r678 Privacy Policy

1 Data Controller Identity

For the purposes of this Privacy Policy, the data controller responsible for the personal information of r678 platform users is the licensed operator of the r678 brand, operating the website at r678.bet under an internationally recognised gaming licence.

When this Privacy Policy refers to "r678", "we", "us", or "our", it refers to this licensed operator entity in its capacity as data controller. All data rights requests, privacy complaints, and data protection enquiries should be directed to the r678 Data Protection contact as set out in Section 16 of this policy.

2 Personal Data We Collect

r678 collects the following categories of personal data from players registering and using the r678 platform:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (required to verify you are 21 years of age or older);
• CNIC (Computerised National Identity Card) number or passport number;
• Residential address including city (Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, or other);
• Email address used during r678 Login registration;
• Mobile phone number, including those registered with JazzCash or EasyPaisa.

2.2 Financial & Payment Data

• JazzCash wallet mobile number and transaction reference identifiers;
• EasyPaisa account details and transaction reference identifiers;
• HBL, UBL, or Meezan Bank account details where used for deposits or withdrawals;
• Deposit amounts, withdrawal amounts, transaction timestamps, and running balance history;
• Source of funds declarations provided during enhanced KYC reviews.

2.3 Gaming & Behavioural Data

• Game session history including game titles played, bet sizes, win/loss outcomes, and session durations;
• Sports betting history including markets selected, odds, stakes, and settlement outcomes;
• Responsible gaming limit settings, self-exclusion requests, and reality check interaction logs;
• Bonus and promotional offer acceptance and wagering progress data.

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Cookies and session identifiers (see Section 7);
• Login timestamps, session durations, and platform navigation behaviour.

2.5 Communications Data

• Records of live chat conversations with r678 support agents;
• Email correspondence sent to or received from [email protected];
• Formal complaints and dispute resolution correspondence;
• Survey responses and voluntary feedback submitted to r678.

3 How We Collect Your Data

r678 collects personal data through the following channels:

• Direct Submission: Data you provide when completing the r678 Login registration form, submitting KYC documents, initiating deposits or withdrawals, or contacting r678 support;
• Automated Collection: Technical data automatically collected when you access the r678 platform, including cookies, server logs, and device fingerprinting used for fraud prevention;
• Third-Party Payment Processors: Transaction confirmation data and payment method verification data received from JazzCash, EasyPaisa, and partner banks when you initiate a PKR transaction;
• KYC Verification Partners: Identity verification results and document authenticity scores provided by our licensed KYC service providers after you submit identity documents;
• Regulatory Data Requests: In limited circumstances, we may receive data about you from our licensing regulator or law enforcement authorities pursuant to a lawful request.

4 Legal Basis for Processing

r678 processes your personal data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

5 How We Use Your Personal Data

r678 uses the personal data we collect for the following specific purposes:

5.1 Account Services

To create and maintain your r678 player account, authenticate your identity at login, manage your Real Money Balance and Bonus Balance, and provide access to all casino, sportsbook, and arcade gaming services available on the r678 platform.

5.2 Payment Processing

To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; to verify the ownership of payment methods used; to process withdrawal requests to your verified payment accounts; and to maintain accurate financial transaction records for regulatory reporting purposes.

5.3 Regulatory Compliance

To meet r678's obligations under its international gaming licence, including conducting KYC identity verification for all players before processing withdrawals, monitoring transactions for AML compliance, maintaining responsible gaming limit records, and submitting statutory reports to our licensing authority where required.

5.4 Security & Fraud Prevention

To detect and prevent unauthorised account access, bonus abuse, multi-accounting, payment fraud, money laundering, and other prohibited activities described in the r678 Terms & Conditions. Automated fraud detection tools analyse behavioural patterns to flag potentially suspicious activity for human review.

5.5 Customer Support

To respond to your support requests via live chat and email, to investigate and resolve disputes, to process formal complaints in accordance with our licensing authority's dispute resolution requirements, and to improve our support services based on interaction quality analysis.

5.6 Personalisation & Marketing

Where you have given your consent, to send you promotional emails about r678 bonuses, new game launches, PSL cricket betting promotions, and other relevant offers. Also, to personalise your on-site experience by displaying game recommendations and offers relevant to your gaming history and preferences. You may withdraw this consent at any time as described in Section 11.

6 Data Sharing & Disclosure

r678 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We share your data only in the following limited and controlled circumstances:

6.1 Payment Service Providers

We share necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely to process your PKR deposits and withdrawals. Each payment service provider operates under its own privacy policy and is independently regulated.

6.2 KYC & Identity Verification Partners

We share identity document data with licensed KYC verification service providers to authenticate your identity and verify your age as required by our gaming licence. These providers are contractually prohibited from using your data for any purpose other than identity verification for r678.

6.3 Game Content Providers

Our casino games, live dealer tables, and arcade titles (including Pirate Fishing) are provided by licensed third-party game studios. These studios may receive anonymised session data for game performance monitoring. No directly identifiable personal data is shared with game studios without your awareness.

6.4 Regulatory & Legal Authorities

r678 may disclose your personal data to our licensing authority, financial intelligence units, law enforcement agencies, or courts where legally required or where we are compelled by a lawful order. r678 will notify you of such a disclosure where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of r678's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the acquiring entity's privacy practices before any change in data controller takes effect.

