r768 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is published by r768 ("r768", "we", "us", "our") and applies to all persons who visit the r768 website at https://r768.org, create an r768 account, use any r768 product or service, or otherwise interact with the r768 platform in any capacity.

r768 is committed to protecting the privacy and personal data of all players, particularly those based in Pakistan. This Policy describes in clear terms what personal information r768 collects from you, why we collect it, how it is used and stored, with whom it may be shared, and what rights you have in relation to that data.

This Policy should be read alongside the r768 Terms & Conditions, which govern the broader contractual relationship between r768 and all registered players.

2. Data Controller Information

For the purposes of applicable data protection legislation, r768 acts as the data controller in respect of personal data collected through the r768 platform. r768 is an internationally licensed online gaming operator. All data protection enquiries, subject access requests, and privacy complaints should be directed to the r768 Data Protection team via the contact details set out in Section 14 of this Policy.

r768 has appointed an internal Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. The DPO can be contacted via the support channel at [email protected] — please mark your correspondence clearly as "Data Protection Enquiry" so it is routed to the correct team.

3. Data We Collect

r768 collects personal data in several categories depending on how you interact with our platform. The principal categories of personal data we collect and process are as follows:

3.1 Registration and Identity Data

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (for 21+ age verification)
• National Identity Card (CNIC) number
• Residential address in Pakistan (city, province, postal code)
• Email address
• Mobile phone number (used for JazzCash / EasyPaisa verification)
• Username and encrypted account password

3.2 Financial and Payment Data

• JazzCash wallet number or EasyPaisa mobile account number
• Bank account details for HBL, UBL, or Meezan Bank transfers (account title and IBAN only — r768 does not store full banking credentials)
• USDT TRC-20 wallet address (where applicable)
• Deposit and withdrawal transaction history, including amounts in PKR
• Bonus and promotional credit records

3.3 Identity Verification Documents

• Scanned copy or photograph of your CNIC (front and back) for KYC verification
• Proof of address documentation where required by r768 compliance
• Selfie photograph for liveness verification during the r768 account verification process

3.4 Platform Usage and Technical Data

• IP address and approximate geolocation at time of login
• Device type, operating system, and browser or app version
• Session duration, login timestamps, and activity logs
• Game history — games played, bet amounts in PKR, outcomes, and session data
• Sportsbook betting history — markets selected, stake amounts, and settlement records
• Responsible gaming interactions — deposit limits set, self-exclusion requests, session timer usage

3.5 Communications Data

• Live chat transcripts between you and the r768 support team
• Email correspondence with r768 regarding your account, payments, or complaints
• Feedback or survey responses submitted through the r768 platform

3.6 Marketing Preferences

• Your consent status for receiving r768 promotional communications
• Channel preferences (email, SMS, push notification)
• Records of marketing communications sent and interaction data where applicable

4. How We Collect Your Data

r768 collects personal data through the following channels and mechanisms:

Collection Method	Data Collected
r768 Registration Form	Name, date of birth, email, phone number, CNIC, residential address
KYC Verification Process	CNIC scan, selfie photo, proof of address documentation
Payment Transactions	JazzCash / EasyPaisa wallet number, bank account details (IBAN/title), transaction amounts in PKR
Platform Activity	Game history, betting records, session data, login logs, IP address
Cookies and Tracking	Browser type, device info, session identifiers, referral source
Customer Support	Live chat transcripts, email correspondence, complaint records
Third-Party Verification	Identity verification results from KYC service providers (pass/fail status only — raw data stays with the provider)

5. How We Use Your Data

r768 uses the personal data collected from you for the following specific purposes:

• Account Management: To create, maintain, and manage your r768 player account, including login authentication and account security.
• Age and Identity Verification: To confirm that you are 21 years of age or older and to verify your identity in line with r768's regulatory obligations — a mandatory requirement before any withdrawal from your r768 account can be processed.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT TRC-20 and to maintain accurate transaction records in PKR.
• Platform Provision: To deliver the r768 casino, sportsbook, live dealer, and crash game services to you, including personalised game recommendations and lobby display preferences.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via the r768 24/7 live chat and email support channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access on the r768 platform.
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any reporting obligations under our international gaming licence.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide player protection interventions on the r768 platform.
• Marketing Communications: To send you r768 promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications and have not subsequently withdrawn that consent.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve r768 product features, payment flows, and the overall player experience.

6. Legal Basis for Processing

r768 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases on which r768 relies are as follows:

• Contractual Necessity: Processing required to perform the contract between you and r768 — including account creation, game provision, and payment processing.
• Legal Obligation: Processing required for r768 to comply with applicable law — including KYC verification, AML reporting, and regulatory record-keeping under our international gaming licence.
• Legitimate Interests: Processing for r768's legitimate business interests that do not override your rights — including fraud prevention, platform security, and product analytics.
• Consent: Processing for which you have provided clear, specific, and freely given consent — including marketing communications. Consent may be withdrawn at any time without detriment to your r768 account.

7. Data Sharing and Disclosure

r768 does not sell your personal data to any third party. r768 may share your personal data in limited circumstances as follows:

7.1 Service Providers and Data Processors

r768 engages carefully selected third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include KYC and identity verification providers, payment processing partners (including the infrastructure operators that facilitate JazzCash and EasyPaisa transactions), cloud hosting and data storage providers, and customer support platform operators. All such providers are contractually prohibited from using r768 player data for any purpose other than delivering the contracted service.

