rk999 Privacy Policy

1. Definitions & Scope

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data — including name, date of birth, CNIC number, email address, phone number, IP address, and payment account details.
• "Processing" means any operation performed on personal data — including collection, storage, use, disclosure, transfer, and deletion.
• "Data Subject" means the individual to whom the personal data relates — in the context of rk999, this is the registered player.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, rk999.
• "Data Processor" means a third party that processes personal data on behalf of the data controller — for example, a payment processor or identity verification provider engaged by rk999.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by a data subject to the processing of their personal data.

This Privacy Policy applies to all personal data collected and processed by rk999 in connection with the operation of the rk999.today platform, including data collected during registration, account usage, deposits, withdrawals, KYC verification, and customer support interactions.

2. Data Controller

rk999 acts as the data controller for all personal data collected through the rk999.today platform. As data controller, rk999 is responsible for determining the lawful basis and purposes for processing your personal data, and for ensuring that processing activities comply with applicable data protection law.

rk999 has appointed an internal data protection contact responsible for overseeing compliance with this Privacy Policy and applicable data protection obligations. If you have questions relating to data protection or wish to exercise your data subject rights, please contact us using the details provided in Section 16 of this policy.

3. Data We Collect

rk999 collects personal data through several channels including account registration, KYC verification, gameplay activity, payment transactions, and customer support interactions. The categories of data collected are set out below:

3.1 Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification — rk999 requires players to be 21 or older)
• Email address and mobile phone number
• Residential address and city (Karachi, Lahore, Islamabad, Faisalabad, etc.)
• Username and password (password stored in hashed form only — never in plain text)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (CNIC or passport)
• Proof of address documentation dated within three months of submission
• Payment method ownership confirmation (e.g., JazzCash account screenshot, bank statement header)
• Selfie or live identity check where required by the verification process

3.3 Financial Data

• JazzCash or EasyPaisa mobile account numbers associated with transactions
• Bank account details (HBL, UBL, Meezan) used for deposit or withdrawal instructions
• USDT wallet addresses where applicable
• Transaction history including deposit amounts, withdrawal amounts, and dates

3.4 Platform Activity Data

• Betting history, game session logs, and win/loss records across all rk999 products
• Login times, session durations, and geographic access indicators (derived from IP)
• Device type, operating system, and browser information collected automatically on access
• Responsible gaming tool usage, including deposit limit settings and self-exclusion requests

3.5 Customer Support Data

• Contents of live chat conversations and email correspondence with rk999 support staff
• Complaint records and dispute resolution correspondence
• Feedback and survey responses submitted voluntarily through the platform

4. How We Use Your Data

rk999 uses the personal data it collects for the following specific purposes:

rk999 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where automated checks are used as part of the KYC and fraud screening process. Where automated screening flags an account, a human review is conducted before any account action is taken.

5. Legal Basis for Processing

rk999 processes personal data only where a valid legal basis exists. The primary legal bases relied upon by rk999 are as follows:

• Contractual Necessity: Processing required to fulfil the rk999 Terms and Conditions agreement with you — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws — including anti-money laundering regulations, age verification requirements under our gaming licence, and tax reporting obligations.
• Legitimate Interests: Processing carried out for rk999's legitimate business interests where these do not override your fundamental rights — including fraud prevention, platform security monitoring, and responsible gaming analysis.
• Consent: Processing of data for optional purposes — including sending promotional emails and push notifications about rk999 bonuses and game launches. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Where rk999 relies on legitimate interests as a legal basis, a balancing test has been conducted to confirm that the processing does not disproportionately affect your privacy rights. Details of any specific legitimate interests balancing assessment can be provided on request.

6. Data Sharing & Third Parties

rk999 does not sell personal data. Data is shared with third parties only in the following defined circumstances:

6.1 Payment Service Providers

Transaction data is shared with payment processors — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — solely for the purpose of executing deposits and withdrawals. These providers process data under their own privacy policies and regulatory obligations. rk999 shares only the minimum data required to complete the transaction.

