Privacy Policy —
How rr3 Protects Your Personal Data

1.1 This Privacy Policy ("Policy") is published by rr3 ("the Company", "we", "us", "our") and governs the collection, use, storage, sharing, and protection of personal data relating to individuals ("Players", "you") who register and use the rr3 platform at rr3.lat and any associated subdomains.

1.2 rr3 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

1.3 This Policy applies to all personal data collected through the rr3 website, mobile-optimised platform, live chat support channels, email communications, and any other interactions between you and rr3. It covers Pakistani players accessing the platform from cities including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other locations across Pakistan.

1.4 rr3's platform is intended solely for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under this age. If we become aware that a person under 21 has provided us with personal data, we will take immediate steps to delete that data and close the associated account.

rr3 collects the following categories of personal data from players:

rr3 collects personal data through the following channels:

• Direct submission: Data you enter during account registration, identity verification, deposit, withdrawal, or when contacting rr3 support.
• Automated technical collection: Technical and usage data collected automatically when you access and interact with the rr3 platform, including via cookies and server logs.
• Payment processors: Transaction confirmation data provided to rr3 by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you initiate a deposit or withdrawal.
• Identity verification partners: Where required for KYC compliance, identity confirmation data returned to rr3 by third-party verification service providers.
• Fraud prevention services: Risk signals and device fingerprint data provided by fraud prevention service partners to protect the integrity of the rr3 platform.

rr3 uses personal data for the following purposes:

• Creating and managing your rr3 player account
• Verifying your identity and age in compliance with our licensing obligations
• Processing deposits, withdrawals, and bonus credits in PKR
• Detecting and preventing fraud, money laundering, and multi-accounting
• Providing customer support via live chat, email, and Urdu-language assistance
• Monitoring gambling behaviour to support responsible gaming obligations
• Communicating account-related notifications, security alerts, and transactional updates
• Analysing platform usage to improve game performance and user experience
• Complying with legal, regulatory, and licensing obligations applicable to rr3
• Sending promotional communications where you have opted in to receive them

rr3 does not use personal data for any purpose beyond those listed above without first obtaining your explicit consent or being required to do so by applicable law or regulatory authority.

rr3 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and rr3, including account operation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with rr3's anti-money laundering, know-your-customer, and gaming licence obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests do not override your fundamental rights.
• Consent: Processing for marketing communications and optional analytics features, where you have given us explicit opt-in consent. You may withdraw consent at any time via your account settings.

6.1 rr3 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes under any circumstances.

6.2 rr3 may share your personal data with the following categories of third parties strictly on a need-to-know basis and subject to binding data processing agreements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank — to process your deposits and withdrawals in PKR.
• KYC and identity verification providers: To confirm your identity and age in compliance with rr3's licensing requirements.
• Fraud prevention and cybersecurity partners: To protect the rr3 platform and all players from fraudulent activity.
• IT infrastructure and cloud hosting providers: To host and maintain the rr3 platform and associated data systems securely.
• Customer support software providers: To deliver live chat and ticket-based support in English and Urdu.

6.3 rr3 may disclose your personal data to governmental, regulatory, or law enforcement authorities where required to do so by law, court order, or valid legal process, without prior notice to you where legally prohibited from providing such notice.

6.4 In the event of a corporate restructuring, merger, or acquisition involving rr3, your personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

7.1 rr3 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

7.2 Account and transaction records are retained for a minimum of five years from the date of account closure, in accordance with standard anti-money laundering record-keeping requirements applicable to licensed gaming operators.

7.3 Live chat and support correspondence is retained for a minimum of two years for quality assurance and dispute resolution purposes.

7.4 Technical and server log data is retained for a rolling 12-month period and then deleted unless required as part of an active investigation or legal proceeding.

7.5 Marketing preference data is retained until you withdraw your consent or request its deletion, at which point it is removed from all active marketing systems within 30 days.

