r333 Privacy Policy – How We Protect Your Data in Pakistan

01Introduction

This Privacy Policy describes how r333 ("r333", "we", "us" or "our"), operating at r333.run, collects, uses, stores and protects the personal information of players and visitors who use the r333 platform. It applies to all r333 services including the website, mobile interface, live games, sports betting, bonuses and customer support.

We wrote this policy in plain English because we want Pakistani players to actually understand what happens with their information – not to bury important details in legal language that nobody reads. That said, this policy does constitute a legally binding document and forms part of the r333 user agreement alongside our Terms and Conditions.

By registering an account or using any r333 service, you confirm that you have read this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree, please do not use r333. If you have already registered and no longer consent, please contact us at support@r333.run to discuss your options.

02Who We Are

r333 is an online gaming and sports betting platform designed for Pakistani players. The platform operates at r333.run and is run by the r333 team with a principal focus on serving players across Pakistan. All r333 services are delivered in Pakistani Rupees (PKR) and through payment channels commonly used in Pakistan including Easypaisa, JazzCash, NayaPay and SadaPay.

For data protection purposes, r333 acts as the data controller for all personal information collected through the r333 platform. This means r333 determines the purposes and means of processing your personal data. Where we engage third-party service providers to process data on our behalf – such as payment processors or KYC verification partners – those providers act as data processors under our instruction.

You can contact the r333 data team at support@r333.run for any privacy-related queries, data access requests or complaints.

03Personal Data We Collect

r333 collects only the data that is genuinely necessary to provide our services and comply with applicable legal requirements. The categories of personal data we may hold about you are set out in the table below.

r333 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information beyond what may be apparent from a CNIC document submitted for identity verification.

04How We Collect Your Data

4.1 Information You Provide Directly

The majority of personal data r333 holds about you comes directly from you. This includes the information you enter when you register an r333 account, when you make a deposit or request a withdrawal, when you complete KYC verification, when you contact our support team, and when you set responsible gaming preferences in your account settings.

4.2 Automated Collection

When you visit r333.run or use the r333 platform, we automatically collect certain technical data. This includes your IP address, device identifiers, browser type and version, operating system, referring URL and pages visited. This data is collected through server logs and cookies. It is used for security monitoring, fraud prevention and improving the platform experience for Pakistani players.

4.3 From Payment Providers

When you make a deposit or withdrawal using Easypaisa, JazzCash, NayaPay, SadaPay or a bank transfer, the payment provider confirms the transaction to r333. We receive confirmation of the payment amount in PKR and a masked reference for your payment account. We do not receive or store your full mobile wallet PIN or bank account credentials.

4.4 From Third-Party KYC Partners

Where r333 uses a third-party identity verification service to assist with KYC checks, that provider may return a verification result along with certain confirmed data points such as your name or date of birth. These partners operate under strict data processing agreements with r333 and may not use your data for any purpose other than providing the verification service to r333.

05Why r333 Uses Your Personal Data

r333 uses personal data for specific, legitimate purposes. We do not use data for any purpose that would be surprising or disproportionate to the services we provide. The primary purposes for which r333 processes personal data are:

• Account management: Creating, maintaining and managing your r333 account, including processing logins and account updates.
• Payment processing: Processing deposits and withdrawals in PKR through Easypaisa, JazzCash and other supported methods. Matching transactions to accounts and maintaining financial records.
• Identity and age verification: Verifying that account holders are at least 18 years old and are who they claim to be, as required for responsible gaming and anti-money laundering compliance.
• Gaming services: Enabling gameplay across all r333 games, recording game activity, applying and tracking bonuses, and ensuring accurate settlement of bets.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, multi-accounting, bonus abuse and unauthorised access. Monitoring for irregular patterns that may indicate money laundering or other criminal activity.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling. Applying limits and exclusions requested by players. Proactively reaching out to at-risk accounts.
• Customer support: Responding to queries, resolving disputes and maintaining communication records.
• Legal compliance: Meeting obligations under applicable law including anti-money laundering requirements, record keeping rules and regulatory instructions.
• Platform improvement: Analysing anonymised, aggregated usage data to improve r333 features, performance and the player experience for Pakistani users.
• Marketing communications: Sending promotional offers, bonus alerts and platform updates to players who have opted in to receive marketing from r333. You can opt out at any time.

06Legal Basis for Processing

r333 processes personal data on the following legal grounds depending on the purpose:

• Contract performance: Processing necessary to create and manage your r333 account, process deposits and withdrawals, settle bets and provide gaming services.
• Legal obligation: Processing required to meet anti-money laundering, age verification, record keeping and other legal requirements applicable to r333.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming monitoring and platform improvement – where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time.

07Sharing Your Personal Data

r333 does not sell, rent or trade personal data to third parties for their own commercial purposes. Full stop. Data is shared only in the following specific circumstances and only to the extent necessary:

7.1 Payment Providers

To process your deposits and withdrawals in PKR, r333 must share relevant transaction data with the payment provider you have selected – for example Easypaisa, JazzCash, NayaPay, SadaPay or your bank. The data shared is limited to what the provider requires to process the specific transaction and is governed by their own privacy policies as well as our data processing agreements with them.

