rc777 Privacy Policy

rc777 ("rc777", "we", "us", "our") operates the online gaming platform accessible at rc777.im, including all associated subdomains, mobile interfaces, and related digital services. rc777 is committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered player, a visitor browsing the site, or a contact submitting a support enquiry.

This Privacy Policy describes in plain, clear English how rc777 collects, processes, stores, shares, and protects your personal information. It also sets out the rights you hold in relation to your personal data and how you can exercise those rights.

rc777 operates in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR). While Pakistani data protection law is still evolving, rc777 voluntarily applies GDPR-aligned standards across all player data handling activities as part of our commitment to best practice and our obligations under our international gaming licence.

For the purposes of applicable data protection law, the data controller responsible for your personal information collected via the rc777 platform is the entity that holds the international gaming licence under which rc777 operates. Full details of the data controller are available upon request from our Data Protection Officer (DPO).

All data protection enquiries, subject access requests, and complaints should be directed to the rc777 Data Protection Officer in the first instance. Contact details for the DPO are set out in Section 14 of this Policy.

rc777 collects personal data from you in two principal ways: information you provide directly when using the platform, and information collected automatically as you interact with our services. The categories of personal data we collect are described below.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address (including city — e.g., Karachi, Lahore, Islamabad, Faisalabad), email address, and mobile phone number provided when you create your rc777 account.
• KYC / Verification Data: National Identity Card (CNIC) number and image, passport details, proof of address documents, and payment method verification documents submitted during the Know Your Customer process.
• Financial Data: JazzCash account details, EasyPaisa account details, HBL, UBL, or Meezan Bank account reference numbers submitted for deposit and withdrawal processing. Note: rc777 does not store full bank account credentials — only the identifiers required for payment reconciliation.
• Support Communications: The content of any live chat conversations, email messages, or other communications you initiate with the rc777 support team.
• Responsible Gaming Preferences: Self-exclusion requests, deposit limits, session time limits, cool-off period preferences, and related responsible gaming tool settings.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
• Usage Data: Pages visited on rc777.im, time spent on each page, click and navigation paths, game sessions played, bets placed, and search queries entered within the platform.
• Transaction Data: A full record of all deposits, withdrawals, bets, wins, losses, bonus activations, and account balance movements associated with your rc777 account.
• Cookie Data: Information collected via cookies and similar tracking technologies. See Section 9 for full details.
• Geolocation Data: Approximate geographic location derived from your IP address, used for regulatory compliance and fraud prevention. rc777 does not collect precise GPS-level location data unless explicitly enabled by the player.

rc777 processes your personal data only for specific, legitimate purposes. The table below summarises our primary processing activities and the data categories involved.

rc777 will not process your personal data for any purpose materially different from those listed above without first providing you with notice and, where required by law, obtaining your explicit consent.

rc777 relies on the following legal bases when processing your personal data, consistent with GDPR-aligned standards:

• Contractual Necessity: Processing required to perform the contract between rc777 and the player — including account creation, payment processing, game provision, and support services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements under our gaming licence, and age verification requirements.
• Legitimate Interests: Processing carried out in rc777's legitimate interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which rc777 has obtained your explicit prior consent, principally marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rc777 does not sell your personal data. We do not share your personal data with third parties for their own independent marketing purposes. Personal data is shared only where necessary, and only with the categories of recipients described below.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data required to process your deposit or withdrawal transaction. Each of these providers operates under its own privacy policy and applicable Pakistani financial regulation.
• Identity Verification Providers: Third-party KYC and age verification service providers that assist rc777 in verifying player identity and age in compliance with our licensing obligations.
• Game Software Providers: Providers of the casino games, slots, and sports betting engines available on the rc777 platform may receive pseudonymised player session data for game integrity and RNG audit purposes.
• Fraud Prevention & AML Services: Specialised fraud detection and anti-money laundering screening providers that process transaction and identity data to flag suspicious activity.
• Regulatory Authorities: rc777's licensing regulator and, where legally required, law enforcement agencies or government bodies. Disclosure in these cases is governed by applicable law and is not subject to player consent.
• Cloud Infrastructure Providers: Hosting and cloud services providers used to operate the rc777 platform. These providers act as data processors under binding data processing agreements and may not use player data for their own purposes.
• Customer Support Platforms: Live chat and ticketing platforms used to manage player support interactions, operating under strict data processing agreements.

rc777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

• Account & Registration Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with AML record-keeping obligations under our gaming licence.
• KYC & Identity Documents: Retained for a minimum of 5 years following the completion of the KYC process or account closure, whichever is later.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years to satisfy financial audit and AML compliance requirements.
• Support Communications: Retained for a minimum of 3 years following the resolution of the support interaction, or longer if relevant to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of your account and for 2 years following account closure or withdrawal of consent, whichever is later, as evidence of lawful processing.
• Cookie & Analytics Data: Session cookies expire at the end of your browsing session. Persistent analytics cookies are retained for a maximum of 13 months from the date of placement.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual player. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes.

