Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how rs89 ("rs89", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your", "Player") who access or use the rs89 platform available at https://rs89.im, including all associated sub-domains, mobile applications, APIs, and services (collectively, the "Platform").

rs89 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.

By registering an account, accessing the Platform, or otherwise providing your personal information to rs89, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your data as described herein.

2. Data Controller

For the purposes of applicable data protection law, rs89 acts as the data controller in respect of personal data collected through the Platform. As data controller, rs89 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how rs89 processes your personal data, or if you wish to exercise any of your data subject rights, please contact us using the details provided in Section 15 of this Policy.

3. Data We Collect

rs89 collects the following categories of personal data from players and visitors to the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used for mandatory age verification — players must be 21 or older).
• CNIC number or passport number where required for KYC verification.
• Residential address, city (e.g., Karachi, Lahore, Islamabad, Faisalabad), and country.
• Email address and contact phone number.

3.2 Financial Data

• JazzCash or EasyPaisa account number or mobile wallet identifier.
• HBL, UBL, Meezan Bank, or SadaPay account details used for deposits or withdrawals.
• USDT TRC20 wallet address, where applicable.
• Transaction history including deposit amounts, withdrawal requests, and betting activity.

3.3 Technical & Usage Data

• IP address, device type, operating system, and browser information.
• Login timestamps, session duration, and pages visited on the Platform.
• Geolocation data (country and city level) derived from your IP address.
• Device identifiers and, where permitted, mobile advertising IDs.

3.4 Communications Data

• Content of support tickets, live chat transcripts, and emails sent to rs89.
• Records of marketing communications sent to you and your preferences regarding those communications.
• Responses to surveys, feedback forms, or promotional competitions.

3.5 Responsible Gaming Data

• Self-exclusion requests and the duration of any exclusion period.
• Deposit limits, session limits, or reality-check settings you have applied to your account.
• Any disclosures you have made to rs89 regarding problem gambling.

4. How We Collect Your Data

rs89 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit, submitting a withdrawal request, contacting support, or filling in any form on the Platform.
• Automated collection: Technical data collected automatically as you browse and interact with the Platform, including via cookies, web beacons, and server logs.
• Third-party sources: Identity verification agencies and KYC service providers who confirm the authenticity of documents you submit. Payment processors who confirm transaction status. Fraud detection and anti-money laundering (AML) screening services.

5. Purpose & Legal Basis for Processing

rs89 processes your personal data only where there is a lawful basis to do so. The table below summarises the primary purposes for which we process your data and the corresponding legal basis:

6. Sharing Your Data

rs89 does not sell your personal data. We may share your information with the following categories of third parties only where necessary and on a need-to-know basis:

6.1 Service Providers

We engage carefully vetted third-party service providers who process data on our behalf under binding data processing agreements. These include: identity verification and KYC providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and crypto payment gateways), fraud detection and AML compliance providers, IT infrastructure and hosting providers, and customer support platform vendors.

6.2 Regulatory & Legal Authorities

rs89 may be required to disclose your personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or regulatory directive. In all such cases, rs89 will disclose only the minimum information required and, where legally permitted, will notify you of the disclosure.

6.3 Business Transfers

In the event that rs89 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the relevant successor entity. We will notify you of any such transfer and the privacy practices of the successor entity prior to your data being transferred.

7. Payment Data & Financial Privacy

rs89 takes the privacy of your financial data especially seriously. All payment transactions processed through the Platform — whether via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20 — are handled in accordance with the following principles:

• Full card or bank account numbers are never stored in our primary databases. Only masked identifiers (e.g., last four digits, wallet handle) are retained.
• Payment data is transmitted exclusively over TLS-encrypted connections.
• All financial transactions are logged for AML monitoring purposes and retained for the period required by applicable law.
• rs89 verifies that withdrawal accounts belong to the registered account holder before processing. Withdrawals to third-party accounts are not permitted.

8. Data Retention

rs89 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The following general retention periods apply:

Upon expiry of the applicable retention period, rs89 will securely delete or anonymise your personal data so that it can no longer be associated with you.

9. Security Measures

rs89 implements a comprehensive, layered approach to data security. Our technical and organisational measures include, but are not limited to:

• Encryption: AES-256 encryption for data at rest; TLS 1.2 or higher for all data in transit between your device and our servers.
• Access controls: Role-based access control (RBAC) ensuring that rs89 staff can only access the personal data necessary for their specific job function. All access is logged and regularly audited.
• Two-factor authentication: Available and encouraged for all player accounts, and mandatory for all internal administrative systems.
• Penetration testing: Regular third-party penetration tests and vulnerability assessments of the Platform and underlying infrastructure.
• Incident response: A documented data breach response plan with defined timelines for internal escalation and, where required, notification to regulatory authorities and affected players.
• Employee training: All rs89 staff with access to personal data undergo regular data protection and security awareness training.

While rs89 employs industry-standard security measures, no system is completely immune to risk. You are responsible for maintaining the security of your account credentials. If you suspect your account has been compromised, please contact our support team immediately.

10. Cookies & Tracking Technologies

The rs89 Platform uses cookies and similar tracking technologies to operate correctly, enhance your experience, and support security functions. The following types of cookies may be set when you visit the Platform:

rs89 does not use third-party advertising cookies, cross-site tracking cookies, or social media pixels. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect your ability to log in and use the Platform.

11. Your Data Subject Rights

Subject to applicable law and certain conditions, you have the following rights in respect of the personal data rs89 holds about you:

• Right of access: You may request a copy of the personal data rs89 holds about you, along with information about how it is processed.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data without undue delay.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we temporarily restrict processing of your data while a rectification or objection request is being assessed.
• Right to data portability: Where processing is based on your consent or a contract, you may request that we provide your data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at the details set out in Section 15. We will respond to all valid requests within thirty (30) days. In complex cases we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

12. Minors & Age Verification

The rs89 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21, and we do not permit minors to register or use the Platform in any capacity.

As part of our registration process, we collect date of birth and may request government-issued identification to verify that all players meet the minimum age requirement. Where we discover that a minor has registered an account, we will immediately suspend the account, void any bets placed, return any deposits where practicable, and permanently delete the minor's personal data from our systems.

If you believe a minor has registered an account on rs89, please notify us immediately at the contact details in Section 15 so we can take appropriate action without delay.

13. International Data Transfers

rs89 operates on an internationally licensed platform and may use service providers located in jurisdictions outside your country of residence. Where personal data is transferred to a country that does not provide an equivalent level of data protection, rs89 implements appropriate safeguards to ensure that your data remains protected. These safeguards may include standard contractual clauses, data processing agreements with binding data protection obligations, or transfers to providers certified under recognised international frameworks.

By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan. rs89 takes all reasonable steps to ensure that international transfers are conducted securely and in compliance with applicable data protection principles.

14. Changes to This Privacy Policy

rs89 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable law. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered players via their registered email address or through a prominent notice on the Platform.

Your continued use of the Platform following the posting of any revised Policy constitutes your acceptance of those changes. We encourage you to review this page periodically to stay informed about how rs89 protects your personal data.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way rs89 handles your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection team:

Email: [email protected]

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days. For general questions about the Platform, account issues, or responsible gaming support, you can also visit our FAQ page or review our Responsible Gaming resources.

For further legal context, this Policy should be read alongside our Terms & Conditions.