Privacy Policy – rr333 Data Protection Commitment

1 Introduction

rr333 ("rr333", "we", "us", "our") is committed to protecting the privacy and personal data of every player who accesses or uses the rr333 platform at rr333.biz. This Privacy Policy sets out, in clear and transparent terms, how we collect, use, store, share, and protect your personal information in connection with the services we provide.

This Policy applies to all visitors to rr333.biz, all registered rr333 Account holders, and all individuals who interact with rr333 through any channel, including our customer support team. It should be read alongside our Terms and Conditions, which govern your overall use of the rr333 platform.

We are required to process personal data under our international gaming license as part of our anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations. Some data processing is therefore not optional — it is a legal and regulatory requirement that we must fulfil in order to operate the rr333 platform lawfully.

2 Data Controller

For the purposes of applicable data protection law, rr333 is the data controller in respect of all personal data collected through the rr333.biz platform. As data controller, rr333 determines the purposes for which personal data is processed and the means by which that processing is carried out.

Where rr333 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification companies, or game software providers — those parties act as data processors under the instruction and oversight of rr333. rr333 maintains appropriate data processing agreements with all third-party processors to ensure that your personal data is handled in a manner consistent with this Privacy Policy and applicable data protection standards.

For all data-related enquiries, complaints, or rights requests, you may contact the rr333 Data Protection team at [email protected] (plain text — not a clickable link).

3 Personal Data We Collect

rr333 collects personal data from you through various channels and at various stages of your relationship with the platform. The categories of personal data we collect include, but are not limited to, the following:

rr333 does not intentionally collect Special Category data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) unless you voluntarily disclose such information, for example, in the context of a responsible gaming self-assessment or when requesting accessibility accommodations.

4 Legal Basis for Processing

rr333 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing your registration data, account information, and payment details is necessary to fulfil our contract with you as a registered rr333 Account holder — specifically, to provide you with access to the games, betting markets, and financial services described in our Terms and Conditions.
• Legal Obligation: rr333 is required by its international gaming license to collect and verify identity data (KYC), maintain transaction records, conduct AML screening, and report suspicious activity to relevant regulatory authorities. This processing is non-optional.
• Legitimate Interests: rr333 processes technical and gaming activity data on the basis of its legitimate interests in detecting fraud, preventing multi-accounting, improving platform performance, and ensuring game integrity. We have assessed that these interests do not outweigh your fundamental privacy rights.
• Consent: Where rr333 sends you marketing communications via email or SMS — including promotions, bonus offers, or news about new games — we do so on the basis of your explicit consent. You may withdraw this consent at any time through your rr333 account settings or by contacting support.

5 How rr333 Uses Your Personal Data

rr333 uses the personal data we collect for the following primary purposes:

• Account Management: Creating and maintaining your rr333 Account, authenticating your login sessions, updating your account details, and processing your account closure requests.
• Payment Processing: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and USDT TRC20, and processing withdrawal requests to verified account holders in a timely manner.
• KYC & AML Compliance: Verifying your identity and age (21+ requirement strictly enforced), screening against sanction lists and PEP (Politically Exposed Persons) databases, and maintaining the records required by our gaming license authority.
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, unauthorised access, money laundering, and other prohibited conduct.
• Platform Improvement: Analysing aggregated, anonymised gaming and usage data to improve the rr333 platform, identify and fix technical issues, and develop new features and products relevant to Pakistani players.
• Customer Support: Responding to your enquiries, complaints, and responsible gaming requests, maintaining a record of communications for quality assurance purposes.
• Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling and activating self-exclusion, deposit limit, or cooling-off period tools in accordance with your requests or our responsible gaming obligations.
• Marketing Communications: Sending promotional emails and SMS messages about rr333 bonuses, new games, PSL cricket betting promotions, and platform updates — only where you have provided explicit consent to receive such communications.

