r987 Privacy Policy

01 Who We Are

r987 is an internationally licensed online casino and sports betting platform operating at r987.net, built specifically for the Pakistani market. r987 acts as the data controller for all personal data collected through the Platform, meaning we are responsible for determining how and why your personal data is processed.

r987 operates under an international online gaming licence and is committed to handling all player data in accordance with globally recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR) framework, which r987 uses as a benchmark for its global data practices regardless of the specific jurisdiction of any individual player.

If you have any questions about how r987 processes your personal data, you can reach our Data Protection team via the live chat facility available within the Platform, or by written correspondence to [email protected] (plain text — not a clickable link).

02 Data We Collect

r987 collects the following categories of personal data from players registered on the Platform:

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and — where required for KYC verification — a copy or image of your Pakistani CNIC (Computerised National Identity Card), passport, or other government-issued photo identification document.

2.2 Contact Data

Primary email address, Pakistani mobile phone number, and — if provided voluntarily — a residential address in Pakistan (e.g., in Karachi, Lahore, Islamabad, Faisalabad, or elsewhere).

2.3 Account Data

Your chosen username, account registration date and time, login history (dates, times, and IP addresses), account preferences, responsible gaming settings (deposit limits, session time limits, self-exclusion status), and all communications between you and the r987 support team.

2.4 Financial Data

Transaction history including all deposits and withdrawals processed via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB Bank, or Bank Alfalah. We record transaction amounts in PKR, transaction reference numbers, payment method identifiers (e.g., your registered JazzCash mobile number), and the dates and times of all financial transactions. r987 does not store complete bank account numbers or full card numbers on its servers.

2.5 Betting & Gaming Data

A complete record of all bets placed and casino games played on the Platform, including stake amounts in PKR, odds accepted, game titles, session durations, win/loss outcomes, and bonus usage history. This data is retained for regulatory, responsible gaming, and dispute resolution purposes.

2.6 Technical Data

IP address, device type and model, operating system, browser type and version, screen resolution, time zone setting, and — where applicable — mobile network operator (e.g., Jazz, Telenor, Zong, Ufone). This data is collected automatically when you access the Platform.

2.7 Communications Data

Records of all live chat conversations, email correspondence, and any feedback, complaints, or support requests submitted to r987. These records are retained to ensure service quality, resolve disputes, and meet our regulatory obligations.

03 How We Collect Your Data

r987 collects personal data through the following channels and methods:

• Direct collection: Data you provide voluntarily when registering your r987 account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing any form on the Platform.
• Automated collection: Technical data collected automatically through cookies, server logs, and similar tracking technologies each time you access the Platform. This includes IP address logging, session tracking, and device fingerprinting for fraud prevention purposes.
• Payment processors: Financial data shared with r987 by JazzCash, EasyPaisa, and partner banks as part of the payment processing flow. This data is limited to what is necessary to confirm transaction completion and match payments to the correct r987 account.
• KYC verification providers: Where r987 uses a third-party identity verification service to authenticate CNIC documents or cross-reference identity data against official databases, that service may share verification outcomes and associated data with r987.
• Fraud and risk detection systems: r987 uses automated tools to analyse betting patterns, login behaviour, and transaction data for the purpose of detecting fraud, bonus abuse, money laundering, and underage gambling. These systems may generate flags or risk scores associated with your account.

04 Why We Use Your Data

r987 processes your personal data for the following specific purposes:

05 Legal Bases for Processing

r987 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases r987 relies on are:

• Contract performance: Processing that is necessary to fulfil our obligations under the account agreement with you — including operating your account, processing deposits and withdrawals, and delivering the gaming services you have requested.
• Legal obligation: Processing required to comply with r987's obligations under its international gaming licence — including KYC identity verification, age verification, anti-money laundering checks, and regulatory reporting.
• Legitimate interests: Processing that is in r987's legitimate interests and does not override your fundamental rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Sharing Your Data

r987 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared only in the following limited and controlled circumstances:

6.1 Payment Processors

r987 shares the minimum personal and financial data necessary with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB Bank, and Bank Alfalah to process your PKR deposits and withdrawals. These providers act as independent data controllers for the payment processing component of any transaction and have their own privacy policies governing how they handle your data.

6.2 KYC and Identity Verification Providers

Where r987 uses a third-party KYC verification service, identity data — including CNIC images and personal details — may be shared with that provider solely for the purpose of completing verification. All such providers are contractually bound to process data only as instructed by r987 and to maintain appropriate security standards.

6.3 Game Content Providers

r987's casino and live dealer games are powered by licensed game providers such as Evolution Gaming and Pragmatic Play. These providers may receive anonymised or pseudonymised session data necessary to deliver the game experience. No directly identifiable personal data beyond what is operationally necessary is shared with game providers.

6.4 Regulatory and Law Enforcement Authorities

r987 is legally obligated to disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies upon receipt of a valid legal request. r987 will not notify a player if disclosure is prohibited by law or if notification would compromise an ongoing investigation.

6.5 Fraud Prevention Networks

r987 may share limited data with cross-industry fraud prevention networks to protect against bonus abuse, identity fraud, and money laundering. Data shared in this context is limited to risk indicators and does not include full account or financial records.

