rz999 Privacy Policy

This Privacy Policy applies to all users of the rz999 platform, including registered account holders, visitors who browse rz999.net without registering, and individuals who contact rz999 customer support. By accessing or using rz999, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

rz999 takes your privacy seriously. As Pakistan's leading Black Diamond VIP online casino and sports betting platform, we recognise that the trust of our players — from Karachi to Lahore, Islamabad to Faisalabad — is the foundation of everything we do. This Policy is written in plain, accessible English so that every rz999 player fully understands what data we hold and why.

rz999 operates as an internationally licensed online gaming operator. Our data handling practices are designed to comply with applicable data protection legislation and the requirements of our gaming licence authority. We review and update this Privacy Policy regularly to reflect changes in our practices, technology, and applicable law.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is rz999, the operator of rz999.net. As data controller, rz999 determines the purposes and means by which your personal data is processed.

If you have any questions, requests, or concerns relating to this Privacy Policy or the way rz999 processes your personal data, you may contact our Data Protection team using the email address displayed in the rz999 site footer. rz999 will acknowledge all privacy-related enquiries within 3 business days and aim to provide a full response within 14 days of receipt.

rz999 collects the following categories of personal data about you, depending on how you interact with the platform:

rz999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification purposes. We do not collect data about your social media activity on external platforms.

rz999 collects your personal data through the following means:

• Direct interactions: Data you provide when registering your rz999 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies when you access rz999.net on any device.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, or USDT TRC20 processors when you make deposits or withdrawals.
• Identity verification providers: Data returned by our third-party KYC and age verification service providers when you submit identity documents during the account verification process.
• Fraud prevention services: Data received from third-party fraud detection and AML screening providers as part of our regulatory compliance obligations.

rz999 processes your personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary purposes for which rz999 processes your data and the legal basis relied upon for each:

Where rz999 relies on consent as the legal basis for processing — most notably for marketing communications — you have the right to withdraw that consent at any time by contacting rz999 customer support or updating your communication preferences in your account settings. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.

rz999 will never sell your personal data to unaffiliated third parties for their own marketing purposes. Your data may be shared with carefully selected third parties only in the following circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processors receive transaction data strictly as necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Specialist third-party providers who verify the authenticity of identity documents submitted during the rz999 account verification process.
• AML and fraud screening providers: Third-party services used to screen transactions and player activity against AML databases and fraud risk indicators as required by our regulatory obligations.
• Game content providers: Licensed third-party casino game providers (slots, live casino, fishing games) receive a player session token to facilitate gameplay; they do not receive your full personal profile.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on rz999's behalf under data processing agreements that bind them to confidentiality and security obligations equivalent to those of rz999.
• Regulatory and law enforcement authorities: rz999 may disclose personal data to regulatory bodies, gaming authorities, or law enforcement agencies where required by law, court order, or as part of our gaming licence obligations — including mandatory AML reporting.

rz999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your rz999 account and for a minimum of five (5) years following account closure, in line with standard AML regulatory requirements applicable to licensed gaming operators.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Responsible gaming records: Self-exclusion records are retained for the duration of the exclusion period plus five (5) years to prevent re-registration during active exclusion.
• Marketing consent records: Retained for three (3) years from the date consent was last confirmed or until withdrawal of consent, whichever is earlier.
• Technical and usage data (analytics): Retained in anonymised or aggregated form indefinitely for platform improvement purposes; identifiable technical data retained for up to 12 months.

Where retention beyond these periods is required by applicable law or ongoing legal proceedings, rz999 will retain the relevant data for as long as necessary and will securely delete it once the extended retention requirement expires.

rz999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the rz999 platform, ensuring that your login credentials, payment information, and personal data are protected in transit at all times.
• Encrypted data storage for all sensitive personal data including identity documents, payment account details, and account credentials held on rz999's servers.
• Two-factor authentication (2FA) via SMS OTP, available to all rz999 account holders and strongly recommended for every player.
• Access controls and role-based permissions ensuring that rz999 staff can only access the personal data required to perform their specific job functions. All staff with access to personal data are bound by confidentiality obligations.
• Regular penetration testing and security audits conducted by qualified third-party cybersecurity professionals to identify and remediate vulnerabilities.
• 24/7 security monitoring with automated alerts for unusual activity patterns, including atypical login locations, multiple failed authentication attempts, and suspicious transaction patterns.

