r778 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which r778 ("r778", "we", "us", "our") collects, processes, stores, and shares personal data relating to users ("you", "User", "Player") of the r778 online casino and sportsbook platform, accessible at r778.asia.

r778 operates Pakistan's premier online casino and sportsbook, serving players across Karachi, Lahore, Islamabad, Faisalabad, and all cities and regions across Pakistan. In the course of providing our services — which include casino games, live dealer tables, cricket and sports betting, account management, and customer support — r778 necessarily processes certain categories of personal data relating to registered and prospective users.

r778 is committed to processing your personal data lawfully, transparently, and only to the extent necessary for the legitimate purposes described in this Policy. We do not sell your personal data to third parties, and we do not use your data for purposes beyond those described herein without your explicit consent.

This Policy must be read in conjunction with the r778 Terms and Conditions, which are incorporated by reference. By registering an account with r778 or otherwise accessing any r778 service, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data in the manner described herein. If you do not agree with this Policy, please do not register an account or use any r778 service.

For the purposes of this Privacy Policy, r778 is the data controller in respect of personal data collected from users of the r778 platform. As data controller, r778 determines the purposes for which personal data is collected and the means by which it is processed.

r778 is licensed and regulated under an international gaming regulatory framework. The specific licensing authority and jurisdiction applicable to r778 is available on request from r778 customer support. r778's licensing obligations include specific requirements relating to the collection, retention, and security of user personal data, which are reflected in this Policy.

Where r778 engages third-party processors to process personal data on its behalf — for example, payment processors, KYC verification providers, or customer support software providers — those third parties act as data processors under r778's instruction and are contractually bound to process personal data only in accordance with this Policy and r778's documented instructions.

r778 collects personal data from you directly when you register an account, deposit or withdraw funds, participate in games or betting markets, contact customer support, or otherwise interact with the r778 platform. We also collect certain data automatically through your use of the platform. The categories of personal data we collect are described below.

r778 applies the principle of data minimisation. We collect only the personal data that is necessary for the specific purpose for which it is being collected. We do not collect special categories of personal data (such as biometric data, health data, or data relating to ethnic origin, religious beliefs, or political opinions) except where this is required for KYC identity verification under our licensing obligations, in which case any such data is processed only to the extent strictly necessary and with appropriate security controls.

r778 uses the personal data we collect for the following specific purposes:

r778 does not use personal data for automated decision-making that produces legal effects or similarly significant effects on users, other than fraud detection systems which may result in the temporary suspension of an account pending manual review.

r778 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases on which r778 relies are as follows:

• Contract Performance: Processing is necessary for the performance of the contract between you and r778 — i.e., the provision of r778's online casino and sportsbook services under the r778 Terms and Conditions.
• Legal Obligation: Processing is required to comply with legal obligations under r778's gaming licence, including KYC/AML obligations, regulatory reporting requirements, and responsible gaming obligations.
• Legitimate Interests: Processing is necessary for the purposes of r778's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where r778 processes data for purposes beyond those necessary for service delivery or legal compliance — such as direct marketing communications or non-essential cookies — r778 relies on your explicit consent, which you may withdraw at any time without penalty.

r778 does not sell, rent, or trade your personal data to or with any third party for commercial purposes. r778 may share your personal data with third parties only in the following circumstances:

• Service Providers and Data Processors: r778 engages third-party service providers to assist in delivering its services, including payment processors (e.g., JazzCash, EasyPaisa, and bank payment gateways), KYC/identity verification providers, customer support platform providers, fraud detection services, and cloud infrastructure providers. These parties are authorised to process your data only as necessary to perform their contracted services for r778 and under binding data protection agreements.
• Game Software Providers: Certain game session data may be transmitted to r778's licensed game software providers for the purpose of resolving game disputes, auditing RNG integrity, and fulfilling provider licensing obligations.
• Regulatory and Licensing Authorities: r778 may share data with its gaming licensing authority and other regulatory bodies as required by law or licence conditions, including in the context of AML reporting, responsible gaming audits, or regulatory investigations.
• Law Enforcement: r778 may disclose personal data to law enforcement, government bodies, or courts where required by a valid legal order, court order, or applicable law, or where r778 reasonably believes disclosure is necessary to prevent fraud, illegal activity, or harm to any person.
• Business Transfers: In the event of a merger, acquisition, sale of assets, or other corporate restructuring event, your personal data may be transferred to the relevant successor entity, subject to the privacy protections described in this Policy continuing to apply.

r778 operates within an international licensing framework, and certain personal data may be transferred to, and processed in, countries other than the country in which you are located. In particular, r778's infrastructure and certain service providers may be based in jurisdictions outside Pakistan.

