Privacy Policy

This Privacy Policy ("Policy") describes how RS6999 ("RS6999", "we", "us", "our") collects, uses, stores, shares and protects personal data in connection with the RS6999 website at https://rs6999.cam and any associated subdomains, mobile interfaces or applications (collectively, "the Platform" or "the Service").

RS6999 is an online casino and sports betting platform. In operating the Platform and delivering services to users, we necessarily process personal data. This Policy is provided in compliance with our obligations as a data controller and to enable users to make informed decisions about their data.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform overall. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall prevail.

The following terms have the meanings assigned below throughout this Policy:

• Personal Data: Any information relating to an identified or identifiable natural person ("data subject"), including name, email address, date of birth, IP address, financial transaction records and identity documents.
• Processing: Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, combination, restriction, erasure or destruction.
• Data Controller: The entity that determines the purposes and means of processing personal data. For data collected through the RS6999 Platform, the Data Controller is RS6999.
• Data Processor: A third party that processes personal data on behalf of the Data Controller under a contractual arrangement and documented instructions.
• Consent: A freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their personal data for a stated purpose.
• KYC: Know Your Customer — the process of verifying a user's identity, age and, where required, source of funds for regulatory and anti-money-laundering purposes.
• Cookies: Small text files stored on a user's device by the Platform for session management, analytics and functional purposes.

RS6999 acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, RS6999 determines the purposes for which personal data is collected and the means by which it is processed. Details of how to contact RS6999 in its capacity as Data Controller are set out in Section 15 of this Policy.

Where RS6999 engages third-party service providers to process data on its behalf — such as KYC verification partners, payment processors and game studios — those parties act as Data Processors under contractual arrangements that require them to process data only in accordance with RS6999's documented instructions and to maintain appropriate security standards.

RS6999 collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the main data categories and the context in which they are collected.

RS6999 processes personal data for the following stated purposes only:

RS6999 processes personal data under one or more of the following legal bases, depending on the processing purpose:

• Contractual Necessity: Processing required to perform the contract between RS6999 and the user — including account operation, game delivery, deposit and withdrawal processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring and record-keeping obligations.
• Legitimate Interests: Processing necessary for RS6999's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement, where those interests are not overridden by the data subject's rights.
• Consent: Where no other legal basis applies, RS6999 will seek your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. Withdrawal of consent in respect of processing necessary for account operation may result in account closure.

RS6999 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that enable the Platform to recognise your session, remember preferences and analyse usage patterns.

RS6999 does not sell personal data to third parties. RS6999 may share personal data with the following categories of recipients only to the extent necessary for the stated purposes:

• KYC and Identity Verification Providers: Third-party services that process identity documents and liveness checks on RS6999's behalf to complete account verification.
• Payment Processors: Financial intermediaries required to process deposit and withdrawal transactions. The data shared is limited to what is technically necessary to execute the transaction.
• Game Studios and Content Providers: Providers of casino games, slots and live dealer services may receive session data necessary to deliver the game and record results. Game providers are contractually required to protect this data.
• Fraud Prevention and AML Services: Specialist services that assist RS6999 in detecting and preventing fraudulent activity, money laundering and other prohibited conduct.
• Legal and Regulatory Authorities: Competent governmental, regulatory or law enforcement authorities where RS6999 is legally required to disclose information or where disclosure is necessary to protect RS6999's legal rights.
• Professional Advisers: Lawyers, accountants, auditors and other professional advisers where data disclosure is necessary in the context of legitimate professional advisory services, subject to professional confidentiality obligations.

RS6999 operates as an international platform. Personal data collected through the Platform may be transferred to, stored and processed in countries other than Pakistan, including countries where RS6999's servers, data processors or affiliated entities are located.

Where personal data is transferred internationally, RS6999 implements appropriate safeguards to ensure that the data receives a standard of protection equivalent to that described in this Policy. Such safeguards may include contractual clauses, data processing agreements or transfers to jurisdictions that maintain recognised data protection standards.

Players based in Pakistan should be aware that Pakistan may not be considered a jurisdiction with equivalent data protection standards by the authorities of some other countries. RS6999's international transfer safeguards are designed to address this gap independently of the absence of a Pakistani data protection statute.

RS6999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general principles apply:

• Account Data: Retained for the duration of the active account relationship. Following account closure, account data may be retained for a period defined by applicable AML and financial record-keeping requirements.
• KYC and Identity Documents: Retained for the period required by applicable AML regulations, which typically requires retention for a minimum of five years following the end of the business relationship.
• Transaction Records: Financial transaction records are retained for audit, AML and dispute resolution purposes for the period required by applicable law, typically a minimum of five years.
• Support Communications: Customer support records are retained for a period sufficient to resolve complaints and for quality assurance purposes, after which they are deleted or anonymised.
• Analytics Data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data.
• Responsible Gambling Records: Self-exclusion and limit records are retained for the duration necessary to enforce those restrictions and for a period thereafter to prevent circumvention.

RS6999 recognises the following data subject rights. To exercise any of these rights, please contact RS6999 using the details in Section 15. RS6999 will respond to valid requests within a reasonable timeframe, typically within 30 days.

The RS6999 Platform is strictly intended for adults aged 18 years and above (or the higher minimum age required by the applicable jurisdiction). RS6999 does not knowingly collect personal data from any person under the minimum required age.

Where RS6999 becomes aware — through KYC verification, age-check processes or any other means — that personal data has been collected from a minor, that data will be promptly deleted, the associated account will be closed and any transactions processed during the period of underage access will be subject to review.

RS6999 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the RS6999 Platform is encrypted using TLS (Transport Layer Security). The Platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within RS6999's systems is restricted on a need-to-know basis. Staff who have access to personal data are subject to confidentiality obligations.
• Secure KYC Portal: Identity verification documents are submitted and processed exclusively through a dedicated, encrypted verification interface. RS6999 will never request identity documents via email, unencrypted chat or any other unsecured channel.
• Intrusion Detection and Monitoring: RS6999 maintains security monitoring systems to detect and respond to potential data security incidents.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to individual rights, RS6999 will take steps to contain the breach, notify affected individuals where required and report to relevant authorities as appropriate.

No data transmission over the internet or electronic storage system is completely secure. While RS6999 implements the measures described above, absolute security cannot be guaranteed. Players are encouraged to use strong, unique passwords, enable any available two-factor authentication and notify RS6999 promptly of any suspected unauthorised account access.

RS6999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, platform operations or data processing practices. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Where a material amendment is made that significantly affects how personal data is collected or used, RS6999 will endeavour to notify registered users via email or a prominent notice on the Platform prior to the amendment taking effect. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms.

Players are encouraged to review this page periodically to remain informed of how their personal data is being handled. The current version of this Policy is always available at https://rs6999.cam/privacy-policy.

For any questions, concerns or requests relating to this Privacy Policy or RS6999's handling of your personal data — including the exercise of any data subject right described in Section 11 — please contact our Data Protection team: