rf777 Privacy Policy

Who We Are

rf777 (hereinafter referred to as "rf777", "we", "us", or "the Platform") operates the online casino and sports betting platform accessible at rf777.bio. rf777 is an internationally licensed online gaming operator providing real-money gaming services to adult players in eligible jurisdictions, with a primary focus on the Pakistani market. This Privacy Policy applies to all users who visit, register on, or interact with the rf777 platform in any capacity.

For the purposes of this Privacy Policy, rf777 acts as the data controller — meaning we determine the purposes and means of processing your personal data. Where third-party service providers process data on our behalf (such as KYC partners and payment processors), they act as data processors and are bound by data processing agreements that require them to maintain the same standard of data protection as rf777.

Data We Collect

rf777 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from trusted third-party verification partners. The following table summarises the categories of data we collect and the source of each:

How We Use Your Data

rf777 uses your personal data strictly for the following defined purposes. We do not use your data for any purpose that has not been disclosed in this Privacy Policy:

• Account Creation & Management: To register your account, verify your identity, maintain your player profile, and manage your login credentials securely.
• Age Verification: To confirm you are at least 21 years of age before granting access to real-money gaming services, in compliance with our responsible gaming obligations.
• Payment Processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and to maintain accurate transaction records.
• KYC & AML Compliance: To verify your identity against our Know Your Customer obligations and to monitor transactions for anti-money-laundering compliance as required by our international gaming licence.
• Platform Personalisation: To remember your game preferences, language settings, responsible gaming limits, and session configurations to improve your experience on rf777.
• Customer Support: To respond to your queries, resolve account disputes, and maintain support records for quality assurance purposes.
• Bonus & Promotion Management: To track wagering requirements, apply eligible bonuses, and prevent fraudulent multi-accounting or bonus abuse.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and prohibited conduct as defined in our Terms & Conditions.
• Regulatory Reporting: To report to our licensing authority and, where legally required, to Pakistani financial regulatory bodies in connection with AML investigations.
• Service Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, account alerts) via SMS to your registered Pakistani mobile number.

Legal Basis for Processing

rf777 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gaming activity data is necessary to perform the contract between you and rf777 — that is, to operate your account and deliver the gaming services you have signed up to use.
• Legal Obligation: Processing your CNIC data, transaction records, and KYC documents is required to comply with our international gaming licence conditions, anti-money-laundering regulations, and any applicable reporting requirements.
• Legitimate Interests: Processing your technical data and communications data for fraud prevention, security monitoring, and platform improvement is carried out on the basis of rf777's legitimate interests in maintaining a safe and fair gaming environment, provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing your data for marketing communications and non-essential cookies is carried out solely on the basis of your explicit, informed consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Third Parties

rf777 does not sell your personal data. We share your data only with the following categories of trusted third parties, and only to the extent necessary to fulfil the stated purpose:

• KYC Verification Partners: Licensed identity verification services that cross-reference your CNIC details against official Pakistani identity databases to confirm your age and identity. These partners operate under strict data processing agreements and may not retain your data beyond the verification period.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK API integrations receive only the minimum transaction data required to process your deposit or withdrawal. rf777 does not transmit your full CNIC to payment processors.
• Game Content Providers: Third-party game studios whose titles are available on rf777 may receive anonymised session identifiers and game-result data strictly for game-operation purposes. They do not receive your name, CNIC, or payment details.
• Regulatory & Law Enforcement Authorities: rf777 will disclose personal data to competent authorities where required to do so by a valid legal order, court direction, or our international gaming licence obligations. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisors: Our legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

Cookies & Tracking

rf777 uses a minimal and transparent approach to cookies. We do not deploy third-party advertising trackers or cross-site behavioural profiling cookies. The cookies we use fall into two categories:

You can manage or delete cookies at any time through your browser settings. Note that disabling essential session cookies will prevent you from logging in to your rf777 account. Disabling functional or analytics cookies will not affect your ability to use the platform but may result in reduced personalisation.

