RS33 Privacy Policy — How We Handle Your Personal Data

1Who We Are and Scope of This Policy

This Privacy Policy describes how RS33 ("we", "us", "RS33") collects, uses, stores, and protects the personal data of individuals who register and use the RS33 online gaming platform accessible at rs33.app. RS33 operates as an online casino and sports betting platform serving players in Pakistan.

This policy applies to all RS33 services: casino games, live dealer tables, sports betting markets, the poker room, Ludo Games, Fishing Games, and any future services added to the RS33 platform. It also applies to your use of the RS33 website in general, including browsing without registering an account.

2What Personal Data RS33 Collects

RS33 collects personal data in three ways: data you provide directly when registering and using the platform, data generated automatically by your use of the platform, and data received from trusted third-party services we use to operate RS33.

Data You Provide Directly

• Registration data: Your full legal name, date of birth, Pakistani mobile number, and email address when you create your RS33 account.
• KYC verification documents: A scanned copy or photograph of your CNIC (front and back), and a selfie or facial photograph, when requested during identity verification before large withdrawals or when RS33's compliance team requests verification.
• Payment information: Your Easypaisa or JazzCash mobile number, NayaPay or SadaPay wallet ID, bank account details for IBFT, or the last four digits of a card used for deposits. RS33 does not store full card numbers — card processing is handled by the payment provider.
• Support communications: Any messages, emails, or chat transcripts exchanged with the RS33 support team, including the content and timestamps of those communications.

Data Generated Automatically

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution collected when you access rs33.app.
• Session data: Login timestamps, session duration, pages visited, and actions taken within the RS33 platform during each session.
• Game and betting history: A complete record of all games played and bets placed on RS33, including stakes, outcomes, and timestamps. This data is required to process payouts and resolve any disputes.
• Transaction history: A full record of all deposits and withdrawals made through your RS33 account, including amounts, dates, and the payment method used.

Data From Third Parties

RS33 may receive data from payment processors to confirm the status of a deposit or withdrawal, from identity verification service providers used during KYC checks, and from fraud prevention systems that check transaction patterns against known risk indicators. In all cases, third-party data sharing is limited to what is necessary for the specific function.

3How RS33 Uses Your Personal Data

RS33 uses the personal data it collects strictly for the purposes described below. We do not use your data for purposes beyond what is listed here without first notifying you and, where required, obtaining your explicit consent.

• Account management: Creating and maintaining your RS33 account, authenticating your identity at login, and enabling you to access the games and betting markets on the platform.
• Payment processing: Verifying and processing your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. Your payment data is used solely to execute the transactions you initiate.
• Identity verification and KYC compliance: Confirming that you are who you say you are, that you are at least 18 years old, and that your account is not being used for money laundering or fraud. KYC verification is a legal obligation for RS33 as a financial services platform.
• Fraud prevention and security: Monitoring account and transaction activity for signs of fraud, collusion, bonus abuse, account sharing, or other prohibited behaviour under the RS33 Terms and Conditions. RS33 uses automated systems and human review for this purpose.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and providing technical assistance. Support conversations are logged to ensure consistent service and for staff training.
• Responsible gaming monitoring: Identifying patterns in gameplay that may indicate problem gambling behaviour, and reaching out to players where RS33's responsible gaming policy requires intervention.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use RS33, which features are most popular, and where improvements can be made. Individual player data is not used for this analysis.
• Marketing communications: Sending promotional offers, bonus notifications, and tournament announcements — but only to players who have explicitly opted in to receiving such communications.

4Legal Basis for Processing Your Data

RS33 processes your personal data on the following legal grounds, depending on the type of processing:

• Contractual necessity: Processing your registration data, payment data, and game history is necessary to provide the RS33 services you have signed up for. Without this processing, RS33 cannot operate your account.
• Legal obligation: KYC verification, anti-money laundering checks, and transaction record-keeping are required by applicable financial regulations. RS33 cannot waive these obligations regardless of player preference.
• Legitimate interests: Fraud detection, security monitoring, and responsible gaming surveillance are conducted on the basis of RS33's legitimate interest in maintaining a safe and fair platform for all players.
• Consent: Marketing communications are sent only on the basis of your explicit consent at registration or via your account communication preferences. You may withdraw this consent at any time.

5Who RS33 Shares Your Data With

RS33 does not sell personal data. We do not share your data with anyone except in the limited circumstances described below, all of which are necessary to operate the platform or comply with legal requirements.

Payment Processors

RS33 shares the minimum necessary payment data with Pakistani payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, partner banks for IBFT, and card networks) to execute your deposit and withdrawal transactions. These processors are bound by their own data protection obligations under Pakistani financial regulations.

Identity Verification Providers

During KYC verification, RS33 shares your submitted identity documents with an approved verification service provider. This provider is contracted to use your data solely for the identity check requested by RS33 and may not retain, sell, or use your documents for any other purpose.

Fraud Prevention Services

RS33 uses third-party fraud detection systems that analyse transaction metadata — such as IP addresses, device fingerprints, and transaction patterns — against known risk indicators. Individually identifiable personal data (name, CNIC, mobile number) is not transmitted to these systems.