8.1 rr3 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• AES-256 encryption for all stored personal and financial data
• TLS 1.3 encryption for all data transmitted between your device and rr3 servers
• Strict access controls limiting internal staff access to personal data on a need-to-know basis
• Multi-factor authentication required for rr3 internal system access
• Regular third-party penetration testing and security audits of rr3 infrastructure
• 24/7 automated intrusion detection and anomaly monitoring

8.2 While rr3 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your rr3 login credentials confidential and for notifying rr3 immediately if you suspect unauthorised access to your account.

9.1 rr3 uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the platform. rr3 uses the following categories of cookies:

• Essential cookies: Required for the rr3 platform to function. These enable session management, login authentication, and security features. They cannot be disabled without affecting core functionality.
• Functional cookies: Remember your preferences such as language, currency display (PKR), and responsible gaming settings to personalise your rr3 experience.
• Analytics cookies: Collect anonymised data about how players use the rr3 platform to help us identify and fix technical issues and improve overall performance.

9.2 rr3 does not use third-party advertising cookies or retargeting trackers. No data collected via rr3 cookies is shared with advertising networks.

9.3 You can manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies will prevent you from logging into your rr3 account.

10.1 The rr3 platform is strictly restricted to individuals aged 21 years and above. rr3 does not knowingly collect personal data from anyone under the age of 21.

10.2 If rr3 discovers or reasonably suspects that a registered player is under 21 years of age, rr3 will immediately suspend the account, initiate a review, and — where the suspicion is confirmed — permanently close the account, void all balances, and delete or anonymise the personal data associated with that account.

10.3 If you are a parent or guardian and believe that a minor in your care has registered with rr3, please contact us immediately at [email protected] with the subject line "Underage Account Report". rr3 will treat such reports as a priority and respond within 24 hours.

10.4 rr3 recommends that households with minors install parental control software on shared devices to prevent access to online gambling platforms.

11.1 rr3 may send you promotional communications about new games, bonus offers, sports betting markets (including PSL and international cricket), and platform updates where you have opted in to receive such communications during registration or via your account settings.

11.2 Marketing communications are sent via SMS to your registered mobile number and/or via email to your registered email address. All promotional messages include a clear unsubscribe mechanism.

11.3 You may opt out of marketing communications at any time by:

• Logging into your rr3 account and updating your communication preferences under Account Settings
• Clicking the "Unsubscribe" link at the bottom of any promotional email
• Replying "STOP" to any promotional SMS
• Contacting rr3 support at [email protected] with the subject "Marketing Opt-Out"

11.4 Even if you opt out of marketing communications, rr3 will still send you essential account-related messages including deposit confirmations, withdrawal status updates, security alerts, and responsible gaming notifications. These are not promotional and cannot be opted out of while your account remains active.

11.5 rr3 does not send marketing communications to players who have activated self-exclusion or who have requested account closure.

12.1 rr3 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features.

12.2 Material changes to this Policy will be communicated to registered players via notification on the rr3 platform and/or by message to your registered mobile number or email address at least 7 days before the changes take effect, where practicable.

12.3 The "Effective" date displayed at the top of this Policy indicates when it was last updated. You are encouraged to review this Policy periodically to stay informed about how rr3 protects your data.

12.4 Continued use of the rr3 platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the platform and request account closure.

13.1 If you have any questions about this Privacy Policy, how rr3 processes your personal data, or if you wish to exercise any of your data rights as outlined in this Policy, please contact rr3's Data Protection team:

• Email: [email protected]
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 in English & Urdu
• Response time: 48 hours for acknowledgment, 30 days for resolution

13.2 If you believe that rr3 has not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with rr3's internal compliance team. rr3 will investigate all complaints thoroughly and respond to you with the outcome and any remedial action taken.

13.3 Where rr3 is unable to resolve your complaint to your satisfaction, you may escalate the matter to the data protection supervisory authority in the jurisdiction under which rr3 operates, or to relevant consumer protection authorities in Pakistan.