Privacy Policy

Introduction

ru999 ("we", "us", "our" or "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the ru999 online gaming platform at ru999.cam. This Privacy Policy ("Policy ") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this Policy carefully to understand our practices regarding your personal data.

By registering an account, making a deposit, or continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the operator of the ru999 platform.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller, such as payment processors, identity verification providers and analytics services.
• "User" or "you" means any natural person who accesses, registers on or otherwise uses the ru999 Platform.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawal privileges are granted.
• "Cookie" means a small text file placed on your device by the Platform to store session information, preferences and usage data.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

Data We Collect

ru999 collects and processes the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity and Registration Data

• Full legal name and date of birth
• Username and encrypted password
• Nationality and country of residence
• Government-issued identification (e.g., Pakistani National Identity Card (CNIC), passport) provided during KYC verification
• Selfie or facial image submitted for identity verification purposes

3.2 Contact Data

• Email address
• Phone number (if provided)
• Residential or billing address

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., bank account reference, mobile wallet identifier) — note that full card numbers are not stored by ru999
• Account balance history and wagering activity
• Bonus and promotional credit usage

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser version
• Session timestamps, login history and access logs
• Cookie identifiers and similar tracking technologies

3.5 Behavioural and Usage Data

• Pages visited, features used and navigation patterns on the Platform
• Game history, betting patterns and session duration
• Responsible gambling tool usage and self-imposed limit settings
• Customer support interaction records and chat transcripts

How We Collect Your Data

We collect personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit, contacting support, or completing any form on the Platform.
• Automated collection: Data collected automatically as you interact with the Platform, including via cookies, web beacons, server logs and analytics scripts.
• Third-party sources: Data received from identity verification providers, fraud detection services, payment processors and, where applicable, credit reference or sanctions screening agencies.
• Public sources: Publicly available data used to verify identity, confirm address or conduct due diligence in accordance with our regulatory obligations.

Data Processing & Use

We process your personal data for the following purposes. The table below maps each processing activity to the data categories involved and the applicable legal basis:

Legal Basis for Processing

ru999 processes personal data under the following legal bases, consistent with internationally recognised data protection frameworks:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you, including account operation, payment processing and game service delivery.
• Legal Obligation: Processing required to comply with applicable regulatory requirements, including anti-money laundering (AML) rules, KYC obligations and responsible gambling regulations imposed by our licensing jurisdiction.
• Legitimate Interest: Processing carried out for our legitimate business interests, such as fraud detection, platform security, product improvement and responsible gambling monitoring, where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific and informed consent, such as receiving promotional emails or enabling non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

ru999 does not sell your personal data to third parties. We may share your data with the following categories of recipient only where necessary and under appropriate safeguards:

7.1 Service Providers and Data Processors

We engage trusted third-party providers who process data on our behalf under contractual obligations consistent with this Policy, including: payment processing companies, identity verification and KYC service providers, customer support platform operators, fraud detection and cybersecurity vendors, and cloud hosting and infrastructure providers.

7.2 Regulatory and Legal Authorities

We may disclose personal data to gaming regulators, law enforcement agencies, financial intelligence units or courts where required by applicable law, court order or regulatory direction, or where we believe disclosure is necessary to protect the rights, safety or property of ru999, its users or the public.

7.3 Payment References

For context, Pakistani users may interact with payment infrastructure familiar to them — such as bank transfers through institutions including HBL, UBL, Meezan Bank and Bank Alfalah, or mobile wallet platforms such as Easypaisa, JazzCash and Raast. Where such methods are used for deposits or withdrawals, transaction data is shared with the relevant payment processor solely to execute the transaction. This does not constitute endorsement of or affiliation with any named institution, nor does it imply that any named provider supports gambling transactions.

7.4 Business Transfers

In the event of a merger, acquisition, reorganisation or sale of assets, personal data held by ru999 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being assumed by the successor entity.

Cookies & Tracking Technologies

ru999 uses cookies and similar technologies to operate the Platform, remember your preferences, maintain session integrity and understand how users interact with our services. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential to the functioning of the Platform, including session management, login authentication and security features. These cannot be disabled without impairing core platform functionality.
• Functional Cookies: Enable enhanced features and personalisation, such as remembering your language preferences, account settings and responsible gambling limit configurations.
• Analytics Cookies: Used to collect aggregate information about how users navigate and use the Platform, helping us identify areas for improvement. Data collected is anonymised or pseudonymised where possible.
• Marketing Cookies: Used to deliver relevant promotional content based on your interaction history on the Platform. These are only activated with your explicit consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the availability and performance of Platform features. Continued use of the Platform following the display of our cookie notice constitutes consent to the use of strictly necessary and functional cookies.

Data Retention

ru999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship and for a minimum of five (5) years following account closure, in accordance with standard AML and gaming regulatory record-keeping requirements.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, or longer where required by the applicable regulatory framework.
• Customer support records: Retained for three (3) years from the date of the relevant interaction, unless the matter relates to a dispute, in which case records are retained until final resolution.
• Technical and log data: Generally retained for up to twelve (12) months, unless required to be preserved for security investigation or legal purposes.
• Marketing preferences and consent records: Retained for the duration of the consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Data Security

ru999 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our Platform
• Encryption of sensitive data fields at rest within our databases
• Role-based access controls limiting internal access to personal data to authorised personnel only
• Regular security assessments, penetration testing and vulnerability scanning
• Multi-factor authentication requirements for administrative system access
• Incident response procedures with defined notification timelines in the event of a data breach

While we apply robust security practices, no system of data transmission or storage can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials and for notifying us promptly if you suspect any unauthorised access to your account.

Your Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by ru999. To exercise any of these rights, please contact us using the details provided in Section 15.

We will respond to verified rights requests within 30 days. We may need to verify your identity before processing a request. Where a request cannot be fulfilled due to a conflicting legal obligation (such as AML record-keeping requirements), we will explain the reason in our response.

Children & Minors

The ru999 Platform is strictly intended for adults aged 18 years and above, or the higher minimum age required by the licence jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age. Age verification is a mandatory step in our KYC process and we reserve the right to suspend any account and withhold funds pending satisfactory proof of age.

If you are a parent or guardian and believe that a minor has registered on the Platform or provided personal data to us, please contact us immediately at the address in Section 15. We will take prompt steps to investigate and, where confirmed, to delete the relevant data and close the account.

International Data Transfers

ru999 operates internationally and your personal data may be transferred to, and processed in, countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Such transfers occur where our service providers, data processors or infrastructure operate in other countries.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, which may include: standard contractual clauses approved by the relevant regulatory authority; the existence of an adequacy decision in respect of the destination country; or other legally recognised transfer mechanisms. By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan.

Changes to This Policy

ru999 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made, we will provide reasonable notice via a prominent notice on the Platform or by email to the address registered on your account prior to the change taking effect. The revised Policy will display an updated "Last reviewed" date at the top of this page.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms. We encourage you to review this Policy periodically to stay informed about how we are protecting your information. If you do not agree with a material change, you may close your account in accordance with our Terms & Conditions.

Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy, or wish to exercise any of your data rights, please contact our support team. We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 days.