At rc999, your privacy is taken seriously. This Privacy Policy explains in plain, clear terms exactly what personal information we collect when you use the rc999 Platform, why we collect it, how we use it, who we may share it with, and what rights you hold over your own data. We recommend you read this document alongside our Terms & Conditions.
rc999 never sells your personal data to third parties. All data handling complies with our international gaming licence obligations and applicable data protection standards.
Six core principles that govern how rc999 handles the personal data of every registered player in Pakistan and beyond.
All personal data held by rc999 is encrypted at rest using AES-256 encryption and protected in transit via TLS 1.3. Player databases are hosted on isolated, access-controlled infrastructure with continuous intrusion detection monitoring.
rc999 has never sold, rented, or traded personal player data to any third-party marketing company, data broker, or advertising network. We do not monetise your personal information. Our only data sharing is with licensed service partners necessary for platform operation.
This Privacy Policy documents every category of data rc999 collects, the specific lawful basis for each collection, and the precise purposes for which it is used. We do not collect data beyond what is necessary for platform operation, regulatory compliance, and player safety.
Registered rc999 players have the right to access, correct, and where lawfully applicable, request erasure of their personal data. Data rights requests are handled within 30 days. Contact support at any time to exercise these rights.
rc999 does not retain personal data beyond the periods necessary for its stated purpose. Account data is retained for 5 years post-closure to meet AML and gaming licence obligations. Marketing preference data is deleted upon opt-out within 30 days.
In the unlikely event of a data security breach affecting personal player data, rc999 will notify affected players via their registered email address within 72 hours of confirmed breach discovery, in accordance with our licence obligations and applicable data protection standards.
This Privacy Policy is published by rc999, the operator of the online casino and sports betting platform accessible at rc999.asia ("the Platform"). For the purposes of data protection law, rc999 is the data controller in respect of personal data collected from players and visitors through the Platform.
This Privacy Policy applies to all personal data collected from: (a) individuals who register for an Account on the rc999 Platform; (b) individuals who visit the rc999 website without registering; (c) individuals who contact rc999's customer support team via any channel; and (d) individuals who participate in rc999 promotional activities or communications.
This Policy covers all aspects of the rc999 Platform accessed via web browser on desktop and mobile devices. It applies to players based in Pakistan — including Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and all other cities — as well as players in any other jurisdiction who access the rc999 Platform.
This Privacy Policy should be read alongside the rc999 Terms & Conditions, which form part of the overall legal agreement governing your use of the Platform. By using the rc999 Platform, you acknowledge that you have read and understood this Privacy Policy.
rc999 collects personal data across several categories, each of which is necessary for a specific purpose related to the lawful operation of the Platform, regulatory compliance, or the provision of services to players. The categories of personal data we collect are described in the table below.
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, selfie photograph, CNIC scan (front & back) | At KYC verification |
| Contact Data | Pakistani mobile number, email address | At registration |
| Financial Data | EasyPaisa/JazzCash registered mobile, bank account name, IBAN (where applicable), USDT wallet address (where applicable), transaction history | At deposit & withdrawal |
| Account Data | Username, encrypted password hash, PKR wallet balance, bonus balance, VIP tier, account preferences | At registration & ongoing |
| Gaming Activity Data | Game session logs, bet amounts, game outcomes, session durations, wagering history | During Platform use |
| Technical Data | IP address, device type, browser type & version, operating system, screen resolution, session cookies | Automatically on access |
| Communication Data | Live chat transcripts, email correspondence, support ticket history | When contacting support |
| Marketing Preferences | Email/SMS opt-in/opt-out status, promotional participation history | At registration & on update |
Data Minimisation: rc999 applies a strict data minimisation principle. We do not collect personal data beyond what is demonstrably necessary for the stated purpose of each data category. We do not collect Pakistani player banking PINs, OTP codes, or full debit/credit card numbers at any point.
rc999 collects personal data through the following channels and mechanisms:
rc999 processes personal data only where we have a lawful basis to do so. The lawful bases upon which we rely are as follows:
rc999 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed below without first notifying you and, where consent is the lawful basis, obtaining your agreement.
rc999 does not sell, rent, trade, or otherwise disclose personal player data to third parties for commercial or marketing purposes. Personal data is shared only with the specific categories of third-party service providers listed below, each of whom processes data exclusively on rc999's behalf and under contractual obligations consistent with this Privacy Policy.
rc999 may be legally required to disclose personal player data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where such disclosure is required by the laws applicable under our international gaming licence, by a valid court order, or by our AML reporting obligations. In such cases, rc999 will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected player unless prohibited from doing so by law.