7 Cookies & Tracking Technologies

r678 uses cookies and similar tracking technologies on the r678.bet platform. Cookies are small text files stored on your device that help us deliver a consistent, secure, and personalised experience.

7.1 Types of Cookies Used

7.2 Managing Cookies

You may manage your cookie preferences through the r678 Cookie Preference Centre, accessible from the footer of the r678.bet website. You may also control cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use r678 platform services. Note that cookie opt-out does not affect r678's right to process data collected through other means as described in this policy.

8 Data Retention

r678 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention schedule applies:

At the expiry of the relevant retention period, r678 will securely delete or irreversibly anonymise your personal data in accordance with our data destruction policy.

9 Data Security

r678 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption at Rest: All personal data stored in r678 databases is encrypted using AES-256 symmetric encryption. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule;
• Encryption in Transit: All data transmitted between your device and r678 servers is protected by TLS 1.3 with forward secrecy. r678.bet enforces HTTPS across all pages and assets — unencrypted HTTP connections are automatically redirected;
• Access Controls: Access to personal data systems is restricted to authorised r678 personnel on a strict need-to-know basis using role-based access control (RBAC). All administrative access is logged and audited;
• Two-Factor Authentication: All r678 internal systems handling personal data require two-factor authentication for staff access. We also strongly recommend all players enable 2FA on their r678 accounts;
• Security Audits: r678 commissions regular independent security audits and penetration testing exercises as required by our international gaming licence conditions;
• Incident Response: r678 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, r678 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

10 Your Data Rights

As a player whose personal data is processed by r678, you hold the following rights in relation to your personal information. To exercise any of these rights, contact r678 at [email protected] with the subject line "Data Rights Request" and include your registered account username and a clear description of your request.

r678 will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further two months and will notify you accordingly. r678 will not charge a fee for data rights requests unless they are manifestly unfounded or excessive.

11 Marketing Communications

r678 sends marketing communications — including promotional bonus offers, PSL cricket betting specials, new game launch announcements, and personalised PKR cashback offers — only to players who have given their explicit consent to receive such communications.

11.1 Opting Out

You may withdraw your marketing consent and opt out of all promotional communications from r678 at any time using any of the following methods:

• Click the "Unsubscribe" link in any r678 marketing email;
• Update your communication preferences in your r678 account settings dashboard;
• Contact r678 support via live chat or email at [email protected] and request removal from all marketing lists.

Opt-out requests are processed within 48 hours. After opting out, you will still receive essential transactional communications (deposit confirmations, withdrawal notifications, account security alerts, and KYC requests) as these are not marketing communications and cannot be disabled.

11.2 Personalised Offers

Where you have consented, r678 may use your gaming history and preferences to personalise the promotional offers you see on-site and receive by email. This personalisation does not involve selling your data and is conducted entirely within r678's own systems. You may object to this personalised profiling at any time as described in Section 10.

12 Minors & Age Verification

The r678 platform is strictly intended for players aged 21 years and over. r678 does not knowingly collect personal data from individuals under the age of 21. The collection of date of birth data during r678 Login registration is a mandatory field specifically to enforce this age restriction.

r678 participates in age verification schemes and cooperates fully with responsible gaming authorities to prevent underage access to online gambling services in Pakistan and internationally.

13 International Data Transfers

As a platform operating under an international gaming licence, some of r678's data processing infrastructure and third-party service providers may be located outside Pakistan. Where personal data is transferred internationally, r678 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards used for international transfers include:

• Standard Contractual Clauses (SCCs) incorporated into our Data Processing Agreements with international service providers;
• Transfers only to jurisdictions that our licensing authority has assessed as providing adequate data protection;
• Encryption of all data in transit using TLS 1.3 regardless of the transfer destination.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting [email protected].

14 Third-Party Services & Links

The r678 platform may contain links to third-party services and informational resources. r678 is not responsible for the privacy practices of any third-party websites or services. This Privacy Policy applies solely to data processed by r678 in connection with the r678.bet platform. We encourage you to review the privacy policies of any third-party services you access through links on our platform.

Third-party game studios whose content is hosted on r678 operate under their own privacy frameworks for data generated within their game engines. r678 contractually requires all game studio partners to maintain data protection standards consistent with our own, but their independent privacy policies govern any data processing they conduct on their own infrastructure.

15 Changes to This Privacy Policy

r678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming licence conditions. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on r678.bet with a revised effective date prominently displayed at the top of the page;
• Send an in-platform notification to all registered r678 account holders summarising the key changes;
• Where changes are significant and affect your rights, send an email notification to your registered r678 account email address at least 14 days before the changes take effect.

Your continued use of the r678 platform after a Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with any changes made to this policy, you should cease using the r678 platform and contact [email protected] to request account closure.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or r678's handling of your personal data, please contact our Data Protection team using the following details:

16.1 Complaints Process

If you are not satisfied with r678's response to a privacy concern or data rights request, you have the right to escalate your complaint to our licensing authority's player protection division. Details of the complaints procedure are available in the r678 Terms & Conditions and on our licensing authority's official website. r678 is committed to resolving all privacy complaints fairly and promptly, and we will cooperate fully with any regulatory investigation initiated in connection with our data processing practices.