Privacy Policy

rn999 is an online casino and sports betting platform operating at rn999.org, serving English-speaking Pakistani players with PKR-denominated gaming services, live casino tables, cricket and sports betting markets, and slot games. References to "rn999", "we", "us", and "our" throughout this Privacy Policy refer to the rn999 platform and the entity responsible for processing your personal data as described herein.

rn999 operates under internationally recognised gaming regulatory standards and is committed to processing personal data lawfully, fairly, and transparently. This Privacy Policy governs all personal data processed in connection with your use of rn999.org, including account registration, deposits, withdrawals, gameplay, customer support interactions, and any marketing communications you have opted into.

rn999 collects the following categories of personal data, depending on the nature of your interaction with the platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your Pakistani CNIC
• Date of birth
• CNIC number and copies of CNIC document (front and back)
• Registered email address
• Registered Pakistani mobile number
• City of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad, Peshawar)

2.2 Financial & Transaction Data

• JazzCash and EasyPaisa wallet identifiers associated with your account
• Bank account details (HBL, UBL, Meezan Bank, or other registered bank) where provided for withdrawal purposes
• Deposit history, withdrawal history, and net transaction records in PKR
• Bonus credit and wagering activity records
• Source of funds documentation where requested for AML compliance

2.3 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session timestamps, pages visited, and in-game activity logs
• Cookies and similar tracking data (see Section 7)

2.4 Communications Data

• Records of live chat, email, and support ticket communications
• Survey responses and feedback submitted voluntarily
• Complaint records and dispute correspondence

rn999 collects personal data through the following channels and mechanisms:

• Account Registration: When you create an rn999 account, you directly provide identity and contact data via the registration form.
• KYC Verification: When you submit CNIC documents and proof of payment method as part of the identity verification process.
• Deposits & Withdrawals: When you initiate a financial transaction, our payment partners share relevant transaction data with rn999 to credit or debit your account balance.
• Gameplay: rn999 automatically logs game session data, wager amounts, outcomes, and session durations as part of normal platform operation and for regulatory record-keeping purposes.
• Customer Support: When you contact rn999 via live chat or email, the content of your communication and your account details are recorded for quality assurance and dispute resolution purposes.
• Cookies & Analytics: rn999 uses first-party cookies and analytics tools to understand how players navigate the platform, identify technical issues, and improve the user experience. See Section 7 for full details.
• Third-Party Verification Services: Where we use external identity verification or fraud-screening partners to supplement our internal KYC process, those partners may share data with rn999 about the outcome of their verification checks.

rn999 processes personal data for the following defined purposes. Each purpose is linked to a legal basis set out in Section 5:

rn999 does not use personal data to make fully automated decisions that produce significant legal effects for players without human review. Where automated systems flag an account for review — for example, under our responsible gaming monitoring — a trained member of the rn999 team reviews the flagged case before any account action is taken.

rn999 processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contract Performance: Processing is necessary to enter into and perform the rn999 Player Agreement with you — including account creation, deposit and withdrawal processing, and the delivery of gaming services.
• Legal Obligation: Processing is required by applicable law, including anti-money laundering regulations, Know Your Customer requirements, and obligations to report suspicious transactions to relevant regulatory bodies.
• Legitimate Interest: Processing is necessary for rn999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your individual rights and interests.
• Consent: Where processing is based on consent — primarily for marketing communications and non-essential cookies — rn999 obtains clear, informed, and freely given consent before processing begins. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rn999 shares personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

6.1 Payment Processors

To process deposits and withdrawals in PKR, rn999 shares relevant transaction and identity data with our regulated payment partners — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK. Each payment partner operates under their own data protection obligations and regulatory framework. rn999 shares only the minimum data required to execute the transaction.

6.2 Identity Verification Partners

rn999 may engage third-party KYC and identity verification service providers to assist with CNIC verification and fraud screening. These partners process data solely on rn999's behalf under contractual data processing agreements and may not use your data for their own purposes.

6.3 Regulatory Authorities

rn999 is required by law to share certain data with regulatory and law enforcement authorities where legally compelled to do so — including in connection with anti-money laundering investigations, tax reporting obligations, or court orders. rn999 will always take reasonable steps to notify affected players of such disclosures where legally permitted to do so.

6.4 Game Content Providers

Third-party game providers whose content is integrated into the rn999 platform may receive technical session identifiers to facilitate gameplay. These providers do not receive your full identity data — only the minimum technical data required to deliver the game session.