rc777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the rc777 platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial identifiers, is encrypted at rest on rc777's infrastructure using AES-256 encryption.
• Access Controls: Access to player personal data by rc777 staff is governed by the principle of least privilege. Only staff members with a legitimate operational need are authorised to access specific categories of player data.
• Segregated Player Funds: Financial data relating to player balances is processed in systems entirely separate from rc777's operational financial systems.
• Regular Security Audits: rc777's platform undergoes regular third-party penetration testing and security assessments. Identified vulnerabilities are remediated on a priority basis.
• Staff Training: All rc777 staff with access to player data receive mandatory data protection training upon joining and at regular intervals thereafter.
• Incident Response: rc777 maintains a documented data breach response plan. In the event of a data breach that poses a risk to player rights, affected players will be notified without undue delay in accordance with our obligations under applicable data protection law.

rc777 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, remember your preferences, analyse usage patterns, and — where you have given consent — deliver relevant promotional content.

Types of cookies used by rc777:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies, security tokens, and cookies that remember your login state. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. These improve your experience but are not strictly required for the platform to operate.
• Analytics Cookies: Collect aggregated, pseudonymised data about how players use the rc777 platform, including pages visited and game sessions initiated. This data is used internally to improve platform performance and user experience. These cookies require your consent.
• Marketing Cookies: Used where you have given explicit consent to track your activity for the purpose of delivering personalised promotions and offers. You may withdraw consent at any time via your account cookie preferences.

You may manage your cookie preferences at any time via the cookie settings panel accessible from the rc777 platform footer. Please note that disabling strictly necessary cookies may impair your ability to use the platform. For more information on managing cookies in your browser, consult your browser's help documentation.

As a data subject, you hold a number of rights in relation to the personal data rc777 holds about you. rc777 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. Your rights are as follows:

• Right of Access (Subject Access Request): You have the right to request a copy of all personal data rc777 holds about you, along with information about how it is being processed. We will respond to verified subject access requests within 30 days.
• Right to Rectification: If any personal data rc777 holds about you is inaccurate or incomplete, you have the right to request correction. Many details (such as your email address or mobile number) can be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. Please note that this right is subject to rc777's legal obligations — we are required to retain certain records for AML compliance and are unable to delete data that forms part of a mandatory retention obligation.
• Right to Restriction of Processing: You may request that rc777 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to rc777 in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data where rc777 relies on legitimate interests as the legal basis. You may also object at any time to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant supervisory authority if you believe rc777 has processed your personal data in a manner that does not comply with applicable data protection law.

The rc777 platform is strictly intended for adults aged 21 years and over. rc777 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the rc777 KYC process and is conducted before a player account is fully activated .

If rc777 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or any other means — the following steps will be taken immediately:

• The account will be suspended and all pending transactions cancelled.
• Any funds deposited by the underage individual will be returned to the originating payment method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) after identity verification.
• All personal data associated with the account will be securely deleted, subject only to any mandatory retention obligations under applicable law.
• The matter will be reported to the relevant regulatory authority as required under rc777's licensing obligations.

Parents and guardians in Pakistan are encouraged to make use of parental control software to prevent underage access to online gaming platforms. If you believe a minor in your household has accessed or registered on rc777, please contact our support team immediately via live chat, available 24/7 with a response time of under 2 minutes.

rc777 operates as an internationally licensed gaming platform. As a result, certain personal data processing activities may involve the transfer of data outside of Pakistan to countries where rc777's infrastructure providers, game software providers, or other service partners are located.

Where personal data is transferred internationally, rc777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Safeguards used by rc777 for international transfers include:

• Standard Contractual Clauses (SCCs) approved under applicable data protection frameworks.
• Transfers to jurisdictions that have been assessed to provide an adequate level of data protection.
• Binding Corporate Rules (BCRs) where applicable within group structures of service providers.

rc777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, rc777 will notify registered players by one or more of the following methods:

• A prominent notice displayed on the rc777 platform upon your next login.
• An email notification sent to the address registered on your rc777 account.
• A platform notification via the rc777 in-account messaging system.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. Your continued use of the rc777 platform following notification of a material change constitutes your acknowledgement of the updated Privacy Policy. If you do not accept the revised policy, you should discontinue use of the platform and request account closure.

For all privacy-related enquiries, subject access requests, consent withdrawal requests, or data protection complaints, please contact the rc777 Data Protection Officer using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 on the rc777 platform — average response time under 2 minutes
• Subject Line: Please use "Privacy / DPO Request" in the subject line of email enquiries to ensure prompt routing to the Data Protection team

rc777 will acknowledge receipt of all data subject requests within 72 hours and will provide a full response within 30 days of receipt. Where a request is complex or involves a large volume of data, the response period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.