At rs 999, we believe privacy is a right, not an afterthought. This policy explains exactly what data we collect when you play on our platform, why we collect it, how we protect it, and what control you have over it. Written in plain language — no legal double-talk.
Privacy at a Glance
Our Privacy Commitments
These are not vague promises — they are specific, verifiable practices built into every part of the rs 999 platform.
RS 999 collects only the personal data that is genuinely necessary to operate your account, verify your identity, process payments, and comply with legal obligations. We do not build behavioural profiles to sell to advertisers or third parties.
Every connection to rs 999 is protected by 256-bit SSL/TLS encryption. Payment transaction data — including your Easypaisa, JazzCash, and bank details — is encrypted in transit and at rest, isolated in separate secured databases with strict access controls.
RS 999 does not sell, rent, or trade your personal data to any third party for commercial purposes. Full stop. Your name, mobile number, CNIC details, and transaction history belong to you — not to advertisers or data brokers.
You have the right to access all personal data rs 999 holds about you, correct inaccuracies, request deletion of non-essential data, and withdraw consent at any time. We respond to data requests within 24 hours — no delays, no excuses.
Your rs 999 account details — including username, balance, game history, and personal information — are never shared with other players or third parties except where required to process your transactions or meet legal obligations.
This policy describes every category of data we process, the legal basis for processing it, how long we retain it, and who it is shared with. There are no hidden data practices at rs 999 — everything is documented here and updated when our practices change.
This Privacy Policy applies to rs 999, the online gaming and sports betting platform operated at rs999.run ("RS 999," "we," "us," or "our"). RS 999 is the data controller responsible for personal data collected through the rs 999 website and mobile platform.
By creating an account and using the rs 999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This policy forms part of the rs 999 Terms and Conditions and should be read alongside them.
Our data protection contact: For all privacy-related queries, requests, or complaints, contact us at support@rs999.run. We aim to acknowledge all data-related communications within 24 hours and resolve them within 7 working days.
RS 999 collects personal data in several ways — directly from you during registration and account use, automatically through platform interactions, and in some cases from third-party verification services. Here is a full breakdown of what we collect and when.
| Data Category | When Collected | Why We Need It |
|---|---|---|
| Full name | Registration | Account identity, payment matching |
| Mobile number | Registration | Account verification, 2FA, SMS alerts |
| Date of birth | Registration | Age verification (18+ requirement) |
| CNIC number | KYC verification | Identity verification for withdrawals |
| Payment method details | First deposit | Processing PKR deposits and withdrawals |
| Account password (hashed) | Registration | Account security — stored encrypted, never readable |
| Support communications | When you contact us | Resolving queries and maintaining service records |
When you use the rs 999 platform, certain technical data is collected automatically to ensure the service functions correctly and to detect fraud or security threats:
What we do not collect: RS 999 does not collect biometric data, location GPS data, camera or microphone access, contacts lists, or any data beyond what is described in this section. If you receive a request purporting to be from rs 999 asking for any of the above, treat it as suspicious and contact us immediately.
Every piece of data rs 999 collects is used for a specific, documented purpose. We do not collect data "just in case" and we do not use data for purposes beyond what is described here:
No marketing profiling: RS 999 does not build detailed behavioural profiles for commercial advertising purposes. If we send you a promotional message (such as a bonus offer), it is based on your account status at rs 999 — not derived from tracking your activity outside our platform.
RS 999 processes your personal data on the following legal bases:
You may withdraw consent for consent-based processing at any time by contacting support@rs999.run. Withdrawal of consent for contractually necessary processing may require account closure, as described in our Terms and Conditions.
RS 999 does not sell your personal data. We do not share your data with third-party advertisers, data brokers, or commercial partners for marketing purposes. The only circumstances in which rs 999 shares your data with external parties are:
To process your PKR deposits and withdrawals, rs 999 shares the minimum necessary data with payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners facilitating IBFT transfers. These processors receive only the transaction-specific data required to complete the payment — they do not receive your full account profile, game history, or identity documents.
To fulfil age verification and KYC (Know Your Customer) obligations, rs 999 may use third-party verification services to confirm the authenticity of identity documents you submit. These services are bound by strict data confidentiality agreements and may only use your data for the specific verification purpose.
RS 999 will disclose personal data to government or regulatory authorities only when required to do so by law or a valid legal order. We will not disclose data voluntarily beyond legal requirements and will notify you of any such disclosure where legally permitted to do so.
RS 999 uses a limited number of technology service providers (such as cloud hosting and security services) who may handle data as part of operating the platform infrastructure. All such providers operate under data processing agreements that prohibit them from using your data for any purpose other than delivering the specific service to rs 999.
No cross-border transfers to high-risk jurisdictions: RS 999 does not transfer Pakistani player data to jurisdictions with inadequate data protection standards. All data processing related to your account occurs within controlled, contractually protected environments.
Pakistani players' financial data receives the highest level of protection at rs 999. Because payments go through platforms like Easypaisa and JazzCash that millions of Pakistanis use daily for essential financial transactions, we take our responsibility to protect this data with particular seriousness.
Payment data at rs 999 is handled as follows:
Your responsibility: RS 999 secures the data on our side — but your payment account security also depends on you. Use strong PINs for Easypaisa/JazzCash, do not share your rs 999 account credentials, and report any suspicious activity on your account immediately to support@rs999.run.
