1. About This Privacy Policy
This Privacy Policy describes how RC999 ("we", "us", "our") collects, processes, stores, and protects personal data relating to players and visitors who use the RC999 platform at rc999.biz ("the Platform"). It applies to all RC999 services including the casino, sports betting, live dealer games, promotions, customer support interactions, and any other feature of the platform.
RC999 takes your privacy seriously. We understand that Pakistani players sharing financial and personal information with an online platform are placing a significant degree of trust in us. This policy is our commitment to that trust – written plainly so that you know exactly what happens to your information when you use RC999.
By registering an account or using any part of the RC999 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not create an account or use the platform.
Plain language summary: RC999 collects only what it needs, uses it only for legitimate purposes, stores it securely, never sells it, and gives you meaningful control over it.
2. Personal Data We Collect
RC999 collects personal data across several categories. The table below sets out what we collect, why, and when:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number | Registration & KYC |
| Contact Data | Mobile number, email address | Registration |
| Financial Data | Payment method type, account/wallet reference, transaction history | Deposits & withdrawals |
| Technical Data | IP address, device type, browser, OS, session timestamps | Every platform visit |
| Usage Data | Games played, bets placed, session duration, pages visited | While using RC999 |
| Communications Data | Live chat logs, support emails, survey responses | When contacting support |
| Verification Data | ID document images, selfies (where requested for KYC) | Account verification |
2.1 Data We Do Not Collect
RC999 does not collect full payment card numbers – these are processed directly by our certified payment partners and never stored on RC999 servers. RC999 also does not collect sensitive personal data relating to race, religion, political views, or health, except where such data is voluntarily provided in a support interaction and is directly relevant to the matter at hand.
3. How We Collect Your Data
3.1 Directly From You
The majority of the personal data RC999 holds about you comes directly from you. This happens when you register an account, complete identity verification, make a deposit, request a withdrawal, contact customer support, respond to a survey, or take part in a promotion.
3.2 Automatically Through Technology
When you access RC999 from any device, our servers automatically collect technical and usage data. This includes your IP address, the type of device and browser you are using, operating system version, pages you visit, how long you spend on each page, and the actions you take during your session. This data is collected using standard web server logs, session tracking technology, and cookies.
3.3 From Third Parties
RC999 may receive data about you from third parties in certain circumstances, including:
- Payment processors who confirm the completion, failure, or reversal of transactions
- Identity verification partners who validate document authenticity during KYC
- Fraud prevention services that provide risk scoring for account activity
- Refer-a-Friend programme participants who provide the mobile number of a referred player
RC999 only receives the minimum data necessary from third parties. We do not purchase data lists or use data brokers to enrich player profiles.
4. How RC999 Uses Your Personal Data
RC999 uses personal data collected from Pakistani players for the following purposes:
- Account Management: Creating, maintaining, and operating your RC999 account, including login authentication and account security.
- Payment Processing: Processing deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers, and Visa/Mastercard, and reconciling transactions.
- Identity Verification (KYC): Verifying your identity and age as required by our licensing obligations and to prevent underage gambling.
- Regulatory Compliance: Meeting AML (Anti-Money Laundering), KYC, and other legal obligations imposed by RC999's operating licence.
- Customer Support: Responding to enquiries, resolving complaints, and maintaining records of support interactions for quality assurance.
- Promotions & Bonuses: Administering bonuses and promotional offers you have opted into, and verifying eligibility.
- Platform Improvement: Analysing aggregated usage data to improve the platform, add new features, and fix bugs.
- Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and misuse of the platform.
- Communication: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications.
- Responsible Gaming: Monitoring play patterns to identify potential problem gambling indicators and fulfil our responsible gaming obligations.
RC999 does not use your personal data for: Selling to advertisers, building third-party marketing profiles, or any purpose unrelated to the operation of your RC999 account and the fulfilment of our legal obligations.
5. Legal Basis for Processing
RC999 processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to operate your account and deliver the RC999 service you have contracted for – account creation, payment processing, game access.
