r798 Privacy Policy

r798 ("r798", "we", "us", "our") is the data controller responsible for the personal information collected through the r798 website, mobile platform, and all associated services. As data controller, r798 determines the purposes for which and the means by which your personal data is processed.

For the purposes of this Privacy Policy, "personal data" means any information relating to an identified or identifiable natural person, including but not limited to your name, date of birth, Pakistani CNIC number, residential address, email address, mobile phone number, financial account details, and any device or usage identifiers that can be linked back to you individually.

If you have any questions or concerns regarding the processing of your personal data by r798, or wish to exercise any of the rights described in this policy, you may contact r798's designated data protection contact using the details provided in Section 13 of this document.

r798 collects personal data through several channels, including account registration, identity verification processes, financial transactions, platform usage, and communications with r798's support team. The categories of personal data r798 collects are set out below.

r798 does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data except where expressly required by applicable law or licensing obligations — for example, where a responsible gaming assessment necessitates capturing health-related disclosures provided voluntarily by the player.

r798 uses the personal data it collects strictly for the purposes described below. We do not process your data in any manner that is incompatible with these stated purposes without obtaining your separate consent or being otherwise permitted to do so under applicable law.

• Account Administration: Creating, maintaining, and managing your r798 account, including processing your r798 login, updating account preferences, and responding to account-related queries.
• Identity & Age Verification: Verifying that you are at least 21 years of age and that your identity matches the details provided during registration, as required under r798's international gaming licence and responsible gaming obligations.
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other supported Pakistani payment methods; maintaining transaction records; and managing any associated disputes or chargebacks.
• Service Delivery: Providing access to r798's sports betting, live casino, slot games, and other platform features; personalising your r798 experience based on usage patterns and preferences.
• Regulatory Compliance: Meeting anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) obligations imposed by r798's licensing authority; retaining records as required by applicable law.
• Responsible Gaming: Monitoring account activity to identify patterns indicative of problem gambling; administering deposit limits, loss limits, cooling-off periods, and self-exclusion tools; honouring self-exclusion requests and preventing re-registration during an active exclusion period.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the r798 platform.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw your marketing consent at any time via your r798 account settings.
• Analytics & Platform Improvement: Analysing aggregate usage data to improve r798's platform performance, user interface, game selection, and customer support quality.
• Legal Claims: Establishing, exercising, or defending legal claims arising from your use of the r798 platform or any dispute between you and r798.

r798 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil r798's contractual obligations to you under the Terms & Conditions, including account administration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with r798's obligations under its international gaming licence, including AML/KYC/CTF requirements, age verification mandates, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out in pursuit of r798's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and business analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without this affecting the lawfulness of processing carried out prior to withdrawal.

r798 does not sell, rent, or trade your personal data. r798 may share your personal data with third parties only in the limited circumstances described below:

• Payment Processors: PKR payment service providers including JazzCash, EasyPaisa, Raast, and banking partners (HBL, UBL, Meezan Bank) receive the minimum financial data necessary to process your deposit and withdrawal transactions. These providers process your data under their own privacy policies and applicable financial regulation.
• Identity Verification Providers: Third-party KYC service providers engaged by r798 to verify your identity, age, and CNIC documentation as required under r798's licensing conditions.
• Fraud & AML Screening Services: Providers of anti-fraud and anti-money laundering screening tools that r798 uses to detect and prevent prohibited activity on the platform.
• Game Content Providers: Software providers and game studios whose products are featured on the r798 platform may receive limited usage data relating to game performance and player activity in aggregate, non-personally identifiable form.
• Analytics Providers: Platform analytics and performance monitoring services that process technical and usage data under data processing agreements with r798, with appropriate data minimisation and pseudonymisation measures applied.
• Regulatory Authorities: Where required by law, court order, or the direction of a regulatory or licensing authority, r798 may disclose your personal data to the relevant authority without prior notice to you.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of r798's business, your personal data may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations.

All third-party service providers engaged by r798 that process personal data on r798's behalf are subject to contractual data processing obligations that require them to implement appropriate technical and organisational security measures and to process personal data solely on r798's documented instructions.

r798 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the retention periods required or permitted by applicable law and r798's licensing obligations.

• Account Data: Retained for the duration of your active r798 account and for a minimum period of five (5) years following account closure, as required under r798's AML/KYC compliance obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements under r798's international licence.
• Identity Verification Documents: CNIC copies and other identity documents retained for the period required by r798's licensing authority, typically not less than five (5) years from the date of verification or account closure, whichever is later.
• Responsible Gaming Records: Self-exclusion records and responsible gaming intervention logs are retained for the duration of the exclusion period plus a minimum of five (5) years to prevent circumvention of exclusion commitments.
• Marketing Data: Retained until you withdraw consent for marketing communications, at which point your marketing preferences are updated and direct marketing to you ceases, though a record of your opt-out is retained to honour your preference.
• Technical & Usage Logs: Typically retained for up to thirteen (13) months for platform analytics purposes, after which data is aggregated or deleted.

