rp786 Privacy Policy — How We Collect, Use & Protect Your Personal Data

rp786 is an online gaming and sports betting platform accessible at rp786.app, operated under an international gaming licence framework. rp786 provides cricket betting, live dealer casino games, premium slot machines, and instant games to registered players in Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, rp786 acts as the data controller in respect of all personal data collected from players and visitors to rp786.app. This means rp786 determines the purposes and means by which your personal data is processed.

Any questions, requests, or concerns regarding your personal data and how rp786 handles it should be directed to the rp786 Data Protection contact, reachable via the contact details set out in Section 16 of this Policy.

rp786 collects and processes the following categories of personal data, depending on the nature of your interaction with the Platform:

rp786 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) except where such data is voluntarily provided in the context of a responsible gaming or self-exclusion request.

rp786 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, using live chat or email support, or interacting with any rp786 form or feature on the Platform.
• Automated collection: Technical data such as IP addresses, session timestamps, device identifiers, and browser characteristics collected automatically each time you access rp786.app, through server logs and similar technologies.
• Cookies and similar technologies: rp786 uses first-party cookies and session storage to manage login sessions, remember preferences, and measure Platform performance. See Section 7 for full details.
• Third-party sources: Where you use a JazzCash or EasyPaisa wallet to deposit, rp786 may receive limited transactional data from those payment providers confirming the status and amount of your transaction. rp786 does not receive your full mobile wallet account credentials from these providers.
• Identity verification providers: rp786 uses licensed third-party KYC service providers to assist with identity document verification. These providers return a verification result and confidence score to rp786, but do not retain your CNIC data for their own independent purposes.

rp786 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and manage your rp786 account, process deposits and withdrawals, settle bets, and deliver the gaming services you have signed up for. Without this processing, rp786 cannot provide the service.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and reporting obligations under the international gaming licence framework under which rp786 operates. This includes retaining transaction and identity records for the periods prescribed by applicable law.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, detect and prevent fraud and bonus abuse, manage responsible gaming obligations, and improve the quality of rp786 products and services — provided such interests are not overridden by your own privacy interests.
• Consent: Where rp786 sends you marketing communications, this is done on the basis of your prior consent, which you may withdraw at any time. See Section 13 for details on managing marketing preferences.

rp786 uses the personal data it collects for the following purposes:

• To register and maintain your rp786 account, verify your identity and age, and manage your PKR wallet.
• To process deposits, verify payment method ownership, and execute withdrawal requests in accordance with the rp786 Terms and Conditions.
• To settle sports bets, record gaming session outcomes, and apply bonus wagering calculations accurately.
• To conduct KYC and AML checks, screen against sanctions lists, and report to regulatory authorities where required by law.
• To detect, investigate, and prevent fraudulent activity, bonus abuse, match-fixing involvement, and other prohibited conduct described in the rp786 Terms and Conditions.
• To provide customer support via live chat and email, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• To administer responsible gaming tools including deposit limit management, cooling-off periods, and self-exclusion — and to enforce these tools as requested by you or mandated by rp786's internal responsible gaming policies.
• To personalise your experience on the Platform, including displaying relevant promotions such as PSL, Eid, and Ramadan seasonal offers based on your account activity and preferences, where you have not opted out of marketing.
• To analyse aggregate Platform usage data, identify technical issues, and improve the rp786 gaming experience over time. This analysis uses anonymised or pseudonymised data wherever possible.
• To send transactional notifications — such as deposit confirmations, withdrawal status updates, and account security alerts — via your registered Pakistani mobile number.