RS 999 uses cookies and similar tracking technologies to operate the platform effectively, maintain your session while logged in, and understand how the platform is used in aggregate. Here is a breakdown of the types of cookies used:
These cookies are required for the rs 999 platform to function. They maintain your login session so you do not need to re-authenticate between pages, remember your language preference, and ensure security tokens are properly associated with your session. You cannot opt out of essential cookies without losing access to the platform.
RS 999 uses anonymised analytics tools to understand aggregate usage patterns — which pages are visited most, where users encounter difficulties, and how the mobile and desktop experiences differ. Analytics data is not linked to individual accounts and does not contain personal identifiers. You can opt out of analytics cookies through your browser settings.
These cookies remember your platform preferences — such as your last-visited game section, display settings, or notification preferences — so your experience is consistent across sessions. They are not used for tracking or advertising purposes.
RS 999 does not use third-party advertising cookies, social media tracking pixels, or any other cookies that would enable external parties to build profiles about your behaviour on our platform.
RS 999 retains personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with legal obligations. Our standard retention periods are:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account profile data | Duration of account + 2 years post-closure | Legal compliance, dispute resolution |
| Transaction records | 5 years from transaction date | Financial and AML compliance |
| KYC / identity documents | 5 years from submission | Regulatory compliance |
| Game history logs | 2 years | Dispute resolution, responsible gaming |
| Support communications | 3 years | Service improvement, dispute reference |
| Security / IP logs | 12 months | Fraud investigation |
| Marketing preferences | Until consent withdrawn | Compliance with consent-based processing |
After the applicable retention period, data is securely deleted or anonymised so it can no longer be linked to you as an individual. You may request early deletion of non-legally-required data by contacting support@rs999.run — see Section 9 for your full data rights.
As an rs 999 player, you have the following rights in relation to your personal data. These rights apply from the moment you create your account and remain in effect even after account closure within applicable retention periods.
Request a full copy of all personal data rs 999 holds about you. We will provide this within 24 hours of verifying your identity.
If any personal data rs 999 holds about you is inaccurate or outdated, you can request a correction at any time through your account settings or support.
Request deletion of personal data that rs 999 is not legally required to retain. Note that legally-mandated data (such as AML records) cannot be erased before their statutory retention period expires.
Request that we limit how your data is used while a dispute or correction request is under review — for example, requesting that we stop using your data for analytics while you query its accuracy.
Where processing is based on your consent (such as receiving promotional communications from rs 999), you may withdraw that consent at any time with immediate effect.
If you believe rs 999 has not handled your personal data correctly, contact support@rs999.run. We will investigate and respond within 7 working days.
To exercise any of these rights, email support@rs999.run with the subject line "Data Rights Request" and your account username. We will verify your identity before processing the request to protect your account from unauthorised data access.
RS 999 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If rs 999 becomes aware that data has been collected from a minor, that data will be deleted immediately and the associated account will be closed.
Parents and guardians who believe a minor may have registered at rs 999 should contact us immediately at support@rs999.run. We take underage access seriously and will act on any verified report without delay.
Parental controls: We recommend that parents and guardians use device-level parental controls to restrict access to gaming platforms for minors in the household. RS 999 supports this by providing clear age verification at every stage of registration and withdrawal.
RS 999 implements a layered security approach to protect your personal data. Here are the specific technical and organisational measures in place:
All data transmitted between your device and rs 999 is encrypted using TLS 1.3 — the most current and secure standard. Connections using outdated TLS versions are rejected automatically.
Sensitive data stored in rs 999's databases — including CNIC data, payment identifiers, and password hashes — is encrypted using AES-256 at rest. Unencrypted sensitive data does not exist on our servers.
Access to production databases and player data is restricted on a strict need-to-know basis. Staff access is logged, monitored, and reviewed regularly. No single staff member has unrestricted access to all player data.
All internal rs 999 staff accounts require two-factor authentication. Player accounts can enable 2FA via SMS — we strongly recommend activating this from your account settings.
RS 999 conducts regular security assessments including penetration testing by independent security professionals. Vulnerabilities identified are remediated on a priority basis before public disclosure.
In the event of a data security incident that affects your personal data, rs 999 will notify you as soon as practicable and no later than 72 hours after we become aware of the incident — describing what happened, what data was involved, and what steps we are taking.
RS 999 may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. When we make changes, we will update the "Last Updated" date at the top of this page. For material changes — those that significantly affect how we handle your data or your privacy rights — we will notify active account holders via the mobile number or email registered on their rs 999 account.
Continuing to use the rs 999 platform after a policy update constitutes your acceptance of the revised policy. If you do not agree with an update, you may request account closure in accordance with the procedure described in our Terms and Conditions — your balance will be returned to your registered payment method after standard verification.
For any question, request, or complaint related to this Privacy Policy or your personal data at rs 999, please contact us through the following channels. Our support team is available in both Urdu and English, 24 hours a day:
If you submit a privacy complaint and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in Pakistan. RS 999 will cooperate fully with any legitimate regulatory investigation.
This Privacy Policy was last reviewed and updated in January 2025. It applies to all personal data collected by rs 999 from that date forward, and to data previously collected that continues to be held by rs 999 in accordance with the retention schedules described above.