re999 Privacy Policy

This Privacy Policy ("Policy") is published by re999 ("we", "us", "re999") and applies to all personal data collected through the re999 website at re999.bio, including all associated gaming services, promotional activities, customer support interactions, and any other touchpoints through which re999 receives personal information from users ("you", "Member").

re999 is committed to handling your personal information in a responsible, transparent, and lawful manner. We recognise that members of the re999 community — located across Pakistan in cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi — entrust us with sensitive personal and financial data when they engage with our platform, and we take that trust seriously.

This Policy is designed to give you a clear and honest picture of our data practices. It covers the categories of personal data we collect, the purposes for which we use that data, the circumstances under which we may share it with third parties, and the rights you hold as a data subject. Where we use technical or legal language, we have made every effort to explain it in plain, accessible English.

This Policy should be read alongside the re999 Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the re999 platform. In the event of any conflict between this Policy and those documents on matters relating specifically to personal data, this Privacy Policy shall take precedence.

re999 collects personal data through several channels, including directly from you during account registration, through your use of the platform, and in some cases from third-party sources for verification and fraud-prevention purposes. The categories of personal data we collect are detailed below.

re999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for identification purposes, except where this is incidentally captured in identity documents submitted for KYC and is not processed separately for any purpose other than identity verification.

re999 uses the personal data it collects for the following specific, lawful purposes. We do not use your data in ways that are incompatible with these stated purposes without first obtaining your consent or establishing a separate legal basis for doing so.

• Account Management: To create, maintain, and administer your re999 account, including processing your login credentials, verifying your identity, and managing your account preferences and responsible gaming settings.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment channels. Financial data is used solely to facilitate your transactions and to maintain accurate records of your account balance and transaction history.
• KYC & AML Compliance: To verify your identity, confirm your age eligibility (21+), and screen your account activity for indicators of money laundering, terrorist financing, or other financial crime in accordance with our legal obligations.
• Platform Operation & Improvement: To operate, maintain, and improve the re999 platform, including diagnosing technical issues, optimising game performance, and analysing aggregate usage patterns to enhance the member experience.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling behaviour, to administer deposit limits, cooling-off periods, and self-exclusion requests, and to provide proactive responsible gaming interventions where appropriate.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent account activity, unauthorised access, bonus abuse, match-fixing involvement, and other prohibited conduct as defined in the re999 Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance. Support communications are logged and may be reviewed for quality assurance and training purposes.
• Marketing Communications: Where you have provided your explicit consent, to send you promotional emails, SMS notifications, and in-platform messages about re999 bonuses, new game releases, and special events. You may withdraw this consent at any time.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from government or law enforcement authorities.

re999 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Much of our data processing is necessary to perform our contractual obligations to you as a re999 member — including operating your account, processing transactions, and settling bets.
• Legal Obligation: Certain processing activities are required to comply with our legal obligations, including KYC identity verification, anti-money laundering screening, and data retention requirements mandated by financial regulators.
• Legitimate Interests: re999 processes some data on the basis of its legitimate business interests, including fraud prevention, platform security, and improving the quality of our gaming services — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities — most notably, direct marketing communications — re999 relies on your explicit consent. You may withdraw this consent at any time without affecting your ability to use the re999 platform.

re999 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and always subject to appropriate contractual, technical, and organisational safeguards:

• Payment Service Providers: Financial data is shared with JazzCash, EasyPaisa, and participating banks (HBL, UBL, Meezan Bank) solely to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and applicable financial regulations.
• Identity Verification & KYC Partners: re999 may engage third-party KYC and AML screening providers to verify identity documents and screen against sanctions lists. These providers process data under strict contractual data processing agreements.
• Game Content Providers: Where re999 offers games developed by third-party studios, certain technical and gameplay data may be transmitted to those providers for game operation purposes. No identity or financial data is shared with game providers for their own marketing.
• Fraud Prevention Services: re999 may share technical data (such as IP addresses and device fingerprints) with fraud prevention platforms to detect and block fraudulent account activity across the gaming industry.
• Legal & Regulatory Authorities: re999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, warrant, or regulation. Where permitted by law, re999 will notify you of any such request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of re999's business, your personal data may be transferred to the acquiring entity, provided that the acquiring entity agrees to protect your data in accordance with this Policy.

re999 does not transfer personal data to recipients in jurisdictions that do not provide an adequate level of data protection without first putting in place appropriate safeguards such as contractual data transfer agreements.

re999 uses cookies and similar tracking technologies to operate and improve the platform, remember your preferences, analyse usage patterns, and deliver relevant content. By continuing to use the re999 website, you consent to the use of cookies as described in this section.

