Privacy Policy — How RC789 Handles Your Personal Data

This Privacy Policy ("Policy") is issued by RC789 ("we", "us", "our", or "the Platform") and applies to all personal data collected, processed and stored in connection with your use of the RC789 online entertainment platform, accessible at https://rc789.cam, including all associated features, services and content (collectively, the "Service").

RC789 is an English-language online entertainment platform targeting the Pakistan market. We take the privacy and security of our users' personal data seriously. This Policy explains what information we collect, why we collect it, how we use it, with whom we may share it, and what rights you have in relation to your data.

By registering an Account or continuing to use the RC789 Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Service and contact us to request account closure.

For the purposes of this Privacy Policy, the following definitions apply:

RC789 collects personal data through multiple channels: directly from you when you register, deposit funds or contact support; automatically through your interaction with the platform; and, in limited circumstances, from third-party verification or payment service providers.

3.1 Registration Data

• Full legal name
• Date of birth (for age verification)
• Email address
• Mobile phone number
• City and country of residence (e.g., Karachi, Lahore, Islamabad)
• Username and hashed account password

3.2 Financial & Payment Data

• Payment method details (e.g., bank account reference, mobile wallet identifier) — stored only to the extent necessary to process transactions. Full payment credentials are handled by payment processing partners, not stored directly by RC789.
• Deposit and withdrawal transaction history
• PKR account balance records
• Source-of-funds information provided for KYC purposes

3.3 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Pakistani National CNIC)
• Proof of address documentation
• Source-of-funds or source-of-wealth documentation where required
• Facial verification data where required by the Platform's verification procedures

3.4 Platform Usage Data

• Betting and gaming activity records (bets placed, games played, outcomes)
• Session timestamps and duration
• Bonus and promotional offer interactions
• Responsible gambling tool settings (deposit limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser version
• Unique device identifiers
• Referring URL and on-site navigation behaviour

3.6 Communications Data

• Support chat transcripts and email correspondence
• Feedback and survey responses
• Responsible gambling support requests

RC789 processes personal data on the following legal grounds, depending on the nature and purpose of each processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the User Agreement — including account management, transaction processing and provision of the gaming Service.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering (AML) and fraud prevention obligations.
• Legitimate interests: Processing necessary for RC789's legitimate business interests, including platform security, fraud detection, responsible gambling monitoring, service improvement and analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: Where RC789 relies on consent for specific processing activities (e.g., certain marketing communications), you may withdraw consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

RC789 uses collected personal data for the following purposes:

RC789 does not sell, rent or trade your personal data to third parties for their own marketing purposes. Data may be shared in the following limited circumstances:

• Payment processing partners: Financial data is shared with payment processors to facilitate deposit and withdrawal transactions. These partners process data as Data Processors under binding contractual obligations.
• Identity verification providers: KYC documents and verification data are shared with accredited third-party identity verification services to fulfil compliance obligations.
• Game content providers: Technical session data may be passed to game studios or live dealer providers to enable game functionality. No directly identifiable personal data beyond what is technically necessary is shared for this purpose.
• Analytics and technology partners: Aggregated, anonymised or pseudonymised data may be shared with technology partners to support platform analytics and performance monitoring.
• Legal authorities: RC789 will disclose personal data to law enforcement, regulators or courts where required by applicable law, a valid legal order, or to protect the Platform's legitimate legal interests.
• Corporate transactions: In the event of a merger, acquisition or business transfer, personal data may be transferred as part of that transaction. Users will be notified of any material change in data controller responsibility.

RC789 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting or reporting obligations.

• Active account data: Retained for the duration of the Account plus a minimum period following closure, as required by the Platform's regulatory obligations.
• KYC and identity documents: Retained for a minimum period as required by applicable AML regulations, typically five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years to satisfy record-keeping requirements.
• Support communications: Chat and email records are retained for a reasonable period to support dispute resolution and quality assurance.
• Marketing data: Where consent has been given for marketing communications, data is retained until consent is withdrawn or the Account is closed.

When personal data is no longer required for any lawful retention purpose, RC789 will securely delete or irreversibly anonymise the data.

