RSS77 Privacy Policy

This Privacy Policy ("Policy") describes how RSS77 ("rss77", "we", "us", "our"), the operator of the online gaming and sports-betting platform accessible at rss77.cam ("Platform"), collects, uses, stores, discloses and protects the personal data of its users ("you", "your", "User").

This Policy forms part of the rss77 Terms & Conditions. By registering an account or otherwise using the Platform, you acknowledge that you have read, understood and agreed to the practices described in this Policy. If you do not agree, you must not use the Platform or provide any personal data to rss77.

rss77 is committed to processing personal data responsibly and in accordance with the data protection and privacy obligations applicable in the jurisdiction in which it is licensed. Users in Pakistan should note that Pakistani law, including the Personal Data Protection Bill (and any enacted successor legislation) and sector-specific data regulations, may also apply to the processing of their personal information.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — directly or in combination with other information.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure and deletion.
• "Data Controller" means rss77, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of rss77 under written contractual instructions.
• "KYC" (Know Your Customer) means the identity and age-verification process required by applicable anti-money laundering (AML) obligations.
• "Cookie" means a small text file placed on your device by the Platform to support session management, security and analytics functions.
• "Sensitive Data" means personal data that warrants heightened protection, including government-issued identity numbers, financial account details, and health-related information supplied in a responsible gambling context.

rss77 collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration & Account Data

When you register an account, we collect:

3.2 Identity Verification (KYC) Data

To comply with AML and age-verification obligations, we may collect:

3.3 Transaction & Payment Data

We collect data related to deposits and withdrawals, including payment method type, transaction reference numbers and amounts. We do not store full card numbers or banking credentials. Payment processing is handled by third-party payment processors under their own security standards.

3.4 Usage & Technical Data

3.5 Responsible Gambling Data

Where you set deposit limits, loss limits, session timers or request self-exclusion, we record these preferences and the dates they were activated or modified. This data is processed to fulfil our responsible gambling obligations and is treated with heightened care.

3.6 Communication Data

When you contact our support team via Live Chat, Help Center or email, we retain records of those communications — including timestamps, the nature of the query and any resolution reached — for quality assurance, audit and dispute-resolution purposes.

rss77 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contractual Necessity: Processing required to register your account, process transactions, verify your identity and provide platform services in accordance with the Terms & Conditions you have agreed to.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, counter-terrorism financing (CTF) obligations, age-verification requirements, tax reporting obligations and any lawful regulatory request from a competent authority.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, analytics to improve the Platform, and internal audit and compliance functions — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, for optional marketing communications — we will obtain that consent clearly and distinctly. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We use the personal data we collect for the following purposes:

• Account Management: Creating, maintaining and managing your rss77 account, including authentication and access control.
• Transaction Processing: Processing deposits, withdrawals and any account balance adjustments, including applying bonuses and promotional credits.
• Identity & Age Verification: Conducting KYC checks to verify your identity, age and the legitimacy of funds used on the Platform.
• Responsible Gambling: Monitoring account activity for indicators of problem gambling behaviour, enforcing user-set limits and processing self-exclusion requests.
• Fraud & Security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering and other prohibited conduct.
• Platform Improvement: Analysing usage data in aggregate to understand how users interact with the Platform and to improve performance, design and functionality.
• Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering, data protection, tax and gambling-regulation frameworks.
• Customer Support: Responding to your queries, resolving disputes and maintaining records of support interactions for quality assurance.
• Communications: Sending you transactional notifications (account activity, withdrawal confirmations, security alerts) and, where you have opted in, promotional communications about rss77 offers and features.

rss77 does not sell your personal data. We share data only in the circumstances described below and only to the extent necessary for the stated purpose:

• Payment Processors: To facilitate deposits and withdrawals, transaction data is shared with third-party payment processing providers. These providers operate under their own data security standards and privacy policies. Payment provider names referenced contextually on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are familiar references for Pakistani users and do not imply an active integration or endorsement of gambling services by those providers.
• KYC & Identity Verification Providers: Identity documents and verification data may be shared with certified third-party KYC service providers for the purpose of age and identity verification. These providers are contractually bound to process data only for verification purposes.
• Game & Software Providers: Your account identifier and session data may be shared with game providers to facilitate gameplay, track game-level transaction history and resolve technical disputes.
• Analytics Providers: Aggregated, anonymised or pseudonymised usage data may be shared with analytics platforms to support Platform improvement. Where possible, full IP addresses are truncated or anonymised before transmission.
• Legal & Regulatory Authorities: We may disclose personal data to competent regulatory, law enforcement or judicial authorities where required by law, lawful court order or applicable regulation, without prior notice to you where legally required or permitted.
• Business Transfers: In the event of a merger, acquisition, asset sale or restructuring involving rss77, personal data may be transferred as part of the transaction. Affected users will be notified of any such transfer and any material changes to data processing practices.