- Legal Obligation: Processing required to comply with AML, KYC, age verification, and other regulatory requirements applicable to RC999's gaming licence.
- Legitimate Interests: Processing carried out for RC999's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You can withdraw consent at any time without affecting the operation of your account.
6. Who RC999 Shares Your Data With
RC999 does not sell your personal data. We share it only in the following circumstances and only to the extent necessary:
6.1 Service Providers
RC999 works with a limited set of trusted third-party service providers who process data on our behalf under binding data processing agreements. These include payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, Visa/Mastercard networks), KYC verification providers, fraud detection services, and the game software providers whose titles appear in the RC999 library. These providers are permitted to use your data only for the specific purpose for which it was shared.
6.2 Regulatory & Legal Authorities
RC999 is required by its operating licence and by applicable law to share certain data with regulatory bodies, law enforcement agencies, financial intelligence units, and courts when legally compelled to do so. RC999 will comply with lawful requests and will notify you of any such disclosure where we are legally permitted to do so.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of RC999's business or assets, player data may be transferred to the acquiring entity. RC999 will notify affected players before any such transfer takes effect and will ensure that the receiving entity is bound by privacy obligations at least as protective as those in this policy.
RC999 never shares your data with advertisers, data brokers, social media platforms, or any party for the purpose of targeting you with third-party marketing.
7. Cookies & Tracking Technologies
RC999 uses cookies and similar technologies to make the platform work properly, to remember your preferences, and to understand how players use the site. Here is a breakdown of the cookie types used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Login sessions, security tokens, load balancing. Required for RC999 to function. | No – platform will not work without them | |
| Language preferences, game layout settings, remembered deposit methods. | Yes – affects personalisation | |
| Aggregated usage statistics used to improve the platform. Data is anonymised. | Yes – via cookie preferences | |
| Tracking the effectiveness of RC999's own promotions and refer-a-friend campaigns. | Yes – requires consent |
7.1 Managing Cookies
You can control non-essential cookies through the RC999 cookie preference panel accessible from any page footer, or by adjusting your browser settings. Note that disabling essential cookies will prevent you from logging in or using core platform functions. RC999 does not use third-party advertising cookies or allow external ad networks to track your activity on the platform.
8. How Long We Keep Your Data
RC999 retains personal data for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. The table below sets out the general retention periods applied:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | AML regulatory requirement |
| Financial Transaction Records | 7 years after transaction date | Financial record-keeping obligations |
| KYC Documents | 5 years after account closure | Regulatory compliance |
| Customer Support Logs | 3 years from interaction date | Dispute resolution & QA |
| Technical / Usage Logs | 13 months from creation | Platform security & analytics |
| Marketing Consent Records | Duration of consent + 2 years | Legal proof of consent |
When data is no longer required for any of the purposes above, RC999 securely deletes or anonymises it. Anonymised data (which can no longer be linked to any individual) may be retained indefinitely for aggregate statistical purposes.
9. How RC999 Secures Your Data
RC999 implements a layered security approach to protect personal data from unauthorised access, disclosure, alteration, or destruction. Measures in place include:
- Transport Security: All data transmitted between your device and RC999 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to every page, every login, every transaction, and every support interaction.
- Data Storage Encryption: Sensitive data stored in RC999 databases is encrypted at rest. Payment-sensitive fields use field-level encryption with access limited to authorised processes only.
- Access Controls: Internal access to player data is restricted on a strict need-to-know basis. All access is logged and audited. Staff who handle personal data receive regular data protection training.
- Network Security: RC999 servers operate behind multi-layer firewalls, with intrusion detection systems, regular penetration testing, and DDoS protection.
- Payment Security: Card payment processing is handled by PCI-DSS compliant payment partners. RC999 does not store full card numbers on its own systems.
- Incident Response: RC999 maintains a documented incident response plan. In the event of a data breach affecting your personal data, RC999 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.
While RC999 takes comprehensive security measures, no system is completely immune to risk. You also play a role in protecting your account – use a strong unique password and never share your login credentials with anyone.