Despite rz999's robust security measures, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your rz999 login credentials and for ensuring the security of the device you use to access the platform.

rz999 uses cookies and similar tracking technologies on rz999.net. Cookies are small text files placed on your device by your browser when you visit a website. They allow the website to recognise your device, remember your preferences, and collect usage information. rz999 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the rz999 platform. These cookies enable core functions such as secure login, session management, and fraud prevention. They cannot be disabled without significantly impairing your ability to use rz999.
• Performance and analytics cookies: Collect anonymised information about how players use rz999.net, which pages are visited most frequently, and how players navigate between pages. This data helps rz999 improve the platform experience for all players.
• Functionality cookies: Remember your preferences such as language settings, preferred game categories, and display settings to provide a personalised rz999 experience.
• Marketing and targeting cookies: Used only with your consent to deliver relevant promotional content and offers from rz999. These cookies track your interaction with rz999 promotional materials.

You can manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from using the core functions of rz999, but may limit certain personalisation features. Note that strictly necessary cookies cannot be disabled as they are required for the secure operation of the platform.

rz999 respects your rights in relation to your personal data. Depending on applicable law and the circumstances of your request, you may have the following rights:

• Right of access: You may request a copy of the personal data rz999 holds about you, along with information about how it is processed.
• Right to rectification: You may request that rz999 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure: In certain circumstances, you may request that rz999 delete your personal data. Note that this right is subject to overriding legal obligations — rz999 may be required to retain certain data for regulatory, AML, or legal reasons even following account closure.
• Right to restrict processing: You may request that rz999 temporarily restrict the processing of your personal data in certain circumstances, such as while a dispute about accuracy is resolved.
• Right to data portability: Where processing is based on your consent or on contract, you may request that rz999 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing of your personal data where rz999 relies on legitimate interests as the legal basis, and where you believe the processing impacts your rights to an extent not justified by rz999's legitimate interests.
• Right to withdraw consent: Where rz999 processes your data based on consent — including for marketing communications — you may withdraw that consent at any time by contacting customer support.

To exercise any of the above rights, please contact rz999 via the email address displayed in the site footer. rz999 will respond to all rights requests within 14 days of receipt, and in any event no later than 30 days. Complex requests may require additional time; in such cases, rz999 will notify you of the delay and provide an estimated response date.

rz999 will not charge a fee for processing your rights requests unless they are manifestly unfounded or excessive in nature, in which case a reasonable administrative fee may apply.

rz999 is strictly an adult platform. Access to rz999 is prohibited for any person under the age of 21 years. rz999 does not knowingly collect personal data from individuals under 21 and takes active steps to prevent underage access to the platform.

If rz999 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, such data will be deleted promptly and the associated account permanently closed. If you are a parent or guardian and believe your child may have registered on rz999, please contact our support team immediately using the contact details in the footer.

rz999 strongly encourages parents and guardians to make use of internet filtering and parental control software to prevent children from accessing online gambling platforms. Resources and guidance on parental controls are available on our Responsible Gaming page.

As an internationally licensed online gaming operator, rz999 may process and store your personal data in countries outside of Pakistan. This may occur when rz999 uses third-party service providers — such as cloud hosting providers, KYC verification platforms, or fraud screening services — that operate data infrastructure in other jurisdictions.

Where such international transfers occur, rz999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include:

• Data processing agreements containing standard contractual clauses that bind third-party processors to data protection obligations consistent with rz999's own standards.
• Transfers only to countries or service providers with adequate data protection frameworks recognised by applicable regulatory standards.
• Regular assessment of the data protection practices of all third-party processors handling rz999 player data.

rz999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our gaming licence requirements. Material changes to this Privacy Policy — meaning changes that significantly affect your rights or how rz999 processes your personal data — will be communicated to registered players via email or an on-platform notification at least seven (7) days before the changes take effect.

Minor or administrative updates (such as clarifications, corrections, or contact detail changes) may be made without advance notice and will be reflected by the updated "Last Updated" date displayed at the top of this page. We encourage you to review this Privacy Policy periodically so that you remain informed about how rz999 protects your data.

Your continued use of the rz999 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Privacy Policy, you should stop using rz999 and may request account closure in accordance with the rz999 Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or to the way rz999 processes your personal data, please contact the rz999 Data Protection team using the email address displayed in the footer of this website. Please include "Privacy Policy Enquiry" in your subject line.

rz999 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with rz999's response to your privacy enquiry, you may have the right to lodge a complaint with the relevant supervisory authority under the laws of the jurisdiction governing your use of rz999.