7.2 Identity Verification Partners

Where a third-party KYC provider is used to verify your identity, your submitted documents may be shared with that provider. These partners are contractually bound to use your data only for the verification service they are providing to r333 and are not permitted to retain or use it for any other purpose.

7.3 Technology and Infrastructure Providers

r333 uses third-party technology providers for functions including cloud hosting, data analytics, fraud detection and customer support software. These providers act as data processors under r333's instruction and may process personal data only as we direct. They are bound by data processing agreements that limit their use of the data.

7.4 Legal and Regulatory Authorities

r333 may disclose personal data to law enforcement agencies, regulatory bodies or courts where we are legally required to do so. Where permitted, r333 will notify you of such disclosure. We do not make voluntary disclosures to authorities beyond what is legally required.

7.5 Business Transfers

In the event of a merger, acquisition or sale of r333's business assets, personal data held by r333 may be transferred to the relevant acquirer as part of that transaction. Players would be notified of any such transfer and its implications for their personal data.

08Cookies and Tracking Technologies

r333 uses cookies and similar tracking technologies on the r333.run platform. Cookies are small text files stored on your device that help us provide a better, more personalised experience. Here is a breakdown of how r333 uses them:

8.1 Essential Cookies

These cookies are required for the r333 platform to function. They manage your login session, remember your language and regional settings, and enable core features like the game lobby, deposit flow and account settings. These cookies cannot be disabled without breaking core r333 functionality.

8.2 Analytics Cookies

r333 uses aggregated, anonymised analytics data to understand how players navigate the platform. This data helps us identify which parts of r333 work well and which need improvement. No individual player is identifiable from this data. These cookies can be refused via your browser settings.

8.3 Security Cookies

Certain cookies are used for fraud prevention and security purposes. They help r333 detect suspicious patterns – for example, rapid account switching or unusual login locations – and protect both the platform and individual players from unauthorised access.

8.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the performance of certain r333 features. Most modern browsers allow you to refuse cookies, delete existing cookies, and receive notifications when cookies are set. Consult your browser's help documentation for instructions specific to your device.

09Data Security

r333 takes data security seriously and applies industry-standard measures to protect your personal information. The security measures in place at r333 include:

• 256-bit SSL encryption on all connections between your device and r333 servers, ensuring that data transmitted – including login credentials and payment information – cannot be intercepted.
• No card data storage – r333 does not store full card numbers, CVV codes or card expiry dates on its systems. All card transactions are tokenised by our payment partners.
• Two-factor authentication (2FA) available for all r333 accounts as an additional login security layer.
• Access controls – r333 employee access to personal data is limited on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and regular training.
• Regular security audits – r333 systems are periodically reviewed and tested by both internal teams and independent security professionals.
• Incident response procedures – in the event of a data breach, r333 has a defined response process to contain the incident, assess its scope, notify affected players where required, and report to relevant authorities.

While r333 applies robust security measures, no online system can guarantee absolute security. You also play a role in keeping your account safe – use a strong, unique password for r333, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact support@r333.run immediately.

10Data Retention

r333 retains personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable law. The general retention periods applied by r333 are:

• Active account data: Retained for the duration of your r333 account and for a period of five years following account closure, to meet anti-money laundering and financial record-keeping requirements.
• KYC documents: Retained for a minimum of five years following KYC submission as required by applicable financial regulations.
• Transaction records: Deposits, withdrawals and bet histories are retained for five years from the date of each transaction.
• Support communications: Retained for three years from the date of the last communication unless a longer period is required for a pending dispute or investigation.
• Analytics data: Anonymised, aggregated analytics data may be retained indefinitely as it cannot be linked to any individual player.
• Marketing preferences: Retained until you withdraw consent or close your account.

Once the applicable retention period has expired, r333 will securely delete or anonymise your personal data. Deletion requests submitted before the end of a retention period may not be honoured where retention is required by law.

11Your Rights Over Your Personal Data

As an r333 player you have specific rights in relation to the personal data we hold about you. Here is a plain-English explanation of what each right means and how you can exercise it:

To exercise any of these rights, contact the r333 data team at support@r333.run. Please include your full name, registered email address and the specific right you wish to exercise. r333 will respond within 30 days. Identity verification may be required before actioning certain requests to protect your data from unauthorised access.

12Updates to This Privacy Policy

r333 may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data processing practices. When material changes are made – meaning changes that significantly affect your rights or the way we use your data – r333 will notify you by email to the address registered on your account at least 7 days before the changes take effect.

Non-material updates – such as typographical corrections or minor clarifications – may be made without individual notification. The "Last Updated" date at the top of this page will always reflect the most recent version. We recommend checking this page periodically.

Continued use of r333 after any update to this Privacy Policy constitutes your acceptance of the revised version. If you do not agree with an update, you should stop using r333 and contact us at support@r333.run to discuss your options including account closure.