The following categories of cookies are used on the re999 platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use re999.
• Functional Cookies: Remember your preferences, such as your preferred language, display settings, and responsible gaming limits, so you do not need to re-enter them on each visit.
• Analytics Cookies: Used to collect aggregate, anonymised data about how members navigate and interact with re999, helping us identify usability improvements and popular content. Individual users are not identifiable from analytics data.
• Security Cookies: Assist in detecting fraudulent activity, identifying unusual login patterns, and protecting your account from unauthorised access attempts.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Re999 does not use third-party advertising cookies or retargeting pixels to serve you advertisements on external websites.

re999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable laws or regulatory obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your active re999 account plus a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping obligations.
• Gaming Activity Data: Retained for five years from the date of the relevant gaming activity, or longer if required for dispute resolution or regulatory purposes.
• KYC Documents: Retained for five years from the date of submission or from account closure, whichever is later.
• Support Communications: Retained for two years from the date of the last communication in a given support thread, except where the matter relates to a dispute or legal proceedings, in which case data is retained until the matter is fully resolved.
• Marketing Consent Records: Retained for as long as you remain a registered re999 member, and for one year following account closure, to provide a record of your consent decisions.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. re999 conducts periodic data audits to ensure that retention schedules are being applied correctly across all data categories.

As a re999 member, you hold the following rights in relation to your personal data. re999 is committed to honouring these rights promptly and without unnecessary bureaucratic delay. To exercise any of these rights, contact our data team at the address provided in Section 12.

re999 will respond to all verified rights requests within 30 days of receipt. In cases of particular complexity, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

re999 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your browser or device and re999 servers is encrypted using industry-standard TLS protocols. Look for the padlock icon in your browser address bar as confirmation that your connection is secure.
• Data Encryption at Rest: Sensitive data stored on re999 servers — including financial account details and identity documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within re999 is restricted on a strict need-to-know basis. Staff who are not required to process a particular category of data in the performance of their role are denied access to it.
• Two-Factor Authentication (2FA): re999 strongly recommends that all members enable 2FA on their accounts. 2FA adds an additional verification layer that significantly reduces the risk of unauthorised account access even if login credentials are compromised.
• Intrusion Detection & Monitoring: re999 operates continuous security monitoring systems to detect and respond to anomalous access patterns, potential intrusions, and data exfiltration attempts in real time.
• Data Breach Response: In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, re999 will notify affected members without undue delay and will take immediate steps to contain and remediate the breach.

While re999 applies comprehensive technical and organisational security measures, no internet-based platform can provide absolute guarantees of security. You are responsible for keeping your re999 login credentials confidential and for ensuring that you log out of your account when using shared or public devices. If you suspect that your account has been compromised, contact re999 support immediately.

re999 is strictly an adult gaming platform. Registration and participation in any re999 gaming or betting activity is prohibited for persons under the age of 21. re999 does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

During the registration process, all applicants are required to confirm that they are 21 years of age or older. re999 enforces age verification through its mandatory KYC process, which requires all members to submit valid government-issued identity documentation confirming their date of birth before any deposit or gameplay is permitted.

If re999 becomes aware or reasonably suspects that an account has been registered by, or is being used by, a person under the age of 21, re999 will immediately suspend the account, reverse any outstanding transactions where possible, delete any personal data collected in connection with that account, and report the matter to relevant authorities where required by law.

re999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the features and services offered on the platform. The "Last Reviewed" date at the top of this Policy will be updated each time a material change is made.

Where changes to this Policy are material — meaning they significantly affect your rights or the way in which re999 processes your personal data — re999 will provide you with reasonable advance notice of the change. This notice will be delivered via email to the address registered on your account and/or via a prominent in-platform notification. Minor clarifications or non-substantive edits will take effect immediately upon publication without separate notification.

Your continued use of the re999 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the amended Policy. If you do not agree with any changes, you should discontinue use of the platform and may request account closure by contacting re999 customer support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way re999 handles your personal data, you are encouraged to contact our dedicated data privacy team in the first instance. We aim to resolve all privacy-related enquiries promptly, fairly, and in good faith.

You may reach the re999 data privacy team through the following channel:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 10 business days.

When submitting a privacy enquiry, please include your registered re999 username and a clear description of your request or concern. This will help us locate your account records and respond to you as efficiently as possible.

If you are not satisfied with re999's response to your privacy complaint, or if you believe that re999 is processing your personal data in a manner that does not comply with applicable data protection law, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. re999 will cooperate fully with any investigation conducted by a competent supervisory authority.