rsp777 Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "rsp777", "we", "us", "our" — the licensed operator of the rsp777 platform at rsp777.net.
• "Platform" — the rsp777 website, mobile web interface, and all associated digital services.
• "Player", "you", "your" — any individual who registers an Account or accesses the Platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, CNIC number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data.
• "Third Party" — any natural or legal person other than rsp777 or the Player.
• "KYC" — Know Your Customer identity and document verification procedures.
• "Cookie" — a small text file placed on your device by the Platform to store information about your visit and preferences.

Data Controller

rsp777 acts as the Data Controller in respect of all Personal Data collected from Players through the Platform. As Data Controller, rsp777 is responsible for determining the purposes for which Personal Data is collected and the means by which it is processed.

Queries regarding this Privacy Policy, data rights requests, and formal data-related complaints should be directed to the rsp777 Data Protection team. Contact details are provided in Section 15 of this Policy.

Personal Data We Collect

rsp777 collects the following categories of Personal Data from Players and prospective Players:

rsp777 does not collect Special Category Data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) except where the Player voluntarily discloses such information in support communications, in which case it will be treated with the highest level of confidentiality and not stored beyond the immediate purpose of the communication.

How We Collect Personal Data

rsp777 collects Personal Data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or responding to promotions.
• Automated collection: Technical and Usage Data collected automatically through cookies, server logs, and analytics tools when you access or use the Platform. See Section 7 for full cookie details.
• Third-party verification services: Identity and document verification data returned by licensed KYC service providers when processing your verification submission.
• Payment providers: Transaction confirmation and account holder name data returned by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK when processing your payment instructions.
• Fraud and risk screening: Risk signal data from fraud detection service providers used to protect the Platform and Players from unauthorised activity.

Purpose & Legal Basis for Processing

rsp777 processes Personal Data only where a valid legal basis exists. The following table sets out the primary purposes of processing, the data categories involved, and the corresponding legal basis:

Where rsp777 relies on legitimate interests as a legal basis, a balancing test has been conducted to ensure that rsp777's interests do not override the Player's fundamental rights and freedoms. Players may request a copy of relevant legitimate interest assessments by contacting the Data Protection team.

Where rsp777 relies on consent (e.g., for marketing communications), Players may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent withdrawal requests should be submitted via the Account preferences dashboard or by contacting support.

Data Sharing & Third Parties

rsp777 does not sell personal data. rsp777 may share Personal Data with the following categories of recipients strictly for the purposes described in this Policy:

• KYC and Identity Verification Providers: Licensed third-party verification services that process identity documents and perform database checks to confirm player identity and age. These providers act as Data Processors under rsp777's instructions.
• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive only the transaction data necessary to execute payment instructions. Each provider operates under its own privacy policy and applicable Pakistani financial regulations.
• Fraud Detection and AML Services: Specialist risk management and anti-money laundering screening providers who process Technical and Financial Data to identify suspicious activity. These providers are bound by strict data processing agreements.
• Game Content Providers: Licensed game studios whose software is hosted on the rsp777 Platform may receive anonymised or pseudonymised session data required to run and maintain game functionality. Game providers do not receive identifiable player data unless required for jackpot validation or dispute resolution.
• Regulatory and Law Enforcement Authorities: rsp777 may be required to disclose Personal Data to its licensing authority, the Federal Investigation Agency, the Financial Monitoring Unit of Pakistan, or other governmental or regulatory bodies where required by law, court order, or regulatory direction.
• rsp777 Group Companies: Where rsp777 operates under a group structure, Personal Data may be shared with affiliated entities solely for the purposes of delivering, maintaining, and improving the rsp777 Platform and Services.

Cookies & Tracking Technologies

rsp777 uses cookies and similar tracking technologies to operate the Platform effectively and improve the player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred game categories, and remembered username. These improve convenience but are not strictly required for Platform operation.
• Analytics Cookies: Used by rsp777 to understand how Players navigate the Platform — which pages are visited most, where sessions start and end, and how the Platform performs across different devices and network conditions in Pakistan. Analytics data is aggregated and not used to identify individual players.
• Fraud Prevention Cookies: Technical markers used to identify suspicious access patterns, bot activity, or multiple account creation attempts. These are necessary for Platform security and cannot be opted out of without impacting account security protections.

rsp777 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites. rsp777 operates no retargeting programmes.

Players may manage cookie preferences through their browser settings. Please note that disabling Strictly Necessary or Fraud Prevention cookies may affect your ability to log in or use Platform features correctly. Instructions for managing cookies in common mobile browsers (Chrome for Android, Safari for iOS) are available from your browser's help section.

Data Retention

rsp777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following retention periods apply:

• Account Data and Transaction Records: Retained for a minimum of five (5) years following account closure. This period reflects anti-money laundering regulatory requirements applicable to licensed gaming operators.
• KYC Documents: Retained for five (5) years from the date of verification completion or account closure, whichever is later, in accordance with applicable financial crime prevention regulations.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, or until any related dispute is resolved, whichever is later.
• Technical and Usage Data (Analytics): Retained in aggregated, non-identifiable form for up to two (2) years for Platform performance analysis purposes.
• Responsible Gaming Data: Self-exclusion and cooling-off records are retained for the full duration of any exclusion period plus five (5) years thereafter, to prevent re-registration in breach of self-exclusion commitments.
• Marketing Consent Records: Retained while consent is active and for three (3) years after withdrawal as evidence of the consent history.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with rsp777's data disposal procedures.

