Privacy Policy — r7889

r7889 ("we", "us", "the Platform", "the Operator") is committed to protecting the privacy and security of all personal data it processes in connection with the operation of the r7889 website at https://r7889.cam and all associated services (the "Services"). This Privacy Policy ("Policy") describes how r7889 collects, uses, stores, shares and protects personal data relating to registered users, prospective users and website visitors (collectively, "you", "User").

This Policy has been prepared in accordance with internationally recognised data-protection principles, including those reflected in the General Data Protection Regulation (GDPR) and comparable frameworks applicable to r7889's operational jurisdiction. Where r7889's obligations under its license jurisdiction prescribe additional or different privacy requirements, those shall apply.

This Policy should be read alongside the r7889 Terms & Conditions and Responsible Gambling Policy, which are incorporated herein by reference. By accessing the Platform, registering an Account or using any Service, you acknowledge that you have read, understood and accepted the terms of this Policy.

r7889 collects the categories of Personal Data set out in the table below. Collection is limited to what is reasonably necessary for the stated purposes.

r7889 collects Personal Data through the following mechanisms:

• Direct Submission: Data provided by you when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support via live chat or email, or responding to a responsible-gambling self-assessment.
• Automated Technologies: Data collected automatically when you browse the Platform, including cookies, log files, pixel tags and session-recording technologies. See Section 9 for the full Cookie Policy.
• Third-Party Sources: Data received from KYC verification providers, fraud-prevention services, payment processors and, where applicable, responsible-gambling databases, for the purposes of identity verification, AML compliance and player-protection.
• Publicly Available Sources: In limited fraud-prevention circumstances, r7889 may reference publicly available information to verify Account details or investigate suspected prohibited conduct.

r7889 processes Personal Data only where a valid legal basis exists. The principal purposes and corresponding legal bases are:

r7889 does not sell, rent or trade your Personal Data to unaffiliated third parties for their own marketing purposes. Personal Data may be shared only in the following circumstances:

• Service Providers (Data Processors): r7889 engages third-party processors — including KYC/identity verification vendors, payment gateway operators, cloud infrastructure providers, fraud-analytics services and customer-support software providers — who process data on r7889's behalf under written data-processing agreements that impose confidentiality and security obligations consistent with this Policy.
• Payment Processors: Transaction data is shared with relevant payment processors to facilitate deposits and withdrawals. Where Pakistani users transact via bank transfer, the receiving or sending institution — which may include HBL, UBL, Meezan Bank, Bank Alfalah or other providers — will receive transaction data as required by the payment operation. These institutions are not affiliated with r7889 and do not endorse gambling services.
• Regulatory Authorities: r7889 may be required to disclose Personal Data to its license jurisdiction's regulatory authority, financial intelligence units or law-enforcement agencies where required by law, a court order or a regulatory directive.
• Corporate Transactions: In the event of a merger, acquisition or asset sale involving r7889, User data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• With Your Consent: r7889 may share data with third parties for purposes not listed above where you have provided express prior consent.

As an internationally operated platform, r7889 may transfer Personal Data to and process it in countries outside your own — including countries that may not have data-protection laws equivalent to those in your jurisdiction. Where such transfers occur, r7889 implements appropriate safeguards, which may include:

• Standard contractual clauses approved by relevant data-protection authorities;
• Data-processing agreements with binding data-protection obligations on the receiving party;
• Technical and organisational security measures appropriate to the sensitivity of the data transferred.

Pakistani users should note that their data may be processed in jurisdictions outside Pakistan. r7889 does not represent that such jurisdictions offer privacy protections equivalent to any Pakistani legislation. By using the Platform, you consent to this international transfer subject to the safeguards described above.

r7889 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the Account's active lifecycle and for a period of at least five (5) years following Account closure, to satisfy AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or Account closure, in accordance with applicable AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Marketing Preferences: Retained until consent is withdrawn or an opt-out is recorded, plus a reasonable suppression period to prevent inadvertent re-contact.
• Support Communications: Retained for a minimum of two (2) years from the date of the interaction, or longer where required for dispute-resolution purposes.
• Analytics and Cookie Data: Retained according to the specific cookie's lifespan — see Section 9 for details.

At the end of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

r7889 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage and, where consent is given, deliver relevant promotional content. A cookie is a small text file stored on your device when you visit a website.

The following cookie categories are used by r7889:

You may control cookie settings through your browser's privacy controls. Disabling strictly-necessary cookies may impair Platform functionality. For most browsers, cookie management settings can be found under Privacy, Security or Advanced settings menus.

Subject to applicable law and the legitimate operational requirements of r7889, you have the following rights in respect of your Personal Data:

To exercise any of the above rights, submit a written request to [email protected] clearly identifying yourself and the right(s) you wish to exercise. r7889 will respond within thirty (30) days of receiving a verified request. We may require identity verification before actioning data-subject requests to protect Account security.

The r7889 Platform is strictly intended for adults aged 18 and above — or the higher minimum age required by the operator's license jurisdiction or applicable local law. r7889 does not knowingly collect Personal Data from individuals under the applicable minimum age.

If r7889 becomes aware that Personal Data has been collected from an underage individual, it will immediately close the relevant Account, void any associated transactions and delete or irreversibly anonymise all data collected from that individual, except where a legal obligation requires retention.

Parents and guardians who believe their child may have accessed the Platform are encouraged to contact r7889 immediately at [email protected]. Parental controls and filtering software may be used alongside the Platform's own age-verification measures as an additional safeguard.

r7889 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. Key measures include:

• TLS Encryption: All data in transit is encrypted via TLS 1.2 or higher. The Platform operates exclusively over HTTPS.
• Data at Rest Encryption: Sensitive data categories — including KYC documents, financial records and authentication credentials — are encrypted at rest using industry-standard algorithms.
• Access Controls: Personal Data is accessible only to r7889 personnel and processors who have a documented need for access in connection with their role. Access is governed by role-based access-control policies.
• Audit Logging: System access to sensitive data stores is logged and monitored. Anomalous access patterns trigger automated alerts and human review.
• Penetration Testing: r7889 conducts periodic security assessments to identify and remediate vulnerabilities in the Platform's infrastructure and application layer.
• Incident Response: r7889 maintains a documented data-breach response procedure. In the event of a breach likely to affect User rights, we will notify affected Users and relevant regulatory authorities within the timeframes required by applicable law.

r7889 reserves the right to amend this Privacy Policy at any time. Material changes — such as a new category of data being collected or a change in the legal basis for processing — will be notified to registered Users via email or a prominent notice on the Platform prior to taking effect.

Non-material amendments, such as corrections to typographical errors or clarifications that do not alter substantive data-protection rights, will be reflected on this page with an updated "Last Updated" date without individual notification.

Continued use of the Platform following publication of an amended Policy constitutes acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the Platform and may request Account closure by contacting [email protected].

For all privacy-related queries, data-subject rights requests, consent withdrawals and data-breach notifications, please contact the r7889 data team through the following channels:

• Privacy / Data Requests: [email protected] — please include "Privacy Request" in the subject line of your email along with your registered Account email address for faster identification.
• General Enquiries: [email protected]
• Live Chat: Available 24/7 via the support icon in your Account dashboard for urgent privacy concerns. For formal data-subject requests, written email is preferred to create an auditable record.

r7889 will acknowledge all privacy requests within five (5) business days and will provide a substantive response within thirty (30) days of identity verification. Complex or multi-subject requests may require additional time, in which case r7889 will notify you of the expected response timeline.

Support is available in English and Urdu. r7889 serves players across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar, and recognises the importance of accessible privacy communications for all User communities.