6.5 Professional Advisers

rn999 may share data with legal advisers, auditors, and compliance consultants where necessary and subject to professional confidentiality obligations.

rn999 uses cookies and similar technologies on rn999.org to ensure the platform functions correctly, to remember your preferences, and to understand how players use our services. The following categories of cookies are used:

You can manage your cookie preferences at any time by updating your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. rn999 does not use cross-site tracking cookies or share cookie data with advertising networks.

rn999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory obligations. The following retention periods apply as a general guide:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual player. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

As a player on rn999, you hold the following rights in respect of your personal data. rn999 is committed to honouring these rights promptly and without unnecessary burden on the requesting player:

• Right of Access: You may request a copy of the personal data rn999 holds about you at any time. rn999 will provide this information within 30 days of a verified request, free of charge for reasonable requests.
• Right to Rectification: If any personal data rn999 holds about you is inaccurate or incomplete, you have the right to request correction. You can update your email address and contact number directly via your account dashboard. For CNIC corrections, please contact support with supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the legal basis), or where you object to processing based on legitimate interest and rn999 cannot demonstrate overriding grounds. Note that rn999 is required by law to retain certain data (particularly KYC and financial records) for a minimum of five years regardless of an erasure request.
• Right to Restriction: You may request that rn999 restrict processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your personal data based on rn999's legitimate interests, including profiling for responsible gaming purposes. rn999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — including marketing communications — you may withdraw that consent at any time by updating your preferences in your account settings or by contacting rn999 support. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact rn999 support via live chat or email at [email protected]. For account security reasons, rn999 will verify your identity before processing any data rights request. We aim to respond to all verified requests within 30 calendar days.

rn999 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Encryption in Transit: All data exchanged between your device and rn999.org is protected using TLS 1.2 or TLS 1.3 encryption. rn999.org enforces HTTPS across all pages with no unencrypted fallback.
• Encryption at Rest: Sensitive data including CNIC document files, payment identifiers, and account credentials are stored using industry-standard encryption at rest on access-controlled infrastructure.
• Access Controls: Access to personal data within rn999's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality agreements and undergo data protection training.
• Two-Factor Authentication: rn999 offers SMS-based two-factor authentication for all player accounts and strongly recommends its use. rn999 internal systems also enforce multi-factor authentication for staff access to data systems.
• Penetration Testing & Audits: rn999 commissions regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate weaknesses in the platform's security posture.
• Incident Response: rn999 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to player data, rn999 will notify affected players and relevant authorities within the timeframes required by applicable law.

rn999 strictly prohibits use of its platform by individuals under 21 years of age. rn999 does not knowingly collect personal data from anyone under the age of 21. Age verification via CNIC document review is a mandatory step in the rn999 account registration process, and accounts found to belong to individuals under 21 are immediately closed and all associated data handled in accordance with regulatory requirements.

If you are a parent or guardian and you believe that a minor has registered on rn999 or submitted personal data to rn999, please contact our support team immediately at [email protected]. rn999 will investigate the report promptly and take appropriate action, including immediate account closure and deletion of the minor's data to the extent permitted by applicable law.

rn999.org may contain links to third-party websites or services — for example, links to payment provider information pages or game provider content. These third-party sites operate under their own privacy policies and rn999 accepts no responsibility for the privacy practices, content, or data handling of any website that is not directly operated by rn999.

We encourage you to review the privacy policy of any third-party site you visit before providing personal data to that site. The presence of a link to a third-party site on rn999.org does not constitute rn999's endorsement of that site's privacy practices.

rn999 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform services. The "Last Reviewed" date shown at the top of this page will be updated whenever a revision is made.

Where a revision is material — meaning it significantly changes how we collect, use, or share your personal data — rn999 will notify registered players via:

• A prominent notification displayed on the rn999 platform upon your next login
• An email to the address registered on your account

Your continued use of rn999.org following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the revised policy, you may request account closure by contacting rn999 support. We will process any pending PKR withdrawal requests following closure, subject to completion of applicable KYC requirements.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please get in touch with the rn999 support team through any of the following channels:

• Live Chat: Available 24/7 directly from rn999.org — click the support icon at the bottom-right corner of any page for immediate assistance in English or Urdu
• Email: [email protected] — please include "Privacy Request" in your subject line and send from your registered account email address so we can verify your identity efficiently

rn999 support operates 24 hours a day, seven days a week. We aim to acknowledge all privacy-related email enquiries within four business hours and to provide a substantive response to data rights requests within 30 calendar days of identity verification.