07 Cookies & Tracking Technologies

r987 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and support fraud prevention. The categories of cookies r987 uses are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, store your language preferences, and enable secure navigation between pages. These cookies cannot be disabled without impairing core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players use the Platform — including which pages are visited most frequently and how long sessions last. This data is used to improve Platform performance and user experience. No personally identifiable information is collected by these cookies.
• Fraud prevention cookies: r987 uses device fingerprinting and session analysis cookies to detect fraudulent activity, identify duplicate accounts, and prevent unauthorised access. These cookies are critical to Platform security and cannot be disabled.
• Functional cookies: These cookies remember your preferences — such as your preferred deposit method or responsible gaming settings — to provide a more personalised experience across sessions.

You can manage non-essential cookies through your browser settings at any time. However, disabling strictly necessary or fraud prevention cookies may affect your ability to log in and use core Platform features. r987 does not currently use third-party advertising cookies or behavioural retargeting cookies.

08 Data Retention

r987 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by r987's licensing and regulatory obligations. The following retention periods apply:

After the applicable retention period expires, r987 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

09 International Data Transfers

r987 operates globally and some of the third parties with which r987 shares data — including KYC verification providers and game content providers — may process data in jurisdictions outside Pakistan. When personal data is transferred internationally, r987 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections provided under this Privacy Policy.

Safeguards applied to international transfers include: contractual data processing agreements containing standard data protection clauses; transfer only to providers that maintain certifications or compliance frameworks recognised as providing adequate data protection; and transfer of only the minimum data necessary for the specific processing purpose.

10 Your Data Rights

As an r987 player, you have the following rights with respect to your personal data. r987 will respond to all valid data rights requests within 30 calendar days of receipt:

1. Right of access: You have the right to request a copy of all personal data r987 holds about you, along with information about how that data is being used. This is sometimes called a Subject Access Request (SAR).
2. Right to rectification: You have the right to request correction of any personal data r987 holds about you that is inaccurate or incomplete. For account details such as your email address or phone number, you can update these directly within your r987 account settings.
3. Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies. Note that r987 is legally required to retain certain data (such as KYC records and financial transaction records) for regulatory purposes even after an account is closed, and erasure requests cannot override these legal obligations.
4. Right to restrict processing: You have the right to request that r987 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
5. Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer that data to another data controller, where processing is based on consent or contract performance.
6. Right to object: You have the right to object to r987 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. r987 will cease processing upon receipt of a valid objection unless r987 can demonstrate compelling legitimate grounds that override your rights.
7. Right to withdraw consent: Where r987 processes your data on the basis of consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, contact r987's Data Protection team via live chat inside the Platform or at [email protected]. Please include your account username and a clear description of the right you wish to exercise. r987 may need to verify your identity before processing a data rights request.

11 Children & Minors

The r987 Platform is strictly intended for adults aged 21 years and over. r987 does not knowingly collect, store, or process personal data from any individual under the age of 21. Registration by, or on behalf of, any person under 21 is strictly prohibited under r987's Terms & Conditions.

r987 employs age verification controls at the registration stage and may request CNIC documentation to confirm that a player meets the 21+ age requirement. Where r987 discovers that an account has been registered by a person under the age of 21, that account will be immediately closed, all funds will be returned to the originating payment source, and all data associated with the underage player will be securely deleted except where retention is required by law.

12 Security Measures

r987 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit TLS encryption on all data in transit between your device and r987 servers.
• AES-256 encryption for sensitive data stored at rest, including CNIC documents and financial records.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis. Customer support agents can see only the account and communication data necessary to resolve your query.
• Two-factor authentication (2FA) available for all player accounts and mandatory for r987 internal systems handling personal data.
• Regular penetration testing and security audits conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems that monitor platform traffic in real time for suspicious activity patterns indicative of unauthorised access attempts or data exfiltration.
• Incident response procedures that require r987 to notify affected players and relevant regulatory authorities within 72 hours of becoming aware of a personal data breach that is likely to result in a high risk to player rights and freedoms.

Despite these measures, no online system can guarantee absolute security. r987 strongly encourages players to use a strong, unique password for their r987 account and to enable two-factor authentication where available.

13 Third-Party Links

The r987 Platform may contain links to third-party websites or services — for example, links to responsible gaming support organisations or payment provider portals. These third-party sites operate independently of r987 and have their own privacy policies, which r987 has no control over and takes no responsibility for. Visiting a third-party site via a link on the r987 Platform does not mean r987 endorses that site or its privacy practices. r987 recommends that you review the privacy policy of any third-party site before submitting personal data to it.

14 Updates to This Policy

r987 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Where a material change is made to this Policy — meaning a change that meaningfully affects how your personal data is collected, used, or shared — r987 will notify all registered players by email at least 14 days before the change takes effect.

The current version of this Privacy Policy, including its effective date, is always available at r987.net/privacy-policy. By continuing to use the r987 Platform after a revised Privacy Policy takes effect, you acknowledge and accept the updated terms. If you do not agree with a revised Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

15 Contact & Complaints

If you have any questions, concerns, or complaints about how r987 handles your personal data, please contact our Data Protection team in the first instance:

• Live chat: Available 24/7 inside the r987 Platform — fastest route for urgent data concerns.
• Email: [email protected] — include "Privacy" in the subject line. Allow up to 24 business hours for a response.

r987 takes all data protection complaints seriously and will investigate each complaint thoroughly. If you are not satisfied with r987's response to your complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to the licensing authority that oversees r987's gaming operations.