Security Measures

rsp777 implements technical and organisational security measures proportionate to the risk associated with the Personal Data we process. The principal security measures in place include:

• Encryption: All Personal Data is encrypted at rest using AES-256. All data transmitted between your device and rsp777 servers is protected by TLS 1.3 protocol. Payment data transmitted to and from JazzCash, EasyPaisa, and banking partners uses end-to-end encrypted API channels.
• Access Controls: Access to player Personal Data within rsp777's systems is restricted on a role-based, need-to-know basis. Administrative access requires multi-factor authentication. Access logs are maintained and reviewed regularly.
• Penetration Testing: rsp777's Platform and data systems undergo independent security penetration testing at least annually by qualified third-party security specialists.
• Password Security: Player passwords are stored as salted cryptographic hashes. rsp777 staff cannot view your password in plain text. Two-factor authentication (2FA) is available to all Account holders and is strongly encouraged.
• Incident Response: rsp777 maintains a documented data breach response procedure. In the event of a breach that poses a risk to Player rights, affected Players will be notified without undue delay.

Your Data Rights

rsp777 respects Player rights over their Personal Data. The following rights are available to all registered Players:

• Right of Access: You may request a copy of the Personal Data rsp777 holds about you. rsp777 will provide a Subject Access Response within 30 days of receiving a verified request.
• Right to Rectification: If any Personal Data held by rsp777 is inaccurate or incomplete, you may request correction. Minor account details (e.g., contact number updates) can be amended directly through the Account dashboard. Identity Data corrections require re-verification through the KYC process.
• Right to Erasure: You may request deletion of your Personal Data where: the data is no longer necessary for the purpose it was collected; you withdraw consent and no other legal basis applies; or the data has been unlawfully processed. Note that erasure requests may be limited where rsp777 is required by law to retain data (e.g., AML record-keeping obligations). In such cases, rsp777 will explain what data must be retained and why.
• Right to Restriction: You may request that rsp777 restrict processing of your Personal Data in defined circumstances, such as while a data accuracy dispute is under review.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. rsp777 will cease processing for direct marketing immediately upon receipt of an objection.

Data rights requests should be submitted in writing to the rsp777 Data Protection team (contact details in Section 15). rsp777 may require identity verification before processing rights requests to ensure data is not disclosed to unauthorised parties. Rights requests are processed free of charge; however, manifestly unfounded or excessive requests may incur an administrative handling fee.

Children's Privacy

rsp777 is strictly an adult-only platform. The Services are not directed to, and are not intended for use by, individuals under the age of 21 years. rsp777 does not knowingly collect Personal Data from persons under 21.

As part of the registration process, rsp777 collects date of birth and uses age verification tools to confirm that applicants meet the minimum age requirement. Where rsp777 discovers or has reason to believe that a registered Account is held by a person under 21, the Account will be immediately suspended and all associated data will be reviewed in accordance with applicable child protection obligations.

If you believe a person under 21 has accessed or registered on rsp777, please contact our support team immediately at [email protected]. We take all such reports seriously and act on them promptly.

rsp777 also provides parental control guidance on its Responsible Gaming page, including information about third-party content filtering software that can be used to prevent minors from accessing online gambling platforms.

International Data Transfers

rsp777 operates servers and engages service providers across multiple jurisdictions. As a result, your Personal Data may be transferred to, stored in, and processed in countries outside Pakistan. Where such transfers occur, rsp777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy, including:

• Data processing agreements incorporating standard contractual clauses binding the receiving party to equivalent data protection obligations
• Transfer to jurisdictions that maintain recognised data protection standards applicable to licensed gaming operators
• Technical measures ensuring data is encrypted during transit and at rest in the destination jurisdiction

Players may request information about the specific safeguards applicable to any international data transfer involving their Personal Data by contacting the rsp777 Data Protection team.

Responsible Gaming & Data

rsp777's responsible gaming monitoring involves the automated analysis of Account and Usage Data to identify patterns that may indicate problem gambling behaviour. This analysis is conducted in rsp777's legitimate interests and the interests of player welfare, and may result in:

• Automated alerts being triggered and reviewed by the rsp777 Responsible Gaming team
• Proactive outreach by support staff to players showing concerning patterns
• Temporary account restrictions applied while a welfare review is conducted

Responsible Gaming Data — including self-exclusion status, cooling-off periods, and limit settings — is treated with a heightened level of confidentiality within rsp777. This data is not used for marketing profiling and is not shared with third parties except where required by regulatory obligation.

Players aged 21 and over who wish to learn more about rsp777's responsible gaming tools and self-exclusion options should visit the dedicated Responsible Gaming page.

Policy Amendments

rsp777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or business practices. The effective date at the top of this Policy will be updated to reflect the date of any revision.

Material amendments — those that significantly affect how rsp777 processes Personal Data or that reduce Player rights — will be communicated to registered Players by email to their registered address at least fourteen (14) days before the amended Policy takes effect. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

Non-material amendments (such as typographical corrections, clarifications, or structural re-formatting that do not alter the substance of any provision) may be published without prior notification.

Contact & Complaints

For any questions, concerns, or formal requests related to this Privacy Policy or the processing of your Personal Data by rsp777, please contact the Data Protection team through any of the following channels:

• Live Chat: Available 24/7 via the rsp777 Platform in both English and Urdu. Select "Privacy / Data Query" from the support topic menu.
• Email: [email protected] — please include "Privacy Request" in the subject line and your registered username to expedite handling.

rsp777 acknowledges all privacy-related correspondence within 48 hours and aims to resolve all requests and complaints within 30 calendar days. Complex data rights requests may require additional time; you will be informed of any extension along with the reason.