All third-party data processors engaged by rss77 are subject to written data processing agreements requiring them to apply appropriate technical and organisational security measures and to process data only in accordance with our documented instructions.

The rss77 Platform uses cookies and similar tracking technologies to support essential site functions, security and analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly — for example, session authentication tokens, CSRF protection tokens and user preference stores. These cookies cannot be disabled without impairing core functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — pages visited, features used and session durations. This data informs Platform improvement decisions. No personally identifiable visitor profiles are constructed.
• Security Cookies: Used to detect suspicious behaviour, manage concurrent session controls and support fraud-prevention systems.

rss77 does not use third-party advertising or retargeting cookies that track your activity across other websites for the purpose of serving targeted advertisements.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. For detailed browser-specific instructions on managing cookies, consult your browser's help documentation.

rss77 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following retention guidelines:

• Account & KYC Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable tax or regulatory law.
• Support Communications: Retained for three (3) years from the date of the interaction, unless ongoing dispute resolution requires a longer period.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period and for a minimum of five (5) years thereafter, to support responsible gambling obligations and dispute resolution.
• Usage & Technical Data: Retained in anonymised or aggregated form for analytics purposes after a rolling period of thirteen (13) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised unless a legal hold requirement prevents deletion.

rss77 implements appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or access. Our security measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) options available to all registered users for account protection.
• Incident response procedures for detecting, reporting and managing personal data breaches in accordance with applicable notification obligations.

While rss77 takes data security seriously, no method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

Subject to applicable law and certain exemptions (for example, where processing is required to comply with a legal obligation), you have the following rights in respect of your personal data:

rss77 will respond to valid data rights requests within thirty (30) calendar days. Where a request is complex or multiple requests are received concurrently, this period may be extended by up to a further sixty (60) days with notice to you. Requests are free of charge unless manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The rss77 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction, whichever applies. rss77 does not knowingly collect, process or retain personal data from any person below the applicable minimum age.

Where rss77 becomes aware that personal data has been collected from a minor — whether through KYC review, user report or any other means — we will immediately suspend the relevant account, delete all associated personal data and forfeit any account balance in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor has registered an account or provided personal data to rss77 should contact our support team immediately via Live Chat or the Help Center.

rss77 operates in multiple jurisdictions and may transfer personal data to service providers, data processors or affiliated entities located in countries outside your country of residence — including countries outside Pakistan.

Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that in the operator's licensing jurisdiction, rss77 will implement appropriate safeguards, which may include:

• Contractual clauses requiring the recipient to apply equivalent data protection standards.
• Technical security measures including encryption of data in transit and at rest.
• Vendor due-diligence assessments prior to engaging any new international data processor.

By using the Platform, you acknowledge that your personal data may be transferred internationally as described in this Policy.

rss77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or operational requirements. Where changes are material, we will provide reasonable prior notice to registered users via the email address on file or a prominent in-platform notification, no less than seven (7) days before the changes take effect, unless a shorter period is required by law.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the amended Policy, you must cease using the Platform and may request account closure and data deletion in accordance with Section 10.

The most current version of this Privacy Policy will always be available at rss77.cam/privacy-policy. We encourage you to review this page periodically.

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact rss77 through the following channels:

• Live Chat: Available 24/7 directly within the Platform interface — the fastest channel for account-related data queries.
• Help Center: Accessible via the Platform's support portal for self-service guidance and to submit formal data rights requests.
• Email (plain text — not a clickable link): [email protected]

Please include your registered account username, a clear description of your request or concern, and — for data rights requests — your preferred method of identity verification. Response times are typically within 30 calendar days for formal data rights requests and within 24 hours for general support queries.