rss99 Privacy Policy – How We Protect Your Personal Data in Pakistan

1. Who We Are

This Privacy Policy applies to the rss99 online gaming platform, accessible at https://rss99.click. When we refer to "rss99", "we", "us", or "our" in this policy, we mean the company operating the rss99 platform and providing online gaming and betting services to players in Pakistan and other permitted jurisdictions.

rss99 is the data controller for all personal information collected through the rss99 platform. This means we are responsible for deciding how your data is used, ensuring it is stored securely, and honouring your rights in relation to that data. If you have any questions about how rss99 handles your personal information, our data team can be reached at support@rss99.click.

2. Data We Collect

rss99 collects personal data in the following categories. We collect only what is genuinely needed and nothing more.

3. How We Use Your Data

rss99 uses your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• 1
  Account Management: Creating and maintaining your rss99 account, verifying your identity, processing login authentication, and managing account settings and preferences.
• 2
  Payment Processing: Processing your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard; verifying payment source for fraud prevention; maintaining transaction records as required by financial regulations.
• 3
  Game Provision: Delivering all rss99 games and betting products, maintaining game history, calculating and awarding winnings, and ensuring fair play monitoring across all game categories.
• 4
  Customer Support: Responding to your queries, complaints, and requests through live chat, email, and WhatsApp; maintaining support history to provide continuity of service.
• 5
  Legal Compliance: Fulfilling KYC (Know Your Customer), AML (Anti-Money Laundering), and age verification obligations; maintaining records required by applicable regulations; responding to lawful requests from regulatory authorities.
• 6
  Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling; administering deposit limits, self-exclusion, and other responsible gaming tools; contacting players where intervention may be appropriate.
• 7
  Platform Security: Detecting and preventing fraud, account takeover, cheating, bot activity, and money laundering; maintaining platform integrity for all rss99 players.
• 8
  Service Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience. This analysis uses anonymised data only and cannot identify individual players.

4. Legal Basis for Processing

rss99 processes your personal data based on one or more of the following legal grounds for each purpose:

5. Data Sharing

rss99 does not sell, rent, or trade your personal data. We share data with third parties only in the following limited and specific circumstances:

• 1
  Payment Processors: When you make a deposit or withdrawal, your payment details are shared with the relevant payment provider (e.g., Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, or card networks). These providers have their own privacy policies and are bound by financial data protection regulations. rss99 receives only transaction confirmations and reference numbers — not your full payment credentials.
• 2
  Identity Verification Services: Where KYC verification is required, your identity documents may be processed by a third-party verification service engaged by rss99. These providers are contractually bound to process your data only for the purposes instructed by rss99 and to maintain equivalent security standards.
• 3
  Regulatory and Legal Authorities: rss99 will disclose personal data to government bodies, law enforcement agencies, or regulatory authorities when required to do so by applicable law, valid legal process, or a lawful regulatory request. We will notify the affected account holder where legally permitted to do so.
• 4
  Fraud Prevention Networks: In cases of confirmed or strongly suspected fraud, money laundering, or financial crime, rss99 may share relevant data with industry fraud prevention organisations. This is done to protect all players on the platform and is carried out under strict data-sharing agreements.
• 5
  Business Transfers: In the event of a merger, acquisition, or sale of rss99 assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer via the contact details on their account before it occurs.

6. Payment Data Security

rss99 takes the security of your financial data with particular seriousness. All payment transactions on rss99 are processed over SSL-encrypted connections. Card payment data is handled using tokenisation — your full card number is never stored on rss99 servers. The token used for recurring transactions cannot be reverse-engineered to extract card details.

Mobile wallet transactions via Easypaisa, JazzCash, NayaPay, and SadaPay are processed through the official APIs of those providers, meaning rss99 never receives or stores your wallet PIN, account password, or full mobile account credentials. Only transaction reference numbers are retained by rss99 for record-keeping purposes.

IBFT bank transfers are identified by transaction reference numbers. rss99 does not store your full bank account number beyond what is necessary for withdrawal processing and regulatory record-keeping, and access to stored financial records is strictly controlled and audited.

7. Cookies and Tracking Technologies

rss99 uses cookies and similar technologies on the platform for operational and analytical purposes. We do not use cookies for third-party advertising or cross-site tracking. The cookies rss99 uses fall into the following categories:

You can manage optional cookie preferences through your rss99 account settings. Disabling optional cookies will not affect your ability to play, deposit, or withdraw on rss99.