Data Retention

rf777 retains your personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by our legal and regulatory obligations. The following retention periods apply:

• Account & Identity Data (CNIC, name, date of birth): Retained for a minimum of 5 years after account closure, as required by our gaming licence AML obligations.
• Financial Transaction Records: Retained for a minimum of 7 years after the date of each transaction, in line with international financial record-keeping standards applicable to our licence jurisdiction.
• KYC Documents (CNIC scans, selfies, address proofs): Retained for 5 years post account closure, then securely destroyed.
• Gaming Activity Logs: Retained for 3 years from the date of the session for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for 2 years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your account plus 3 years, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, rf777 will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Data Security

rf777 employs a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and rf777 servers is encrypted using industry-standard TLS 1.3 protocols.
• Data-at-Rest Encryption: Sensitive data fields — including CNIC numbers and payment references — are stored in encrypted form in rf777 databases. Encryption keys are managed separately from the data they protect.
• Access Controls: Only authorised rf777 personnel with a verified operational need may access personal data. All internal data access is logged and subject to regular audit review.
• Two-Factor Authentication: rf777 uses OTP-based two-factor authentication for all player account logins and for all internal administrative access to data systems.
• Penetration Testing: rf777 platforms undergo periodic third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that is likely to affect your rights or freedoms, rf777 will notify affected players within 72 hours of becoming aware of the breach, via your registered mobile number or email.

Your Rights

As a player whose personal data is processed by rf777, you hold the following rights in respect of your data. To exercise any of these rights, submit a written request to [email protected] with your full registered name and mobile number. rf777 will respond within 30 calendar days of receiving a verifiable request.

• Right of Access: You may request a copy of all personal data rf777 holds about you, together with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data rf777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For CNIC-linked data, updated documentation may be required.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. This right is subject to our legal retention obligations — where retention is required by law or our gaming licence, we cannot delete the data before the applicable retention period expires, but we can restrict processing in the interim.
• Right to Restriction of Processing: You may request that rf777 restrict the processing of your data to storage only — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to rf777 in a structured, machine-readable format (JSON or CSV), for transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, analytics cookies), you may withdraw that consent at any time without affecting prior processing.
• Right to Object: You may object to processing carried out on the basis of rf777's legitimate interests. rf777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

Children & Minors

rf777 is a real-money gaming platform strictly intended for adults aged 21 years and older. rf777 does not knowingly collect personal data from any person under the age of 21. Age verification via CNIC is a mandatory step in the rf777 registration process; no account can be created without providing a valid Pakistani CNIC confirming the holder is 21 or above.

rf777 strongly recommends that parents and guardians install parental control software on devices that may be accessed by persons under 21 in their household. Shared device access is one of the most common ways underage gambling occurs undetected. Visit our Responsible Gaming page for guidance and resources.

Policy Changes

rf777 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When material changes are made to this policy, rf777 will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the rf777 platform homepage for a period of at least 14 days following the change.
• Where the changes materially affect your rights or how your data is used, send a direct notification to your registered Pakistani mobile number via SMS.

Your continued use of the rf777 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not accept the revised terms, you should stop using the platform and request account closure. Any data collected under the previous policy version will remain subject to the retention schedules described in Section 07.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how rf777 has handled your personal data, please contact our Data Protection team using the details below. All communications should include your full name and registered mobile number so we can locate your account record.

• Email (Data Privacy Queries): [email protected] — include "Privacy Request" in your subject line.
• Live Chat: Available on rf777.bio, 08:00 – 02:00 PKT, 7 days a week. Ask to be connected to the compliance team for data-related queries.
• WhatsApp Support: Available during the same hours as live chat. Contact details are available after logging in to your rf777 account.
• Response Time: rf777 acknowledges all privacy-related correspondence within 5 business days and resolves requests within 30 calendar days.