10. Your Data Rights
RC999 respects your rights over your personal data. As a player on the RC999 platform, you have the following rights, all of which can be exercised by contacting RC999's support team:
Right to Access
Request a copy of the personal data RC999 holds about you. Provided free of charge within 30 days.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold. RC999 will action corrections promptly.
Right to Erasure
Request deletion of your personal data where RC999 no longer has a legal basis to retain it.
Right to Restriction
Request that RC999 restricts processing of your data in certain circumstances while a dispute is being resolved.
Right to Portability
Request your personal data in a structured, machine-readable format for transfer to another service.
Right to Object
Object to processing of your data based on legitimate interests, including for marketing communications.
10.1 How to Exercise Your Rights
To exercise any of the above rights, contact RC999 via live chat (available 24/7 while logged in) or by emailing support@rc999.biz. RC999 will respond to all data rights requests within 30 days. For complex requests, the response period may be extended by up to an additional 60 days, in which case you will be notified of the extension within the initial 30-day period.
RC999 may need to verify your identity before processing a data rights request. This is a standard security measure to ensure your personal data is not disclosed to an unauthorised person.
11. Children's Privacy
RC999 is strictly an 18+ platform. RC999 does not knowingly collect personal data from anyone under the age of 18. RC999's registration process includes age verification steps and we conduct ongoing age verification checks as part of our KYC procedures. If RC999 discovers that a player under the age of 18 has registered an account, the account will be immediately suspended, all funds will be returned to the originating payment method, and the personal data associated with the account will be deleted.
If you believe a minor has accessed RC999, please contact us immediately at support@rc999.biz. RC999 takes underage gambling extremely seriously and will act on any such notification without delay.
12. International Data Transfers
RC999 is operated from outside Pakistan and processes player data on servers that may be located in multiple jurisdictions. When your data is transferred internationally, RC999 ensures that appropriate safeguards are in place to protect it to a standard at least equivalent to that described in this policy. These safeguards include contractual clauses with data processors and the use of certified data centres that meet internationally recognised security standards.
By creating an RC999 account, you consent to the transfer of your personal data to countries outside Pakistan where the platform's infrastructure is hosted. RC999 will not transfer your data to jurisdictions where adequate data protection standards are not in place without implementing appropriate additional safeguards.
13. Third-Party Links
The RC999 platform may reference third-party services such as payment apps and verification providers in the context of explaining how to use those services with your RC999 account. RC999 does not embed third-party advertising or tracking within its platform pages. Where technical integrations with third parties are used (for example, payment gateways), those interactions are subject to the third party's own privacy policy, and RC999 recommends reviewing those policies where relevant.
RC999 is not responsible for the privacy practices of third-party services and the reference to any third-party service in this policy or elsewhere on the platform does not constitute an endorsement of that service's privacy practices.
14. Updates to This Privacy Policy
RC999 reviews this Privacy Policy regularly and will update it when our data practices change or when required by changes in applicable law. When material updates are made, RC999 will notify registered players via the contact details on their account at least 14 days before the changes take effect.
The "Last Updated" date at the top of this page always reflects the most recent revision. RC999 recommends reviewing this policy periodically. Your continued use of the platform following notification of an update constitutes acceptance of the revised policy. If you do not accept the updated policy, you should close your account before the effective date of the change.
Version History: Previous versions of this Privacy Policy are available on request from RC999 support. Contact us at support@rc999.biz to request an archived version.
15. Contact Us & Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how RC999 handles your personal data, please contact us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week from the RC999 website when logged in. This is the fastest way to get a response.
- Email: support@rc999.biz – RC999 acknowledges privacy-related emails within 48 hours and aims to resolve all queries within 14 days.
If you are not satisfied with RC999's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority applicable in the jurisdiction under which RC999 is licensed, or to pursue a legal remedy through the courts.
RC999 takes all privacy complaints seriously. Every formal complaint is logged, investigated, and responded to with a substantive resolution or explanation. RC999 does not dismiss or delay privacy concerns.