rs365 Privacy
Policy

01 Introduction

rs365 ("the Company", "we", "us", "our") operates the online gaming platform accessible at https://rs365.org. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a visitor browsing our website, or a person contacting our support team.

This Privacy Policy ("Policy") describes in full how rs365 collects, stores, uses, shares, and protects your personal data. It also explains the rights available to you under applicable data protection principles and how you may exercise those rights.

This Policy applies to all personal data processed by rs365 in connection with the operation of the platform, including data submitted during account registration, data captured during gameplay and betting activity, data processed during financial transactions, and data collected automatically through your use of the website.

This Policy was last reviewed and updated in January 2026. We recommend that you review it periodically as it may change from time to time.

02 Data We Collect

rs365 collects the following categories of personal data about you:

Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth
• Pakistani CNIC number (Computerised National Identity Card) or passport number
• Scanned copies or photographs of identity documents submitted during KYC verification
• Selfie or liveness check images where requested for biometric verification

Contact Data

• Email address
• Pakistani mobile number (used for account authentication and SMS notifications where opted in)
• City of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi)

Account & Transaction Data

• Account username and encrypted password hash
• Account balance history, deposit records, and withdrawal records
• Payment method references (e.g., JazzCash mobile number, EasyPaisa account reference, IBAN last four digits)
• Transaction timestamps, amounts in PKR, and transaction status
• Bonus claims, wagering history, and promotion participation records

Gameplay & Betting Data

• Full record of all bets placed, games played, stakes, odds, and outcomes
• Session timestamps, duration, and frequency of play
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off activations)

Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Pages visited within the rs365 platform and navigation path
• Login timestamps and session duration
• Device fingerprint data used for fraud detection

Communications Data

• Content of support tickets, live chat transcripts, and email correspondence with the rs365 team
• Responses to surveys, feedback forms, or promotional queries

03 How Data Is Collected

rs365 collects your personal data through the following channels:

Collection Channel	Data Captured
Account Registration	Name, date of birth, email, mobile number, CNIC reference
KYC Verification	Identity document images, selfies, CNIC or passport scan
Deposit & Withdrawal	Payment method references, transaction amounts, timestamps
Platform Usage	Betting records, game history, session data, responsible gaming tool usage
Cookies & Tracking	IP address, device info, page navigation, session identifiers
Support & Communications	Chat transcripts, email content, dispute records
Third-Party KYC Partners	Identity verification results, PEP/sanctions screening outcomes

04 Purpose of Processing

rs365 processes your personal data for the following clearly defined purposes:

• Account Management: Creating and maintaining your player account, authenticating logins, and managing account settings.
• Identity Verification & KYC: Verifying your age (21+ requirement), confirming your identity, and meeting anti-money laundering (AML) obligations under our international gaming licence.
• Payment Processing: Facilitating deposits and withdrawals in PKR through JazzCash, EasyPaisa, bank transfers, and other supported methods.
• Gaming Services: Enabling cricket betting, live casino, slots, fishing games, and all other platform services.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, collusion, and money laundering.
• Responsible Gaming: Monitoring play patterns for indicators of problem gambling and facilitating the use of responsible gaming tools.
• Customer Support: Responding to your queries, processing complaints, and resolving disputes.
• Legal & Regulatory Compliance: Fulfilling obligations under our gaming licence, including reporting requirements and responding to lawful requests from regulatory authorities.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent.
• Platform Analytics: Improving the performance, functionality, and user experience of the rs365 platform using aggregated, anonymised usage data.

