r788 Privacy Policy

This Privacy Policy ("Policy") is published by r788 ("r788," "we," "us," "our") and governs the collection, processing, storage, use, and disclosure of personal data relating to individuals ("you," "your") who use, access, register on, or otherwise interact with the r788 Platform accessible at r788.bid.

This Policy applies to all r788 services, including the r788 casino game library, live dealer tables, sports betting markets (including cricket and PSL betting), the r788 login and registration portal, deposit and withdrawal services, customer support interactions, promotional communications, and any other functionality available at r788.bid. It also applies to data collected through email correspondence, live chat sessions, and any other direct communications between you and r788.

r788 is committed to processing personal data in a manner that is lawful, fair, transparent, and limited to what is necessary for the stated purposes. We align our data protection practices with international best-practice standards, including principles consistent with the EU General Data Protection Regulation (GDPR), recognising that our Pakistani player base deserves the same standard of data protection respect afforded to users under strong regulatory frameworks.

For the purposes of this Privacy Policy, r788 — the operator of r788.bid, licensed under an international gaming license — acts as the Data Controller in respect of all personal data collected and processed through the r788 Platform.

As Data Controller, r788 determines the purposes and means of processing your personal data. Where r788 engages third-party service providers to process data on its behalf (such as payment processors, identity verification providers, or technology infrastructure providers), those third parties act as Data Processors under binding agreements that require them to process your data solely on r788's instructions and to applicable security and confidentiality standards.

Questions and formal data protection enquiries may be directed to r788's privacy team via the contact details set out in Section 16 of this Policy.

r788 collects personal data in several categories. The specific data collected depends on your level of engagement with the Platform:

• Full legal name (first name and surname as per national identity document)
• Date of birth (required for age verification — 21+ policy enforcement)
• Pakistani mobile number (03XX format; used for OTP verification and 2FA)
• Email address
• Username and password (password stored as a salted cryptographic hash; never in plain text)
• City and province of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad)

• Government-issued photo ID (CNIC, passport, or other accepted Pakistani identification document)
• Proof of address (utility bill, bank statement, or equivalent document, where required)
• Proof of payment method ownership (in certain verification scenarios)
• Selfie or liveness check data (where electronic identity verification is conducted)

• Deposit and withdrawal amounts, dates, and payment methods used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa/MC)
• Account balance history and transaction logs
• Bonus credits, wagering activity, and promotional participation records

• Game session logs (games played, session durations, bet sizes, game outcomes)
• Sports betting activity (markets bet on, stake amounts, odds accepted, settlement outcomes)
• Responsible gaming tool usage (deposit limits set, self-exclusion periods active)

• IP address, device type, operating system, and browser type
• Login timestamps and session durations
• Cookies, local storage identifiers, and similar tracking technologies (see Section 9)
• Geolocation data (country and city level, derived from IP address)

• Live chat transcripts and email correspondence with r788 support
• Support ticket content and resolution records
• Responses to surveys or feedback requests (where you choose to participate)

r788 collects personal data through the following channels and mechanisms:

• Registration form: Data you provide when creating your r788 account, including name, mobile number, email, date of birth, and password.
• KYC submission portal: Identity and address documents you upload to satisfy r788's verification requirements before withdrawal processing.
• Deposit and withdrawal transactions: Financial data generated when you deposit via JazzCash, EasyPaisa, or other supported payment methods, or when you submit withdrawal requests.
• Platform usage: Game session data, betting activity, and navigation behaviour automatically generated as you use the Platform.
• Cookies and tracking technologies: Data collected passively through browser cookies, session storage, and analytics tools as detailed in Section 9.
• Customer support interactions: Information you provide voluntarily when contacting r788 via live chat, email, or any other support channel.
• Third-party verification services: In some KYC scenarios, r788 uses third-party identity verification providers who may cross-reference the data you provide against external databases.

r788 processes your personal data on one or more of the following legal bases, consistent with internationally recognised data protection principles:

Where r788 processes your data on the basis of legitimate interests, we have assessed that such interests are not overridden by your fundamental rights and freedoms as a data subject. Where r788 relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

r788 uses your personal data for the following specific purposes:

• Account management: Creating, maintaining, and securing your r788 account; processing login and session activity; implementing your security settings including 2FA.
• Service delivery: Providing access to casino games, sports betting markets, live dealer tables, crash games, and all other Platform functionality.
• Payment processing: Facilitating deposits via JazzCash, EasyPaisa, and other supported PKR payment methods; processing withdrawal requests; maintaining financial transaction records.
• Identity and age verification: Conducting KYC checks to confirm your identity, verify you are 21 or older, and comply with anti-money laundering obligations under our international gaming license.
• Fraud prevention and security: Monitoring account activity for signs of fraud, money laundering, multi-accounting, bonus abuse, or other prohibited conduct.
• Responsible gaming: Monitoring gaming patterns that may indicate problem gambling behaviour; administering responsible gaming tools such as deposit limits, session limits, and self-exclusion periods; contacting players where welfare concerns arise.
• Regulatory compliance: Reporting to r788's licensing authority as required; maintaining records required under gaming license conditions; responding to lawful requests from regulatory bodies or law enforcement.
• Customer support: Responding to your queries, resolving disputes, and improving our support delivery.
• Marketing communications (consent-based only): Sending you promotional emails, SMS notifications, or bonus alerts where you have explicitly opted in. You may opt out at any time.
• Platform improvement: Using aggregated and anonymised analytics data to understand how players use the Platform and to improve the user experience, game selection, and service quality.

r788 does not sell, rent, or trade your personal data. We may share your data with third parties only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose:

r788 engages third-party companies to provide specific technical and operational services that require access to your data. These include:

• Payment processors: JazzCash, EasyPaisa, and banking partners who process your deposit and withdrawal transactions in PKR.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity documents and cross-reference sanction lists.
• Game software providers: The technology studios whose games operate on the r788 Platform, which may receive anonymised session data for RTP auditing and technical purposes.
• Infrastructure and hosting providers: Cloud infrastructure and server providers on whose systems r788 platform data is stored and processed.
• Fraud prevention services: Third-party fraud detection and device fingerprinting tools used to identify multi-accounting and fraudulent activity.