rp786 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Personal data is shared with third parties only in the following circumstances, and only to the minimum extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the transactional data required to process your deposit or withdrawal. These providers operate under their own privacy frameworks and are subject to applicable Pakistani financial regulations.
• KYC and identity verification providers: Licensed third-party providers receive identity document images and personal details solely for the purpose of verifying your age and identity. These providers are bound by strict data processing agreements with rp786.
• Regulatory and law enforcement authorities: rp786 will disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where it is legally required to do so — including under AML reporting obligations.
• Fraud prevention agencies: Where rp786 has reasonable grounds to suspect fraudulent activity, money laundering, or criminal conduct, relevant data may be shared with fraud prevention services or law enforcement without prior notice to the account holder.
• Technology and hosting providers: rp786's Platform infrastructure relies on third-party server hosting, content delivery, and software services. These providers process technical data on rp786's behalf under data processing agreements and are not permitted to use that data for their own independent purposes.
• Business transfers: In the event of a merger, acquisition, or sale of rp786's business or assets, personal data held by rp786 may be transferred to the acquiring entity. Players will be notified of any such transfer and the resulting changes to this Privacy Policy in advance.

rp786 uses cookies and similar browser-based storage technologies on rp786.app. The following types of cookies are in use:

• Essential cookies: Required for the Platform to function correctly. These include session authentication tokens that keep you logged in during a gaming session, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without disrupting Platform functionality.
• Functional cookies: Used to remember your preferences, such as your selected language or last-used deposit method, to improve your experience on return visits. These cookies do not track your activity across other websites.
• Analytics cookies: rp786 uses first-party analytics to understand aggregate usage patterns — such as which pages are visited most frequently, average session duration, and device type distribution. This data is collected in aggregate form and does not identify individual players.
• Security cookies: Used to detect unusual login behaviour, such as logins from unrecognised devices or locations, and to trigger account security alerts where appropriate.

rp786 does not use third-party advertising cookies or allow advertising networks to place cookies on rp786.app. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair or prevent your ability to log in and use the Platform.

rp786 is required by its international gaming licence obligations to verify the identity and age of all players before permitting real-money withdrawals. This process, known as Know Your Customer (KYC), involves the collection and processing of sensitive identity documentation including CNIC copies and facial photographs.

The following specific conditions apply to KYC data collected by rp786:

• CNIC images and facial photographs are transmitted to rp786's licensed KYC verification provider via encrypted connection and are used solely for the purpose of identity and age verification.
• Verified identity documents are stored securely by rp786 for the period required under applicable AML and gaming regulatory obligations — typically a minimum of five (5) years from the date of account closure.
• KYC documents are accessible only to authorised rp786 compliance personnel and the KYC verification provider. They are not accessible to general customer support staff or marketing personnel.
• rp786 does not use CNIC data or facial images for any purpose other than identity verification and regulatory compliance.
• Where a KYC check fails and the account is not opened, submitted identity documents will be securely deleted within 30 days of the failed verification, except where retention is required for AML reporting purposes.

rp786 processes financial data in order to accept deposits and process withdrawals in PKR. The following conditions govern how rp786 handles payment-related personal data:

• rp786 does not store full JazzCash, EasyPaisa, or bank account numbers on its own servers. Payment method references used for withdrawal routing are stored in tokenised or masked form.
• All payment data transmissions between your device, rp786, and the relevant payment provider are protected by SSL encryption.
• Transaction records — including deposit amounts, withdrawal amounts, dates, and payment method identifiers — are retained by rp786 for a minimum of five (5) years to satisfy AML reporting and gaming regulatory requirements.
• rp786 may conduct source-of-funds checks on large deposits or withdrawals as part of its AML compliance programme. You may be asked to provide documentation supporting the origin of funds deposited into your rp786 account.
• rp786 will never ask for your full JazzCash PIN, EasyPaisa mPIN, internet banking password, or any other payment credential via live chat, email, or any other channel. If you receive a communication purporting to be from rp786 requesting such credentials, treat it as fraudulent and contact support immediately.

rp786 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and rp786 servers.
• Encryption at rest for stored personal data, including identity documents and financial records.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for all rp786 internal systems that process personal data.
• Regular security assessments and penetration testing of the rp786 Platform infrastructure.
• Intrusion detection systems and real-time monitoring for anomalous access patterns.
• Formal incident response procedures, including notification protocols in the event of a data breach that affects player personal data.

