r798 Privacy Policy

This Privacy Policy describes how r798 ("r798", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Member", "User") who access or use the r798 platform at r798.app and any associated digital services, applications, or communications channels operated by r798.

r798 is the data controller in respect of personal data collected through the r798 Platform. As data controller, r798 determines the purposes for which personal data is processed and the manner in which it is processed, and is responsible for ensuring that such processing complies with applicable data protection laws and r798's obligations under its international gaming licence.

r798 serves players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, Peshawar, and cities and towns throughout the country. We recognise that players in Pakistan place significant trust in us when they share their personal information, and we take that trust very seriously.

r798 collects personal data in the following categories. We collect only the data that is reasonably necessary for the purposes described in Section 4 of this Policy.

r798 collects personal data through the following channels and methods:

• Direct collection at registration: When you create your r798 account, you provide identity and contact data directly through the registration form.
• KYC submission: When you submit identity documents for age and identity verification, you provide verification data directly to r798 or to our contracted KYC verification partner.
• Deposits and withdrawals: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, transaction and financial data is captured through the payment processing flow.
• Platform activity (automated): Technical data and gaming data are collected automatically as you navigate and play on r798. This includes session data, IP addresses, device identifiers, and in-game activity logs.
• Cookies and similar technologies: r798 uses cookies and local storage to maintain your session, remember preferences, and gather analytics data. See Section 5 for full cookie details.
• Customer support interactions: When you contact r798 via live chat, email, or any other support channel, the content of those communications is recorded and stored as communication data.
• Responsible gaming tools: If you activate deposit limits, cool-off periods, or self-exclusion, that election and its parameters are recorded as responsible gaming data.

r798 processes your personal data for the following purposes, each supported by a lawful basis for processing:

r798 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how members use the site. A cookie is a small text file stored by your browser on your device when you visit r798.app.

r798 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the r798 platform to function. These include session authentication cookies that keep you logged into your r798 account during your visit. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences such as language settings and remember-me selections to improve your experience on subsequent r798 visits.
• Analytics Cookies: Used by r798 to understand aggregated usage patterns — which features members use, how long sessions last, common navigation paths. Data is processed in anonymised or aggregated form where possible.
• Security Cookies: Help r798 detect and prevent fraudulent login attempts, session hijacking, and other malicious activity. These are part of r798's account security infrastructure.

r798 does not sell, rent, or trade your personal data. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Processors: r798 shares necessary financial and identity data with payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to process your deposits and withdrawals in PKR. These partners act as data processors under contractual terms that prohibit them from using your data for their own commercial purposes.
• KYC & Identity Verification Partners: To comply with our licensing obligations, r798 uses contracted identity verification service providers to check that members meet the 21+ age requirement and to verify identity documents. These partners process data only on r798's instructions.
• Game Providers: When you play games on r798, limited technical data (such as a player session token and stake/result data) is exchanged with the game studio in real time to operate the game. Game providers do not receive your name, email, or payment details.
• Regulatory & Licensing Authorities: r798 may be required to disclose personal data to its licensing authority, gaming regulators, or other authorised government bodies as required by applicable law or the conditions of r798's international gaming licence.
• Law Enforcement & Legal Process: r798 will disclose personal data where required to do so by a valid court order, legal subpoena, or binding request from a law enforcement authority with jurisdiction over r798.
• Anti-Fraud & AML Networks: r798 may share data with industry anti-fraud and anti-money laundering networks where required by its licensing obligations or where r798 has reasonable grounds to suspect fraudulent or criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of r798's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. Members will be notified of any such transfer.

r798 operates under an international gaming licence and its infrastructure, service providers, and data processors may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you reside.