6.2 Identity Verification Partners

KYC documentation may be shared with third-party identity verification service providers engaged by rk999 to conduct document authenticity checks and database verification. These providers operate under data processing agreements with rk999 and may not use your data for any other purpose.

6.3 Regulatory and Law Enforcement Authorities

rk999 is required by law to report certain categories of financial activity to relevant authorities, including suspicious transaction reports where required under anti-money laundering obligations. rk999 will also disclose personal data in response to valid legal orders, court orders, or binding regulatory directives. In such cases, rk999 will, where legally permitted, notify the affected player that a disclosure has been made.

6.4 Group Companies and Technology Partners

rk999 may share data with affiliated entities within its corporate group for operational and compliance purposes. rk999 may also share anonymised, aggregated platform analytics data with technology partners for the purpose of platform development and performance optimisation. Such data cannot be used to identify individual players.

7. Cookies & Tracking Technologies

rk999 uses cookies and similar tracking technologies on the rk999.today platform. Cookies are small text files stored on your device that help rk999 recognise returning users, maintain session authentication, and analyse platform usage patterns.

7.1 Categories of Cookies Used by rk999

• Strictly Necessary Cookies: Required for the core functionality of the rk999 platform — including maintaining your login session, preserving game state, and enabling secure payment flows. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences on rk999, such as language settings, notification preferences, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect anonymised data about how players navigate and interact with the rk999 platform, helping rk999 identify areas for improvement. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent access attempts, including multi-account creation and bot activity targeting the rk999 login system.

7.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific websites. However, disabling strictly necessary cookies will prevent certain rk999 platform features from functioning correctly. Instructions for managing cookies in common browsers are available through each browser's help documentation.

rk999 does not use third-party advertising cookies or cross-site tracking technologies. No rk999 cookie data is shared with advertising networks or used to build behavioural profiles for external marketing purposes.

8. Data Retention

rk999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, comply with legal obligations, and support legitimate business operations. The following retention periods apply:

At the end of the applicable retention period, personal data is permanently deleted from rk999 systems or anonymised such that the data can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9. Your Rights as a Data Subject

As a player on rk999, you have the following rights in relation to your personal data. To exercise any of these rights, please contact rk999 using the details in Section 16. rk999 will respond to all valid data subject requests within 30 days of receipt.

Where rk999 is unable to fulfil a data subject request — for example, because fulfilment would conflict with a legal obligation — we will provide a clear written explanation of the reason within the 30-day response window. If you remain dissatisfied with rk999's response to a data subject request, you have the right to lodge a complaint with the relevant data protection supervisory authority.

10. Data Security Measures

rk999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. The measures currently in place include:

• 256-bit SSL/TLS encryption on all data transmitted between players and the rk999 platform
• Encrypted storage of sensitive data fields including identity documents and payment details at rest
• Password hashing using industry-standard bcrypt algorithms — rk999 never stores plain-text passwords
• Role-based access controls on internal systems — rk999 staff can access only the data necessary for their specific job function
• Regular security assessments and penetration testing of the rk999 platform infrastructure
• Automated intrusion detection systems monitoring for anomalous access patterns on the rk999 backend
• Two-factor authentication requirements for all rk999 staff accessing internal data management systems

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, rk999 will notify affected players and relevant regulatory authorities as required by applicable law, within the timeframes prescribed by those obligations.

While rk999 takes extensive precautions, no digital system is entirely immune to security threats. Players are advised to use strong, unique passwords for their rk999 account, to enable two-factor authentication where available, and to notify rk999 immediately if they suspect unauthorised activity on their account.

