Privacy Policy – rx777 Pakistan Player Data Protection

This Privacy Policy ("Policy") describes how rx777, the operator of the online gaming and betting platform at rx777.ws ("rx777", "we", "us", "our"), collects, processes, stores, and protects the personal data of registered players and visitors ("you", "your") in connection with your use of the Platform.

rx777 takes the privacy of Pakistani players seriously. We understand that handing over personal information — your name, mobile number, payment details — requires trust, and we intend to honour that trust completely. This Policy is written in plain English so you understand exactly what happens to your data, not in legal language designed to confuse.

By registering an account on rx777 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read this Policy and understand how rx777 handles your personal data. If anything is unclear, our support team is available 24/7 in both English and Urdu to answer your questions.

rx777 is the data controller responsible for the personal information collected through the rx777.ws platform. As data controller, rx777 determines the purposes and means of processing your personal data in accordance with applicable data protection law and its operating licence obligations.

The Platform is operated by rx777 and is directed primarily at players located in Pakistan. All data processing activities described in this Policy are undertaken by rx777 or by vetted third-party processors acting on rx777's instruction under appropriate data processing agreements.

If you have any questions about how rx777 handles your data, or if you wish to exercise any of the rights described in Section 10 of this Policy, you can contact the rx777 Data team at support@rx777.ws or through the live chat on rx777.ws.

rx777 collects the minimum personal data necessary to operate your account, process your payments, and meet our legal obligations. Here is a full breakdown of what we collect and when:

rx777 does not collect sensitive personal data such as health information, racial or ethnic origin, religious beliefs, or political views. If any such information is incidentally disclosed during a support interaction, it is not recorded or retained beyond the immediate conversation.

rx777 uses your personal data only for the following defined purposes. We do not use your data for any purpose beyond what is set out here without first obtaining your explicit consent or updating this Policy with appropriate notice:

• Account Management: Creating, maintaining, and securing your rx777 account. Verifying your identity and age as required by our operating obligations. Recovering your account if you lose access.
• Transaction Processing: Processing PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. Processing withdrawal requests to your verified payment method. Reconciling account balances and maintaining transaction records.
• Service Delivery: Providing access to the full rx777 game library, live casino, cricket betting, virtual sports, poker, and other Platform services. Maintaining your VIP Club tier status and processing cashback payments.
• Legal & Regulatory Compliance: Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. Complying with requests from regulatory authorities or law enforcement where legally required. Maintaining records as required by our operating licence.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, duplicate registrations, bonus abuse, and fraudulent payment activity. Protecting both players and rx777 from financial crime.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators. Administering responsible gaming tools including deposit limits, loss caps, and self-exclusion where activated by the player.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and improving the quality of support based on interaction records.
• Platform Improvement: Analysing aggregated and anonymised gaming and usage data to improve game selection, interface design, and Platform performance. Individual player data used for this purpose is anonymised before analysis.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates to players who have opted in to receive them. See Section 11 for full details of your marketing preferences and opt-out options.

rx777 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to fulfil our obligations to you under the Terms and Conditions — including account operation, payment processing, and game access — is carried out on the basis of contractual necessity. Without this processing, rx777 cannot provide the service.
• Legal Obligation: Processing required to comply with KYC, AML, and other applicable legal or regulatory requirements is carried out on the basis of legal obligation. rx777 has no discretion to withhold this processing if it is mandated by law or by our operating licence.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and Platform improvement is carried out on the basis of rx777's legitimate interests — provided that those interests are not overridden by your privacy rights. rx777 conducts a balancing assessment before relying on this basis.
• Consent: Processing for marketing communications — including promotional SMS and email — is carried out on the basis of your explicit opt-in consent. You may withdraw this consent at any time without affecting other processing. See Section 11 for how to opt out.

rx777 does not sell personal data. We share your data only where necessary, with the following categories of recipient, and only under appropriate confidentiality and data processing agreements:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner banks, and card payment processors receive the financial data necessary to execute your deposit and withdrawal requests. These processors operate under their own privacy policies and applicable Pakistani financial regulations.
• Identity Verification Providers: Where KYC verification is required, your identity documents may be shared with third-party identity verification services operating under strict confidentiality obligations.
• Fraud Prevention Services: rx777 uses third-party fraud detection and AML screening services that may receive IP address, device fingerprint, and transaction data to assess risk. Data shared for this purpose is governed by data processing agreements.
• IT and Hosting Providers: rx777's platform infrastructure providers — hosting, database, and content delivery services — have access to data as necessary to maintain Platform operation. All are bound by strict confidentiality terms.
• Regulatory Authorities & Law Enforcement: rx777 may disclose personal data to regulatory bodies or law enforcement agencies where required by law, by court order, or by our operating licence obligations. rx777 will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and accountants engaged by rx777 may access personal data on a need-to-know basis in the course of providing professional services. All are bound by professional confidentiality obligations.

rx777 retains personal data for the minimum period necessary for the purpose for which it was collected, or for the period required by applicable law or regulation, whichever is longer. The following retention periods apply:

• Account and Identity Data: Retained for the lifetime of your account and for 5 years after account closure. This period reflects standard AML record-keeping obligations applicable to online gaming operators.
• Financial Transaction Records: Retained for 7 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Gaming Activity Records: Retained for 5 years from the date of the relevant gaming session or bet settlement.
• Support Communications: Retained for 3 years from the date of the interaction, to support dispute resolution and quality improvement processes.
• Marketing Preference Records: Opt-out records are retained indefinitely to ensure we do not re-contact players who have withdrawn marketing consent.
• Technical and Log Data: IP address logs and session data are retained for 12 months for security and fraud prevention purposes, then deleted or anonymised.

