At re999, your privacy is not a compliance checkbox — it is a core commitment. This Privacy Policy explains in plain terms exactly what personal data re999 collects from Pakistani players, why we collect it, how we use and store it, who we may share it with, and what rights you have over your own information. Please read this document carefully before using the re999 platform.
Before diving into the full legal text, here is a plain-language summary of how re999 approaches data privacy for every Pakistani player on the platform.
re999 only collects personal data that is strictly necessary to provide our services — account registration, identity verification, payment processing, and customer support. We do not harvest data for unrelated commercial purposes.
All personal data stored by re999 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to member data is restricted to authorised re999 personnel on a need-to-know basis with full audit logging.
re999 does not sell, rent, or trade your personal information to third-party marketing companies. Your data is used exclusively to operate and improve the re999 platform and to fulfil our regulatory obligations under international gaming standards.
re999 respects your right to access, correct, and request deletion of your personal data. These rights are actionable — not buried in fine print. You can submit a data request to re999 support at any time and receive a response within 30 days.
re999 operates under international gaming licensing standards that impose strict data protection requirements. Our data practices are subject to periodic compliance review and we maintain documented data processing records as required by our licensing framework.
In the event of a data security incident that materially affects your personal information, re999 will notify affected members promptly via their registered contact details and will take immediate steps to contain, investigate, and remediate the incident.
1.1 For the purposes of this Privacy Policy, the data controller responsible for the personal information of re999 members is the re999 operating entity that holds the applicable international gaming licence under which the re999 platform operates. re999 is accessible to Pakistani players at re999.asia.
1.2 re999 acts as the primary data controller in relation to all personal data collected through the re999 registration process, payment processing systems, gaming activity logs, and customer support interactions. Where re999 engages third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to process data only in accordance with re999's documented instructions.
1.3 All data-related queries, access requests, and complaints should be directed to the re999 Data Protection contact detailed in Section 15 of this Policy. re999 is committed to responding to all data-related enquiries within thirty (30) calendar days of receipt.
2.1 re999 collects personal data through a number of channels, including the account registration form, identity verification submissions, payment transactions, gaming activity on the platform, and communications with the re999 support team. The categories of personal data we collect are set out below.
3.1 re999 uses the personal data described in Section 2 for the specific purposes set out in the table below. Each purpose is supported by a lawful basis for processing, which is explained in Section 4.
| Purpose of Processing | Categories of Data Used | Lawful Basis |
|---|---|---|
| Creating and managing your re999 account | Identity, Contact, Registration data | Contract performance |
| Verifying your age (21+) and identity | Identity verification documents, Date of birth | Legal obligation, Contract |
| Processing PKR deposits and withdrawals | Financial & Payment data | Contract performance |
| Providing access to casino games and sportsbook | Account data, Gaming activity data | Contract performance |
| Crediting and administering bonuses and promotions | Account data, Gaming activity, Financial data | Contract performance, Legitimate interest |
| Fraud detection and prevention | All categories | Legal obligation, Legitimate interest |
| Anti-money laundering compliance | Identity, Financial, Transaction data | Legal obligation |
| Responsible gaming monitoring and intervention | Gaming activity, Account, Financial data | Legal obligation, Legitimate interest |
| Customer support and dispute resolution | Account data, Communications data | Contract performance, Legitimate interest |
| Platform security and technical maintenance | Technical & Device data | Legitimate interest |
| Sending transactional account notifications | Contact data, Account data | Contract performance |
| Sending promotional communications (opted-in members only) | Contact data, Gaming preferences | Consent |
| Platform analytics and product improvement | Technical data, Gaming activity (aggregated) | Legitimate interest |
4.1 re999 processes personal data only where there is a recognised lawful basis for doing so. The primary legal bases applicable to re999's data processing activities are as follows:
5.1 re999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. re999 may share your data only in the specific circumstances set out in this section.
re999 engages third-party service providers to support the delivery of its platform. These providers process data only on re999's documented instructions and are contractually bound by data protection obligations. Categories of service providers include:
re999 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law or pursuant to a valid legal order. re999 will notify affected members of such disclosures unless prohibited from doing so by law.
In the event of a merger, acquisition, or sale of all or part of the re999 business, member data may be transferred to the acquiring entity as part of the transaction. re999 will notify affected members in advance of any such transfer and will ensure that the acquiring entity is bound by privacy obligations at least equivalent to those set out in this Policy.
6.1 re999 uses cookies and similar tracking technologies on the re999.asia website to enable core platform functionality, analyse usage patterns, and improve the member experience. The following categories of cookies are used by re999:
6.2 You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the re999 platform. Analytics and functional cookies may be disabled without affecting core functionality, though some personalisation features may not work as expected.
7.1 re999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in Section 3, or for as long as is required by applicable law and our licensing obligations. The primary retention periods applicable to re999 member data are:
7.2 Where re999 is no longer required to retain data, it will be securely deleted or anonymised in a manner that makes it impossible to re-identify any individual from the retained data. re999 maintains documented data deletion schedules and applies them consistently across all data categories.
