At rr777, the privacy of every Pakistani member is treated as a core operational responsibility, not a compliance formality. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we protect it, and what rights you hold as a data subject under rr777's international licensing framework.
Privacy at a Glance
Six core principles that govern how rr777 collects, processes, and protects personal data belonging to all members, including Pakistani players from Karachi to Islamabad.
rr777 does not sell, rent, or trade personal data to any third party for their own marketing purposes. Your name, mobile number, CNIC details, and transaction history exist on rr777's systems to facilitate your gaming experience — not to be monetised by third parties.
All data transmitted between your device and rr777's servers is protected by 256-bit SSL encryption — the same standard used by international banks. This applies to login credentials, payment details, KYC document uploads, and all account activity.
Every rr777 member has the right to request a complete copy of their personal data, correct inaccurate records, request deletion where legally permissible, and object to specific processing activities. These requests are handled within 30 days at no cost.
Personal data is stored on access-controlled, encrypted servers hosted within secure international data centres. Access to member data is restricted to rr777 staff with a documented operational need. All access events are logged and auditable.
rr777 collects only the personal data necessary to provide the service, comply with KYC and AML licensing obligations, and deliver a personalised member experience. Data not necessary for these purposes is not collected. Collection is transparent and documented.
rr777 members may opt out of promotional communications at any time through account settings or by contacting support. Transactional communications essential to account operation (e.g., deposit confirmations, security alerts) cannot be opted out of while the account remains active.
This Privacy Policy ("Policy") is issued by rr777 and sets out the manner in which rr777 collects, holds, uses, shares, and protects the personal data of individuals ("Members," "you," "your") who access or use the rr777 gaming platform at rr777.my, including all associated subdomains, mobile-optimised interfaces, and related services (collectively, the "Platform").
This Policy applies to all personal data collected by rr777 in connection with the operation of the Platform, regardless of the device or connection method used to access it. It applies equally to prospective members who browse the Platform without registering, registered members who maintain active accounts, and former members whose data is retained in accordance with legal obligations.
By registering an account on the rr777 Platform or continuing to use it after the effective date of this Policy, you acknowledge that you have read and understood how rr777 processes your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the Platform.
rr777 is the data controller responsible for personal data collected through the Platform. rr777 operates under an international gaming licence and is bound by the data protection obligations stipulated within that licensing framework. As data controller, rr777 determines the purposes and means of processing personal data obtained through Platform interaction.
For all privacy-related inquiries, data subject requests, or formal complaints regarding rr777's data processing activities, Members should contact the rr777 Data Protection team via the contact details provided in Section 16 of this Policy.
rr777 collects personal data in the following categories:
rr777 collects personal data through the following mechanisms:
rr777 processes personal data under one or more of the following legal bases, depending on the specific processing activity:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity (performance of member agreement) |
| KYC identity and age verification | Legal obligation under gaming licence requirements |
| Deposit and withdrawal processing | Contractual necessity; legal obligation (AML compliance) |
| Anti-money laundering monitoring | Legal obligation |
| Fraud detection and account security | Legitimate interest (protecting platform and members) |
| Responsible gaming monitoring and tools | Legal obligation; legitimate interest |
| Customer support communications | Contractual necessity; legitimate interest |
| Promotional communications (opt-in) | Consent |
| Platform analytics and improvement | Legitimate interest |
| Regulatory reporting and auditing | Legal obligation |
rr777 uses collected personal data for the following purposes:
rr777 does not sell personal data. Disclosure of Member personal data to third parties occurs only in the following circumstances:
rr777 engages third-party service providers who process personal data on rr777's behalf under contractual data processing agreements. These include:
All third-party service providers are vetted for data security compliance and are contractually bound to use Member data only for the specific service purposes and to maintain confidentiality.
rr777 may disclose Member personal data to regulatory bodies, gaming licensing authorities, law enforcement agencies, or courts where required to do so by law, by rr777's licence conditions, or by a valid legal order. rr777 will notify affected Members of such disclosure where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or substantially all of rr777's business assets, Member personal data may be transferred as part of that transaction. Members will be notified of any such transfer that materially affects the processing of their personal data, and the receiving entity will be required to honour the commitments made in this Policy.
rr777 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:
Members may manage cookie preferences through their browser settings. Disabling non-essential cookies may affect certain Platform features but will not prevent access to core gaming services.
