rss99 Privacy Policy

1. About This Privacy Policy

rss99 ("the Company," "we," "us," or "our") is committed to protecting the personal data of every player who registers and uses our online casino and sports betting platform. This Privacy Policy sets out in plain, accessible terms how rss99 collects, processes, stores, shares, and protects personal data relating to our Pakistani and international player base.

This Policy is to be read in conjunction with the rss99 Terms & Conditions and the rss99 Responsible Gaming Policy, both of which are incorporated by reference. Together, these three documents form the complete legal framework governing your relationship with rss99.

rss99 operates under an international online gaming licence and is subject to the data protection obligations imposed by the licensing authority. Our data handling practices are reviewed periodically to ensure ongoing compliance with applicable standards.

If you have any questions about this Privacy Policy or how rss99 handles your data, you may contact us at any time using the details provided in Section 13 of this document.

2. Personal Data We Collect

rss99 collects personal data in several ways — directly from you when you register or interact with the Platform, automatically through technical systems as you use our services, and from verified third-party sources where permitted by law. The categories of data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name as it appears on your Pakistani CNIC;
• Date of birth (to verify the mandatory 21+ age requirement);
• Pakistani mobile phone number;
• Email address;
• Username and encrypted account password;
• Residential address (city and province level at minimum).

2.2 Identity Verification (KYC) Data

• Copy of Pakistani National Identity Card (CNIC — front and back);
• Proof of payment method ownership (e.g., JazzCash or EasyPaisa account confirmation);
• Any additional identity documentation requested by rss99 for anti-money laundering compliance purposes, such as utility bills or bank statements.

2.3 Financial & Transaction Data

• Deposit amounts, dates, and payment method details (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20);
• Withdrawal requests, processing dates, and settlement records;
• PKR wallet balance history and transaction logs;
• Bonus credits received and wagering activity records.

2.4 Gaming Activity Data

• All bets placed, including game type, stake amount, outcome, and settlement timestamp;
• Sports betting activity including cricket markets, PSL matches, and other sporting events;
• Session duration, login timestamps, and game session logs;
• Responsible gaming tool activations (deposit limits set, cooling-off periods applied, self-exclusion status).

2.5 Technical & Device Data

• IP address and approximate geographic location (city level);
• Device type, operating system, and browser version;
• Mobile network operator (Jazz, Zong, Telenor, Ufone, Warid);
• Session cookies and unique device identifiers where applicable.

2.6 Communications Data

• Live chat transcripts from interactions with rss99 support agents;
• Email correspondence with the rss99 team;
• Complaint and dispute records;
• Voluntary feedback and survey responses submitted via the Platform.

3. How rss99 Uses Your Personal Data

rss99 uses the personal data we collect for the following specific purposes:

4. Legal Basis for Processing

rss99 relies on the following legal bases for processing your personal data, as recognised under applicable data protection law:

• Contract Performance: Processing your data is necessary to fulfil our contractual obligations to you — including operating your account, processing deposits, settling bets, and enabling withdrawals.
• Legal Obligation: Certain processing activities — including KYC verification, AML screening, age verification, and regulatory reporting — are mandatory requirements imposed on rss99 by our licensing authority and applicable financial regulations.
• Legitimate Interests: rss99 processes certain data where we have a legitimate business interest that is not overridden by your privacy rights — including fraud prevention, security monitoring, and platform analytics conducted using anonymised data.
• Consent: Where rss99 processes data for marketing communications or optional cookies, we will request your explicit consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Third Parties

rss99 does not sell your personal data to third parties. We may share your data with trusted service providers and regulatory bodies strictly as required to operate the Platform and meet our legal obligations:

5.1 Service Providers

• Payment processors: JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, and USDT processing intermediaries — for the purpose of executing deposit and withdrawal transactions;
• Identity verification providers: Third-party KYC and AML compliance platforms used to verify CNIC documents and screen against sanctions lists;
• Game software providers: Licensed casino game studios whose software runs within the rss99 platform — these providers may receive anonymised session identifiers but not personally identifiable player data;
• Cloud infrastructure and security providers: Hosting, DDoS protection, and data storage partners operating under strict data processing agreements with rss99.

5.2 Regulatory & Legal Disclosures

rss99 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of law where required to do so by applicable law, court order, or the instructions of our licensing authority. Such disclosures will be limited to the minimum data necessary to satisfy the specific legal requirement.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of rss99's assets, personal data held by rss99 may be transferred to the successor entity as part of that transaction. Affected players will be notified prior to their data being transferred and becoming subject to a different privacy policy.

