• Visitors who browse r789.bid without registering an account.
• Individuals who register an r789 account, whether or not they complete the registration process in full.
• Registered r789 players who deposit, wager, withdraw, or use any service on the r789 platform.
• Individuals who contact r789 via live chat, support email, or any other communication channel.
• Players who submit documentation as part of the r789 KYC verification process.

This Policy should be read in conjunction with the r789 Terms & Conditions, which govern the overall contractual relationship between r789 and its registered players. By using the r789 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, r789 — the operating entity behind r789.bid — acts as the data controller in respect of personal data collected from registered players and website visitors. As data controller, r789 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where r789 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification services), those providers act as data processors and are bound by contractual obligations requiring them to process data only in accordance with r789's instructions and applicable data protection law.

r789 collects the following categories of personal data, depending on how you interact with the platform:

r789 does not collect special category data (such as health data, biometric data, or political opinions) except where identity document photographs are required for KYC — and even then, only the minimum necessary data is retained.

r789 collects personal data through the following means:

• Direct submission: Data you provide when registering an r789 account, completing KYC verification, making a deposit, requesting a withdrawal, contacting our support team, or filling in any form on the r789 platform.
• Automated collection: Technical data — including your IP address, device identifiers, browser type, and session activity — is collected automatically when you access r789.bid, through server logs, cookies, and similar tracking technologies.
• Third-party sources: r789 may receive data about you from third-party KYC verification providers, payment processors (including JazzCash, EasyPaisa, and partner banks such as HBL, UBL, and Meezan Bank), and fraud detection services used to verify your identity and protect the r789 platform against financial crime.
• Publicly available sources: In limited circumstances, r789 may supplement your data with information from publicly available sources where required for compliance purposes — for example, checking politically exposed person (PEP) lists or sanctions databases as part of our anti-money laundering obligations.

r789 processes your personal data for the following specific purposes, each supported by a defined legal basis:

• Account registration and management — to create, maintain, and administer your r789 player account. Legal basis: performance of the contract between r789 and you as a registered player.
• KYC identity verification — to verify your identity, confirm your age (21+), and comply with anti-money laundering requirements applicable under r789's gaming license. Legal basis: legal obligation and legitimate interest in preventing fraud.
• Payment processing — to facilitate deposits and withdrawals via JazzCash, EasyPaisa, and linked Pakistani bank accounts. Legal basis: performance of contract.
• Customer support — to respond to queries, complaints, and disputes submitted through r789's live chat and support email channels. Legal basis: performance of contract and legitimate interest in maintaining service quality.
• Responsible gaming compliance — to enforce self-exclusion records, deposit limits, loss limits, and cooling-off periods set by players, and to proactively identify players showing signs of problematic gambling behaviour. Legal basis: legal obligation and legitimate interest in player welfare.
• Fraud prevention and security — to detect and prevent duplicate accounts, bonus abuse, money laundering, and unauthorised access to r789 accounts. Legal basis: legitimate interest and legal obligation.
• Platform improvement — to analyse anonymised usage data and improve the r789 platform, game library, and user experience. Legal basis: legitimate interest.
• Marketing communications — to send promotional emails, SMS notifications, or in-platform messages about r789 bonuses and promotions. Legal basis: consent (where explicitly provided at account registration). You may opt out at any time from your account settings.

r789 does not sell your personal data to any third party. r789 shares your personal data only in the following strictly defined circumstances:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and applicable Pakistani banking regulations.
• KYC and identity verification providers: r789 engages accredited third-party KYC service providers to verify CNIC authenticity and check identity documents against relevant databases. These providers act as data processors under contract with r789.
• Game software providers: Your player ID and relevant game session data may be shared with certified game providers (such as Evolution, Pragmatic Play, Ezugi, and PG Soft) solely for the purpose of delivering and certifying game outcomes. These providers do not receive your full identity or financial data.
• Fraud prevention and compliance services: r789 uses third-party fraud detection tools and compliance screening services that may receive limited personal data, including IP addresses and device fingerprints, to assess risk.
• Regulatory and law enforcement authorities: r789 may disclose personal data to its licensing authority, law enforcement agencies, financial intelligence units, or tax authorities where required to do so by applicable law or regulatory directive.
• Professional advisers: r789's legal counsel, auditors, and compliance consultants may access personal data in the course of providing professional services, subject to strict confidentiality obligations.

r789.bid uses cookies and similar tracking technologies to enhance platform functionality and improve your gaming experience. Cookies are small data files stored on your browser or device when you visit r789.bid.

r789 uses the following categories of cookies:

• Strictly necessary cookies: Required for the r789 platform to function — including session authentication cookies that keep you logged in to your r789 account, and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences on r789 — such as your preferred language, display settings, and remembered login credentials (where "Remember me" is selected). These improve your r789 experience.
• Analytics cookies: Collect anonymised data about how players navigate r789.bid, which games are most visited, and where users encounter friction. This data is used to improve the platform. r789 uses only privacy-respecting analytics providers with data processing agreements in place.
• Marketing cookies: Used to track the effectiveness of r789's promotional campaigns where consent has been provided. These cookies do not share identifiable player data with external advertising networks.

