Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how rss99 ("we", "us", "our") — the operator of the online gaming and sports betting platform accessible at https://rss99.cam ("Platform") — collects, processes, stores, shares and protects the personal data of individuals ("you", "User") who access or use the Platform.

rss99 acts as the data controller in respect of personal data collected through the Platform. By registering an account, depositing funds, placing bets or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein, where such processing is based on consent.

This Policy should be read together with our Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on matters of data processing, this Policy prevails.

02 Definitions

For the purposes of this Policy, the following terms are defined as follows:

03 Data We Collect

rss99 collects the following categories of personal data from users:

3.1 Registration & Account Data

• Full legal name, date of birth and gender
• Residential address (including city, province and postcode)
• Email address and account username
• Password (stored in hashed form — never in plain text)
• Mobile phone number (where provided)

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification — typically a Pakistani CNIC or passport
• Proof of residential address documents (e.g., utility bills, bank statements) where required
• Selfie images or liveness-check video submitted for identity matching
• Payment method documentation where required by AML procedures

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates and payment method references
• Account balance history
• Payment method identifiers (e.g., masked account or wallet references — not full card or account numbers stored on our systems)

3.4 Gaming & Betting Activity Data

• Bet history, stake amounts, odds, game selections and outcomes
• Casino game session data, including game type, duration and result
• Bonus and promotion usage records

3.5 Technical & Device Data

• IP address and approximate geolocation derived from it
• Browser type, version and language settings
• Device type, operating system and screen resolution
• Session timestamps, pages visited and navigation path on the Platform

3.6 Communications Data

• Records of communications with our support team via live chat, email or Help Centre
• Feedback and complaints submitted through the Platform

04 How We Collect Data

We collect personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support or respond to a survey.
• Automatically: Through cookies, web beacons and similar technologies as you navigate the Platform. Session and device data is collected automatically on each visit.
• From third parties: Identity verification providers (KYC services), payment processors, fraud detection services and, where legally required, regulatory authorities.

05 Legal Basis for Processing

rss99 processes personal data under one or more of the following legal bases, depending on the category of data and purpose of processing:

06 How We Use Your Data

rss99 uses collected personal data for the following purposes:

• Account management: Creating, maintaining, updating and securing your rss99 account.
• Identity and age verification: Confirming that you meet the minimum age requirement (18+, or the higher minimum required by the operator's license jurisdiction) and that your identity is genuine, in accordance with KYC/AML obligations.
• Payment processing: Processing deposits and withdrawals. Payment method references (such as those associated with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) may be held as part of your transaction history for audit and AML compliance purposes. These references do not imply endorsement of gambling by those providers.
• Customer support: Responding to your queries, complaints and account-related requests.
• Responsible gambling: Monitoring betting patterns to identify potential problem gambling behaviour and apply responsible gambling tools where appropriate.
• Fraud and security: Detecting and preventing fraud, money laundering, multi-accounting and other prohibited conduct as described in our Terms & Conditions.
• Legal compliance: Meeting obligations under applicable gaming license conditions, AML regulations and any lawful data requests from competent authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, interface and game offering.
• Marketing communications: Sending promotional information where you have consented to receive it and have not opted out. You can withdraw marketing consent at any time through your account settings.

07 Data Sharing & Disclosure

rss99 does not sell, rent or trade personal data to third-party marketers. We share personal data only in the following circumstances and with the following categories of recipients:

• KYC and identity verification providers: Third-party services that process identity documents and perform liveness checks to fulfil our AML obligations. These processors are contractually bound to use your data only for the specified verification purpose.
• Payment processors: Financial service providers that facilitate deposit and withdrawal transactions. Only the data necessary to execute the transaction is shared.
• Fraud detection and security services: Services that analyse transaction patterns and device fingerprints to detect fraud, account takeovers and money laundering activity.
• Regulatory and law enforcement authorities: Where we are required by the conditions of our operating license, court order, or applicable law to disclose information to a competent authority.
• Platform infrastructure providers: Cloud hosting, content delivery and database service providers that process data solely on our instructions under data processing agreements.

All third-party processors are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes specified by rss99.

