Privacy Policy – r99 Online Betting & Casino Platform

1 Introduction

r99 ("we", "us", "our", "the Platform") operates the online sports betting and casino gaming website at r99.vin. We are committed to handling the personal information of our users ("you", "Player", "User") with care, transparency, and respect.

This Privacy Policy sets out the types of personal data we collect when you use r99.vin, the legal bases and purposes for which we process that data, how long we keep it, who we may share it with, and your rights as a data subject. We encourage you to read this policy in full so you understand exactly how your information is handled on our platform.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which contain additional information relevant to your use of r99.

2 Data We Collect

When you interact with r99.vin, we may collect the following categories of personal data:

3 How We Collect Your Data

We collect personal data through the following means:

• Direct Interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account settings, you provide data to us directly.
• Automated Technologies: When you visit r99.vin, our servers and analytics tools automatically record technical and usage data such as your IP address, browser type, device identifiers, pages viewed, and actions taken on the platform.
• Payment Providers: When you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer, debit or credit cards, or other supported mobile wallets, we receive confirmation data from those payment processors to verify and record the transaction.
• Third-Party Verification Services: We may use identity verification or anti-fraud services that cross-reference the information you provide against external databases to confirm your identity and age.
• Cookies and Similar Technologies: We use cookies and related tracking tools to improve your experience and understand how the platform is used. See Section 7 for full details.

4 Why We Use Your Data

r99 processes your personal data for the following purposes:

• Account Creation & Management: To register and maintain your r99 account, verify your identity, and keep your account information accurate and up to date.
• Service Delivery: To allow you to place bets on Cricket, PSL, Football, Esports and other sports, play casino and slot games, participate in live dealer tables, and use all other features of the platform.
• Financial Transactions: To process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfers, and cards; to maintain accurate transaction records; and to prevent payment fraud.
• Identity Verification (KYC): To comply with age verification obligations and confirm that all players are aged 18 or above. To verify that payment methods belong to the registered account holder.
• Anti-Money Laundering (AML): To monitor transactions for unusual patterns that may indicate money laundering or financial crime, and to report suspicious activity where required.
• Responsible Gaming: To support responsible gaming tools such as deposit limits, session reminders, and self-exclusion requests, and to identify players who may need support.
• Customer Support: To respond to your support requests, resolve disputes, and maintain records of communications for quality and compliance purposes.
• Platform Improvement: To analyse how users interact with r99.vin, identify technical issues, and improve the platform's features, speed, and reliability.
• Marketing & Promotions: Where you have opted in, to send you information about bonuses, promotions, new games, and PSL season offers. You can opt out at any time.
• Security: To detect and prevent fraudulent activity, unauthorised account access, and any misuse of the platform.

5 Payment Data & Financial Privacy

All financial transactions on r99 are conducted in Pakistani Rupees (PKR). When you make a deposit or withdrawal using JazzCash, Easypaisa, Raast, bank transfer, or a debit/credit card, we receive confirmation data from the relevant payment provider to record and reconcile the transaction. Full card details — including full card numbers and CVV codes — are handled exclusively by secure, certified third-party payment processors and are never stored on r99 servers.

• r99 stores your payment method type and the last four digits of a card or the wallet number associated with your account for the purposes of transaction history and withdrawal verification.
• We may ask you to verify ownership of a payment method before processing a withdrawal if the deposit source has not been previously confirmed. This is an anti-fraud measure, not a delay tactic.
• All financial data is transmitted over encrypted connections (TLS/HTTPS) and stored in access-controlled, encrypted databases.
• r99 does not share your financial data with marketing companies, advertisers, or unaffiliated third parties.
• Transaction records are retained for a minimum of five years to comply with financial record-keeping obligations.

6 Sharing Your Data

r99 does not sell your personal data. We share your information only in the following specific, limited circumstances:

• Payment Processors: JazzCash, Easypaisa, Raast, bank partners, and card processors receive the minimum data necessary to process your deposit or withdrawal transaction.
• Identity Verification Providers: Third-party KYC and AML service providers may receive your identity documents and personal details to carry out age and identity verification checks on our behalf.
• Anti-Fraud Services: We may share technical data (such as IP address, device fingerprint, and behavioural patterns) with fraud prevention services to detect and prevent account abuse.
• Game Providers: When you play a slot or live casino game, the game provider's system receives your player session data (user ID, stake amounts, game outcomes) to operate the game. Game providers do not receive your full identity or payment details.
• Legal Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the safety of users or the integrity of the platform.
• Business Transfers: In the event of a merger, acquisition, or restructuring of r99's business, your data may be transferred to the new entity, subject to this same privacy policy or an equivalent level of protection.