05 Legal Basis for Processing

rs365 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and rs365 — including account creation, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC mandates under our gaming licence, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for the legitimate business interests of rs365, including fraud prevention, platform security, and responsible gaming monitoring — provided such interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your explicit, informed, and freely given consent — this applies specifically to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Third Parties

rs365 does not sell, rent, or trade your personal data. We share data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK/IBFT network operators, HBL, UBL, and Meezan Bank — for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Partners: Third-party identity verification providers used to confirm your identity, age, and CNIC validity, and to conduct PEP (Politically Exposed Persons) and sanctions screening.
• Game Content Providers: Licensed game studios that supply the casino games, slots, fishing games, and live dealer content available on the rs365 platform. These providers may receive your session data to deliver their game services.
• Technology & Infrastructure Providers: Cloud hosting providers, cybersecurity partners, and platform technology vendors operating under strict data processing agreements with rs365.
• Regulatory & Legal Authorities: Gaming regulators, financial intelligence units, law enforcement agencies, and courts — where disclosure is required by applicable law, court order, or our gaming licence conditions.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by rs365, bound by professional confidentiality obligations.

All third parties with whom rs365 shares personal data are required to process it strictly in accordance with our instructions and applicable data protection standards. We do not permit third-party service providers to use your data for their own independent marketing or commercial purposes.

07 Data Retention

rs365 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your active account relationship with rs365 plus a period of up to 5 years following account closure, to meet AML regulatory record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later, in compliance with international AML standards.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Retained for 3 years from the date of the last communication unless required for longer retention in connection with an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for the duration of the consent plus 3 years as evidence of the consent decision.
• Technical & Usage Logs: Retained for up to 12 months in active systems; anonymised aggregate data may be retained indefinitely for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with rs365's data disposal procedures.

08 Data Security

rs365 takes data security seriously and has implemented a layered set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your browser or app and rs365 servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data fields stored in rs365 databases are encrypted at the field level using AES-256 encryption.
• Access Controls: Access to personal data systems is restricted on a strict need-to-know basis. All staff access is logged, reviewed, and subject to multi-factor authentication.
• Penetration Testing: rs365 engages independent cybersecurity specialists to conduct regular penetration testing of our platform and infrastructure.
• Incident Response: rs365 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights or freedoms, we will notify affected individuals and relevant authorities within the timeframes required by applicable regulations.

09 Cookies & Tracking Technologies

rs365 uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, remains secure, and delivers a consistent experience. The following types of cookies are used:

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, CSRF protection, load balancing	Session / 24 hours
Functional	Remembering your language preference, responsible gaming settings, and display preferences	Up to 12 months
Analytics	Aggregated, anonymised platform usage statistics used to improve rs365 performance and content	Up to 12 months
Security	Device fingerprinting for fraud detection and duplicate account identification	Up to 6 months

rs365 does not use third-party advertising cookies, retargeting pixels, or behavioural profiling technologies that track your activity beyond the rs365 platform. You may control cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to log in and use the platform.

10 Your Rights

As a registered rs365 player, you are entitled to the following rights in relation to your personal data:

• Right of Access: You may request a copy of all personal data rs365 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligations to retain certain data (e.g., AML records).
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, such as while the accuracy of your data is being verified.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will stop direct marketing upon receipt of any such objection.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request to prevent unauthorised access to another person's data.

11 Minors & Age Restriction

Parents and guardians who suspect that a minor has registered an rs365 account or submitted personal data to our platform should contact us immediately at [email protected]. We will investigate and act promptly upon any such notification.

12 International Data Transfers

rs365 operates under an international gaming licence and may utilise server infrastructure, technology providers, and service partners located outside Pakistan. As a result, your personal data may be transferred to and processed in jurisdictions other than Pakistan.

Where personal data is transferred internationally, rs365 ensures that adequate protections are in place, including contractual data processing agreements aligned with internationally recognised data protection standards. rs365 will not transfer your data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

13 Policy Amendments

rs365 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. Where changes are material, we will provide notice to registered players via email to the address on your account and/or via a prominent notice on the rs365 homepage.

The date of the most recent update appears at the top of this document. Continued use of the rs365 platform following notification of a material update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a concern about how rs365 has handled your personal data, please contact our Data Privacy team:

• Email: [email protected]
• Subject Line: "Privacy Enquiry" or "Data Rights Request"
• Response Time: We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a full response within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the independent dispute resolution body specified under our gaming licence, or to seek appropriate regulatory or legal recourse available in your jurisdiction.