6 Cookies and Tracking Technologies

rr333 uses cookies and similar tracking technologies on the rr333.biz platform. Cookies are small text files stored on your device by your browser that allow the platform to recognise you between sessions and provide a consistent, personalised experience.

The categories of cookies used by rr333 include:

• Strictly Necessary Cookies: Essential for the operation of the rr333 platform, including session authentication, security tokens, and load balancing. These cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: Enable personalisation features such as remembering your language preference, game history, and responsible gaming settings between sessions.
• Performance and Analytics Cookies: Collect anonymised data about how players navigate the rr333 platform to help us identify performance bottlenecks and improve user experience. These do not identify you personally.
• Marketing Cookies: Used only where you have given consent, to enable rr333 to display relevant promotional content. These may track your visits to the rr333 platform to measure the effectiveness of our communications.

You may control cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may impair or prevent your use of the rr333 platform. Disabling functional cookies will remove personalisation features without affecting your ability to play or wager.

7 Sharing of Personal Data

rr333 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and crypto network processors receive the minimum financial data required to process your specific deposit or withdrawal transaction. These parties are independent data controllers in respect of their own services.
• Identity Verification Partners: rr333 may engage specialist third-party KYC and AML screening providers to assist in verifying your identity and screening your details against regulatory databases. All such providers are bound by strict data protection agreements.
• Game Software Providers: The live dealer studios, slot developers, and sports data providers integrated into the rr333 platform may receive anonymised session identifiers necessary to operate game sessions. They do not receive your full identity or financial details.
• Regulatory Authorities: rr333 is required to share player data with its gaming license authority and, where legally compelled, with law enforcement or financial intelligence units in connection with AML investigations or court orders.
• Group Companies: rr333 may share data within its corporate group for operational, compliance, and risk management purposes, under internal data sharing agreements that impose the same protections as this Privacy Policy.

8 International Data Transfers

rr333 operates as an internationally licensed platform, and some of the data processing activities associated with operating the rr333 service may involve transferring your personal data to servers or processors located in countries outside Pakistan. This may include server infrastructure in the jurisdictions where rr333 holds its gaming license and operational headquarters.

Wherever personal data is transferred internationally, rr333 takes all reasonable steps to ensure that the receiving party provides an adequate level of protection for your data, including through:

• Contractual data transfer agreements incorporating internationally recognised data protection standards.
• Selection of processors and sub-processors that operate under regulatory regimes with recognised data protection frameworks.
• Technical and organisational security measures that meet or exceed the standards applied to data processed within Pakistan.

If you have questions about specific data transfer arrangements applicable to your personal data, please contact the rr333 Data Protection team at the address specified in Section 16 of this Policy.

9 Data Retention Periods

rr333 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law, regulation, or our gaming license conditions. The following retention periods apply as a general guide:

At the end of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Data subject access or deletion requests are processed in accordance with Section 11 of this Policy.

10 Security Measures

rr333 implements a comprehensive programme of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your browser and the rr333 platform is encrypted using 256-bit SSL/TLS encryption. The padlock visible in your browser confirms active SSL protection on every rr333 page.
• Server-Side Encryption: Sensitive personal data stored on rr333's servers — including financial information and KYC documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. rr333 employees and contractors who require access to personal data for operational purposes are subject to confidentiality obligations and receive data protection training.
• Two-Factor Authentication: The rr333 platform offers two-factor authentication (2FA) for all player accounts, adding a second layer of security beyond the password. We strongly recommend enabling 2FA on your rr333 account.
• Penetration Testing and Security Audits: rr333 conducts regular security assessments, including penetration testing by independent security professionals, to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: rr333 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to affected individuals, rr333 will notify the relevant regulatory authority and affected players within the timeframes required by applicable law.

11 Your Data Protection Rights

Subject to applicable data protection law and any overriding legal obligations on rr333, you have the following rights in relation to your personal data held by rr333. To exercise any of these rights, submit a written request to the rr333 Data Protection team at [email protected]. rr333 will respond to all valid requests within 30 calendar days of receipt, and will confirm receipt within 72 hours.