7 Cookies & Tracking Technologies

r99.vin uses cookies and similar technologies to make the platform work properly, remember your preferences, keep your session secure, and understand how players navigate the site so we can continue improving it.

You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will affect your ability to log in and use the platform. Disabling analytical or marketing cookies will not impact your betting or gaming experience.

8 Data Retention

r99 retains personal data only for as long as it is necessary for the purposes outlined in this policy, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the lifetime of your active account and for a minimum of five years after account closure, to meet financial record-keeping and AML compliance obligations.
• Transaction Records: Deposits, withdrawals, and bet history are retained for a minimum of five years from the date of each transaction.
• Identity Verification Documents: CNIC copies and verification selfies are retained for the period required by applicable identity verification and anti-money laundering regulations, typically five to seven years.
• Support Communications: Customer support records are retained for up to three years from the date of the last interaction.
• Marketing Data: If you opt out of marketing, we retain a record of your opt-out preference indefinitely to ensure we do not contact you in future. The underlying contact data used for marketing is deleted or anonymised within a reasonable period after opt-out.
• Technical & Usage Data: Log files and usage analytics are typically retained for up to 24 months, after which they are aggregated or deleted.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9 Your Rights Over Your Data

As an r99 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your registered account email and a description of your request. We will respond within a reasonable timeframe.

• Right to Access: You can request a copy of the personal data r99 holds about you.
• Right to Correction: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Deletion: You may request deletion of your personal data. Note that some data must be retained for legal and regulatory reasons (see Section 8) and cannot be deleted on request.
• Right to Restrict Processing: In certain circumstances, you may ask r99 to limit how your data is used while a dispute or review is ongoing.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for your own use or transfer to another provider.
• Right to Object to Marketing: You have an absolute right to object to your personal data being used for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing), you may withdraw that consent at any time without affecting the legality of processing that occurred before withdrawal.

10 Security Measures

r99 takes the security of your personal data seriously and implements multiple layers of technical and organisational controls to protect it from unauthorised access, disclosure, alteration, or destruction.

• Encryption in Transit: All data transmitted between your device and r99.vin is encrypted using TLS (HTTPS). Sensitive financial and identity data uses enhanced encryption protocols.
• Encryption at Rest: Personal data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within r99 is restricted on a strict need-to-know basis. Staff members only access the minimum data required to perform their role.
• Two-Factor Authentication: We encourage all players to enable two-factor authentication (2FA) on their r99 accounts for an additional layer of login security.
• Fraud Monitoring: Our systems continuously monitor for unusual account activity, suspicious login attempts, and patterns consistent with fraud or account takeover.
• Incident Response: In the event of a data security incident affecting your personal information, r99 has procedures in place to contain the incident, assess the impact, and notify affected users as required.

While we take every reasonable precaution, no online platform can guarantee absolute security. You also play a role in keeping your account secure: use a strong, unique password, enable 2FA, and never share your login details with anyone. Report any suspected unauthorised access immediately to [email protected].

11 Children's Privacy

r99 is strictly an adults-only platform. Our services are not directed at, and are not intended for use by, any person under the age of 18. We do not knowingly collect personal data from children under 18.

During registration, we require users to confirm they are 18 or older and we carry out age verification checks using CNIC and other identity documents. If we discover that personal data has been collected from a person under 18, we will immediately close the associated account, delete the data, and return any deposits made.

If you believe a minor may be using r99 — whether using your account or their own — please contact us immediately at [email protected] so we can take appropriate action. For guidance on keeping young people safe from gambling-related harm, visit our Responsible Gaming page.

12 Updates to This Policy

r99 may update this Privacy Policy from time to time to reflect changes in the way we operate, changes in applicable law, or improvements to our data practices. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we use your personal data, we will endeavour to notify active users by email to their registered address in advance of the changes taking effect. Your continued use of r99.vin after an updated policy has been published constitutes your acceptance of the revised terms.

We recommend checking this page periodically, especially if you are an active player. If you have questions about any aspect of this policy, or about a specific change, contact [email protected] and we will be happy to clarify.