rss999 is committed to protecting the personal information of all Pakistani members. This Privacy Policy explains precisely what data we collect, how we use it, who we share it with, how long we keep it, and what rights you have over your own information.
Our Core Commitments
Before diving into the full legal text, here is a plain-English summary of rss999's six fundamental commitments to your privacy as a Pakistani member of the platform.
rss999 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your CNIC details, mobile number, transaction history, and gaming activity are used only to operate your account and meet our legal obligations — nothing else, full stop.
Every piece of data transmitted between your device and the rss999 platform — including rss999 Login credentials, payment details, and personal information — is protected by 256-bit SSL encryption. This is the same level of encryption used by international banking institutions. Your data is safe in transit and at rest.
rss999 collects only the personal data that is genuinely necessary to operate your account, process payments in PKR, verify your identity, and comply with our obligations under our international gaming license. We do not collect data simply because it might be useful someday — we collect what we need and nothing more.
rss999 does not hold your personal data indefinitely. Retention periods are defined by the purpose for which data was collected and by applicable legal and regulatory requirements under our gaming license. When data is no longer required, it is securely deleted or anonymised in accordance with our data retention schedule.
You have genuine, exercisable rights over your personal data held by rss999 — including the right to access it, correct it, request deletion, and object to certain processing activities. These are not just words on a policy page. rss999 has a process for handling data subject requests and commits to responding within 30 days.
Where rss999 shares your data with third parties — such as JazzCash, EasyPaisa, HBL, or identity verification providers — it does so under strict data processing agreements. These partners are contractually bound to process your data only for the specified purpose and to maintain security standards equivalent to those rss999 applies internally.
This Privacy Policy ("Policy") describes how rss999 ("rss999", "we", "us", "our") collects, processes, stores, uses, discloses, and protects the personal information of individuals ("you", "Member", "User") who register accounts with, access, or use the rss999 platform, accessible at rss999.one and through any associated web or mobile applications (collectively, the "Platform").
rss999 is Pakistan's premier VIP online casino and sports betting platform, designed specifically for Pakistani players. We understand that the residents of Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, Hyderabad, and other cities across Pakistan place significant value on the security and responsible handling of their personal information, particularly in the context of financial transactions involving services such as JazzCash and EasyPaisa. This Policy reflects our sincere commitment to meeting those expectations.
This Policy should be read in conjunction with the rss999 Terms & Conditions and all applicable supplementary policies. By registering an rss999 account, using the rss999 Login portal, making a deposit or withdrawal in PKR, or otherwise interacting with the Platform, you confirm that you have read, understood, and agreed to the data practices described in this Policy.
Plain English Summary: This Policy tells you what personal data rss999 holds about you, why we hold it, how we protect it, who we might share it with, and — most importantly — what rights you have over your own information. We have tried to write it as clearly as possible. The full legal text follows below.
For the purposes of this Privacy Policy, the data controller — that is, the entity that determines the purposes and means of processing your personal data — is rss999, the operator of the rss999.one platform, operating under an international gaming license.
As data controller, rss999 is responsible for ensuring that personal data is processed in accordance with applicable data protection law and the terms of its international gaming license, which impose mandatory data handling standards as a condition of licensure. rss999 has appointed an internal data protection officer whose role includes overseeing compliance with this Policy and handling data subject requests submitted by members.
All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the rss999 support team. Contact details are provided in Section 15 of this Policy.
rss999 collects the following categories of personal data from and about its members:
What we do NOT collect: rss999 does not collect or store full payment card numbers, CVV codes, or online banking passwords. Payment processing is handled through the secure systems of our licensed payment partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank). rss999 receives only transaction confirmation data, not underlying payment credentials.
rss999 collects personal data through the following channels and mechanisms:
The majority of personal data rss999 holds is provided directly by you during the following interactions: account registration; identity verification (KYC) submission; deposit and withdrawal requests; communication with rss999 support via live chat or email; submission of responsible gaming requests (limit setting or self-exclusion); and any other voluntary submission of information through the Platform.
