Privacy Policy
How RS222 Handles Your Data

01Introduction

This Privacy Policy ("Policy") applies to all personal data collected and processed by RS222 ("we", "us", "our", "the Platform") in connection with the operation of the online gambling and sports betting platform accessible at rs222.cam. The Policy describes the categories of personal data we collect, the purposes for which we process it, the conditions under which we may share it with third parties, the security measures we apply, and the rights available to you as a data subject.

RS222 is an English-language platform serving players in Pakistan and other jurisdictions where online gambling is lawful. We are committed to processing personal data responsibly, transparently, and in accordance with applicable data protection obligations under the law of the jurisdiction in which we operate. This Policy does not constitute a representation that our data practices comply with Pakistani data protection law, as RS222 does not claim to operate under the jurisdiction of the Government of Pakistan.

Where this Policy refers to Pakistani payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah, those references are made solely as contextually familiar examples for Pakistani users. RS222 does not represent that any such institution endorses this platform or has agreed to act as a data processor on our behalf unless separately and verifiably confirmed.

02Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

03Data We Collect

RS222 collects personal data through several channels and in several categories depending on how you interact with the Platform:

When you create an account, we collect: full name, date of birth, email address, residential address (including city — such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, or Peshawar), phone number, and chosen username and password (stored in hashed form).

To comply with age verification and anti-money laundering obligations, we may collect: scanned or photographed copies of CNIC or passport, proof-of-address documents, selfie or liveness verification images, and payment method ownership evidence. This data is treated with heightened sensitivity.

We collect records of deposits, withdrawals, bonuses applied, wagers placed, and game outcomes. We do not store full card numbers on Platform systems; payment card data is handled by PCI-compliant third-party payment processors. Transaction records are retained for compliance and dispute resolution purposes.

Automatically collected data includes: IP address, device type and operating system, browser type and version, session timestamps, in-game behaviour logs, geolocation data at the IP-address level, and cookie identifiers.

Records of your interactions with our support team via live chat, email, or help-center ticket — including the content of those communications — are retained to resolve disputes, train support agents, and improve service quality.

Where you use responsible gambling tools, we collect and retain records of the limits, cooling-off periods, or self-exclusion requests you have set. This data is processed to fulfil our player protection obligations and cannot be used for marketing purposes.

04Legal Basis for Processing

RS222 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

05How We Use Your Data

Your personal data is used by RS222 for the following purposes:

• Account Management: Creating, maintaining, and operating your account; authenticating logins; processing password resets and account settings changes.
• Service Delivery: Processing deposits and withdrawals, settling bets, awarding bonuses, and delivering all platform functionality.
• Regulatory Compliance: Performing age verification, identity checks, AML transaction monitoring, and producing records required by the Operator's applicable licence obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Responsible Gambling: Monitoring play patterns for signs of problem gambling; administering limits and self-exclusion requests; communicating responsible gambling information where applicable.
• Customer Support: Responding to queries, resolving disputes, and maintaining support records.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing (where consented): Sending promotional emails, bonus notifications, and product updates to users who have opted in to marketing communications.

06Data Sharing & Disclosure

RS222 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Data is shared with external parties only in the following limited circumstances:

• Payment Processors: Financial data necessary to facilitate deposits and withdrawals is shared with third-party payment processors under contractual data-processing agreements. These processors are required to maintain data security standards no less protective than our own.
• Identity Verification Providers: KYC data may be shared with regulated identity verification service providers for the purpose of conducting age and identity checks in compliance with our licence obligations.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent authorities when required by law, court order, or regulatory directive — including for AML reporting, fraud investigations, and regulatory audits.
• Technology Service Providers: Data may be processed by cloud hosting, analytics, customer support tooling, and cybersecurity vendors acting as data processors under our instruction and contractual obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of the Operator's business or assets, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

07Cookies & Tracking Technologies

RS222 uses cookies and similar technologies (such as web beacons and local storage) to operate the Platform, understand how users interact with it, and deliver a consistent experience across sessions. By using the Platform, you consent to the use of cookies as described below.

Common cookie names you may encounter include: rs222_session rs222_uid rs222_pref _ga _gid

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality, including the ability to log in. Clearing cookies will log you out of the current session.

08Data Retention

RS222 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations, whichever is longer. The following retention principles apply:

• Account & Registration Data: Retained for the duration of the account relationship and for a minimum post-closure period as required by the Operator's applicable licence obligations (typically five years from account closure).
• KYC & AML Data: Retained for a minimum of five years following the end of the business relationship, or longer where required by applicable law or ongoing regulatory investigation.
• Transaction Records: Financial and betting records retained for a minimum of five years for audit and compliance purposes.
• Support Communications: Retained for a period sufficient to resolve any outstanding disputes or complaints, typically three years from the date of last contact.
• Marketing Consent Records: Retained for as long as necessary to demonstrate that consent was validly obtained and to honour opt-out requests.
• Session & Technical Logs: Generally retained for 90 days for security and fraud-prevention purposes, unless longer retention is required for a specific investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

09International Data Transfers

RS222's infrastructure and third-party processors may be located in jurisdictions outside the country in which you reside. When personal data is transferred across borders, we take steps to ensure that appropriate safeguards are in place, including contractual data-transfer mechanisms and data-processing agreements with third-party processors.

Users in Pakistan should be aware that their data may be transferred to and processed in countries outside Pakistan. RS222 does not represent that such transfers comply with the Personal Data Protection Bill or any other Pakistani data regulation currently in force or proposed. You acknowledge this when you use the Platform.

10Your Rights as a Data Subject

Depending on the data protection laws applicable in your jurisdiction, you may hold some or all of the following rights in respect of your personal data held by RS222. To exercise any of these rights, please contact our support team using the details in Section 15.

11Children & Minors

RS222 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the operator's licence jurisdiction. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and permanently close the associated account.

Parents and guardians who believe that a minor may have registered on RS222 are asked to contact our support team immediately. We take such reports seriously and will investigate and act on them promptly.

12Security Measures

RS222 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• TLS/SSL encryption of data in transit between your browser or app and our servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Strict access controls limiting personnel access to personal data on a need-to-know basis;
• Multi-factor authentication available for user accounts and mandatory for internal system access;
• Regular security assessments and vulnerability scanning;
• Monitoring systems for detecting unusual access patterns and potential data breaches;
• Staff training on data handling obligations and information security best practices.

No security system is impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, RS222 will notify affected users in accordance with applicable regulatory requirements. You should notify us immediately at [email protected] (plain text — not a link) if you suspect your account has been compromised.

13Third-Party Links

The RS222 platform may contain references to third-party services, game providers, or payment methods. This Privacy Policy applies exclusively to data processing conducted by RS222 as Data Controller. Where you click through to a third-party service or provide data directly to a third-party provider (such as a payment processor's hosted page), the privacy policy of that third party governs the processing of your data.

RS222 is not responsible for the privacy practices or content of third-party services. We recommend reviewing the privacy policies of any third-party services you interact with in connection with your use of RS222.

14Amendments to This Policy

RS222 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, new sharing arrangements, or modifications to user rights — we will provide advance notice via in-platform notification or email to your registered address.

The effective date of the current version of this Policy is shown at the top of the page. We encourage you to review this Policy periodically. Continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy.

15Contact Us

For any privacy-related queries, data subject access requests, complaints, or concerns, please contact the RS222 Data team through the following channels. All data-related communications should be directed to the support email or live chat.

We aim to acknowledge privacy-related requests within 5 business days and to provide a substantive response within the timeframe required by applicable law. Complex requests, including subject access requests involving large volumes of data, may require additional processing time. We will keep you informed of progress.