rs788 Privacy Policy

1 Who We Are

This Privacy Policy is issued by the operator of the rs788 platform ("rs788", "we", "us", or "our"), accessible at rs788.net and all associated sub-domains, mobile web interfaces, and any downloadable applications (collectively, the "Platform"). rs788 is Pakistan's premier online casino and sports betting destination, serving players across Karachi, Lahore, Islamabad, Faisalabad, and every other city and town across the country.

For the purposes of this Privacy Policy, rs788 acts as the data controller in respect of personal data collected from players and visitors to the Platform. Where rs788 engages third-party processors to handle data on its behalf, it does so only under written data processing agreements that bind those processors to confidentiality and security obligations no less protective than those described in this Policy.

2 Data We Collect

rs788 collects personal data through a variety of channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of data we collect are set out below.

2.1 Account & Registration Data

When you open an rs788 account, we collect: full legal name, date of birth, national identity card (CNIC) number or passport number, residential address, email address, and mobile phone number. This information is mandatory — without it, we cannot open or maintain a compliant account.

2.2 Identity Verification (KYC) Documents

In order to comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations, we may request copies of government-issued photographic identification (CNIC, passport, or driver's licence), proof of address (utility bill or bank statement dated within three months), and in some circumstances, proof of source of funds. These documents are handled with the highest level of care and are never used for any purpose beyond legal compliance and fraud prevention.

2.3 Financial Data

When you make deposits or withdrawals, we collect transaction records including the payment method used (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or Visa/Mastercard), transaction amounts in PKR, timestamps, and partial account identifiers. rs788 does not store full card numbers or complete mobile wallet credentials on its own servers — these are handled by PCI-DSS compliant payment processors.

2.4 Gaming & Betting Activity

We maintain detailed records of your gaming activity on the Platform, including games played, wagers placed, outcomes, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical & Device Data

We automatically collect certain technical data when you access the Platform: IP address, browser type and version, operating system, device type and identifiers, referring URL, pages visited, session duration, and click-path data. This data is collected primarily through cookies and server logs.

2.6 Communications Data

If you contact rs788's customer support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any files shared, for quality assurance, training, and dispute resolution purposes.

3 How We Use Your Data

rs788 uses your personal data only for the purposes described below. We do not use personal data for purposes that are incompatible with those listed here without first seeking your consent or establishing another lawful basis.

• Account creation and management: Creating and maintaining your rs788 account, processing deposits and withdrawals, and providing access to gaming services.
• Identity and age verification: Confirming that you are who you say you are and that you meet the 21+ age requirement before you are permitted to wager real money.
• Regulatory compliance: Meeting our obligations under applicable anti-money laundering legislation, KYC requirements, and any reporting obligations imposed by our licensing authority.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Responsible gaming: Monitoring your gaming patterns to identify signs of problematic gambling behaviour and, where appropriate, applying self-exclusion tools, deposit limits, or reaching out proactively to offer support.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Service improvement and analytics: Analysing aggregated and anonymised usage data to understand how players interact with the Platform and to improve game offerings, user interface design, and promotional effectiveness.
• Marketing communications: Sending you promotional offers, seasonal promotions (including Eid and Ramadan campaigns), and personalised recommendations — but only where you have consented to receive such communications or where we have a legitimate interest basis that is not overridden by your rights. You may opt out at any time.
• Legal proceedings: Using or disclosing data as required to establish, exercise, or defend legal claims.

4 Legal Basis for Processing

rs788 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing is necessary to perform the contract we have with you (i.e., the rs788 Terms & Conditions) — for example, to open your account, process payments, and deliver gaming services.
• Legal obligation: Processing is required to comply with legal and regulatory obligations, including AML/KYC rules, age verification requirements, and regulatory reporting.
• Legitimate interests: Processing is necessary for rs788's legitimate interests — such as fraud prevention, platform security, and service analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where no other legal basis applies — most commonly for non-essential cookies and direct marketing communications — we rely on your freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Sharing Your Data

rs788 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only with recipients who are bound by appropriate confidentiality and data protection obligations.

• Payment processors: To facilitate deposits and withdrawals, we share necessary transaction data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network processors. These providers handle data in accordance with their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC and age verification services receive copies of identity documents solely for the purpose of completing verification checks required by our licensing obligations.
• Game providers: Where games are supplied by third-party studios, those providers may receive a player session token and game outcome data necessary to deliver the game. They do not receive your full personal profile.
• Regulatory authorities: We are required by law to report certain transactions and player activities to financial intelligence units, our licensing regulator, and law enforcement agencies where legally compelled to do so.
• Professional advisors: Our legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and under binding confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving rs788, player data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer.

6 Cookies & Tracking Technologies

rs788 uses cookies, web beacons, pixel tags, and similar technologies to operate and improve the Platform. The types of cookies we use are described below.