08 International Data Transfers

rss99 is operated from a jurisdiction outside Pakistan. Accordingly, your personal data may be transferred to and processed in countries other than Pakistan. Where such transfers occur, rss99 takes steps to ensure that the receiving jurisdiction provides an adequate level of protection for personal data, or that appropriate safeguards are in place (such as contractual data protection clauses with the relevant processor).

By using the Platform, you acknowledge and accept that your personal data may be processed outside Pakistan in connection with the legitimate operation of the rss99 platform.

09 Data Retention

rss99 retains personal data for as long as necessary to fulfil the purposes described in this Policy, including legal, regulatory and compliance obligations. The following general retention periods apply:

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer identify you. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

10 Security Measures

rss99 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These include:

• TLS/SSL encryption on all data transmitted between your device and our servers.
• Password hashing — account passwords are stored using industry-standard one-way hashing algorithms and are never stored or transmitted in plain text.
• Access controls — internal access to personal data is restricted to staff who require it for their specific role, on a need-to-know basis.
• Secure KYC processing — identity documents are submitted and processed exclusively through secure HTTPS verification flows. Documents must not be submitted via unsecured channels.
• Fraud monitoring — automated systems monitor account activity for indicators of unauthorised access, account takeover and suspicious transaction patterns.
• Two-factor authentication (2FA) — available on all accounts as an additional security layer.

No data transmission over the internet is completely secure. While we use commercially reasonable security measures, we cannot guarantee the absolute security of data transmitted to or from the Platform. You are responsible for maintaining the security of your account credentials.

11 Cookies & Tracking Technologies

The rss99 Platform uses cookies and similar tracking technologies to provide, maintain and improve its services. The following categories of cookies may be used:

• Essential cookies: Required for the Platform to function. These include session authentication cookies and security tokens. The Platform cannot operate correctly without these cookies, and they cannot be disabled.
• Functional cookies: Store your preferences (such as language, odds format and display settings) to provide a personalised experience on return visits.
• Analytics cookies: Collect aggregated information about how users interact with the Platform — which pages are visited, how long sessions last and which features are used most. This data helps us improve the Platform. Analytics data is processed in anonymised or pseudonymised form where possible.
• Security cookies: Support fraud detection, session integrity and bot-detection functions.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair the functionality of the Platform. We do not use advertising cookies to serve gambling advertisements on third-party websites.

12 Your Rights

Subject to applicable law and the conditions of our operating license, you have the following rights in respect of your personal data:

To exercise any of the above rights, please contact our support team via the Help Centre or by emailing [email protected] (plain text — not a clickable link). We will respond to data rights requests within a reasonable timeframe. Some rights may be limited where retention is required by legal obligation (e.g., AML record-keeping).

Exercising your data rights does not affect any outstanding legal obligations you have under the Terms & Conditions, and will not affect the validity of bets already settled.

13 Children's Privacy

The rss99 Platform is strictly for adults. We do not knowingly collect personal data from individuals under 18 years of age (or the higher minimum age required by the operator's license jurisdiction). All accounts are subject to age verification as part of the KYC process.

If rss99 becomes aware that personal data has been collected from a minor without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on the Platform, please contact our support team immediately.

14 Third-Party Services

The Platform may reference third-party services for context — for example, Pakistani payment services such as Easypaisa, JazzCash, Raast, and banking institutions such as HBL, UBL, Meezan Bank and Bank Alfalah may be referenced in deposit and withdrawal guidance as familiar local payment rails. rss99 does not control the privacy practices of these third parties, and this Policy does not apply to any data you provide directly to those providers through their own platforms or applications.

Where rss99 uses third-party processors (KYC providers, payment processors, analytics services) who interact with your data, those processors are bound by data processing agreements that require them to maintain appropriate security and to use your data only as instructed by rss99.

15 Policy Updates

rss99 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements or the Platform's features. Material updates will be communicated to registered users via email to the address on file or through an on-Platform notification at next login.

The effective date at the top of this Policy reflects when the current version came into force. We recommend reviewing this Policy periodically. Continued use of the Platform following notification of a material update constitutes acceptance of the revised Policy.

16 Contact Us

If you have questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how your personal data has been handled, please contact rss99 through the following channels:

We aim to respond to all privacy-related enquiries within a reasonable timeframe. For data subject access requests (DSARs), we will acknowledge receipt promptly and provide a substantive response within the timeframe required by applicable law.