While rp786 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your rp786 account credentials — including your password and OTPs — confidential. rp786 will never ask for these credentials via support channels.

rp786 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with AML and gaming licence requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required for AML compliance and dispute resolution.
• Gaming activity records: Retained for five (5) years from the date of each gaming session or bet, to support regulatory audits and responsible gaming monitoring.
• Support communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and session data: IP address logs and session records are retained for twelve (12) months, after which they are deleted or fully anonymised.
• Failed KYC submissions: Identity documents submitted for accounts that did not complete KYC are deleted within thirty (30) days, except where AML reporting obligations require longer retention.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the lifetime of your account to evidence compliance with marketing regulations.

On expiry of the applicable retention period, personal data is securely and permanently deleted, or anonymised such that it can no longer be associated with any individual, and retained only in aggregate statistical form.

As a rp786 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact rp786 support using the details in Section 16 — please include your registered mobile number and account username so that your request can be verified and processed efficiently:

• Right of access: You may request a copy of all personal data rp786 holds about you. rp786 will respond to verified access requests within 30 days.
• Right to rectification: If any personal data rp786 holds about you is inaccurate or incomplete, you have the right to request correction. Corrections to identity data may require re-submission of KYC documentation.
• Right to erasure: You may request deletion of your personal data. Note that this right is subject to rp786's legal retention obligations — data that must be retained under AML or gaming regulatory requirements cannot be deleted prior to the expiry of the applicable retention period.
• Right to restrict processing: You may request that rp786 temporarily pause processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You may request that rp786 provide your personal data in a commonly used, machine-readable format, so that it can be transferred to another service if you wish.
• Right to object: You have the right to object to rp786 processing your personal data on the basis of legitimate interests. rp786 will assess your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

rp786 may send promotional communications to players who have provided consent to receive marketing messages. This includes notifications about seasonal promotions (such as Eid, Ramadan, and PSL campaigns), new game launches, deposit bonus offers, and loyalty programme updates.

• Marketing messages are sent via SMS to your registered Pakistani mobile number and, where an email address has been provided, via email.
• You may opt out of marketing communications at any time by updating your preferences within your rp786 account dashboard, or by contacting support and requesting that marketing communications be stopped.
• Opting out of marketing does not affect transactional notifications — rp786 will continue to send essential account messages such as deposit confirmations, withdrawal updates, security alerts, and responsible gaming notifications regardless of your marketing preferences.
• rp786 does not engage in cold calling or unsolicited telephone marketing.
• During the Ramadan period, rp786 is mindful of the cultural and religious significance of this time and will ensure any marketing communications are tasteful, respectful, and culturally appropriate for Pakistani audiences.

rp786 is strictly an adult gaming platform. Access to real-money gaming products is prohibited for any person under the age of 21 years. rp786 does not knowingly collect personal data from individuals under the age of 21, and does not permit underage persons to register accounts or participate in any gaming activity on the Platform.

Where rp786 becomes aware, or has reasonable grounds to suspect, that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all gaming activity will be voided, and the collected personal data will be deleted as soon as reasonably practicable, except where retention is required for regulatory reporting purposes.

Parents and guardians who are concerned that a minor may have accessed or registered on rp786 are urged to contact rp786 support immediately via live chat or by email so that appropriate action can be taken without delay.

rp786 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or rp786's data processing practices. The version number and last updated date at the top of this document will be revised each time a material change is made.

Where a material change affects the way rp786 processes your personal data, rp786 will notify you via SMS to your registered Pakistani mobile number at least 7 days before the change takes effect. For minor or administrative updates — such as correcting typographical errors or clarifying existing language without changing the substance of the Policy — notification may not be provided, but the updated Policy will be published on rp786.app immediately.

Your continued use of rp786 following the effective date of any amended Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any change to this Privacy Policy, you should cease using rp786 and may request account closure by contacting support.

For all data protection queries, personal data access requests, rectification requests, erasure requests, or privacy-related complaints, please contact the rp786 Data Protection team through the following channels:

• Live Chat: Available 24/7 within your rp786 account dashboard. This is the fastest route for urgent data or security concerns.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered mobile number and account username so the request can be verified efficiently.

rp786 support serves players across all of Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, Multan, and Hyderabad. All privacy-related requests are handled in English and are acknowledged within 24 hours on working days. Full responses to data rights requests are issued within 30 calendar days of identity verification.