7.2 Regulatory and Law Enforcement Authorities

r768 may disclose personal data to competent regulatory or law enforcement authorities where required to do so by applicable law, by order of a court of competent jurisdiction, or where r768 is under a reporting obligation under the terms of its international gaming licence. r768 will notify affected players of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the r768 business, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, r768 will notify affected players in advance and ensure that the acquiring entity assumes equivalent data protection obligations.

7.4 Fraud and Security

r768 may share limited player data with fraud prevention agencies, shared intelligence networks operated by the international gaming industry, or other gaming operators where necessary to prevent money laundering, underage gambling, or self-excluded player access to gaming services.

8. Data Retention

r768 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods which are driven by our regulatory obligations:

Data Category	Retention Period	Basis
Account registration and identity data	5 years from account closure	AML / KYC regulatory obligation
KYC documents (CNIC, selfie, proof of address)	5 years from account closure	AML / KYC regulatory obligation
Financial transaction records (PKR deposits and withdrawals)	5 years from transaction date	Financial record-keeping obligation
Game and betting history	3 years from account closure	Dispute resolution and regulatory audit
Customer support communications	3 years from last interaction	Legitimate interest — complaint and dispute records
Marketing preference records	Duration of account + 1 year	Consent record-keeping
Technical and session log data	13 months from collection	Security monitoring and fraud detection

Upon expiry of the applicable retention period, r768 will securely delete or anonymise your personal data in accordance with our data deletion procedures. Anonymised, aggregated data that no longer identifies any individual may be retained indefinitely for statistical and product development purposes.

9. Data Security

r768 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures, including:

• 256-bit SSL/TLS Encryption: All data in transit between your device and r768 servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Encrypted Storage: Sensitive data fields — including CNIC numbers, payment wallet details, and account passwords — are encrypted at rest using AES-256 encryption.
• Role-Based Access Control: Access to player personal data within r768 is strictly limited on a need-to-know basis. Personnel who do not require access to personal data to perform their job function cannot access it.
• Two-Factor Authentication: r768 strongly recommends and supports two-factor authentication (2FA) for all player accounts. Enabling 2FA adds an additional layer of protection against unauthorised access to your r768 account.
• Continuous Security Monitoring: r768 operates 24/7 security monitoring across our platform infrastructure to detect and respond to anomalous activity, intrusion attempts, and data access irregularities.
• Regular Security Audits: r768 engages independent security experts to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.

10. Cookies and Tracking Technologies

The r768 platform uses cookies and similar tracking technologies to operate certain platform functions, analyse usage, and (where you have consented) deliver personalised content. The categories of cookies used by r768 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the r768 platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load balancing identifiers. No consent is required for these cookies.
• Functional Cookies: These cookies remember your r768 preferences — such as your preferred language, lobby layout, and responsible gaming settings — so you do not have to re-enter them on each visit.
• Analytical Cookies: These cookies collect anonymised data about how players use the r768 platform — which games are most popular, which pages are visited most, and where users encounter difficulties. This data is used exclusively to improve the r768 product. These cookies require your consent.
• Marketing Cookies: These cookies are used to track visits to r768 and may be used to build a profile of your interests for personalised promotional communications. These cookies are only active where you have explicitly consented.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the r768 platform and may prevent you from logging in or completing financial transactions.

11. Your Rights

As an r768 player whose personal data is processed under this Policy, you have the following rights which you may exercise at any time by contacting r768 via live chat or at [email protected]:

• Right of Access: You have the right to request a copy of all personal data that r768 holds about you. r768 will respond to verified subject access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that r768 holds about you. Basic account details (email, phone number, address) can be updated directly from within your r768 account settings.
• Right to Erasure: You have the right to request deletion of your personal data. This right is subject to r768's legal retention obligations — data that must be retained for AML, KYC, or regulatory purposes cannot be deleted until the applicable retention period has expired.
• Right to Restriction: You have the right to request that r768 restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to r768 in a structured, commonly used, machine-readable format and to transmit that data to another service provider.
• Right to Object: You have the right to object to r768's processing of your personal data where that processing is based on legitimate interests. r768 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where r768 processes your data on the basis of consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact r768 via live chat on the r768 platform or send a written request by email. r768 will respond to all valid data rights requests within 30 calendar days. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee.

12. Minors and Age Verification

r768 strictly prohibits the use of its platform by any person under the age of 21. r768 implements a mandatory identity and age verification process — requiring submission of a valid CNIC or equivalent government-issued photo identification — before any player account is permitted to make withdrawals or access the full r768 platform.

If r768 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, r768 will immediately suspend the relevant account, void any game history associated with it, return any net deposits to the original payment source, and permanently delete all personal data associated with that account.

13. Changes to This Privacy Policy

r768 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our platform operations. When material changes are made to this Policy, r768 will notify all registered players via the email address associated with their r768 account at least 14 days prior to the changes taking effect.

The most current version of this Privacy Policy is always available on the r768 website at https://r768.org/privacy-policy. The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. Your continued use of the r768 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by r768, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the r768 platform — the fastest way to reach the r768 data protection team.
• Email: [email protected] — please mark your email subject line with "Privacy / Data Protection Enquiry" for correct routing.

r768 commits to acknowledging all privacy-related enquiries within 48 hours and providing a substantive response within 30 calendar days. If you are not satisfied with r768's response to your data protection complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the regulatory body that issued r768's gaming licence.

r768 takes all data protection complaints seriously. Our Data Protection Officer reviews all escalated complaints personally and r768 will cooperate fully with any investigation by a competent supervisory authority.