• Right of Access: You have the right to request a copy of the personal data that rr333 holds about you, together with information about how and why it is being processed.
• Right to Rectification: If any personal data that rr333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that rr333 delete your personal data. This right is subject to exceptions where rr333 is required to retain data by law — for example, where AML or gaming license regulations mandate minimum retention periods.
• Right to Restrict Processing: In certain circumstances, you may request that rr333 restrict the processing of your personal data while a dispute or verification request is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to rr333 in a structured, commonly used, machine-readable format, and to transfer that data to another controller.
• Right to Object: You have the right to object to processing of your personal data where rr333 relies on legitimate interests as its legal basis, and where you believe your fundamental rights outweigh those interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

rr333 will not charge a fee for handling standard data rights requests. Where a request is manifestly unfounded or excessive, rr333 reserves the right to charge a reasonable administrative fee or decline to respond, with written justification provided.

12 Marketing Communications

rr333 may send you marketing communications about promotions, bonuses, new games, PSL cricket betting markets, and other rr333 services where you have explicitly consented to receive such communications at the time of registration or through your account settings.

Marketing communications from rr333 may be delivered via:

• Email to your registered rr333 email address.
• SMS to your registered Pakistani mobile number.
• In-platform notifications when you are logged in to your rr333 account.

You may withdraw your consent to receive marketing communications at any time by:

• Adjusting your marketing preferences in the rr333 account settings section.
• Clicking the "unsubscribe" link included in all rr333 marketing emails.
• Contacting the rr333 support team via live chat or email and requesting removal from marketing lists.

Operational communications — such as deposit confirmations, withdrawal notifications, KYC request notifications, and responsible gaming alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your account.

13 Minors and Age Restrictions

The rr333 platform is strictly for individuals who are 21 years of age or older. rr333 does not knowingly collect personal data from individuals under the age of 21, and no person under 21 may register for an rr333 Account or access any rr333 products or services.

If you become aware that a minor has created an rr333 Account or is accessing the rr333 platform without authorisation, please contact rr333 customer support immediately. We will investigate and take appropriate action without delay.

14 Third-Party Links and Services

The rr333 platform may contain references to third-party services, including payment provider interfaces and game studio environments. rr333 is not responsible for the privacy practices of any third-party service provider whose interface you access in connection with using rr333 products.

When you initiate a JazzCash or EasyPaisa deposit, for example, you will interact with the interface of those payment providers, which are governed by their own separate privacy policies. rr333 has no control over the data practices of these third-party providers and recommends that you review their policies independently.

rr333 does not knowingly incorporate tracking technologies from advertising networks, social media platforms, or data brokers that would allow those third parties to identify you as an rr333 player or build profiles based on your rr333 activity.

15 Changes to This Privacy Policy

rr333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our gaming license requirements. The "Effective Date" at the top of this Policy indicates when the current version came into force.

When material changes are made to this Policy, rr333 will notify registered Account holders through one or more of the following channels:

• A notice displayed prominently on the rr333 platform homepage or login screen.
• An email notification to your registered rr333 email address.
• An in-account notification visible upon your next login to rr333.

Your continued use of the rr333 platform following publication of a revised Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to remain informed of how rr333 protects your personal data.

16 Contact and Data Rights Requests

For all queries, complaints, or formal rights requests relating to your personal data held by rr333, please contact our Data Protection team using the following details. Note that the email address below is provided as plain text and is not a clickable link:

rr333 is committed to resolving all data protection queries fairly and promptly. If you feel that rr333 has failed to address a legitimate privacy concern to your satisfaction, you have the right to submit a complaint to the relevant data protection or gaming regulatory authority applicable to your jurisdiction.

This Privacy Policy was last reviewed and updated in January 2026. The governing language is English. In the event of any discrepancy between this English version and any translation provided for convenience, the English version shall prevail.