RS33 Privacy Policy – How We Handle Your Personal Data

1. Who We Are

RS33 is an online entertainment platform that offers sports betting, casino games, live casino, and slot games to players in Pakistan. For the purposes of this Privacy Policy, RS33 is the data controller — meaning we determine the purposes and means of processing your personal data.

References to "RS33", "we", "us", or "our" throughout this policy refer to the RS33 platform and the company operating it. References to "you" or "your" refer to any person accessing or using the RS33 platform.

2. Data We Collect

RS33 collects personal data in two ways: data you provide directly, and data that is generated automatically as you use the platform. Here is a breakdown of both categories.

• Registration data: Your name, date of birth, email address, phone number, and any username or password you create.
• Identity verification documents: Government-issued ID (such as a CNIC or passport) submitted during the KYC process. This is required before withdrawals can be processed.
• Payment information: Details used to fund your account — such as your JazzCash or Easypaisa account number, bank account or card details. Sensitive payment data is processed through secure third-party payment processors and is not stored in full on RS33 servers.
• Communications: Messages you send to RS33 support, feedback you provide, or any information you include in queries or complaints.
• Responsible gaming preferences: Deposit limits, session limits, or self-exclusion instructions you set in your account.

• Device and connection data: Your IP address, browser type and version, operating system, device type, and network connection details.
• Usage data: Pages viewed, features used, time spent on the platform, bet history, game sessions, and navigation patterns.
• Session data: Login and logout timestamps, session durations, and any session-level activity.
• Cookie data: Information stored in cookies and similar technologies on your device (see Section 7).

3. How We Use Your Data

RS33 uses your personal data for specific, defined purposes. We do not use your data for purposes that are incompatible with what is described here.

4. Legal Basis for Processing

Every processing activity at RS33 is carried out on one of the following legal bases. We do not process your data without a valid legal justification.

• Contractual necessity: Most core processing — account management, payments, bet settlement — is necessary to fulfil the contract between you and RS33 when you create an account and use the platform.
• Legal obligation: Identity verification, anti-money laundering checks, and fraud monitoring are carried out because we are legally required to perform these activities. This applies regardless of whether you consent to them individually.
• Legitimate interests: Fraud prevention, security monitoring, and platform improvement are carried out on the basis of our legitimate interest in running a secure and well-functioning service, balanced against your privacy interests.
• Consent: Marketing communications via email or SMS are only sent where you have given explicit consent. You may withdraw this consent at any time.

5. Data Sharing

RS33 does not sell your personal data to third parties. We share data only in the following circumstances and only to the extent necessary for each purpose.

• Payment processors: Payment data is shared with the relevant payment gateway or processor (such as JazzCash, Easypaisa, or card networks) to complete your transaction. These providers handle data under their own security and privacy standards.
• Identity verification providers: During KYC, your identity documents may be processed by a third-party verification service. These providers are contractually bound to protect your data and use it only for the verification purpose.
• Game content providers: Session data relevant to the game you are playing may be shared with the third-party game supplier to manage the game session, resolve disputes, and calculate outcomes. Game providers do not receive your full account data.
• Fraud and security partners: Anonymised or pseudonymised risk signals may be shared with fraud detection services to protect the platform and all players. Full personal data is not transmitted in these processes.
• Legal and regulatory disclosure: RS33 will disclose personal data to authorities, courts, or law enforcement agencies when required to do so by a valid legal obligation. We will not resist legitimate legal requests.

6. Payment Data and Financial Security

Financial transactions on RS33 — whether depositing via JazzCash, Easypaisa, Raast, bank transfer, or card — are processed through secure payment infrastructure. RS33 takes the following specific measures for payment data.

• Full card numbers are never stored on RS33 servers. Card transactions are tokenised through the payment processor, meaning only a secure token (not the raw card data) is stored on our side.
• Mobile wallet transactions (JazzCash and Easypaisa) are processed through the respective platform APIs under encrypted connections. RS33 does not store your mobile wallet PIN or password.
• All financial transaction records — deposits, withdrawals, and balance movements — are logged and available in your RS33 account history. If you see a transaction you do not recognise, contact support immediately.
• Withdrawals are only processed to payment methods that have been used to deposit, or to verified accounts in your name. This prevents funds from being redirected to third parties without your knowledge.

Your PKR wallet balance on RS33 is maintained in full and is available for withdrawal at any time, subject to identity verification being complete and no active responsible gaming restrictions being in place.

7. Cookies and Tracking Technologies

RS33 uses cookies and similar technologies on the website and platform. A cookie is a small text file stored on your device when you visit a website. It does not contain executable code and cannot access other files on your device.

• Essential cookies: Required for the platform to function — maintaining your login session, remembering your language preferences, and keeping your bet slip intact as you navigate between pages. These cannot be disabled without breaking core platform functions.
• Performance cookies: Used to measure how the platform is used — which pages are visited most, where errors occur, and how load times compare across different areas. This data is aggregated and does not identify individual users.
• Functional cookies: Remember preferences you have set — such as which sport or market you prefer to see first, or responsible gaming reminders you have configured.
• Third-party cookies from game providers: Game content embedded in the RS33 platform may use session cookies from the game supplier to manage the game session. These are covered by the game supplier's own cookie policies.

RS33 does not use advertising cookies or social media tracking pixels that connect your platform activity to external advertising networks. You can manage browser cookie settings at any time through your browser preferences, though disabling essential cookies will affect how the platform works.

8. Data Retention

RS33 retains your personal data for the period necessary to fulfil the purpose it was collected for, or as required by applicable compliance and anti-fraud obligations.

• Active accounts: Data is held while your account is active and for a period following account closure, as required for transaction record-keeping and fraud prevention.
• Identity verification documents: KYC documents are retained for the minimum period required by applicable anti-money laundering obligations, after which they are securely deleted.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained as required for financial record-keeping compliance.
• Support communications: Messages exchanged with RS33 support are kept for a reasonable period to allow follow-up queries and dispute resolution.
• Anonymised data: Aggregated, anonymised usage data that cannot be linked back to an individual may be kept for longer periods for platform analytics and improvement purposes.

When data is no longer required and the retention period has passed, it is securely deleted or irreversibly anonymised. You can request information about retention periods for specific categories of your data by contacting RS33 support.

9. Data Security

RS33 implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These include:

• Encryption of data in transit using TLS (HTTPS) across all platform connections — web, app, and API.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Access controls that restrict which staff members can access personal data, based on job function and need.
• Regular security monitoring and automated systems that detect unusual access patterns or potential breach attempts.
• Secure handling of third-party integrations, including payment gateways and game providers, using tokenisation and API authentication.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that affects your personal data, RS33 will notify affected users as soon as practicable and take immediate steps to contain and address the breach.

You also play a role in your account security. Using a strong, unique password, not sharing your login credentials, and enabling any two-factor authentication option available all significantly reduce the risk of unauthorised access to your RS33 account.

10. Your Data Rights

You have meaningful rights regarding the personal data RS33 holds about you. These rights are described below. To exercise any of them, contact RS33 support — there is no fee for making a request, and we aim to respond within a reasonable timeframe.