6. Cookies & Tracking Technologies

rss99 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device by your browser. The types of cookies used by rss99 are as follows:

• Essential Cookies: Required for the Platform to function — including maintaining your login session, remembering language preferences, and ensuring security features such as CSRF protection operate correctly. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the rss99 Platform — including which pages are visited most frequently and where players encounter issues. This data is used to improve the Platform and is not linked to individual player identities.
• Functional Cookies: Enable enhanced Platform features such as remembering your preferred deposit method, storing your bet slip preferences, and pre-filling your login username for faster access (when the "Remember Me" option is selected).
• Marketing Cookies: Where you have given explicit consent, marketing cookies may be used to display rss99 promotional content relevant to your gaming history and preferences. You may withdraw consent for marketing cookies at any time via your account settings.

You may control and delete cookies through your browser settings at any time. Note that disabling essential cookies may prevent you from accessing certain features of the rss99 Platform, including the ability to maintain a logged-in session.

7. Data Security

rss99 implements a multi-layered approach to data security, combining technical controls, operational procedures, and access management practices to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

7.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all data in transit between your device and rss99 servers;
• AES-256 encryption for sensitive data at rest — including CNIC copies and financial records;
• Bcrypt password hashing — your rss99 password is never stored in readable form;
• Web Application Firewall (WAF) and DDoS protection;
• Intrusion detection and 24/7 security monitoring;
• Regular penetration testing by independent security professionals.

7.2 Operational Security Measures

• Access to player data is restricted to rss99 staff who have a legitimate operational need — on a strict least-privilege basis;
• All staff with access to personal data undergo data protection training and are subject to confidentiality obligations;
• Player data access is logged and audited;
• Data breach response procedures are documented and tested regularly.

8. Data Retention

rss99 retains your personal data for the period necessary to fulfil the purposes described in this Privacy Policy and to comply with our regulatory obligations. The specific retention periods applicable to different categories of data are as follows:

Upon expiry of the applicable retention period, personal data is either securely and irreversibly deleted from rss99 systems or anonymised such that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

9. Your Data Rights

As an rss99 player, you hold the following rights with respect to your personal data. These rights are not merely stated — they are genuinely exercisable by contacting rss99 using the details in Section 13 of this Policy.

To exercise any of the above rights, please contact rss99 via live chat or email at [email protected] with the subject line "Data Rights Request." We may need to verify your identity before processing your request.

10. Children & Minors

Age verification is a mandatory step in the rss99 account registration and withdrawal process. rss99 uses CNIC verification and, where necessary, additional documentary evidence to confirm the age of all players prior to allowing access to real-money gambling features on the Platform.

If you believe that a minor has registered an account with rss99 — whether your own child or another individual under 21 — please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receipt of the report.

We strongly encourage Pakistani parents and guardians to make use of internet filtering and parental control tools to prevent minors from accessing gambling websites. rss99 supports all responsible parenting measures in this regard.

11. International Data Transfers

rss99's servers and service providers may be located in jurisdictions outside of Pakistan. Where your personal data is transferred to a country that does not provide a level of data protection equivalent to that of our licensing jurisdiction, rss99 will implement appropriate safeguards to ensure that your data remains protected throughout the transfer, including:

• Standard contractual data protection clauses incorporated into agreements with third-party processors;
• Binding corporate rules where applicable within affiliated group entities;
• Use of data processing providers who maintain independently verified security certifications.

By using the rss99 Platform from Pakistan, you acknowledge that your personal data may be stored and processed in these international locations, subject always to the protections described in this Policy.

12. Updates to This Privacy Policy

rss99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. When material changes are made to this Policy, rss99 will notify registered players by:

• Sending an email notification to the address associated with your rss99 account;
• Displaying a prominent notice within the rss99 Platform upon your next login;
• Updating the "Last Updated" date at the top of this document.

Your continued use of the rss99 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should discontinue use of the Platform and request account closure prior to the effective date of the change.

The most current version of the rss99 Privacy Policy is always accessible at rss99.bio/privacy-policy. Previous versions may be requested by contacting our support team.

13. Contact & Complaints

If you have any questions, concerns, or complaints relating to this Privacy Policy or rss99's handling of your personal data, we encourage you to contact us in the first instance using the following channels:

• Live Chat: Available 24/7 within the rss99 Platform — the fastest route for general data enquiries and account-specific requests.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for prompt routing. rss99 aims to respond to all privacy-related emails within 72 hours during business days.

rss99 takes all privacy complaints seriously. Upon receipt of a complaint, we will:

1. Acknowledge your complaint within 48 hours;
2. Investigate the matter thoroughly with reference to our internal data records and processing logs;
3. Provide you with a full written response within 14 business days of acknowledgement;
4. Implement any necessary corrective action identified through the review process.

If you are not satisfied with rss99's response to your privacy complaint following the internal review process, you have the right to escalate your complaint to the data protection supervisory authority of the jurisdiction in which rss99 holds its gaming licence, or to seek independent legal advice.