Privacy Policy — r3r3

r3r3 ("r3r3", "we", "us", "our") operates the online betting and live casino information platform accessible at https://r3r3.cam and all associated sub-pages, applications and services (collectively, the "Platform"). We are committed to protecting the privacy and personal data of every individual who uses the Platform ("User", "you", "your").

This Privacy Policy ("Policy") describes in detail what personal data we collect, the lawful bases on which we process it, how we use and share it, how long we retain it, the security measures we apply to protect it, and the rights you hold in respect of your personal data. This Policy forms part of our overall Terms and Conditions and should be read alongside them.

By accessing or using the r3r3 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

r3r3 acts as the Data Controller in respect of the personal data collected through the Platform. All data processing activities described in this Policy are carried out by r3r3 or by authorised third-party Data Processors acting on our documented instructions under binding data processing agreements.

If you have any questions, concerns or requests regarding the processing of your personal data, you may contact us at:

r3r3 collects personal data across several categories, depending on how you interact with the Platform. The table below sets out the primary categories of data we may collect:

We do not collect special categories of particularly sensitive personal data (such as health data, biometric data or political opinions) unless explicitly required by law and with appropriate safeguards in place.

5.1 Data You Provide Directly

We collect personal data directly from you when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, participate in promotions, or update your account settings. All registration and verification forms on the Platform include field labels and placeholders in English to ensure clarity.

5.2 Data Collected Automatically

When you access the Platform, our systems automatically collect technical and usage data including your IP address, browser fingerprint, device type, referring URL, pages viewed and interaction logs. This data is collected via server logs, cookies and similar tracking technologies as described in Section 12 of this Policy.

5.3 Data from Third Parties

In certain circumstances, r3r3 may receive personal data about you from third parties, including: identity verification service providers (in the context of KYC); fraud prevention and AML screening services; payment processors; and analytics providers. All third-party data sharing is governed by binding contractual agreements.

r3r3 processes your personal data only where a lawful basis applies. The table below sets out the primary purposes of processing and the corresponding lawful basis for each:

r3r3 does not sell, rent or trade your personal data. We may share your personal data with the following categories of recipients, strictly where necessary and under appropriate contractual protections:

• KYC and Identity Verification Providers: Third-party services used to verify your identity, age and document authenticity during the KYC process.
• Payment Processors: Payment infrastructure providers that facilitate deposits and withdrawals. Payment method references (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are used for contextual familiarity only — these providers' individual privacy policies govern their own data processing activities.
• Fraud and AML Screening Services: Third-party services that screen transactions and user profiles against fraud, sanctions and money-laundering databases.
• Analytics and Platform Technology Providers: Services that assist with performance monitoring, crash reporting and usage analytics. These providers process data in an aggregated or pseudonymised form where possible.
• Game Content Providers: Third-party casino game studios whose titles are hosted on the Platform. These providers may process technical data related to game sessions.
• Legal and Regulatory Authorities: Law enforcement agencies, courts or regulatory bodies where r3r3 is required to disclose personal data by applicable law or a valid legal order.
• Corporate Successors: In the event of a merger, acquisition or asset sale, personal data held by r3r3 may be transferred to the acquiring entity, subject to equivalent privacy protections.

r3r3 operates internationally and may transfer your personal data to countries outside your country of residence, including countries that may not offer the same level of data protection as your home jurisdiction. Where such transfers occur, r3r3 implements appropriate safeguards, which may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules where applicable within corporate group structures;
• Transfers to jurisdictions recognised as providing an adequate level of data protection;
• Specific consent obtained from you, where required by applicable law.

By using the r3r3 Platform from Pakistan or any other jurisdiction, you acknowledge that your personal data may be transferred, stored and processed in countries outside your location as part of the normal operation of the Platform.

r3r3 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active Account and for a minimum period of five (5) years following account closure, to satisfy AML, fraud prevention and audit obligations.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years in compliance with anti-money laundering legislation applicable to r3r3's operating jurisdiction.
• KYC Documents: Identity and verification documents are retained for a period required by the applicable compliance framework, typically five (5) years from the date of verification or account closure.
• Communication Logs: Support and chat correspondence is retained for up to two (2) years to facilitate dispute resolution and service quality review.
• Technical and Usage Data: Aggregated or pseudonymised analytics data may be retained for up to three (3) years for platform improvement purposes.
• Marketing Preferences: Retained for as long as your Account remains active, or until you withdraw consent for marketing communications.