After the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — which cannot identify any individual — may be retained indefinitely for statistical analysis and Platform improvement purposes.

rx777 uses cookies and similar tracking technologies on the Platform to make it work correctly, to understand how players use it, and to personalise your experience. Here is what each type of cookie does:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, keep you authenticated between pages, remember your language preference, and maintain the security of your session. You cannot opt out of these cookies without disabling the Platform entirely.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players navigate the Platform — which pages are visited most, where players encounter difficulties, and how long sessions last. This information helps rx777 improve the Platform experience. No individual player is identifiable from this data.
• Functionality Cookies: These cookies remember your preferences — such as your preferred game category, table stake level, or interface settings — so you don't have to reconfigure them on each visit.
• Marketing & Attribution Cookies: Where you have arrived at rx777 via a marketing channel, these cookies help rx777 understand which channels are effective. They do not track your behaviour on other websites.

You can manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will affect your ability to use the Platform. Blocking other cookie types will not prevent you from using the Platform but may affect some personalisation features.

rx777 implements a layered security framework to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The principal security measures in place include:

• Transport Security: All data transmitted between your device and rx777 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to every page on rx777.ws, not just login and payment pages.
• Data at Rest: Personal data stored on rx777 servers is encrypted at rest using industry-standard encryption. Database access is restricted to authorised personnel with documented business need.
• Access Controls: rx777 staff access to personal data is managed on a strict need-to-know basis. All staff with data access undergo background checks and privacy training. Access is logged and audited regularly.
• Fraud Monitoring: Automated systems monitor account activity 24/7 for signs of unauthorised access, unusual login patterns, and suspicious transaction activity. Anomalies trigger immediate review.
• Third-Party Audits: rx777's security posture is subject to periodic review by independent security professionals. Findings are actioned within defined remediation timeframes.
• Incident Response: rx777 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, rx777 will notify you promptly in accordance with applicable notification requirements.

Despite these measures, no internet transmission or electronic storage system is 100% secure. rx777 cannot guarantee absolute security but commits to maintaining protections that meet or exceed industry standards for online gaming platforms.

As an rx777 player, you have the following rights over your personal data. To exercise any of these rights, contact rx777 support at support@rx777.ws or via live chat. We will respond within a reasonable timeframe and at no charge for reasonable requests:

rx777 sends promotional communications — including bonus offers, VIP updates, new game announcements, and platform news — to players who have opted in to receive them at registration or at any subsequent point.

Marketing communications are sent via SMS to your registered Pakistani mobile number and, where an email address has been provided, via email. rx777 does not use automated voice calls for marketing purposes.

You can opt out of marketing communications at any time through the following methods:

• Log in to your rx777 account and update your communication preferences in the Account Settings section.
• Reply STOP to any marketing SMS received from rx777.
• Click the unsubscribe link in any marketing email from rx777.
• Contact rx777 support via live chat or email and request to be removed from marketing lists.

Opting out of marketing communications does not affect your access to the Platform or the delivery of transactional messages related to your account — such as deposit confirmations, withdrawal notifications, and security alerts. These transactional messages are sent regardless of your marketing preference because they are necessary for account management.

rx777 is strictly an adult platform for players aged 18 and above. rx777 does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that your child has registered an account on rx777 or provided personal information through the Platform, please contact rx777 support immediately at support@rx777.ws.

Upon receiving a credible report of a minor account, rx777 will investigate promptly and, if confirmed, will close the account, delete all associated personal data to the extent not required to be retained for legal purposes, and reverse any deposits made to the account to the originating payment method where technically possible.

rx777 uses age verification checks at registration and reserves the right to require documentary evidence of age at any time. Accounts where age cannot be satisfactorily verified will be restricted from withdrawals and betting activity until verification is completed.

rx777 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes to applicable law, or improvements to how we explain our processing activities to Pakistani players.

When material changes are made to this Policy, rx777 will notify registered players via SMS to their registered mobile number at least 7 days before the changes take effect. The updated Policy will be published at rx777.ws/privacy-policy with the effective date clearly shown at the top.

Minor updates — such as corrections to typographical errors, clarifications that do not change the substance of the Policy, or updates to contact details — may be implemented without advance notice. The effective date at the top of the Policy will be updated to reflect the revision date.

Your continued use of rx777 after the effective date of any revised Policy constitutes your acknowledgement of the updated version. If you do not accept a material change to the Policy, you should contact support to discuss your options, which may include account closure with balance return as described in the Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how rx777 handles your personal data, please get in touch through any of the following channels:

• Live Chat: Available 24/7 on rx777.ws — fastest response, typically under 2 minutes. Support is available in both English and Urdu.
• Email: support@rx777.ws — for formal privacy requests, data subject access requests, or detailed queries. Responses within 24 hours for standard queries; within 30 days for formal data subject access requests.

When submitting a formal data subject access request, please include your registered mobile number and a description of the specific data or right you are exercising. rx777 may ask you to verify your identity before processing the request to ensure we release data only to the correct person.