You can control cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will affect the functionality of the r789 platform, including your ability to remain logged in to your r789 account.

r789 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and our international gaming license obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your r789 account and for a minimum of 5 years following account closure, as required by anti-money laundering compliance obligations applicable under r789's gaming license.
• KYC documents: CNIC copies and address verification documents are retained for a minimum of 5 years from the date of submission, in compliance with licensing and financial crime prevention requirements.
• Transaction records: Deposit and withdrawal records, including payment method data, are retained for a minimum of 5 years to satisfy applicable financial record-keeping obligations.
• Gaming history: Individual game session and betting records are retained for 2 years from the date of the activity, then anonymised for aggregate analytics purposes.
• Support communications: Live chat transcripts and support email exchanges are retained for 12 months from the date of the interaction, except where relevant to an ongoing dispute or regulatory inquiry.
• Responsible gaming records: Self-exclusion records and cooling-off period data are retained for the full duration of the exclusion plus 5 years, to prevent re-registration during active exclusion periods.

At the end of applicable retention periods, r789 securely deletes or anonymises personal data in a manner that prevents recovery and identification.

r789 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and r789.bid is protected by 256-bit SSL/TLS encryption. r789.bid is enforced over HTTPS only — unencrypted HTTP connections are automatically redirected.
• Encryption at rest: Sensitive personal data stored on r789 servers — including KYC documents, financial data, and authentication credentials — is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data within r789 is restricted on a strict need-to-know basis. Staff access is controlled through role-based permission systems, multi-factor authentication, and audit logging.
• Password security: r789 stores account passwords in salted, hashed form using modern cryptographic hashing algorithms. Plaintext passwords are never stored or transmitted by r789.
• Security auditing: r789's technical infrastructure is subject to regular internal security reviews and periodic third-party penetration testing to identify and remediate potential vulnerabilities.
• Incident response: r789 maintains a documented data breach response procedure. In the event of a confirmed breach affecting personal data, r789 will notify affected players and relevant regulatory authorities in accordance with applicable notification timelines.

r789 operates under an international gaming license, and certain data processing activities — including KYC verification, fraud detection, and game outcome certification — may involve the transfer of personal data to servers or service providers located in countries outside Pakistan.

Where such international data transfers occur, r789 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Contractual data processing agreements incorporating international data transfer provisions with all third-party data processors.
• Transfers only to countries or entities that provide an adequate level of data protection as assessed by r789's compliance team.
• Standard contractual clauses adopted from internationally recognised data protection frameworks, incorporated into contracts with overseas data processors.

By using the r789 platform, you acknowledge that your personal data may be transferred internationally in the manner described in this section, subject to the safeguards outlined above.

Subject to applicable law and the limitations described below, r789 respects the following rights of players and users in relation to their personal data:

To exercise any of the above rights, contact r789 via the support email displayed in the footer of this page or through the live chat available within your r789 account. r789 will respond to verified data rights requests within 30 days. Note that certain rights may be limited where legal obligations require r789 to retain or continue processing data — for example, KYC records required under our gaming license cannot be deleted on request during mandatory retention periods.

The r789 platform is strictly not intended for individuals under the age of 21. r789 does not knowingly collect personal data from anyone under 21 years of age. The r789 registration process and CNIC-based KYC procedure are designed to identify and reject applications from underage individuals.

If r789 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a circumvented registration process or erroneous submission — that account will be immediately suspended, all personal data associated with the account will be securely deleted (except to the extent required by anti-money laundering obligations), and any balance held in the account will be reviewed in accordance with applicable regulatory requirements.

The r789 platform and associated communications may contain references to third-party services — for example, payment processor websites or game provider studios. When you navigate away from r789.bid to a third-party website or service, this Privacy Policy no longer applies. Those third parties have their own privacy policies, which r789 does not control and for which r789 bears no responsibility.

r789 recommends that you review the privacy policy of any third-party service before submitting personal data to it. r789's responsibility for data protection extends only to data processed within the r789 platform itself.

r789 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, r789 will notify registered players via the email address or mobile number on file, or through a prominent notice on the r789 platform, at least 7 days before the updated Policy takes effect — except where changes must be implemented immediately due to legal or regulatory directives.

The "Effective Date" shown at the top of this Privacy Policy indicates the version currently in force. r789 recommends that players review this Policy periodically to stay informed of how their personal data is being handled. Continued use of the r789 platform following notification of an update constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or formal complaints relating to the processing of your personal data by r789, or to exercise any of your data rights, please contact us through the following channels:

• Live Chat: Available 24/7 to logged-in r789 players via the in-platform live chat function. Average first response under 5 minutes, available on all days including Pakistani public holidays.
• Support Email: [email protected] — for formal data rights requests and privacy-related complaints. r789 aims to acknowledge receipt within 24 hours and provide a substantive response within 30 calendar days.

Where you are not satisfied with r789's response to a privacy complaint, you may escalate the matter through the dispute resolution mechanism available under r789's international gaming license. Details of this mechanism will be provided in r789's initial response to your complaint.