Business Transfer: In the event of a merger, acquisition, or sale of rc999 or its assets, personal player data may form part of the transferred assets. Affected players will be notified via their registered email address prior to data transfer, and the acquirer will be required to honour this Privacy Policy or provide players with the option to close their Account and request data deletion.
As an internationally licensed gaming platform serving players in Pakistan, rc999 may transfer personal data to servers, service providers, or technology partners located in countries outside Pakistan. Where such international transfers occur, rc999 ensures that appropriate safeguards are in place to maintain a level of data protection consistent with this Privacy Policy and with the data protection obligations of our gaming licence jurisdiction.
Specifically, international data transfers by rc999 are governed by one or more of the following safeguards: contractual data processing agreements incorporating standard data protection clauses; data hosting within jurisdictions that maintain recognised data protection frameworks; or technical safeguards (including end-to-end encryption) ensuring data security during international transit.
Payment transaction data routed through Pakistani payment providers (EasyPaisa, JazzCash, HBL, UBL, SadaPay, Meezan Bank) is processed within Pakistan's domestic financial system and subject to the data handling requirements of those providers as regulated by the State Bank of Pakistan and applicable Pakistani financial regulations.
rc999 uses cookies — small text files stored on your device — and similar tracking technologies to enable and improve the functioning of the Platform. The categories of cookies used by rc999 are described below.
These cookies are essential for the Platform to function. They include session authentication cookies that keep you logged in during your gaming session, security cookies that protect against CSRF attacks, and cookies that maintain your Account preferences during a session. These cookies cannot be disabled without rendering the Platform non-functional. No consent is required for strictly necessary cookies.
These cookies remember your preferences across sessions — including your preferred language (Urdu/English), display settings, and recently played games. They improve your experience by not requiring you to re-enter preferences on each visit. These cookies are set on the basis of your consent.
rc999 uses aggregated, anonymised analytics data to understand how players navigate the Platform, which games and features are most used, and where technical performance can be improved. Analytics processing is performed on fully anonymised data sets that cannot be traced back to individual players. These cookies are set on the basis of our legitimate interest in improving the Platform.
You may manage cookie preferences at any time through the cookie preferences panel accessible in the rc999 Platform settings. Disabling non-essential cookies will not affect your ability to play games or make transactions, but may affect certain personalisation features. Note that some cookies set by third-party game studio platforms are beyond rc999's direct control and are governed by those studios' own cookie policies.
rc999 retains personal data only for as long as is necessary for the purposes for which it was collected, or for the duration required by applicable regulatory and legal obligations under our international gaming licence. The following retention periods apply to the principal categories of personal data held by rc999:
| Data Category | Retention Period | Basis |
|---|---|---|
| KYC Identity Documents (CNIC, selfie) | 5 years post-account closure | Gaming licence AML obligation |
| Financial Transaction Records | 5 years post-account closure | Gaming licence AML obligation |
| Gaming Activity Logs (bets, sessions) | 5 years post-account closure | Gaming licence requirement |
| Account Data (contact, preferences) | Duration of account + 5 years post-closure | Contractual & regulatory |
| Customer Support Transcripts | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Marketing Preference Records | Until withdrawal of consent + 30 days | Consent |
| Technical Logs (IP, session data) | 12 months from generation | Legitimate interest (security) |
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised such that it cannot be associated with any individual player. Data that has been anonymised for aggregate analytics purposes is not subject to deletion requirements as it no longer constitutes personal data.
As a player on the rc999 Platform, you hold the following rights with respect to your personal data. These rights are exercisable by contacting the rc999 support team as described in Section 15 of this Policy.
Request a copy of all personal data rc999 holds about you. Fulfilled within 30 days of verified request.
Request correction of inaccurate personal data. Some corrections require re-submission of KYC documents.
Request deletion of your data where no overriding legal or regulatory retention obligation applies. AML data cannot be deleted within regulatory retention periods.
Request restriction of processing your data — for example, while a dispute regarding data accuracy is resolved.
Request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Object to processing carried out on the basis of legitimate interests. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.
