rr3 Casino – Privacy Policy

1. Who We Are

rr3 (referred to in this Privacy Policy as "rr3", "we", "us", or "our") operates the online casino and sports betting platform accessible at rr3.club. rr3 is the data controller responsible for the personal information collected through this website and its associated services.

For the purposes of this Privacy Policy, "personal data" or "personal information" means any information that identifies or can reasonably be used to identify a natural person — including name, email address, mobile number, CNIC number, payment account details, IP address, and device identifiers.

This Privacy Policy applies to all users of rr3, including registered account holders, visitors who browse the site without registering, and any individual who contacts rr3 via our support channels. By using the rr3 platform, you acknowledge that you have read and understood this policy.

2. Data We Collect

rr3 collects the following categories of personal data from players and website visitors:

rr3 does not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where strictly required by applicable anti-money laundering or regulatory verification obligations.

3. How We Collect Data

rr3 collects personal data through the following means:

• Direct submission — when you register an account, complete KYC, make a deposit or withdrawal, contact support, or update your account profile
• Automated technical collection — through cookies, server logs, and session tracking technologies as you browse and use the rr3 platform
• Third-party payment providers — when you initiate a JazzCash, Easypaisa, bank transfer, or other payment transaction, your payment provider may share relevant transaction reference data with rr3
• Identity verification services — rr3 may use third-party KYC and identity verification providers to cross-reference the documents you submit during verification
• Game providers — third-party game providers (such as Evolution Gaming, Ezugi, Pragmatic Play) may share session and gameplay data with rr3 as part of their platform integration

4. Why We Use Your Data

rr3 processes personal data for the following purposes:

• To create, manage, and maintain your rr3 account
• To process deposits and withdrawals in PKR via JazzCash, Easypaisa, and other supported payment methods
• To verify your identity and age (18+) through the KYC process
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited activities
• To comply with applicable anti-money laundering (AML) obligations and other legal and regulatory requirements
• To administer bonuses, promotions, VIP rewards, and other account incentives
• To provide 24/7 customer support in English and resolve disputes
• To send account-related communications (transaction confirmations, security alerts, bonus notifications) — these are service communications, not marketing
• To send promotional and marketing communications where you have provided consent or where we have a legitimate interest, and have not objected
• To enforce the rr3 Terms and Conditions and protect the integrity of the platform
• To monitor and enforce responsible gaming obligations, including self-exclusion enforcement
• To improve and optimise the rr3 platform based on usage patterns and Player feedback

5. Legal Basis for Processing

Where applicable data protection laws require rr3 to identify a legal basis for processing your personal data, we rely on the following:

• Contractual necessity — processing required to perform the rr3 service contract with you (account management, payment processing, game delivery)
• Legal obligation — processing required to comply with anti-money laundering laws, identity verification requirements, and other applicable legal obligations
• Legitimate interests — processing necessary for fraud prevention, platform security, abuse detection, and service improvement, where our interests are not overridden by your rights
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent and which you may withdraw at any time

6. Data Sharing & Third Parties

rr3 does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, and USDT infrastructure providers, for the purpose of processing financial transactions
• KYC and identity verification providers — third-party services used to verify the identity and age of rr3 account holders
• Game providers — Evolution Gaming, Ezugi, SA Gaming, Pragmatic Play, JILI, PG Soft, Habanero and other certified game suppliers, for the purpose of delivering games and maintaining game integrity records
• IT and platform infrastructure providers — cloud hosting, database management, and platform security service providers operating under data processing agreements
• Fraud prevention and AML services — third-party services used to screen transactions and detect suspicious activity
• Legal and regulatory authorities — where required by law, court order, or regulatory demand, rr3 will disclose personal data to competent authorities

7. Data Retention

rr3 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account registration and identity data: retained for the lifetime of the account and for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations
• Financial transaction records (deposits, withdrawals, bet history): minimum 5 years from the date of each transaction
• KYC documents: minimum 5 years from the date of verification or account closure, whichever is later
• Customer support communications: up to 3 years from the date of last interaction
• Technical logs (IP addresses, session records): up to 12 months from the date of collection, unless required for an ongoing investigation

Following the expiry of applicable retention periods, rr3 will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.

8. Data Security

rr3 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the rr3 platform
• Encrypted storage of sensitive personal and financial data at rest
• Access controls and role-based permissions limiting internal access to personal data on a need-to-know basis
• Optional two-factor authentication (2FA) for Player accounts — strongly recommended
• Regular security assessments and penetration testing of rr3 infrastructure
• Incident response procedures to detect, contain, and respond to data breaches

Notwithstanding the above, no data transmission or storage system can be guaranteed to be 100% secure. You also have a responsibility to protect your rr3 account — use a strong unique password, enable 2FA, and never share your login credentials with anyone, including rr3 staff.

9. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data held by rr3:

• Right of access — request a copy of the personal data rr3 holds about you
• Right to rectification — request correction of inaccurate or incomplete personal data
• Right to erasure — request deletion of your personal data where there is no legitimate legal or contractual basis for continued retention
• Right to restriction — request that rr3 restrict processing of your data in certain circumstances
• Right to object — object to processing based on legitimate interests, including direct marketing
• Right to data portability — request your personal data in a structured, machine-readable format where technically feasible
• Right to withdraw consent — withdraw consent for processing based on consent (e.g. marketing emails) at any time without affecting the lawfulness of prior processing

To exercise any of the above rights, please contact rr3 support. We will respond to verified requests within 30 days. Note that certain rights may be limited where data retention is required by law (e.g. AML record-keeping) or where compliance with your request would conflict with our obligations to other Players or legal authorities.

10. Cookies & Tracking

rr3 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how the site is used. The types of cookies rr3 uses include:

• Essential cookies — strictly necessary to deliver the rr3 service and maintain your authenticated session. Cannot be disabled without disrupting platform functionality.
• Functional cookies — remember your preferences (language, display settings, last game played) to personalise your experience
• Analytics cookies — collect anonymised information about how users navigate and interact with the rr3 platform, used to improve performance and user experience
• Security cookies — used for fraud detection, bot prevention, and account security monitoring (e.g. unusual login location detection)

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the rr3 platform. rr3 does not use cookies to serve third-party advertising from external ad networks.

11. Children's Privacy

rr3 is strictly an adults-only platform. We do not knowingly collect, store, or process personal data from individuals under the age of 18. All account registrations are subject to age verification through the KYC process using government-issued identification (CNIC or passport).

If rr3 becomes aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and permanently close the associated account. Parents or guardians who believe their child may have registered on the rr3 platform should contact us immediately at [email protected].

12. Changes to This Policy

rr3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform operations, or applicable laws. When material changes are made, the "Last Updated" date at the top of this page will be revised. We may also notify registered Players of significant changes via email or platform notification.

Your continued use of the rr3 platform after the publication of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you disagree with any changes, you may close your account by contacting rr3 support.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or rr3's handling of your personal data, please contact our support team:

rr3 serves players from across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Peshawar, and Multan. All support communications are handled in English by our dedicated support team.