Where r798 transfers personal data internationally, it takes appropriate steps to ensure that adequate protections are in place, including:

• Entering into data processing agreements with third-party recipients that impose obligations equivalent to the protections set out in this Privacy Policy;
• Transferring data only to jurisdictions that provide an adequate level of data protection, or implementing supplementary safeguards where required;
• Ensuring that third-party data processors in other jurisdictions are bound by contractual obligations that restrict the use of your data to the specified purpose only.

r798 retains your personal data only for as long as is necessary for the purposes described in this Policy, or for as long as is required by applicable law and r798's licensing obligations. The following retention guidelines apply:

Where data is retained solely to satisfy regulatory or legal obligations, it will not be used for any other purpose during the retention period. Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.

As an r798 member, you have the following rights in respect of the personal data r798 holds about you. These rights may be subject to certain conditions and exemptions under applicable law, particularly where data is retained to comply with legal obligations.

r798 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS Encryption: All data in transit between your device and r798's servers is encrypted using industry-standard SSL/TLS protocols;
• Encryption at Rest: Sensitive personal and financial data stored on r798's servers is encrypted at rest using AES-256 or equivalent standards;
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls, audit logging, and multi-factor authentication for all staff systems;
• Two-Factor Authentication (2FA): r798 offers 2FA for member accounts to provide an additional layer of protection beyond passwords;
• Penetration Testing: r798's systems undergo regular independent security testing to identify and remediate vulnerabilities before they can be exploited;
• Fraud Detection Systems: Automated fraud detection monitors transactions, logins, and gameplay for anomalous patterns indicative of account takeover or fraudulent activity;
• Data Breach Response: r798 maintains a documented data breach response procedure. In the event of a breach that poses a risk to members, affected individuals will be notified without undue delay in accordance with applicable regulatory requirements.

r798 uses age verification tools during registration and KYC to confirm that members meet the minimum age requirement. Providing a false date of birth to circumvent age verification is a material breach of the r798 Terms & Conditions and may constitute a criminal offence under applicable law.

If r798 becomes aware that personal data has been collected from an individual under the age of 21 without verifiable consent from a parent or guardian, r798 will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child may have created an r798 account, please contact r798 support immediately.

r798 processes responsible gaming data — including deposit limits, cool-off periods, self-exclusion elections, and gaming activity patterns — for the purpose of promoting safe and responsible gaming among r798 members.

This data is used to:

• Enforce responsible gaming restrictions set by members, such as deposit limits and self-exclusions, which cannot be overridden without satisfying the required cooling-off period;
• Monitor gaming behaviour for indicators of problem gambling, which may trigger outreach from r798's responsible gaming support team;
• Fulfil r798's obligations under its international gaming licence to implement and maintain player protection mechanisms;
• Prevent circumvention of self-exclusion or account restrictions by members attempting to open duplicate accounts.

For more information about responsible gaming tools and support resources available to r798 members, visit our Responsible Gaming page.

r798 reviews this Privacy Policy periodically and may update it to reflect changes in our practices, the services we offer, applicable law, or our regulatory obligations. The effective date at the top of this page indicates when the current version came into force.

Where r798 makes material changes to this Privacy Policy — changes that significantly affect how we use your personal data — we will notify registered members via the email address on file at least 14 days before the changes take effect, where reasonably practicable.

Your continued use of the r798 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how r798 protects your data.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a concern about how r798 has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the r798 Platform — responses in under 90 seconds, in English and Urdu. Use subject "Privacy Query" for fastest routing to the right team.
• Email: [email protected] — Please use "Privacy Policy Query" or "Data Rights Request" in the subject line. r798 responds to privacy emails within 2 business hours during business hours.

Complaints Process: If you are dissatisfied with r798's response to a privacy complaint or a rights request, you may escalate the complaint to the data protection supervisory authority applicable under r798's licensing jurisdiction. Contact r798 support for information about the applicable supervisory authority and how to reach them.

Response Timeframes: r798 will acknowledge all privacy-related contacts within 24 hours and will provide a substantive response to rights requests within 30 calendar days of receiving the request. Complex requests may take longer, in which case r798 will notify you of the extended timeframe.

r798 • r798.app • Privacy Policy last updated 1 January 2026. © 2026 r798. All rights reserved.