r333 Privacy Policy —
How We Protect Your Data

r333 ("we," "us," "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the r333 platform at r333.biz. This Privacy Policy applies to all players who register accounts on r333, including Pakistani players accessing the platform from Karachi, Lahore, Faisalabad, Islamabad, and any other location.

This Policy describes the categories of personal information r333 collects, the purposes for which that information is processed, the circumstances under which it may be shared with third parties, the security measures r333 applies to protect it, and the rights available to players regarding their own data.

By registering an account on r333 or by continuing to use the r333 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal information as described herein. If you do not agree with this Policy, you should not register or continue to use the r333 platform.

The data controller responsible for personal information collected on the r333 platform is the operating company that holds r333's international gaming licence. r333 processes personal data in its capacity as a licensed online gaming operator subject to the data protection requirements mandated by its applicable gaming licence and international data protection standards.

Players who wish to exercise their data rights, raise a privacy concern, or seek clarification regarding any aspect of this Policy may contact r333's data privacy team through the support channels described in Section 14 of this Policy. r333 commits to responding to all privacy enquiries within 30 calendar days of receipt.

r333 collects the following categories of personal and technical data from players. The table below describes each category, the specific types of data within it, and the primary reason for collection:

r333 collects personal data through the following means:

4.1 Direct Collection

Information you provide directly to r333 during account registration, KYC verification, deposit and withdrawal processing, support interactions, and responsible gaming tool configuration. This includes your mobile number, payment method details, and any identity documentation you submit.

4.2 Automated Technical Collection

Technical data — including IP addresses, device identifiers, browser information, and session data — is automatically collected when you access the r333 platform. This collection is necessary for the security, fraud prevention, and proper functioning of the platform and does not require active input from you.

4.3 Transactional Data

Financial transaction data is generated and recorded each time you initiate a deposit, withdrawal, or gaming wager on the r333 platform. This data is retained as required by r333's AML compliance obligations under its international gaming licence, as well as for the purposes of dispute resolution and account history.

4.4 Cookies and Similar Technologies

r333 uses cookies and similar tracking technologies to maintain session continuity, detect fraud, remember player preferences, and analyse platform usage patterns. Full details of r333's cookie usage are set out in Section 8 of this Policy.

r333 processes player personal data for the following specific and defined purposes:

• Account management: Creating, maintaining, verifying, and securing player accounts on the r333 platform, including processing r333 login authentication and Two-Factor Authentication events.
• Payment processing: Facilitating deposits via USDT TRC20, Bitcoin, JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and processing withdrawal requests to players' verified payment methods.
• KYC and age verification: Confirming that players meet the minimum age requirement of 21 years and verifying identity as required by r333's international gaming licence and AML obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent account activity, unauthorised access, money laundering, and bonus abuse across the r333 platform.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, administering player-requested deposit limits, loss limits, session timers, and self-exclusion arrangements.
• Customer support: Providing timely and effective assistance to players via r333's 24/7 live chat support, including resolving disputes and addressing account queries from Pakistani players.
• Legal compliance: Meeting reporting, record-keeping, and disclosure obligations arising under r333's international gaming licence, applicable AML regulations, and any legally binding authority requests.
• Platform improvement: Analysing aggregated, anonymised usage data to identify areas for product improvement, optimise the r333 platform experience, and develop new features relevant to Pakistani players.

r333 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract established when a player registers an r333 account and accepts these Terms — including account management, payment processing, and gaming service delivery.
• Legal obligation: Processing required to comply with r333's international gaming licence conditions, AML/KYC regulatory obligations, and any applicable legal authority requests — including record-keeping of financial transactions and identity verification documentation.
• Legitimate interests: Processing conducted in pursuit of r333's legitimate business interests where those interests are not overridden by player privacy rights — including fraud prevention, security monitoring, and platform performance analysis.
• Consent: Where r333 relies on consent as the legal basis for processing — such as optional marketing communications — players may withdraw that consent at any time by contacting r333 support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

r333 shares player personal data with third parties only in the following defined circumstances:

7.1 Service Providers

r333 works with third-party service providers who process player data solely on r333's behalf and under binding data processing agreements. These include payment processing partners (for JazzCash, EasyPaisa, USDT, and bank transfer handling), identity verification providers, gaming software suppliers, fraud detection services, and customer support infrastructure providers. Each service provider receives only the minimum data required for their specific function.

7.2 Legal and Regulatory Disclosure

r333 may disclose player data to governmental authorities, law enforcement agencies, regulatory bodies, or r333's gaming licence authority where required by applicable law, a valid court order, a lawful regulatory request, or as a condition of r333's international gaming licence. r333 will notify affected players of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of r333's business operations, player personal data may be transferred as part of that transaction. r333 will provide advance notice to registered players of any such transfer and ensure that the successor entity is bound by privacy obligations at least equivalent to those in this Policy.

7.4 No Commercial Data Sharing

r333 does not sell, license, or commercially share player personal data with any third party for that third party's own marketing, advertising, or commercial purposes. This prohibition applies regardless of any purported benefit offered to r333 for such sharing.

8.1 What Are Cookies

Cookies are small data files placed on your device by websites you visit. r333 uses cookies and similar technologies including local storage, session tokens, and browser fingerprinting techniques to operate the platform securely and effectively.