Exercising Your Rights: All data rights requests must be submitted in writing via the contact channels in Section 15 and will be responded to within 30 calendar days. rc999 may request verification of your identity before processing a data rights request to ensure that data is not disclosed or altered at the request of an unauthorised third party. In complex cases, the 30-day response period may be extended by a further 60 days with notice provided to you within the initial 30-day window.
The rc999 Platform is strictly intended for adults aged 21 years and above. rc999 does not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory step in the rc999 registration and KYC process, and accounts where the registered player is found to be under 21 years of age will be immediately and permanently closed.
Where rc999 becomes aware, through KYC verification or any other means, that personal data has been collected from an individual under the age of 21, we will take the following steps without delay: (a) permanently close the associated Account; (b) refund any real-money deposits made to the Account; (c) securely delete all personal data associated with the Account beyond the minimum required for legal compliance purposes; and (d) report the matter to relevant regulatory authorities where required by our licensing obligations.
If you have reason to believe that a person under the age of 21 has created an Account on the rc999 Platform, please notify us immediately via the contact channels in Section 15. rc999 treats all reports of underage account use as a high-priority matter and will investigate and act upon all credible reports within 24 hours of receipt.
rc999 implements a comprehensive set of technical and organisational security measures designed to protect personal player data against unauthorised access, accidental loss, destruction, or disclosure. The principal security measures in place include:
Player-Side Security: While rc999 implements robust technical security measures on the platform side, the security of your Account also depends on you protecting your login credentials and registered mobile number. rc999 strongly recommends enabling OTP two-factor authentication and never sharing your Account password with any third party. rc999 will never ask for your password through any communication channel.
rc999 may send you promotional and marketing communications — including bonus offers, new game announcements, cricket betting market alerts, and VIP programme updates — by email and SMS, but only where you have given explicit opt-in consent to receive such communications. Your consent to receive marketing is collected at the point of Account registration via a clearly labelled, unticked opt-in checkbox. Consent is never pre-selected or assumed.
You may withdraw your consent to receive marketing communications at any time through any of the following methods: (a) clicking the unsubscribe link included in every rc999 marketing email; (b) replying STOP to any rc999 marketing SMS; (c) updating your communication preferences in the Notifications section of your Account settings; or (d) contacting rc999 support directly via live chat or email.
Withdrawal of marketing consent will be processed within 10 business days, after which no further marketing communications of the opted-out type will be sent. Note that withdrawal of marketing consent does not affect transactional communications — you will continue to receive Account-related notifications (deposit confirmations, withdrawal updates, KYC status notifications, and security alerts) regardless of your marketing preferences, as these are necessary for the operation of your Account.
No Third-Party Marketing: rc999 does not share your contact details (mobile number or email address) with any third-party marketing organisations, advertising networks, or data brokers for marketing purposes. All marketing communications sent under rc999 branding originate exclusively from rc999 itself.
rc999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes to our Platform services, updates to our gaming licence obligations, or developments in applicable data protection law. All updates will be published at rc999.asia/privacy-policy with a revised "Last Updated" date at the top of the document.
Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — rc999 will provide advance notice to registered players via their registered email address or via a prominent in-Platform notification upon next login, at least 14 days before the changes take effect. This gives you the opportunity to review the changes and, if you do not accept them, to request Account closure and data deletion before the new Policy takes effect.
For minor, non-material amendments — such as corrections of typographical errors, clarifications that do not change the substantive meaning of any section, or administrative updates — rc999 may update the Policy without advance notification beyond the updated date displayed on the page. We recommend reviewing this Privacy Policy periodically to remain informed of how rc999 protects your data.
For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data held by rc999, please contact the rc999 Data Protection team through the following channels. All data-related requests are handled by trained personnel with specific responsibility for data protection compliance.
All formal data rights requests will be responded to within 30 calendar days of verified receipt. rc999 may require identity verification before processing requests that involve access to, correction of, or deletion of personal data, to protect against unauthorised data modification requests.
Bilingual Support: rc999's data protection support is available in both Urdu and English. Pakistani players across Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and all other cities are welcome to communicate in their preferred language when submitting privacy-related queries or data rights requests via our live chat support channel.
rc999 combines Pakistan's most complete online gaming experience with bank-grade data security and full transparency over how your personal data is handled. EasyPaisa deposits from PKR 100. 1,200+ certified games. 24/7 Urdu & English support. 21+ only.
By using rc999, you confirm you have read and understood this Privacy Policy and are aged 21 or above.