r789 Privacy Policy

r789 acts as the data controller in respect of all personal data collected from players through the r789 platform. As data controller, r789 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

r789 operates under an international gaming licence and is subject to the data protection obligations imposed by the relevant licensing authority. Where r789 engages third-party processors — such as payment service providers, game studios, or identity verification services — those parties act solely as data processors operating under r789's instruction and under contractual data processing agreements that impose equivalent data protection standards.

r789 collects the following categories of personal data from players. The specific data points collected may vary depending on the services you use and the stage of your registration.

r789 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or activating responsible gaming tools;
• Automated collection: Technical and usage data gathered automatically when you access the r789 platform through cookies, log files, and session tracking technology;
• Third-party sources: Identity verification agencies, fraud prevention databases, and payment processors may provide or confirm certain data points as part of our regulatory compliance processes;
• Public sources: In limited circumstances, r789 may verify certain data against publicly accessible records for compliance purposes.

r789 does not purchase personal data lists or obtain player data from social media platforms or marketing data brokers.

r789 processes personal data only for the purposes set out below. Each processing purpose is underpinned by a lawful legal basis:

r789 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the minimum data necessary to process your deposit or withdrawal transaction;
• Identity verification services: Third-party KYC and age verification providers receive identity documents and biographic data to fulfil our licensing compliance obligations;
• Game software providers: Licensed game studios whose products appear on r789 receive anonymised session and bet data for game integrity monitoring — no personally identifiable information is shared with game studios;
• Fraud prevention agencies: Where we detect or suspect fraudulent activity, we may share relevant data with fraud prevention databases and licensing authority investigators;
• Regulatory and licensing authorities: Our gaming licensor may require access to player data as part of regulatory audits or compliance inspections — r789 is contractually obligated to cooperate with such requests;
• Legal and law enforcement: r789 will disclose personal data to law enforcement authorities, courts, or government agencies where required by applicable law or a valid legal order.

r789 operates internationally and some of our service providers — including cloud infrastructure providers and game studios — may process data on servers located outside Pakistan. Where personal data is transferred outside the country, r789 ensures that appropriate safeguards are in place, including:

• Contractual clauses imposing data protection obligations on the receiving party equivalent to those applicable under our licensing framework;
• Processing only with service providers who maintain internationally recognised data security certifications (such as ISO 27001);
• Where applicable, transfers to jurisdictions that offer an adequate level of data protection as recognised by our licensing authority.

For Pakistani players specifically, r789 stores account and financial data on servers within our primary hosting infrastructure, which is subject to the full security controls described in Section 9 of this Policy.

r789 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, r789 will securely delete or anonymise your personal data so that it can no longer be used to identify you.

The r789 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and collect analytics data that helps us improve platform performance for our Pakistani player base. The cookies used by r789 fall into the following categories:

• Strictly necessary cookies: Required for the platform to function — including session authentication, security tokens, and form state management. These cannot be disabled without breaking core platform functionality;
• Functional cookies: Remember your preferences such as language, currency display (PKR), and responsible gaming settings across sessions;
• Analytics cookies: Collect anonymised data about how players navigate the r789 platform, which pages are visited most, and where users encounter friction — used to improve the platform experience;
• Marketing cookies: Track whether a player arrived via a particular campaign or referral source. Used only with your consent and can be disabled via the cookie preferences panel.

r789 implements a multi-layered security architecture to protect player personal data from unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and r789 servers is encrypted using industry-standard TLS protocols, ensuring your JazzCash details, CNIC data, and login credentials cannot be intercepted in transit;
• Encryption at rest: Sensitive personal data — including payment account numbers and identity documents — is stored in encrypted form in our databases;
• Access controls: Employee access to player personal data is restricted on a strict need-to-know basis, enforced through role-based access controls and audit logging;
• Two-factor authentication: r789 offers 2FA for player accounts and mandates it for all internal staff accounts that can access player data;
• Intrusion detection: Automated monitoring systems scan for unusual access patterns, potential breaches, and anomalous transaction activity around the clock;
• Security audits: r789's data security posture is subject to periodic internal and third-party security audits in line with our licensing authority's requirements.

As a player on the r789 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact r789 support with a clear description of your request. r789 will respond within 30 calendar days of receiving a valid request.

r789 employs active age verification at registration and uses third-party age verification services as part of the KYC process. Parents and guardians in Pakistan who believe their minor child has accessed the r789 platform should contact r789 support immediately. r789 will investigate and act on all such reports within 24 hours.

r789 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform services. Where a material change is made to this Policy, r789 will notify registered players by email or through an in-platform notification at least 7 days before the change takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage all r789 players to review this Policy periodically. Continued use of the r789 platform following a policy update constitutes acceptance of the revised terms.

For all privacy-related queries, data subject requests, or concerns about how r789 handles your personal information, please contact our Data Protection Officer (DPO) directly. r789's DPO is responsible for overseeing compliance with this Privacy Policy and applicable data protection obligations.

If you are not satisfied with r789's handling of a privacy concern, you have the right to escalate your complaint to the relevant supervisory authority under our gaming licensing framework. Details of the applicable supervisory authority are available on request from the r789 compliance team.