When retention periods expire, personal data is securely deleted, anonymised or pseudonymised in accordance with our internal data management procedures.

r3r3 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss or destruction. Our security framework includes:

• TLS 1.3 Encryption: All data in transit between your device and the Platform is encrypted using Transport Layer Security (TLS) version 1.3.
• At-Rest Encryption: Sensitive data stored on r3r3 servers is encrypted using industry-standard algorithms to protect against unauthorised database access.
• Access Controls: Access to personal data within r3r3's systems is restricted on a need-to-know basis. All internal access is logged and regularly audited.
• Two-Factor Authentication (2FA): 2FA is available to all users and is strongly recommended to protect account access.
• Penetration Testing: r3r3 conducts periodic security assessments of its infrastructure to identify and remediate vulnerabilities.
• Incident Response: r3r3 maintains a data breach incident response plan. In the event of a breach that presents a risk to your rights, we will notify affected users and relevant authorities as required by applicable law.

Subject to applicable law and the specific circumstances of your request, you hold the following rights in respect of your personal data held by r3r3:

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and respond substantively within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 60 days — in which case we will notify you of the extension and the reasons for it.

Please note that certain rights may be limited or qualified where processing is required to fulfil legal obligations (such as KYC/AML record-keeping), where rights conflict with the rights of third parties, or where processing is necessary to establish, exercise or defend legal claims.

12.1 What Are Cookies?

Cookies are small text files placed on your device by the r3r3 Platform when you visit. They allow the Platform to recognise your device on return visits, remember your preferences and analyse how the Platform is used. Cookies do not contain your name or financial information.

12.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. They enable secure login, session management and fraud prevention. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language, preferred odds format and responsible gambling settings.
• Analytics Cookies: Used in aggregate or pseudonymised form to understand how users navigate the Platform, helping us improve performance and content.
• Marketing Cookies: Used only where you have given explicit consent to receive personalised promotional content. You may withdraw this consent at any time via account settings.

12.3 Managing Cookies

You may configure your browser to refuse all or certain cookies, or to alert you when cookies are being set. Note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing certain services. Instructions for managing cookies are available in your browser's help documentation.

The r3r3 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the applicable operator/license jurisdiction. r3r3 does not knowingly collect, process or retain personal data relating to minors. Registration by persons under the applicable minimum age is prohibited.

Where r3r3 becomes aware or has reasonable cause to suspect that a user is under the applicable minimum age, the associated Account will be suspended immediately, any deposits held in the Account will be returned to the originating payment method (net of any losses incurred), and all personal data relating to that user will be deleted in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered on the Platform or provided personal data to r3r3, please contact us immediately at [email protected].

The r3r3 Platform does not include external links to third-party websites. However, the Platform does integrate third-party services including game content providers, payment processors and analytics tools. Each such third-party service operates under its own privacy policy and data practices. r3r3 is not responsible for the privacy practices of third-party service providers beyond the contractual obligations we impose on them as Data Processors.

Payment method names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited for contextual familiarity relevant to Pakistani users. These references do not imply any partnership, affiliation or endorsement of gambling by those providers. Each provider's own privacy and data practices are governed by their respective policies.

r3r3 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — affecting your rights, the purposes for which we process your data, or our disclosure practices — we will provide notice via the Platform and/or by email to your registered address at least 14 days prior to the changes taking effect.

Minor updates, such as clarifications of existing practices, typographical corrections or changes required immediately by applicable law, will be reflected in the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically to remain informed of how we protect your personal data. Continued use of the Platform following notification of material changes constitutes your acceptance of the revised Policy.

For any questions, concerns or requests relating to this Privacy Policy or to the processing of your personal data by r3r3, please contact our support team. We aim to acknowledge all privacy-related correspondence within 72 hours and to resolve queries substantively within 30 calendar days.