All such providers are bound by contractual data processing agreements that restrict their use of your data to the services they provide to r788, prohibit independent use of your data, and require them to maintain security standards consistent with those required of r788 under its gaming license.

• r788 may disclose your personal data to its licensing authority as required for regulatory compliance, audit, or investigation purposes.
• r788 may share data with law enforcement agencies or courts when legally compelled to do so by a valid legal order, warrant, or regulatory directive.
• r788 may share data with other licensed gaming operators for the purposes of enforcing self-exclusion agreements or preventing multi-operator abuse, where such sharing is authorised under the r788 responsible gaming framework.

r788 treats payment and financial data with heightened security standards, recognising the sensitivity of transaction information and the trust Pakistani players place in us when depositing via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or card networks.

• Card payment data is processed under PCI-DSS compliant protocols by our card payment processing partner. r788 does not store full card numbers on its own systems.
• Bank transfer and mobile wallet transaction records are retained for a minimum of 5 years as required under r788's anti-money laundering obligations.
• r788 applies a payment method matching policy — withdrawals are processed to the same payment method as the originating deposit wherever technically possible — as both a security measure and an AML control.
• All financial data transmissions between the r788 Platform and payment providers occur over encrypted channels using TLS 1.2 or higher.

r788 uses cookies and similar tracking technologies on the r788.bid Platform for the purposes described below. A cookie is a small text file placed on your device by the Platform that allows us to recognise your browser on subsequent visits and maintain session continuity.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the r788 Platform, including the ability to log in and maintain a session. r788 does not use third-party advertising cookies or serve retargeted advertising based on your r788 activity.

r788 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law and our licensing authority's regulations. The following retention periods apply:

Upon the expiry of applicable retention periods, r788 will securely delete or irreversibly anonymise your personal data. Where data is required for ongoing legal proceedings or regulatory investigations, retention may be extended for the duration of such proceedings.

r788 respects your rights as a data subject and provides practical mechanisms to exercise those rights. The following rights are available to all r788 players in respect of the personal data we hold about them:

r788 may transfer your personal data to service providers and infrastructure partners located in countries other than Pakistan. Such transfers may occur for the purposes of payment processing, identity verification, cloud hosting, and analytics services.

Where personal data is transferred internationally, r788 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan, including:

• Transfers to service providers in jurisdictions with data protection frameworks recognised as providing adequate protection.
• Use of contractual data transfer agreements incorporating standard data protection clauses that bind recipients to our data handling standards.
• Technical security measures including encryption in transit (TLS 1.2+) and at rest for all internationally transferred data.

If you would like further information about the specific safeguards in place for any international data transfer, please contact the r788 privacy team using the contact details in Section 16.

r788 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and r788 servers.
• AES-256 encryption for sensitive data stored at rest in r788's databases, including identity documents and payment references.
• Cryptographic password hashing using bcrypt or equivalent — your r788 password is never stored or transmitted in plain text.
• Role-based access controls restricting r788 staff access to personal data on a strict need-to-know basis, with audit logging of all data access events.
• Intrusion detection and monitoring systems that alert r788's security team to unusual access patterns or potential breaches in real time.
• Regular penetration testing and security audits of r788 systems by qualified independent security professionals.
• Two-factor authentication available to players as an optional additional security layer for their r788 accounts.

If r788 discovers or has reasonable cause to believe that an account has been registered by a person under the age of 21, that account will be immediately suspended and all associated personal data will be securely deleted following any applicable legal hold period. Any funds held in such an account will be returned to the verified funding source after investigation.

If you believe that r788 has inadvertently collected data from a minor, please contact us immediately using the details in Section 16 and we will take prompt corrective action.

r788 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our gaming license requirements. All changes will be reflected in an updated version of this Policy published at r788.bid/privacy-policy.

Where changes to this Policy are material — meaning they significantly affect how we process your personal data or your rights as a data subject — r788 will provide at least 14 calendar days' advance notice to all registered account holders via the email address associated with their r788 account.

The "Last Revised" date at the top of this document reflects the date of the most recent update. Your continued use of the r788 Platform following the effective date of any material update constitutes your acceptance of the revised Privacy Policy. If you do not agree with a revised Policy, you must cease using the Platform and may close your account in accordance with the process set out in our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a concern about how r788 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 at r788.bid. Average response time: 3–5 minutes. The r788 support team operates in both English and Urdu to assist Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and all other regions.
• Privacy Email: [email protected] — Please use the subject line "PRIVACY REQUEST" or "DATA SUBJECT RIGHTS REQUEST" to ensure your enquiry is directed to the appropriate team.

If you are not satisfied with r788's response to your privacy complaint, you may escalate the matter to the data protection supervisory authority of the jurisdiction in which r788 holds its international gaming license, or seek independent resolution through the Platform's dispute resolution process as described in the r788 Terms & Conditions.