8. Data Retention

rss99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply as a general guide:

• ⏱
  Account Data: Retained for the duration your account is active plus a minimum of 5 years following account closure, to meet regulatory record-keeping requirements.
• ⏱
  Financial Transaction Records: Retained for a minimum of 7 years following each transaction, in accordance with standard financial compliance requirements applicable to online payment platforms.
• ⏱
  KYC / Identity Verification Documents: Retained for a minimum of 5 years following verification or account closure, whichever is later.
• ⏱
  Customer Support Records: Retained for 3 years following the resolution of the support interaction, or longer where a dispute or legal matter remains open.
• ⏱
  Technical / Session Data: Retained for 12 months in standard operational logs, after which it is deleted or anonymised.
• ⏱
  Self-Exclusion Records: Retained indefinitely to prevent re-registration in violation of a self-exclusion. This is a responsible gaming requirement, not a commercial one.

When data is no longer required and retention periods have expired, rss99 deletes or securely anonymises it so it can no longer be associated with any individual player.

9. Your Rights Over Your Data

Every rss99 player has the following rights in relation to their personal data. These rights can be exercised by contacting rss99 at support@rss99.click. We will respond to all data rights requests within 30 days.

10. Children's Privacy

rss99 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under 18 years of age. Age verification checks are conducted during registration and at other points where we have grounds to verify a player's age.

If rss99 becomes aware that personal data has been collected from a person under 18 years of age, we will immediately delete that data, close the associated account, and return any deposits made to the originating payment method. If you believe a minor has registered on rss99 using your contact details or payment methods, please contact us immediately at support@rss99.click.

11. Security Measures

rss99 maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, or destruction. These include:

• 256-bit SSL/TLS encryption on all pages and data transmissions
• Payment card data tokenisation — full card numbers are never stored on rss99 systems
• Secure, access-controlled database infrastructure with restricted employee access on a need-to-know basis
• Regular internal security audits and penetration testing
• Multi-factor authentication for all rss99 staff accounts with access to player data
• Real-time monitoring for unusual account activity, login anomalies, and data access patterns
• Incident response procedures to handle data security events promptly and notify affected players as required

While rss99 takes all reasonable precautions, no system is entirely immune to security threats. If you become aware of any suspected security vulnerability involving your rss99 account, contact us immediately at support@rss99.click.

12. Responsible Gaming and Data

rss99's responsible gaming programme requires us to process your gameplay data in ways that go beyond standard commercial use. Specifically, rss99 uses anonymised gameplay pattern analysis to identify signs of problem gambling behaviour — for example, unusual increases in session length, rapid loss-chasing patterns, or sharp increases in deposit frequency.

Where our responsible gaming monitoring identifies a player who may benefit from support, a member of the rss99 responsible gaming team may reach out using the contact details on your account. This outreach is done to offer help and support tools, not for commercial purposes.

Your self-exclusion status, deposit limit settings, and responsible gaming tool preferences are treated as sensitive data and are accessible only to authorised rss99 staff with a specific need to know — for example, to enforce an active self-exclusion. This data is never used for marketing, profiling, or any commercial purpose.

For full information on responsible gaming tools available on rss99, including deposit limits, cooling-off periods, and self-exclusion, visit the Responsible Gaming page.

13. Changes to This Privacy Policy

rss99 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via the email address or phone number on their account, and publish the updated policy on this page with a revised "Last Updated" date.

For minor changes that do not significantly affect how we handle your data — such as clarifications of existing language — we may update this page without direct notification. We encourage you to check this page periodically to stay informed about how rss99 protects your data.

Continued use of the rss99 platform after the effective date of a revised Privacy Policy constitutes acceptance of the changes. If you do not agree with a material change to this policy, you may request account closure and withdrawal of your balance before the changes take effect.

14. Contact Us About Privacy

For any question, concern, or request relating to this Privacy Policy or how rss99 handles your personal data, please contact us through the following channels:

rss99 is committed to resolving all privacy queries and data rights requests fairly and promptly. If you feel your privacy concern has not been adequately addressed, you have the right to escalate to the relevant regulatory authority in your jurisdiction.