rv999 Privacy Policy — Your Data, Your Rights

rv999 ("we", "us", "our", "the Platform") operates the website at https://rv999.cam as an English-language online casino and sports betting information platform primarily serving users in Pakistan. The data controller responsible for your personal information is rv999 as identified by its operating licence jurisdiction.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. By registering an Account, using the Platform or submitting any information to rv999, you consent to the data practices described in this Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. Where any conflict exists between this Policy and those documents in respect of personal data, this Policy shall prevail.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject").
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, rv999.
• "Data Processor" means any third party that processes Personal Data on behalf of rv999 under a written agreement.
• "KYC Data" means identity and verification documents collected as part of Know Your Customer obligations.
• "Cookies" means small data files placed on your device by the Platform to enhance functionality and enable analytics.
• "User", "you", "your" refers to any individual who accesses, registers on or uses the Platform.
• "Account" means the registered profile you maintain on the rv999 Platform.

rv999 collects Personal Data through several channels. The categories of data collected and their sources are described below:

3.1 Data You Provide Directly

• Full legal name
• Date of birth
• Email address
• Residential address (including city — e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Mobile number
• Account username and password (password stored in hashed form only)
• KYC documents: CNIC, passport, proof of address, payment method verification
• Communications sent to our support team

3.2 Data Collected Automatically

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Session duration, page views, navigation paths and click data
• Betting and gaming activity records (wagers placed, game history, transaction history)
• Login timestamps and account activity logs
• Cookie identifiers and similar tracking technologies

3.3 Data From Third Parties

• Identity verification results from KYC/AML service providers
• Payment transaction confirmation data from payment processors
• Fraud-detection signals from fraud-prevention services
• Age verification data from authorised verification agencies

We use the Personal Data we collect for the following purposes:

rv999 processes Personal Data on the following legal grounds:

• Contract Performance: Processing necessary to register your Account, process transactions and provide the services you have requested.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements and age verification obligations imposed by the licensing jurisdiction.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring and service improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we send you marketing communications, personalised offers or use non-essential cookies, we will do so only where you have provided explicit, informed consent. You may withdraw consent at any time by contacting support or updating your Account preferences.

rv999 does not sell, rent or trade your Personal Data to third parties for commercial purposes. We may share your data with the following categories of recipient under appropriate data-sharing agreements or legal obligations:

• KYC and Identity Verification Providers: Third-party services that verify your identity documents and age as required by AML regulations.
• Payment Processors: Entities that facilitate deposits and withdrawals on the Platform. These processors operate under their own privacy policies and applicable financial regulations.
• Fraud Prevention & Security Services: Companies that assist us in detecting and preventing unauthorised or fraudulent account activity.
• IT Infrastructure & Hosting Providers: Cloud and server infrastructure providers that store Platform data in secure, contractually protected environments.
• Customer Support Tools: Software platforms used to manage and respond to support communications (e.g., help desk systems).
• Analytics Providers: Services that process aggregated, anonymised usage data to help us understand how the Platform is used and improve it over time.
• Legal and Regulatory Authorities: Where required by law, court order or a competent regulatory authority, rv999 may disclose Personal Data without prior notice to you.

All third parties with whom we share data are required to process that data only for the specified purpose and in accordance with applicable data protection standards. We do not authorise third parties to use your Personal Data for their own marketing purposes.

rv999 uses cookies and similar tracking technologies (including pixels, local storage and session identifiers) to operate the Platform and improve your experience. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for Platform functionality, login session management and security. These cannot be disabled without affecting core features.
• Functional Cookies: Remember your preferences, language settings and previously selected options to personalise your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform, which pages are visited most frequently and where errors occur. This data helps us improve the Platform.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are only activated with your consent.

You can control cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality. For all other cookie categories, you may opt out without losing access to core Platform features.

rv999 retains Personal Data for as long as is necessary to fulfil the purposes set out in this Policy and to comply with applicable legal obligations. Specific retention periods are as follows:

• Account Data: Retained for the duration of your Account plus a minimum of five (5) years after closure, in accordance with standard AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by the applicable licensing jurisdiction.
• Transaction Records: Retained for a minimum of five (5) years for financial audit and AML compliance purposes.
• Support Communications: Retained for three (3) years following resolution of the relevant query, or longer where the communication relates to a formal dispute.
• Marketing Consent Records: Retained for the duration of the consent and for twelve (12) months following withdrawal.
• Analytics Data: Aggregated and anonymised; retained indefinitely in non-identifiable form.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

rv999 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS/HTTPS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data fields at rest within our database infrastructure
• Access controls limiting staff access to Personal Data on a need-to-know basis
• Two-factor authentication for administrative access to internal systems
• Regular security assessments and vulnerability reviews
• Incident response procedures in the event of a data breach

rv999 operates infrastructure and may engage service providers located in jurisdictions outside of Pakistan. Where your Personal Data is transferred to countries that may not offer an equivalent level of data protection as your home jurisdiction, we take the following steps to safeguard your information:

• Entering into data processing agreements with all third-party processors that include appropriate data protection clauses
• Using service providers that operate in jurisdictions with recognised data protection frameworks
• Applying contractual safeguards that bind processors to obligations equivalent to those described in this Policy

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside of Pakistan for the purposes described in this Policy.

Subject to applicable law and the requirements of our licensing jurisdiction, you have the following rights in relation to your Personal Data held by rv999. To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in any event within 30 calendar days of receiving a valid request.

The rv999 Platform is strictly for adults aged 18 or above — or the higher minimum age required by the operator's licence jurisdiction, whichever is greater. rv999 does not knowingly collect Personal Data from individuals under the age of 18. If we become aware that a minor has registered an Account or provided Personal Data, we will immediately suspend the Account, delete the associated data and refund any verified real-money balance.

If you believe a minor has accessed the Platform or submitted data, please notify us immediately at [email protected]. Age verification documents are collected as part of KYC to enforce this restriction.

The Platform may contain references to third-party services, payment providers and information resources. rv999 is not responsible for the privacy practices of any third-party website or service, even where such services are mentioned in our guides or accessible via payment methods referenced on the Platform.

References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and other payment services are provided for contextual user guidance only. These organisations operate under their own independent privacy policies. Accessing their services through or alongside the rv999 Platform does not extend the scope of this Privacy Policy to cover their data practices.

rv999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or regulatory requirements. Material changes will be communicated to registered Users via email notification or a prominent banner on the Platform, with at least seven (7) days' notice before the amended Policy takes effect.

The version of this Policy bearing the most recent "Last Updated" date displayed at the top of this page constitutes the current binding version. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, please close your Account and discontinue use of the Platform.

If you have any questions, concerns or requests relating to this Privacy Policy or the way rv999 processes your Personal Data, please contact our team using the details below. All privacy-related enquiries are handled in English; Urdu-language assistance may be requested via Live Chat.