• Strictly necessary cookies: These are essential to the operation of the Platform — for example, session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without impairing core Platform functionality.
• Performance & analytics cookies: These collect anonymised data about how visitors use the Platform — which pages are visited most, where users drop off, and how long sessions last. We use this data to improve the Platform experience.
• Functional cookies: These remember your preferences — such as language settings, display preferences, and recently played games — to personalise your experience.
• Marketing cookies: Where you have consented, these track your activity on rs788.net to enable personalised promotional offers. They may also be used to measure the effectiveness of our marketing campaigns.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may limit the functionality of the Platform. For detailed instructions on managing cookies in popular browsers (Chrome, Firefox, Safari, Edge), please refer to your browser's help documentation.

7 Data Retention

rs788 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The general retention framework is as follows:

• Active account data: Retained for the duration of your account relationship with rs788, plus a minimum of five (5) years after account closure to satisfy AML record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of the last transaction on the account, as required by financial crime prevention regulations.
• Transaction records: Retained for a minimum of five (5) years to comply with financial record-keeping requirements and to facilitate dispute resolution.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution, responsible gaming monitoring, and regulatory reporting purposes.
• Communications data: Support communications are retained for two (2) years unless they relate to an active dispute or regulatory investigation, in which case retention is extended until resolution plus one (1) year.
• Marketing consent records: Retained for the duration of the marketing relationship plus three (3) years, to demonstrate that consent was lawfully obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is not technically feasible, data is destroyed in accordance with secure disposal procedures.

8 International Transfers

rs788 operates with a global infrastructure, which means that your personal data may be transferred to, stored in, or processed in countries other than Pakistan. This may occur, for example, when game providers, cloud hosting providers, or KYC verification services are based in other jurisdictions.

Whenever personal data is transferred internationally, rs788 ensures that appropriate safeguards are in place. These may include:

• Transferring data only to countries that have been assessed as providing an adequate level of data protection.
• Using contractual clauses that impose data protection obligations on the recipient equivalent to those required under applicable law.
• Ensuring that third-party processors are certified under recognised security frameworks (such as ISO 27001 or SOC 2).

If you would like further information about the safeguards applied to any specific international transfer, please contact us at [email protected].

9 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by rs788. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days, or sooner where feasible.

• Right of access: You may request a copy of the personal data rs788 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that rs788 delete your personal data. This right is subject to overriding legal obligations — for example, we cannot delete KYC or transaction records that we are legally required to retain.
• Right to restriction: You may request that rs788 restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, rs788 will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10 Children & Minors

Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms. If you believe a minor in your care has registered on rs788, please contact us immediately at [email protected] so we can take prompt action.

11 Security Measures

rs788 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and rs788's servers is encrypted using 256-bit SSL, indicated by the padlock icon and "https" in your browser's address bar.
• Encryption at rest: Sensitive data — including identity documents and financial records — is encrypted in storage using AES-256 encryption.
• Access controls: Access to personal data within rs788's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo regular privacy and security training.
• Multi-factor authentication (MFA): Administrative access to data systems requires multi-factor authentication. We also offer MFA to players for their own account security.
• Penetration testing: rs788 conducts regular third-party security audits and penetration tests to identify and remediate vulnerabilities in its systems.
• Incident response: In the event of a personal data breach, rs788 has a documented incident response plan. Affected players and relevant authorities will be notified in accordance with applicable legal requirements.

While we take all reasonable steps to protect your data, no internet-based system is 100% secure. You also play an important role in keeping your account safe — use a strong, unique password for your rs788 account, enable MFA, and never share your login credentials with anyone.

12 Third-Party Links

The rs788 Platform may contain links to third-party websites or services — for example, links to payment provider portals or responsible gaming resources. This Privacy Policy applies only to the rs788 Platform. rs788 is not responsible for the privacy practices of any third-party site, and we encourage you to review the privacy policies of any external site you visit before submitting personal data.

The presence of a link on the rs788 Platform does not constitute an endorsement of the linked site or its privacy practices.

13 Policy Updates

rs788 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. When we make material changes, we will:

• Publish the updated Policy on this page with a revised effective date.
• Display a prominent notice on the rs788 Platform for a reasonable period after the change takes effect.
• Where the change is significant, notify registered players via the email address associated with their account.

Your continued use of the rs788 Platform after any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any material change, you should close your account before the change takes effect.

14 Contact & Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or rs788's data practices, please reach out to our privacy team through the following channels:

• Email: [email protected] — use the subject line "Privacy Request" for fastest routing.
• Live Chat: Available 24/7 on rs788.net — for urgent privacy matters, live chat typically connects you with a support agent within 15 minutes.
• Response time: We aim to acknowledge all privacy correspondence within 48 hours and to provide a substantive response within 30 days of receiving a complete request.

If you are not satisfied with rs788's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or regulatory body in your jurisdiction. rs788 will cooperate fully with any investigation conducted by a competent supervisory authority.

For responsible gaming concerns, self-exclusion requests, or account closure, please contact our dedicated welfare team via live chat or email with the subject line "Responsible Gaming Request". Visit our Responsible Gaming page for further resources and self-assessment tools.