Privacy Policy — r 789 Pakistan Player Data Protection

This Privacy Policy applies to r 789, the online betting and casino platform accessible at r789.im ("r 789", "we", "us", "our"). R 789 is the data controller responsible for the personal information you provide when you register, deposit, play or otherwise interact with our platform.

This policy is addressed specifically to Pakistani players ("you", "your") who access r 789 from Pakistan. It explains in clear terms what data we collect, why we collect it, how we protect it, who we share it with and what rights you have in relation to your personal information.

If you have any questions about this policy or how r 789 handles your data, you can contact our Data Protection team at any time at support@r789.im with the subject line "Privacy Enquiry". We will respond within 5 business days.

R 789 collects personal data through different interactions you have with the platform. Below is a detailed breakdown of the categories of data we collect and how we obtain them.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, gender, email address, Pakistani mobile number and chosen password.
• Identity verification documents: Copies of your CNIC (National Identity Card) or passport, which are required to process withdrawals and comply with our licence requirements.
• Payment data: Your mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, or card details for Visa/Mastercard transactions. Card details are processed directly by our certified payment processors — r 789 does not store full card numbers.
• Support communications: Any messages, emails or chat transcripts you exchange with our support team.
• Responsible gaming self-disclosures: Information you provide when setting deposit limits, session limits or requesting self-exclusion.

2.2 Data We Collect Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: Pages visited, games played, bets placed, session duration, features accessed and navigation paths within the r 789 platform.
• Transaction data: Full history of deposits, withdrawals, bets and casino game rounds associated with your account.
• Location data: Country and approximate region inferred from your IP address. R 789 does not collect precise GPS location data.
• Cookie data: See Section 6 for a full explanation of cookies used on r 789.

R 789 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first informing you and, where legally required, obtaining your consent.

1. Account creation and management: To register your r 789 account, maintain it, authenticate your login, and provide you with access to all platform features.
2. Identity verification and KYC compliance: To verify your identity before processing withdrawals and to comply with our licensing obligations. R 789 is required under its operating licence to conduct Know Your Customer (KYC) checks on all active players.
3. Payment processing: To process deposits and withdrawals in PKR via your chosen payment method, and to maintain an accurate transaction history on your account.
4. Fraud prevention and security: To detect and prevent fraudulent transactions, account takeovers, money laundering, bonus abuse, multi-accounting and other prohibited activities defined in our Terms and Conditions.
5. Responsible gaming monitoring: To monitor play patterns that may indicate problem gambling behaviour, and to action responsible gaming tools such as deposit limits, self-exclusion or cooling-off periods as requested or where required by our obligations.
6. Customer support: To respond to your support queries, complaints and disputes, and to maintain a record of our communications for quality assurance and training purposes.
7. Platform improvement: To analyse how Pakistani players use the r 789 platform — which games are popular, which features are most used, where navigation could be improved — and to use those insights to develop a better product. This analysis uses aggregated or anonymised data where possible.
8. Marketing communications (consent-based): Where you have opted in to receive marketing, to send you information about r 789 promotions, new games, PSL betting boosts and other relevant offers. You can opt out of marketing communications at any time by following the unsubscribe link in any email or by contacting support.
9. Legal and regulatory compliance: To fulfil r 789's legal and regulatory obligations including record-keeping requirements, responses to lawful information requests from regulatory or law enforcement authorities, and the prevention of illegal activity.

R 789 processes your personal data on the following legal bases depending on the specific purpose of processing:

• Contractual necessity: Processing your registration data, payment details and transaction history is necessary to fulfil r 789's contractual obligations to you as a platform user.
• Legal obligation: KYC verification, transaction record-keeping, regulatory reporting and fraud prevention are carried out to comply with r 789's licensing and legal obligations.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and platform improvement analytics are conducted on the basis of r 789's legitimate interest in providing a safe, fair and well-functioning service, balanced against your privacy interests.
• Consent: Marketing communications and non-essential analytics cookies are processed only where you have provided explicit, informed consent. You may withdraw this consent at any time.