RC789 implements a range of technical and organisational security measures to protect personal data from unauthorised access, loss, misuse or disclosure. These include:

• TLS/SSL encryption for all data transmitted between your device and the RC789 platform.
• Hashed and salted storage of Account passwords — RC789 does not store plaintext passwords.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability monitoring of the platform infrastructure.
• Documented incident response procedures for managing any personal data breach.

While RC789 applies these measures diligently, no system is entirely immune to security incidents. In the event of a data breach that is likely to pose a significant risk to your rights and freedoms, RC789 will notify affected users in accordance with applicable notification requirements.

You also have a responsibility to maintain the security of your own Account. Use a strong, unique password, do not share your credentials, and contact RC789 support immediately if you suspect unauthorised access to your Account.

RC789 uses cookies and similar tracking technologies (such as pixels and local storage) to operate the platform and improve your experience. The categories of cookies used are as follows:

• Essential cookies: Strictly necessary for the platform to function. These enable core features such as session authentication, account security and cashier access. They cannot be disabled without impairing platform operation.
• Analytics cookies: Used to collect aggregated data on how users interact with the RC789 platform — pages visited, session duration, device type and similar metrics. This data helps us improve platform performance and usability for Pakistani users.
• Functional cookies: Allow the platform to remember your preferences such as language settings, preferred view and responsible gambling tool configurations, improving your personalised experience.

By continuing to use the RC789 platform after being presented with cookie information, you consent to the use of non-essential cookies where applicable. You can manage cookie preferences through your browser settings; however, disabling essential cookies may affect your ability to access core platform features.

RC789 is operated by an international operator and your personal data may be processed and stored on servers located outside Pakistan. Where personal data is transferred internationally, RC789 takes reasonable steps to ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection principles.

Such safeguards may include standard contractual clauses or data processing agreements with service providers that impose equivalent data protection obligations. By using the RC789 Service, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence.

Subject to applicable law and the operator's compliance obligations, you have the following rights in respect of your personal data held by RC789:

To exercise any of these rights, contact RC789 support via live chat on the platform or email [email protected]. RC789 will respond within a reasonable timeframe and may request verification of your identity before processing any data rights request. Where requests are subject to limitations under applicable compliance law (e.g., AML retention obligations), RC789 will explain the basis for any restriction.

The RC789 Service is strictly for adults aged 18 years and above, or the higher minimum age required by the operator's licence jurisdiction. RC789 does not knowingly collect personal data from any person under the applicable minimum age.

RC789 employs age verification processes at registration and during KYC checks to prevent minors from accessing the platform. If RC789 becomes aware that a minor has provided personal data or created an Account, that Account will be immediately closed and any personal data associated with it will be deleted as promptly as permitted by applicable legal obligations.

If you believe that a minor has registered an Account on RC789, please contact us immediately at [email protected].

The RC789 platform does not contain external links to third-party websites as a matter of policy. However, if any third-party content or links are encountered via the platform, RC789 is not responsible for the privacy practices or data handling policies of those third parties. This Policy applies solely to data collected and processed by RC789 in the operation of the Service.

RC789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements or platform features. Where changes are material — meaning they significantly affect how we process your personal data or your rights in relation to it — we will notify registered users by email or via a prominent notice on the platform prior to the changes taking effect.

The effective date and last-reviewed date at the top of this Policy will be updated with each revision. Your continued use of the RC789 Service after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, please discontinue use of the Service and contact us to request Account closure.

If you have questions, concerns or requests relating to this Privacy Policy or to your personal data held by RC789, please contact us using the channels below. All privacy-related enquiries are handled in English; Urdu support is available via live chat.

• Live Chat: Available 24/7 directly on the RC789 platform — the fastest channel for urgent requests including data access, correction or deletion.
• Email: [email protected] — please use the subject line "Privacy Request" for data rights enquiries. This is plain-text contact information and is not a clickable link.

RC789 aims to acknowledge all privacy requests promptly. Complex data access or erasure requests may require identity verification before processing. Where a request cannot be fulfilled in full due to overriding legal retention requirements, RC789 will explain the basis for any limitation in its response.

For information on responsible gambling or to activate a self-exclusion, please visit our Responsible Gambling page or contact support directly.