Legal and Regulatory Disclosure

RS33 will disclose account information and transaction records to law enforcement or regulatory authorities when legally required to do so — for example, in response to a valid court order, a regulatory compliance request, or a confirmed fraud investigation. RS33 will notify the affected player of such a disclosure where legally permitted to do so.

6Payment Data and PKR Transactions

RS33 handles payment data with particular care given its sensitivity. When you deposit on RS33 using Easypaisa or JazzCash, the transaction is completed directly between your mobile wallet and RS33's payment gateway. RS33 does not see or store your mobile wallet PIN or password at any point in this process.

For IBFT bank transfers, RS33 receives confirmation of the transfer from the banking partner and credits your RS33 wallet accordingly. Your full bank account number is not stored by RS33 — only the last four digits for reference identification purposes.

For card payments, RS33 uses a PCI-DSS compliant payment gateway. Your full card number, CVV, and expiry date are processed by the gateway and are not transmitted to or stored on RS33's own servers. RS33 stores only a tokenised reference and the last four digits of your card for withdrawal routing purposes.

All RS33 transactions are conducted exclusively in Pakistani Rupees (PKR). There are no currency conversions, no foreign exchange charges, and no international transfer fees applied by RS33 on any deposit or withdrawal.

7Cookies and Tracking Technologies

RS33 uses cookies and similar technologies on the rs33.app website. Cookies are small text files stored on your device by your browser that allow RS33 to recognise your session, remember your preferences, and maintain the security of your account across page visits.

RS33 does not use third-party advertising cookies. No RS33 cookie data is shared with social media networks, ad networks, or external marketing platforms.

8Data Security Measures

RS33 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The core security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and rs33.app is encrypted using current SSL/TLS standards. This applies to every page of the RS33 platform, not just the login and cashier screens.
• Encrypted data storage: Sensitive personal data stored in RS33's databases — including identity documents and payment references — is encrypted at rest using AES-256 encryption.
• Access controls: RS33 employee access to personal data is strictly controlled on a need-to-know basis. Support agents can see the data necessary to assist with your query but cannot access full payment credentials or identity document images without a logged authorisation.
• 24/7 security monitoring: RS33's security team monitors platform activity continuously for signs of data breaches, account intrusions, or suspicious patterns. Anomalies trigger an immediate response protocol.
• Two-factor authentication: RS33 offers optional 2FA for all registered accounts. Players who enable 2FA protect their account with a one-time code in addition to their password at every login. We strongly recommend enabling 2FA on your RS33 account.

9How Long We Keep Your Data

RS33 does not retain personal data indefinitely. We keep data for the minimum period necessary to fulfil the purpose it was collected for, comply with our legal obligations, or resolve any ongoing disputes. Specific retention periods are as follows:

• Account data (name, mobile, email): Retained for the lifetime of the active RS33 account and for five years following account closure, as required by anti-money laundering and financial record-keeping obligations.
• KYC and identity documents: Retained for five years from the date of verification or from account closure, whichever is later, in accordance with applicable financial regulations.
• Transaction records: Retained for seven years from the date of each transaction, as required under standard financial record-keeping requirements.
• Game and betting history: Retained for five years from the date of each game or bet for dispute resolution and responsible gaming monitoring purposes.
• IP address and device data: IP addresses are anonymised after 90 days. Device fingerprint data is deleted after 12 months of account inactivity.
• Support communications: Retained for three years from the date of the last interaction in that support thread.

10Your Data Rights as an RS33 Player

As a registered RS33 player, you have the following rights regarding your personal data. To exercise any of these rights, contact the RS33 support team at support@rs33.app with the subject line "Data Rights Request". RS33 will respond within 72 hours.

11Children's Privacy

RS33 is strictly an adult platform. No person under the age of 18 is permitted to register an account, deposit funds, or participate in any real-money game or betting activity on RS33. RS33 does not knowingly collect personal data from anyone under the age of 18.

If RS33 identifies or has reason to believe that an account belongs to a person under 18 years of age, the account will be suspended immediately, all funds frozen pending review, and any winnings forfeited. The personal data of identified minor users will be securely deleted after the investigation and any required regulatory reporting is complete.

If you are a parent or guardian and believe a minor has registered on RS33, please contact support@rs33.app immediately with relevant details. RS33 will investigate and act promptly.

12Updates to This Privacy Policy

RS33 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable regulations, or improvements to the RS33 platform. When material changes are made, RS33 will notify registered players by email to the address on their account and by a prominent notice on the rs33.app website.

The updated policy will display the effective date prominently at the top of the document. Continued use of RS33 after the effective date of any policy revision constitutes acceptance of the updated terms. If you disagree with a material change to this Privacy Policy, you may close your RS33 account by contacting support@rs33.app before the effective date of the change.

13How to Contact RS33 About Privacy

For any privacy-related query, data rights request, or concern about how RS33 handles your personal data, please reach out to the RS33 support team. All privacy queries are handled by a dedicated team member and receive a response within 72 hours.