8.2 Types of Cookies r333 Uses

• Essential Cookies: Required for the r333 platform to function — including maintaining your login session after authenticating at the r333 login page, remembering your language preference, and ensuring secure navigation across the platform. These cannot be disabled without preventing use of the platform.
• Security Cookies: Used to detect fraudulent activity, unauthorised login attempts, and multi-accounting across the r333 platform. These cookies protect both r333 and individual players from security threats.
• Performance Cookies: Used to collect anonymised data about how players navigate the r333 platform — which pages are visited most frequently, where errors occur, and how load times perform across different devices and network connections. This data informs platform improvements.
• Preference Cookies: Store player-selected settings such as responsible gaming limits, display preferences, and notification choices to ensure these settings persist across sessions without requiring re-entry.

8.3 Managing Cookies

Players may manage non-essential cookie preferences through their browser settings. Disabling essential cookies will impair or prevent access to the r333 platform. r333 recommends maintaining essential and security cookies enabled at all times to ensure the security of your account.

r333 implements a comprehensive set of technical and organisational security measures designed to protect player personal data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• TLS 1.3 / 256-bit SSL encryption on all data transmitted between player devices and r333 servers — including during r333 login, account management, and payment processing.
• Encryption at rest for all databases containing player personal, financial, and gaming data held within r333's infrastructure.
• Access control protocols restricting r333 staff access to player personal data on a strict need-to-know basis, with all access logged and auditable.
• Multi-factor authentication required for all r333 staff accessing systems containing player data.
• Regular security auditing including penetration testing and vulnerability assessments as required by r333's international gaming licence conditions.
• Incident response procedures enabling r333 to detect, contain, and notify players of data security incidents within defined timeframes.

r333 retains player personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following retention framework applies:

• Account data (identity, contact, preference data): Retained for the duration of the active account relationship plus 5 years following account closure, unless a longer period is required by r333's licence authority.
• Financial transaction data (deposit and withdrawal records): Retained for a minimum of 5 years following each transaction date as required by AML compliance obligations under r333's international gaming licence.
• KYC documentation (identity verification documents): Retained for 5 years following the conclusion of the player relationship, in accordance with AML record-keeping requirements.
• Gaming data (bet history, session records): Retained for 3 years following each transaction, or longer where required for dispute resolution or regulatory audit purposes.
• Technical and security data (IP logs, login records): Retained for 12 months in standard circumstances, extended to the duration of any active fraud investigation where applicable.
• Support communications (live chat transcripts, tickets): Retained for 2 years following the closure of the relevant support interaction.

Upon expiry of the applicable retention period, player data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

r333 recognises the following player rights with respect to personal data, exercisable by contacting r333 via the support channels described in Section 14:

11.1 Right of Access

You have the right to request a copy of all personal data r333 holds about you. r333 will provide this information in a portable, machine-readable format within 30 calendar days of receiving a verified request. A reasonable administrative fee may apply for repeat requests made within a 12-month period.

11.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data r333 holds about you. r333 will action valid rectification requests within 14 calendar days. Note that correction of KYC-verified identity data requires re-verification through r333's standard KYC process.

11.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn and no other legal basis applies, or where processing has occurred unlawfully. The right to erasure does not apply where r333 is required to retain data under legal or regulatory obligations — including AML retention requirements applicable to financial transaction records.

11.4 Right to Restrict Processing

You have the right to request that r333 restricts its processing of your personal data — for example, while the accuracy of data is contested or a legitimate interests objection is being assessed. Restricted data will not be actively processed pending resolution of the restriction request.

11.5 Right to Object

Where r333 processes your data on the basis of legitimate interests, you have the right to object to that processing. r333 will cease processing on that basis unless r333 can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

11.6 Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format for the purpose of transmitting it to another data controller.

The r333 platform is strictly intended for adults aged 21 years or older. r333 does not knowingly collect personal data from individuals under the age of 21. The registration process includes an age declaration requirement, and r333 may request identity documentation to verify age compliance at any stage of the player relationship.

If r333 becomes aware that personal data has been collected from an individual under the age of 21 — whether through the registration process, KYC review, or a third-party report — r333 will immediately suspend the relevant account, delete all associated personal data to the extent legally permissible, and may report the matter to relevant authorities where required.

Pakistani parents and guardians who are concerned that a minor may have created an r333 account are encouraged to contact r333 support immediately via live chat. r333 takes underage access prevention extremely seriously as a condition of its international gaming licence.

r333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or r333's gaming licence conditions. The effective date at the top of this Policy will be updated each time a new version is published.

Where changes are material — meaning they substantively affect how player data is collected, used, or shared — r333 will notify registered players through a notification within the Account dashboard or by direct communication to the player's registered mobile number, at least 14 days before the changes take effect.

Continued use of the r333 platform following the effective date of any Policy update constitutes acceptance of the revised Policy. Players who do not accept material changes to this Policy should close their accounts before the changes take effect and may request deletion of their data in accordance with Section 11.3.

For any privacy-related enquiries — including data access requests, rectification requests, erasure requests, complaints, or questions about this Policy — Pakistani players may contact r333 through the following channels:

• Live Chat: Available at r333.biz 24 hours a day, 7 days a week. Live chat is the fastest channel for privacy enquiries requiring prompt action — such as suspected unauthorised account access or urgent erasure requests.
• Email: [email protected] — Please use the subject line "Privacy Request" and include your registered mobile number or username. r333 commits to responding to all privacy email enquiries within 30 calendar days.

When submitting a privacy rights request, please provide sufficient information to enable r333 to verify your identity and locate the relevant account data. r333 may request additional verification before processing access or deletion requests to protect against fraudulent data requests by third parties.