rr777 retains personal data for the following periods:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and KYC documents | 5 years after account closure | AML / licensing legal obligation |
| Financial transaction records | 7 years after transaction date | AML / tax legal obligation |
| Gaming session records | 5 years after account closure | Licensing audit obligation |
| Customer support communications | 3 years after last interaction | Legitimate interest (dispute resolution) |
| Promotional consent records | 3 years from consent or until withdrawn | Legal compliance |
| Technical / device / IP logs | 12 months from collection | Legitimate interest (security) |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that is the subject of an active legal investigation, regulatory inquiry, or unresolved dispute may be retained beyond standard periods until resolution.
rr777 implements a comprehensive set of technical and organisational security measures to protect Member personal data against unauthorised access, disclosure, alteration, and destruction:
Despite these measures, no internet-based system can guarantee absolute security. Members bear responsibility for maintaining the security of their own account credentials, as set out in the rr777 Terms & Conditions.
rr777 operates under an international gaming licence and utilises globally distributed infrastructure to deliver its Platform. As a result, Member personal data may be transferred to and processed in countries outside of Pakistan, including the jurisdiction in which rr777's licensing authority is located, and jurisdictions where rr777's technology partners operate.
Such international transfers are conducted under contractual data protection agreements that require the receiving party to maintain security and privacy standards consistent with those described in this Policy. Where applicable, rr777 relies on recognised legal transfer mechanisms to legitimise cross-border data flows.
rr777 recognises and supports the following data subject rights for all Members:
Your Data Rights
As a registered rr777 member, you hold specific rights over your personal data. Submit requests to our Data Protection team at [email protected] — all requests are acknowledged within 5 business days and resolved within 30 days.
Request a complete copy of all personal data rr777 holds about you. We will provide a structured, machine-readable export of your data within 30 days of a verified request, at no charge.
Request correction of inaccurate personal data. If your name, contact details, or any other records held by rr777 are incorrect, submit a rectification request with supporting documentation and we will update records promptly.
Request deletion of personal data where rr777 no longer has a legal basis to retain it. Note: data subject to AML, licensing, and legal retention obligations cannot be deleted before the applicable retention period expires.
Request that rr777 restricts processing of your data in specific circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and the basis for objection is being assessed.
Request your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) for transfer to another service. This right applies to data processed on the basis of consent or contractual necessity.
Object to processing of your data based on legitimate interest, including direct marketing communications. Marketing objections are processed immediately; other objections are assessed within 30 days with a documented response.
The rr777 Platform is strictly restricted to individuals aged 21 years and above. rr777 does not knowingly collect personal data from any person under the age of 21. If rr777 discovers that personal data of an individual under 21 years has been collected — whether through registration misrepresentation or any other means — the associated account will be immediately suspended, all data will be handled in accordance with applicable legal obligations, and the account will be permanently closed.
All Members are required to complete CNIC-based age verification as part of rr777's KYC process. The documented date of birth on the submitted CNIC is treated as the authoritative age record. Any mismatch between declared age at registration and CNIC date of birth is treated as a material misrepresentation subject to the consequences set out in rr777's Terms & Conditions.
The rr777 Platform may include references to third-party game studios, payment network logos, or informational resources. This Privacy Policy applies solely to data collected directly by rr777 through the Platform. rr777 is not responsible for the privacy practices of any third-party service providers or external entities whose services are integrated into or referenced by the Platform.
Game software providers integrated into rr777 (such as Pragmatic Play, NetEnt, Play'n GO, PG Soft, and others) operate their game engines under separate data processing agreements with rr777. These providers receive only the anonymised session data necessary to operate game functions and are contractually prohibited from using such data for any other purpose.
rr777 reserves the right to update this Privacy Policy at any time to reflect changes in legal obligations, licensing requirements, or Platform operations. Material updates that affect how personal data is collected or used will be communicated to Members via a prominent Platform notice and, where practicable, via the registered mobile number or email address on file, at least seven (7) days before the changes take effect.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Members are encouraged to review this Policy periodically. Continued use of the Platform after the effective date of any updated Policy constitutes acceptance of the revised terms.
For all privacy-related inquiries, data subject rights requests, or formal complaints regarding rr777's personal data handling, Members should contact:
rr777 acknowledges all privacy requests within 5 business days and resolves them within 30 calendar days. Complex requests may require up to 60 days, in which case rr777 will notify the Member of the extended timeline and its reason.
Members who are not satisfied with rr777's response to a privacy complaint have the right to escalate the matter to rr777's licensing authority or the relevant data protection supervisory authority as notified by rr777's Data Protection team upon request.
Join Pakistan's most trusted VIP casino — 2,000+ games, instant JazzCash withdrawals, and data handled with full transparency. 21+ only. Play responsibly.
Open Your rr777 Account Read Terms & Conditions