r889 Privacy Policy

This Privacy Policy ("Policy") is issued by r889 ("r889", "we", "us", "our"), the operator of the online gaming platform accessible at r889.app. This Policy explains how r889 collects, uses, stores, shares, and protects personal data relating to registered players, visitors to r889.app, and any other individuals who interact with our platform or support services ("you", "your").

r889 takes its data protection obligations seriously. We are committed to handling your personal data in a transparent, lawful, and secure manner, in accordance with applicable international data protection standards and the requirements of our gaming licence.

By registering an account on r889 or continuing to use the r889 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not access or use the r889 platform.

This Policy should be read alongside the r889 Terms & Conditions, which govern the overall contractual relationship between you and r889.

For the purposes of this Privacy Policy, r889 acts as the data controller in respect of personal data collected from users of the r889 platform. As data controller, r889 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully and in accordance with this Policy.

r889 operates under an international online gaming licence. Our platform serves players located across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, Peshawar, Quetta, and Multan, as well as players located elsewhere who access the r889 platform.

r889 collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser when you access r889.app, and from third parties as part of our identity verification and payment processing operations.

The categories of personal data we collect include:

r889 does not collect special category data (such as health, racial, or religious information) except where such data is incidentally disclosed in the context of responsible gaming assessments, in which case it is processed solely for the purpose of player welfare and is not used for any other purpose.

r889 uses the personal data we collect for the following purposes:

• Account Management: To create, verify, maintain, and administer your r889 player account, including processing your registration information and authenticating your identity at login.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our regulatory obligations. r889 will not permit access to players who cannot be verified as being at least 21 years of age.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other supported payment methods. Financial data is shared with payment processors solely for transaction execution.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the r889 platform. This includes automated transaction monitoring and pattern analysis.
• Platform Operations: To deliver sports betting, cricket betting, live casino, slot games, and all other r889 services to you, and to ensure the stability and security of the platform.
• Customer Support: To respond to your enquiries, resolve disputes, and administer responsible gaming requests such as self-exclusion and deposit limit adjustments.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling and, where appropriate, to proactively reach out to players or apply account restrictions in accordance with our Responsible Gaming Policy.
• Legal Compliance: To comply with applicable legal obligations, including responding to valid requests from law enforcement authorities and regulatory bodies.
• Platform Improvement: To analyse aggregate, anonymised usage data in order to improve the r889 platform, personalise the gaming experience, and develop new features and services.
• Marketing Communications: To send you information about r889 promotions, bonuses, and new games where you have consented to receive such communications. You may withdraw this consent at any time by updating your account notification preferences.

r889 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and r889 — including account registration, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing carried out to comply with applicable legal requirements, including anti-money laundering (AML) regulations, age verification mandates, and responses to lawful authority requests, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of r889's legitimate business interests, where those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out for direct marketing communications and non-essential cookies is carried out on the basis of your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

r889 does not sell, rent, or trade your personal data. We share your personal data only in the following limited and controlled circumstances:

• Payment Service Providers: r889 shares the financial data necessary to process your transactions with our approved payment partners, including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers process your data solely for payment execution and are bound by strict data processing agreements.
• Identity Verification Partners: r889 uses regulated third-party KYC and identity verification services to fulfil our age verification and AML obligations. Identity documents and biometric data shared with these providers are used solely for verification purposes.
• Game Content Providers: r889's casino and sports betting products are powered by licensed third-party game providers. These providers may receive limited technical data (such as session identifiers) necessary to deliver game content. They do not receive your identity or financial data.
• Regulatory Authorities & Law Enforcement: r889 will disclose your personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction.
• Professional Advisors: r889 may share personal data with legal, audit, or compliance advisors on a strictly confidential basis where necessary for the conduct of r889's business operations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of r889's business or assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third parties with whom r889 shares personal data are required to handle that data in accordance with applicable data protection requirements and are contractually prohibited from using it for any purpose beyond what r889 has authorised.

r889 uses cookies and similar technologies — including local storage and session tokens — to operate the platform and deliver a consistent user experience. The following types of cookies are used on r889.app:

• Strictly Necessary Cookies: These cookies are essential for the r889 platform to function. They manage your login session, maintain your account preferences, and enable core features such as the game lobby and cashier. These cookies cannot be disabled without preventing use of the platform.
• Functional Cookies: These cookies remember your preferences — such as your chosen language and display settings — to personalise your experience on r889. They do not track your activity across third-party websites.
• Analytics Cookies: r889 uses first-party analytics cookies to collect aggregate, anonymised data about how players navigate and use the r889 platform. This data is used solely to identify usability issues and improve the platform. No personally identifiable information is included in analytics reports.

r889 does not use third-party advertising cookies, behavioural tracking pixels, or cross-site tracking technologies on its platform. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the r889 platform.

r889 retains your personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your account registration and for a period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under applicable financial regulations.
• KYC Documents: Retained for five (5) years following the end of the business relationship, or such longer period as may be required by applicable regulatory authority.
• Support Communications: Retained for two (2) years from the date of the most recent communication, or until the resolution of any related dispute, whichever is later.
• Technical & Usage Logs: Retained for twelve (12) months for operational and security purposes, after which they are deleted or anonymised.
• Marketing Preferences: Retained until you withdraw consent or close your account, plus a reasonable additional period to confirm the suppression of communications.

Upon expiry of the applicable retention period, r889 will securely delete or irreversibly anonymise your personal data, unless continued retention is required by a specific legal obligation or ongoing investigation.

Subject to applicable law and regulatory restrictions, you hold the following rights in respect of your personal data held by r889. To exercise any of these rights, please contact the r889 support team as described in Section 14.

r889 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Encryption: All data transmitted between your device and r889.app is protected by 256-bit SSL/TLS encryption. r889 enforces HTTPS across all platform endpoints.
• Encryption at Rest: Sensitive personal data — including financial details and identity documents — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within r889 is restricted to authorised personnel who require it to perform their job functions. Access is controlled through role-based permissions and is regularly reviewed.
• Security Monitoring: r889 operates continuous security monitoring systems to detect and respond to potential threats, intrusions, or anomalous access patterns in real time.
• Penetration Testing: r889's platform infrastructure is subject to regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: r889 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, r889 will notify affected individuals and relevant authorities in accordance with applicable regulatory requirements.

While r889 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for logging out of the r889 platform when using shared or public devices.

The r889 platform is strictly restricted to individuals who are at least 21 years of age. r889 does not knowingly collect or process personal data from individuals under the age of 21.

Age verification is conducted as a mandatory step during the r889 account registration process. r889 will not activate an account or permit access to the platform until age eligibility has been confirmed through our KYC process.

If r889 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all personal data will be securely deleted, and any associated funds will be handled in accordance with applicable regulatory requirements.

r889 operates as an internationally licensed gaming platform. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan — including countries where r889's licensed infrastructure, data centres, or third-party service providers are located.

Where personal data is transferred internationally, r889 takes steps to ensure that appropriate safeguards are in place to protect the data in a manner consistent with this Privacy Policy and applicable data protection standards. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses with all international data processors.
• Transfers to jurisdictions that maintain an adequate level of data protection as assessed by recognised international frameworks.
• Technical and organisational security measures applied consistently to data regardless of where it is processed.

By using the r889 platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data in the manner described in this section.

r889 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, r889 will notify registered players by email or through a prominent notice on the r889 platform at least seven (7) days before the changes take effect, except where immediate changes are required by law. Your continued use of the r889 platform following the effective date of any update constitutes your acceptance of the revised Policy.

r889 recommends bookmarking this page and reviewing the Privacy Policy periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way r889 handles your personal data, please reach out to our support team. We are available around the clock, every day of the year, on Pakistan Standard Time (PKT).

Formal privacy complaints submitted by email will be acknowledged within 24 hours and we will endeavour to resolve all privacy matters within fifteen (15) business days. If you remain unsatisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority or gaming regulator applicable under your jurisdiction.