R 789 shares your personal data only with carefully selected third parties where it is necessary to provide the platform services, comply with legal obligations, or protect the security of the platform. We do not sell your data to anyone.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card processing networks receive transaction data necessary to process your deposits and withdrawals. These processors are independently certified and handle your data under their own regulated privacy frameworks.
• Identity verification providers: R 789 uses regulated third-party KYC services to verify the identity documents you submit. These providers process your document data solely for the purpose of identity verification and are contractually prohibited from using it for any other purpose.
• Cloud infrastructure and hosting providers: R 789's platform data is stored on secure, certified cloud servers. Infrastructure providers operate as data processors under strict data processing agreements with r 789.
• Regulatory and law enforcement authorities: R 789 will disclose player data to relevant regulatory bodies, law enforcement agencies or courts where required to do so by law, court order or regulatory direction. R 789 will notify you of such disclosures where legally permitted to do so.
• Fraud prevention networks: Where fraud is detected or strongly suspected, relevant account and transaction data may be shared with industry fraud prevention bodies to protect the wider player community.

R 789 uses cookies and similar tracking technologies on the r789.im website. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences and understand how you use the site.

Cookie Categories Used by r 789

You can manage cookie settings at any time through your browser settings. Disabling strictly necessary cookies will affect platform functionality. Note that the toggles above are illustrative — actual cookie consent is managed via your browser.

R 789 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, regulatory or licensing retention requirements. The following general retention periods apply:

• Active account data (registration details, payment methods, transaction history) is retained for the duration of your account and for a minimum of 5 years after account closure to comply with our regulatory and anti-money laundering obligations.
• Bet and game history is retained for a minimum of 7 years from the date of the transaction as required under our operating licence.
• Identity documents are retained for the duration of the account plus 5 years post-closure.
• Device and IP data collected for security and fraud prevention purposes is retained for 12 months.
• Customer support records are retained for 3 years from the date of the interaction.
• Marketing preference records are retained until you opt out and for 1 year thereafter to demonstrate your prior consent status.

After the applicable retention period expires, r 789 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

As an r 789 player, you hold the following rights in relation to your personal data. You can exercise any of these rights by contacting us at support@r789.im with the subject line "Data Rights Request". R 789 will acknowledge all requests within 5 business days and fulfil them within 30 calendar days.

R 789 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include but are not limited to:

• 256-bit TLS/SSL encryption for all data in transit between your device and r 789 servers.
• AES-256 encryption for sensitive data stored at rest on r 789 servers.
• Strict access controls limiting employee access to personal data on a need-to-know basis, with all access events logged.
• Multi-factor authentication options for player accounts and mandatory MFA for all administrative access.
• Regular penetration testing and security audits conducted by independent cybersecurity specialists.
• 24/7 automated fraud monitoring and anomaly detection systems that flag suspicious account activity for human review.
• Incident response procedures that ensure r 789 can detect, respond to and notify affected players of any data breach within the required regulatory timeframe.

While r 789 takes every reasonable technical precaution, no online platform can guarantee 100% security. You are responsible for keeping your own account credentials secure. If you suspect any unauthorised access to your r 789 account, contact us immediately via live chat or email.

R 789 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18 years of age, you must not register an account or use the r 789 platform in any capacity.

If r 789 becomes aware that a user under the age of 18 has registered an account, we will immediately close that account, void all associated activity, and securely delete all personal data associated with that account as quickly as possible. If you believe a minor may have registered on r 789, please contact us at support@r789.im immediately.

The r 789 platform and communications may occasionally reference or link to third-party websites or services — for example, news articles about PSL cricket or football leagues. R 789 has no control over the privacy practices or content of third-party websites and is not responsible for them. This Privacy Policy applies solely to the r 789 platform at r789.im. We recommend reviewing the privacy policies of any third-party website you visit independently of r 789.

R 789 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data practices. When material changes are made, we will notify you by email to your registered address and display a notice on the r 789 platform at least 14 days before the updated policy takes effect.

The "Last Updated" date at the top of this policy always reflects the most recent version. Continued use of the r 789 platform after the effective date of a revised Privacy Policy constitutes acceptance of the changes. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to raise a privacy concern about how r 789 handles your personal information, please contact us using the details below. We take all privacy enquiries seriously and will respond within 5 business days.

If you are not satisfied with r 789's response to a privacy complaint, you have the right to escalate the matter to the supervisory authority specified under r 789's operating licence. Details of the relevant authority are available from our support team on request.