Upon expiry of the applicable retention period, r798 will securely delete or irreversibly anonymise your personal data in accordance with its data destruction procedures.

r798 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and r798's servers.
• Encryption of sensitive data fields — including CNIC numbers and financial identifiers — at rest within r798's database infrastructure.
• Role-based access controls ensuring that r798 staff can access personal data only to the extent required to perform their specific job functions.
• Multi-factor authentication requirements for access to r798's internal systems and administrative interfaces.
• Regular penetration testing and vulnerability assessments of the r798 platform and underlying infrastructure.
• Incident response procedures for detecting, containing, and notifying affected parties of any personal data breach in accordance with r798's licensing obligations.

While r798 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your r798 login credentials and for notifying r798 immediately if you suspect any unauthorised access to your account.

r798 uses cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the r798 platform. The following categories of cookies are used by r798:

• Strictly Necessary Cookies: Essential for the basic functioning of the r798 platform, including maintaining your r798 login session, remembering items in your betting slip, and enabling secure account access. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations to personalise your r798 experience across sessions.
• Analytics Cookies: Collect information about how players use the r798 platform — including which pages are visited most frequently, how long sessions last, and where technical errors occur — to help r798 improve the platform. Data collected via analytics cookies is processed in aggregate and pseudonymised form.
• Performance Cookies: Monitor platform performance metrics including page load times, server response times, and error rates to support r798's technical operations team.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the r798 platform, including your ability to complete the r798 login process. r798 does not currently use third-party advertising or retargeting cookies.

Subject to applicable law and r798's licensing obligations, you have the following rights in relation to the personal data r798 holds about you. To exercise any of these rights, please contact r798's support team using the details in Section 13.

r798 will respond to all verifiable data rights requests within 30 days of receipt. Where a request is complex or numerous, r798 may extend this period by a further 60 days, with notice provided to you within the initial 30-day period.

r798 strictly prohibits the use of its platform by persons under the age of 21. r798 does not knowingly collect personal data from individuals under 21 years of age. Mandatory CNIC-based age verification is applied to all r798 account registrations prior to the granting of access to any real-money feature of the platform.

Where r798 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21, r798 will immediately suspend the relevant account, delete the associated personal data to the extent not required for regulatory retention purposes, and report the matter as required under its licensing obligations.

If you are a parent or guardian and believe that a person under 21 in your care has registered an r798 account or submitted personal data to r798, please contact r798's support team immediately so that the account can be investigated and closed without delay.

As an internationally licensed gaming platform, r798's data processing infrastructure and certain third-party service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, r798 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding that applied within Pakistan, including:

• Contractual data protection clauses between r798 and receiving third parties that impose obligations equivalent to those r798 holds under its international gaming licence.
• Transfers to jurisdictions that maintain adequate data protection frameworks as recognised by r798's licensing authority.
• Technical security measures — including end-to-end encryption — applied to data during international transmission.

r798 does not transfer personal data internationally beyond what is necessary to deliver its gaming services, process PKR payments, and meet its regulatory obligations as an internationally licensed operator.

r798 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, licensing requirements, data processing practices, or platform functionality. The date of the most recent revision is displayed prominently in the hero section of this page.

Where a material change is made to this Privacy Policy — meaning a change that significantly affects your rights or the way r798 processes your personal data — r798 will notify you by email to your registered address and/or by a prominent notice on the r798 platform prior to the change taking effect. Non-material amendments, including corrections and clarifications, may take effect immediately upon publication.

We encourage you to review this Privacy Policy periodically to stay informed about how r798 is protecting your information. Continued use of the r798 platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the changes.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how r798 has handled your personal data, please contact r798's support team in the first instance:

• Live Chat: Available through the r798 platform during support hours.
• Email: [email protected] — please note this email address is displayed as plain text and is not a clickable link.

r798 aims to resolve all privacy-related queries and complaints within 30 days of receipt. Where a complaint relates to a potential data breach or involves a request to exercise a formal privacy right, r798 will acknowledge receipt within 72 hours and provide a substantive response within 30 days.

If you are not satisfied with r798's response to your privacy complaint, you may escalate the matter to the supervisory authority or dispute resolution body designated under r798's international gaming licence.