8.1 re999 implements and maintains a comprehensive set of technical and organisational security measures designed to protect member personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:
8.2 Notwithstanding the above, no security system is completely impenetrable. re999 cannot guarantee the absolute security of data transmitted over the internet. Members are encouraged to use strong, unique passwords for their re999 account and to enable two-factor authentication.
8.3 In the event of a security incident that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data, re999 will notify affected members and relevant regulatory authorities within a timeframe consistent with applicable legal requirements.
9.1 The re999 platform serves Pakistani players and processes the personal data of members located in Pakistan. In the course of providing its services, re999 may transfer certain categories of member data to service providers or infrastructure partners located outside Pakistan, including in other jurisdictions where re999 or its processors maintain server infrastructure or operational offices.
9.2 Where personal data is transferred outside the member's home jurisdiction, re999 takes appropriate steps to ensure that an adequate level of protection is applied to the transferred data. Such steps may include:
9.3 Members may request further information about the international data transfers applicable to their personal data by contacting re999 Data Protection via the details in Section 15.
10.1 re999 respects and upholds the privacy rights of its members. Depending on applicable law, you may be entitled to exercise the following rights in relation to your personal data held by re999:
Request a copy of all personal data re999 holds about you. re999 will provide a response within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data held in your re999 account at any time.
Request deletion of your personal data where re999 no longer has a lawful basis to retain it, subject to regulatory retention obligations.
Request that re999 pause certain processing activities while a dispute or verification is pending, without requiring full deletion.
Request a machine-readable export of personal data you provided to re999, where processing is based on consent or contract.
Object to processing of your data based on legitimate interest, including profiling for marketing or personalisation purposes.
10.2 To exercise any of the above rights, please submit a written request to re999 Data Protection via the contact details set out in Section 15. re999 will verify your identity before processing any data rights request and will respond within thirty (30) calendar days. Complex requests may be extended by a further two (2) months where necessary, in which case you will be notified of the extension within the initial 30-day period.
10.3 re999 will not charge a fee for processing data rights requests in the vast majority of cases. If a request is manifestly unfounded, excessive, or repetitive in nature, re999 reserves the right to charge a reasonable administrative fee or to decline to respond, and will notify you accordingly.
11.1 The re999 platform is strictly intended for adults aged 21 years and above. re999 does not knowingly collect or process personal data from individuals who are under the age of 21. Age verification is applied as a mandatory step during the re999 registration process.
11.2 If re999 becomes aware that personal data has been collected from a person under the age of 21, re999 will immediately close the relevant account, delete all associated personal data, and return any funds deposited by the minor via the original payment method. re999 may report the incident to relevant regulatory authorities where required by its licensing obligations.
12.1 The re999 platform may contain references or links to third-party websites or services in the course of presenting sports data, news, or other contextually relevant information. re999 does not control the privacy practices of any third-party websites and is not responsible for the content or privacy policies of those sites.
12.2 This Privacy Policy applies exclusively to the re999.asia platform and to data collected directly by re999. re999 encourages members to review the privacy policies of any third-party website before providing personal information to that site. re999 is not liable for any data sharing or privacy practices of third parties.
13.1 re999 may send promotional communications — including details of bonuses, new game releases, PSL betting promotions, and platform updates — to members who have provided explicit consent to receive such communications at registration or subsequently through their account settings.
13.2 Marketing communications may be sent via SMS to your registered Pakistani mobile number or via email to your registered address. re999 will clearly identify itself as the sender in all marketing communications and will include a straightforward opt-out mechanism in every message.
13.3 You may withdraw your consent to receive marketing communications from re999 at any time by:
13.4 Withdrawal of marketing consent does not affect your ability to use the re999 platform and does not prevent re999 from sending transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, or security alerts.
14.1 re999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The effective date shown at the top of this document will be updated whenever a material change is made.
14.2 Material amendments to this Privacy Policy will be communicated to registered re999 members via their registered email address or mobile number at least fourteen (14) days before the revised Policy takes effect. For non-material amendments — such as corrections of typographical errors or clarifications that do not alter the substance of the Policy — re999 may update the document without advance notice.
14.3 The most current version of the re999 Privacy Policy is always available at re999.asia/privacy-policy. Continued use of the re999 platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with any amendment, you should discontinue use of the platform and request account closure prior to the effective date of the change.
15.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data re999 holds about you, please contact the re999 Data Protection team using the details below. All data rights requests must be submitted in writing and will require identity verification before re999 can process them.
When submitting a data rights request, please include your full name as registered on re999, your registered email address or mobile number, and a description of the right you wish to exercise. re999 will confirm receipt of your request and may contact you for additional information required to verify your identity before proceeding.
re999 is built on trust — fast PKR payouts, certified fair games, and a privacy framework that puts Pakistani players first. Join today and experience the difference.
Create Your re999 Account Learn About re999