When you access and use the rss999 Platform — including at rss999 Login, during game sessions, and when navigating the site — technical data is automatically collected. This includes your IP address, device and browser information, session duration, pages visited, and gameplay logs. This data is collected using server logs, cookies, and similar technologies described in Section 11.
rss999 may receive personal data about you from third-party service providers in the following circumstances:
rss999 uses the personal data it collects for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, CNIC data | Contract performance |
| Age and identity verification (KYC) | CNIC, date of birth, address | Legal obligation (gaming license) |
| Processing PKR deposits & withdrawals | Financial, transaction data | Contract performance |
| Providing gaming services | Gaming activity, session data | Contract performance |
| VIP loyalty program administration | Gaming activity, account data | Contract performance |
| AML compliance and fraud prevention | Transaction, technical, identity data | Legal obligation |
| Responsible gaming tools management | Gaming activity, limit settings | Legal obligation & vital interests |
| Customer support communications | Communications, account data | Contract performance |
| Platform security and abuse prevention | Technical, account, gaming data | Legitimate interests |
| Promotional communications (opted-in) | Contact data, gaming preferences | Consent |
| Legal compliance and dispute resolution | All relevant data categories | Legal obligation |
Marketing Communications: rss999 will only send you promotional emails or SMS notifications with your explicit consent. You may withdraw your marketing consent at any time by updating your communication preferences in your rss999 account dashboard or by contacting our support team. Withdrawal of marketing consent does not affect our ability to send you transactional or service-related communications.
rss999 processes your personal data under the following legal bases, as applicable to each processing activity:
The rss999 Platform is operated under an international gaming license, and certain aspects of platform infrastructure — including server hosting, game software, and support systems — may involve the transfer of personal data to countries outside Pakistan. rss999 takes the following measures to ensure that any such transfers are conducted with appropriate safeguards:
Where data is hosted on cloud infrastructure outside Pakistan, rss999 selects providers that maintain internationally recognised security certifications (such as ISO 27001) and that are contractually bound to process data only on rss999's documented instructions.
rss999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by legal or regulatory obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data (active accounts) | Duration of membership + 5 years | Gaming license obligation |
| KYC & CNIC verification records | 5 years post-account closure | AML / regulatory requirement |
| Transaction & financial records (PKR) | 7 years post-transaction | Financial record-keeping law |
| Gaming & betting activity logs | 5 years post-account closure | Gaming license audit trail |
| Responsible gaming tool records | 5 years post-account closure | Player protection obligation |
| Support communications | 3 years from last communication | Dispute resolution |
| Technical & device logs | 12 months from collection | Security & fraud prevention |
| Marketing consent records | Until withdrawn + 3 years | Consent audit trail |
Upon expiry of the applicable retention period, personal data is securely and permanently deleted or irreversibly anonymised. Anonymised data may be retained for longer periods for aggregate statistical analysis, as it no longer constitutes personal data.
rss999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
No security system is infallible, and rss999 cannot guarantee the absolute security of your data against all possible threats. Members are advised to maintain the security of their own rss999 Login credentials and to enable OTP authentication on their accounts.
rss999 uses cookies and similar tracking technologies on the Platform to enable certain functions, improve user experience, and gather analytics data. A cookie is a small text file placed on your device when you visit a website. rss999 uses the following categories of cookies:
| Cookie Type | Purpose | Category | Consent Required |
|---|---|---|---|
| Session cookies | Maintain your rss999 Login session while you are active on the Platform | No | |
| Authentication cookies | Verify your identity and OTP status during secure login | No | |
| Preference cookies | Remember your language, display, and game lobby preferences | No | |
| Analytics cookies | Aggregate usage data to understand Platform performance and navigation patterns | Yes | |
| Responsible gaming cookies | Track session time for session limit notifications | No | |
| Promotional tracking cookies | Track bonus redemption eligibility and promotion participation | Yes |
Essential cookies cannot be disabled as they are strictly necessary for the Platform to function. For analytics and optional cookies, rss999 requests your consent at the time of your first Platform visit. You may update your cookie preferences at any time through your browser settings or the rss999 cookie preference centre.
rss999 does not use third-party advertising cookies or allow third-party advertising networks to place cookies on the Platform for the purpose of targeted advertising.
As a member of rss999, you have the following rights in relation to your personal data. These rights are exercisable by contacting rss999 support as described in Section 15. rss999 will respond to all data subject requests within 30 calendar days of receipt.
