rx777 Privacy Policy – Pakistan

01Who We Are

rx777 operates the online betting and gaming platform accessible at rx777.bet. For the purposes of this Privacy Policy, rx777 is the data controller — meaning we are the entity responsible for deciding how and why your personal data is processed.

When you interact with rx777 — by registering an account, making a deposit, placing a bet, using live casino features, claiming a promotion, or contacting customer support — you are sharing information with us. We take that responsibility seriously. This Policy explains the full picture of what happens to your data from the moment you first visit the platform.

Our primary contact for all privacy-related matters is: privacy@rx777.bet. If you have questions, concerns, or requests about your personal data, this is the right address to use.

02What Data We Collect

rx777 collects personal data in three main ways: information you provide directly, information generated automatically by your use of the platform, and information received from third parties (such as payment processors and KYC verification providers).

Data You Provide to Us

• Registration data: Full name, date of birth, Pakistani mobile number, and the password you choose for your account.
• Identity verification (KYC) data: A copy of your CNIC or passport, a selfie or live photo in some cases, and proof of address (such as a utility bill).
• Payment data: Your Easypaisa wallet number, JazzCash number, NayaPay or SadaPay details, bank account number (for IBFT), or card details (for Visa/Mastercard). We do not store full card numbers — card payments are processed by our certified payment provider and only tokenised references are retained by rx777.
• Communication data: Any information you share with our support team via live chat, email, or any other written communication channel.
• Self-exclusion and responsible gaming preferences: If you set deposit limits, loss limits, cooling-off periods, or request self-exclusion, that preference data is stored and acted upon.

Data Collected Automatically

• Technical data: Your IP address, device type, operating system version, browser type and version, screen resolution, and time zone.
• Usage data: Pages visited on rx777, time spent on each section, features accessed, bets placed and their outcomes, games played, sessions started and ended.
• Cookie data: Session identifiers, preference settings, and analytics identifiers. See Section 8 for full cookie details.

Data from Third Parties

• Payment processors: Transaction status confirmations, payment method ownership verification results.
• KYC / identity verification providers: Identity check results (pass/fail), document authenticity flags, and politically exposed person (PEP) or sanctions screening results required for anti-money laundering compliance.
• Fraud detection services: Risk signals associated with your device fingerprint or behavioural patterns, used solely for fraud prevention purposes.

03How rx777 Uses Your Data

We use your personal data only for the purposes described in this Policy. We do not use it for anything else without telling you first.

Responsible Gaming Use of Your Data

This one deserves special mention. rx777 uses aggregated data about your betting behaviour — frequency, session duration, loss velocity, late-night activity — as part of our responsible gaming monitoring system. If your pattern suggests a risk of problem gambling, our player welfare team may proactively reach out to offer support tools. This data use is designed to protect you, not to restrict or penalise normal play. We never share responsible gaming flags with third parties.

04Legal Basis for Processing

rx777 processes your personal data only when a valid legal basis exists. Depending on the purpose, our legal basis is one of the following:

• Contractual necessity: Processing required to perform the contract between you and rx777 — for example, processing your deposit so you can place a bet, or verifying your identity so we can pay out your winnings.
• Legal obligation: Processing required to comply with applicable law — including anti-money laundering (AML) obligations, KYC requirements, and tax reporting requirements that apply to online gaming operators.
• Legitimate interests: Processing necessary for rx777's legitimate business interests — fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — where those interests do not override your fundamental rights.
• Consent: For marketing communications (SMS, email promotions), we rely on your explicit opt-in consent. You can withdraw this consent at any time without affecting your account.

05Who We Share Your Data With

rx777 does not sell your personal data to anyone. We do not share it with advertisers, data brokers, or marketing companies. The only situations in which your data leaves rx777 are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment gateways need transaction data to process your deposits and withdrawals. They are contractually bound to use this data only for payment processing.
• KYC and identity verification providers: When you submit identity documents, they are sent to our certified verification partner for authenticity checking and AML screening. Results are returned to rx777 and the raw documents are not stored by us longer than necessary.
• Fraud detection services: Anonymised device and behavioural data may be shared with fraud prevention providers to identify and block fraudulent activity on the platform.
• Technology infrastructure providers: Our hosting, database, and CDN providers process data purely on our instructions under strict data processing agreements. They have no independent right to use your data.
• Legal and regulatory authorities: If required by applicable law, a court order, or a regulatory authority with jurisdiction over rx777's operations, we may disclose data to comply with that legal obligation. We will notify you of any such disclosure where we are legally permitted to do so.

06Data Storage & Security

rx777 stores all player data on secure, encrypted servers. Personal data at rest is encrypted using AES-256 standard encryption. All data in transit between your device and rx777 is protected by TLS 1.2 or higher (the technology behind HTTPS). The padlock icon in your browser confirms this protection is active at all times.

Access to personal data within rx777 is restricted on a strict need-to-know basis. Only authorised team members whose role requires access to specific data categories can view it, and all access is logged. We conduct regular security reviews and penetration tests to identify and address potential vulnerabilities.

Payment card data is never stored on rx777's own servers. Card transactions are processed through our PCI-DSS certified payment partners, and rx777 retains only tokenised references — not the actual card numbers, expiry dates, or CVV codes.

What Happens in a Security Incident?

In the unlikely event of a data breach that poses a risk to your rights and freedoms, rx777 will notify affected players at their registered mobile number and email address within 72 hours of becoming aware of the breach. The notification will describe what data was affected, what we have done to contain the incident, and what steps you should take to protect yourself.

07How Long We Keep Your Data

rx777 retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as we are legally required to hold it. The following periods apply:

• Active account data: Retained for the lifetime of your account plus 5 years after closure, to meet anti-money laundering record-keeping requirements.
• KYC documents (CNIC / passport copies): Retained for the duration of your account and 5 years after closure.
• Transaction and betting history: Retained for 7 years from the date of each transaction, consistent with financial record-keeping obligations.
• Customer support communications: Retained for 3 years from the date of the last communication in the thread.
• Technical logs (IP addresses, session data): Retained for 12 months, then anonymised for aggregated analytics or deleted.
• Marketing consent records: Retained for the period of your consent plus 2 years after withdrawal, to demonstrate that marketing was sent on a valid consent basis.

When data is no longer required, it is either permanently deleted or anonymised so that it can no longer be linked back to you as an individual.

08Cookies & Tracking Technologies

rx777 uses cookies and similar tracking technologies to make the platform work, improve your experience, and understand how the platform is being used. A cookie is a small text file stored on your device when you visit a website.

Types of Cookies We Use

• Essential cookies: Required for the platform to function — keeping you logged in during a session, remembering your language preference, and maintaining your betslip. These cannot be disabled without breaking the platform's core functionality.
• Analytics cookies: Help us understand how players navigate rx777 — which pages are visited most, where sessions end, and how features are used. This data is aggregated and anonymised.
• Fraud prevention cookies: Help identify unusual activity patterns that may indicate account compromise or coordinated fraud attempts.
• Preference cookies: Remember settings you have chosen, such as odds format or display preferences, so you do not have to set them again each visit.

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. However, disabling essential cookies will affect your ability to log in and use the platform. Most modern browsers (Chrome, Firefox, Safari) have straightforward cookie management tools in their settings menus.

rx777 does not use third-party advertising cookies or cross-site tracking cookies. Our analytics are conducted using first-party data collected directly on the rx777 platform.

09Your Data Rights

You have meaningful rights over your personal data at rx777. These are not aspirational statements — they are exercisable rights that we take seriously and respond to promptly.