11. International Data Transfers

rk999 operates internationally and some personal data may be transferred to, processed in, or stored in jurisdictions outside Pakistan in the course of normal business operations — including for the purposes of cloud infrastructure hosting, KYC verification processing, and payment gateway operation.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Pakistan, rk999 implements appropriate safeguards to protect the data, including:

• Standard contractual clauses with data processors in third countries, requiring them to process data in accordance with binding data protection standards
• Transfer only to jurisdictions that have been assessed as providing adequate data protection
• Data minimisation in cross-border transfers — sharing only the fields strictly necessary for the processing purpose in question

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting rk999 using the details in Section 16.

12. Children & Minors

The rk999 platform is strictly prohibited for use by individuals under the age of 21. rk999 does not knowingly collect personal data from anyone under the age of 21, and any account found to have been created by an underage individual will be closed immediately with all personal data deleted.

rk999 implements age verification as part of the registration and KYC process to prevent underage access. If you are a parent or guardian and believe that your child may have created an rk999 account, please contact us immediately using the details in Section 16 so that we can take appropriate action.

Parents and guardians are also encouraged to take preventative measures on shared devices — including enabling parental controls and ensuring that rk999 login credentials are not saved in shared browser profiles or accessible to minors in the household.

13. Marketing Communications

With your consent, rk999 may contact you by email or in-platform notification about promotions, bonuses, new game releases, and platform updates on rk999. Marketing communications are sent only where you have opted in to receive them during registration or through your account notification settings.

You may withdraw your consent to receive marketing communications from rk999 at any time by:

• Clicking the "unsubscribe" link in any rk999 marketing email
• Adjusting your notification preferences in your rk999 account settings
• Contacting rk999 support directly and requesting removal from marketing lists

Withdrawal of marketing consent will not affect the delivery of transactional communications — including deposit confirmations, withdrawal notifications, KYC requests, and security alerts — which are sent regardless of marketing preference as they are necessary for account operation.

rk999 does not conduct cold-call telemarketing or unsolicited SMS marketing. Any communication claiming to be from rk999 via channels you have not registered with the platform should be treated as suspicious and reported to rk999 support.

14. Third-Party Links & External Sites

The rk999 platform may contain links to third-party websites or services — including game provider demo sites, payment method onboarding pages, and responsible gaming resources operated by external organisations. rk999 is not responsible for the privacy practices of these third-party sites.

When you follow a link from the rk999 platform to an external website, the privacy policy of that site will govern how your data is handled. rk999 recommends reviewing the privacy policy of any external site before providing personal information.

The inclusion of a link to a third-party site on the rk999 platform does not imply endorsement or affiliation. rk999 does not control the content, data practices, or security standards of external sites and accepts no liability for any loss arising from your interaction with linked third-party services.

15. Updates to This Privacy Policy

rk999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal obligations, or business operations. Where material changes are made to the way rk999 processes your personal data, rk999 will provide notice through one or more of the following channels:

• A prominent notice on the rk999 platform homepage alerting players to the update
• An email to the registered email address on your rk999 account
• A pop-up notification when you next log into the rk999 platform

The last updated date of this Privacy Policy is displayed at the top of this page. rk999 recommends that players review this policy periodically to remain informed about how their data is being handled. Continued use of the rk999 platform following notice of a policy update constitutes acceptance of the revised terms.

Where a policy change requires new consent for a specific processing activity — for example, a new marketing channel or data sharing arrangement — rk999 will request explicit consent before implementing the change.

16. Contact Information & Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to raise a privacy-related concern, please contact the rk999 data protection team using the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the rk999 platform (select "Privacy & Data Protection" in the chat topic dropdown)
• Website: rk999.today

rk999 aims to respond to all data protection enquiries within 5 business days of receipt, with full data subject access requests processed within 30 days as required by law. Where rk999 requires additional information to verify your identity or clarify your request, the response timeline begins once the necessary information has been received.

Filing a Complaint with a Supervisory Authority

If you are dissatisfied with rk999's handling of your personal data or its response to a data subject request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. rk999 will cooperate fully with any regulatory investigation arising from a data protection complaint.

Where possible, rk999 encourages players to raise privacy concerns directly with us first, so that we can attempt to resolve the issue before formal regulatory involvement becomes necessary.