Where personal data is transferred internationally, r778 takes appropriate steps to ensure that such transfers are conducted in compliance with applicable data protection standards. These steps may include the use of standard contractual clauses approved by applicable data protection authorities, data processing agreements with appropriate security provisions, and transfers only to jurisdictions that have been assessed as providing adequate data protection by reference to applicable international standards.

By using r778's services, you acknowledge and consent to the transfer of your personal data to r778's international infrastructure as described in this section, subject to the protections and safeguards described herein.

r778 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and r778's licensing obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, r778 will securely delete or anonymise personal data in accordance with its data destruction procedures. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes, as anonymised data does not constitute personal data.

r778 uses cookies and similar tracking technologies on the r778 platform to provide functionality, improve user experience, maintain session authentication, and analyse platform usage. A "cookie" is a small data file placed on your device when you access the r778 platform.

r778 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for core platform functionality, including user authentication, session management, and security features. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences — such as language, currency selection (PKR), and responsible gaming settings — to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised data about how users interact with the r778 platform, allowing r778 to identify areas for improvement. Analytics data is aggregated and does not identify individual users.
• Marketing Cookies: Used to deliver relevant promotional content based on your r778 activity and preferences, subject to your marketing consent. These cookies are not placed without your prior consent.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the r778 platform. Your cookie preferences can also be updated at any time through the Cookie Settings option available within the r778 platform.

r778 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and r778's servers;
• Encryption at rest for stored personal and financial data;
• Industry-standard password hashing for account credential storage;
• Access controls that restrict r778 staff access to personal data on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability management;
• Two-factor authentication (2FA) available to all registered users;
• Automated fraud detection systems that monitor transaction and session activity for anomalous patterns;
• Physical and logical security controls for r778's server infrastructure.

Notwithstanding these measures, no method of electronic transmission or storage is entirely secure. While r778 uses commercially reasonable means to protect your personal data, r778 cannot guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, r778 will notify you and, where required, the applicable regulatory authority, in accordance with applicable law.

Subject to applicable law and r778's legitimate processing obligations, you have the following rights in respect of your personal data held by r778:

• Right of Access: You have the right to request a copy of the personal data r778 holds about you, along with information about how that data is processed.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data held by r778.
• Right to Erasure: You have the right to request the deletion of your personal data where r778 no longer has a lawful basis for processing it — subject to r778's overriding obligations under its gaming licence and applicable AML law, which may require retention for defined periods.
• Right to Restriction of Processing: You have the right to request that r778 restrict the processing of your personal data in certain circumstances, for example where you dispute the accuracy of the data.
• Right to Data Portability: Where r778 processes your data on the basis of contract or consent, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where r778 relies on legitimate interests as the legal basis, including for direct marketing purposes.
• Right to Withdraw Consent: Where r778 processes data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact r778's customer support team via live chat or by email at [email protected]. r778 will respond to all valid data subject requests within 30 calendar days of receipt. r778 may request verification of your identity before processing a data subject request.

The r778 platform and all its services are strictly intended for individuals aged 21 years and above. r778 does not knowingly collect, process, or store personal data relating to persons under the age of 21. The r778 platform employs age verification procedures at account registration to prevent access by underage individuals.

If r778 becomes aware that personal data has been collected from a person under 21 years of age, r778 will take immediate steps to delete that data from its systems and close the associated account. If you have reason to believe that a person under 21 years of age has registered an r778 account, please notify r778 immediately via [email protected].

The r778 platform may contain links to third-party websites or services for reference or informational purposes. These third-party sites are not operated by r778, and r778 has no control over their content or privacy practices. This Privacy Policy does not apply to third-party websites or services, and r778 accepts no responsibility for the privacy practices or data handling of any third party.

r778 encourages you to review the privacy policy of any third-party website you visit. The inclusion of a link to a third-party website on the r778 platform does not constitute an endorsement of that website or its privacy practices by r778.

r778 may update this Privacy Policy from time to time to reflect changes in applicable law, r778's data processing practices, or r778's licensing obligations. When material changes are made to this Policy, r778 will notify registered users by email to the address associated with their account and will publish the updated Policy on the r778 platform with a revised effective date.

We encourage you to review this Privacy Policy periodically to remain informed about how r778 processes your personal data. Your continued use of the r778 platform following the effective date of any amendment to this Policy constitutes your acceptance of the amended Policy. If you do not accept an amendment, you should cease using r778 and contact customer support to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or r778's data processing practices, please contact r778's data protection contact point using the following channels:

Email: [email protected]
Live Chat: Available 24/7 via the r778 platform

r778 takes all privacy-related queries and complaints seriously. If you submit a privacy complaint, r778 will acknowledge receipt within 3 business days and will use reasonable endeavours to resolve the matter within 30 calendar days. Where a complaint cannot be resolved directly, you may have the right to refer the matter to the applicable supervisory authority under r778's licensing framework.