Section 12 Continued
These rights are real, exercisable, and governed by the terms of rss999's international gaming license. Contact rss999 support to exercise any of the following rights — we respond within 30 days.
You have the right to request a copy of all personal data rss999 holds about you. This is commonly known as a Subject Access Request (SAR). rss999 will provide this data in a structured, readable format within 30 days of your request — free of charge for one request per 12-month period.
If any personal data rss999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that corrections to CNIC-verified identity data may require re-submission of supporting documentation for verification purposes.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate interest exists. Note: this right is subject to our legal retention obligations under the gaming license.
In certain circumstances — for example, while the accuracy of data is disputed, or while an objection to processing is assessed — you have the right to request that rss999 restrict further processing of your personal data. Restricted data will be stored but not actively used.
For data processed on the basis of contract performance or consent, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV), and to have it transmitted directly to another service provider where technically feasible.
You have the right to object to rss999 processing your personal data for direct marketing purposes at any time (with immediate effect) and to object to processing carried out on the basis of legitimate interests. rss999 will cease that processing unless there are compelling legitimate grounds that override your interests, rights, and freedoms.
The rss999 Platform is strictly restricted to individuals who are 21 years of age or older. rss999 does not knowingly collect personal data from, or provide services to, any person under the age of 21. This restriction is enforced through mandatory CNIC-based identity verification, which confirms both the identity and age of every registered member before real-money gaming access is granted.
In the event that rss999 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will take immediate steps to delete that data and permanently close the associated account. Any winnings accumulated in such an account may be forfeited in accordance with the rss999 Terms & Conditions and applicable gaming license requirements.
If you believe that a minor has registered an account with rss999 using false identity information, please report this immediately to rss999 support via live chat. rss999 treats reports of underage gambling with the utmost seriousness and will investigate all such reports without delay.
Zero tolerance for underage access: The 21+ requirement at rss999 is absolute. No exceptions, no workarounds, no appeals. CNIC verification is the hard gate. Accounts that fail verification are not simply restricted — they are rejected at the point of verification. The personal data collected during a failed verification attempt is retained for the minimum period required for AML and fraud prevention purposes, then deleted.
rss999 reserves the right to update or revise this Privacy Policy at any time. This may be necessary to reflect changes in our data processing practices, changes in the Platform's features or services, changes to applicable law or regulatory guidance, or changes required by our international gaming license authority.
When rss999 makes material changes to this Policy — that is, changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered members by posting a notice on the Platform and, where we hold your email address, by sending you a notification to your registered contact details. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
Your continued use of the rss999 Platform following the effective date of a revised Policy constitutes your acknowledgement of, and agreement to, the revised terms. rss999 recommends that you review this Policy periodically. The current version of the Policy is always available on this page. Previous versions of the Policy are available upon request from rss999 support.
For all privacy-related enquiries, data subject access requests, rectification requests, deletion requests, objections to processing, or questions about this Policy, please contact the rss999 data protection team through the following channels:
rss999 commits to acknowledging all data protection requests within 48 hours of receipt and to providing a substantive response within 30 calendar days. Where the complexity of a request requires additional time, rss999 will notify you of the expected extended response timeline before the initial 30-day period expires.
If you are dissatisfied with rss999's handling of your personal data or with our response to a data subject request, you have the right to lodge a formal complaint. rss999 requests that you first raise the matter with our support team to allow us the opportunity to resolve it internally. If your complaint remains unresolved after engaging with rss999 directly, you may escalate it to the relevant supervisory authority under the framework of rss999's international gaming license.
Our commitment: Every data protection request submitted to rss999 is logged, tracked, and responded to within the timeframes set out in this Policy. If you submit a request and do not receive an acknowledgement within 48 hours, please follow up via live chat to confirm receipt. rss999 takes data protection seriously — it is a core obligation under our international gaming license and a genuine commitment to the Pakistani members who trust us with their personal information.
This Privacy Policy was last reviewed and updated on 1 January 2026. Version 2.4. The rss999 data protection officer is responsible for the maintenance and enforcement of this Policy.
Our data protection team is available 24/7 to address any questions about how rss999 handles your personal data. You can also review our full Terms & Conditions or Responsible Gaming policy for more context. Members must be 21 years or older.
21+ only. rss999 is committed to responsible and transparent data handling. Operated under an International Gaming License.
Related Documents