rich888 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") is issued by rich888 ("rich888", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal information submitted by users ("you", "your") when accessing or using the rich888 website located at https://rich888.vin and any associated mobile interfaces, games, or services (collectively, the "Platform").

rich888 is an internationally licensed online gaming platform serving players in Pakistan. We understand that the decision to share personal information with any online service requires trust, and we take that trust seriously. This Policy is written in plain English — not buried in legalese — so that every Pakistani user can understand exactly what happens to their data.

By registering an account, making a deposit, or using any feature of the rich888 Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to have your account closed and your data handled in accordance with Section 9 below.

rich888 collects the minimum personal information necessary to operate the Platform, verify user identity, process financial transactions, and comply with our international gaming license obligations. We do not collect data that serves no operational or legal purpose.

The categories of personal data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by law or our licensing authority and communicated to you at the point of collection.

rich888 processes your personal data only for clearly defined, legitimate purposes. The following table summarises each processing activity and the reason behind it:

• Account Management: Creating and maintaining your rich888 user account, processing logins, managing account settings and preferences, and restoring access when credentials are lost.
• Identity Verification (KYC): Confirming that you are who you say you are, that you are at least 21 years of age, and that your account information is accurate — as required by our gaming license and anti-money-laundering obligations.
• Payment Processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported methods. We need financial data to execute transactions and reconcile your balance.
• Platform Security and Fraud Prevention: Monitoring for unusual account activity, detecting multi-accounting, preventing bonus abuse, and protecting rich888 users from unauthorised access.
• Responsible Gaming Compliance: Monitoring usage patterns to identify potential problem gaming behaviour and applying self-exclusion, deposit limits, and cooling-off tools where needed.
• Customer Support: Responding to your queries, resolving disputes, and maintaining a record of communications to ensure consistent support quality.
• Legal and Regulatory Compliance: Meeting the reporting and record-keeping obligations of our international gaming license and applicable financial regulations.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, interface design, and service performance — never at the individual identifiable level without consent.
• Communications: Sending you transactional notifications (deposit confirmations, withdrawal receipts, security alerts) and, where you have opted in, promotional content about rich888 bonuses and new game launches.

rich888 processes personal data on one or more of the following recognised legal bases:

• Contractual Necessity: Processing required to perform the contract between you and rich888 — i.e., operating your account, processing bets, and handling withdrawals.
• Legal Obligation: Processing required to comply with anti-money-laundering regulations, age verification requirements, gaming license conditions, and any applicable financial reporting obligations.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your privacy rights.
• Consent: Where you have given clear, freely-given consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

rich888 does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances, and only to the minimum extent required:

• Payment Processors: Your financial data is shared with payment service providers (such as JazzCash, EasyPaisa, and bank partners) solely to process your requested transactions. These providers operate under their own privacy policies and are bound by financial sector data protection obligations.
• Identity Verification Services: To fulfil our KYC and age-verification obligations under our gaming license, we may share identity documents with licensed verification service providers. These providers are contractually prohibited from using your data for any other purpose.
• Gaming Platform Partners: Game content on rich888 is provided by third-party studios. Aggregated, non-identifiable gameplay data may be shared with these partners for performance reporting. No personally identifiable information is transmitted.
• Regulatory and Legal Authorities: rich888 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when legally compelled to do so — for example, in response to a lawful court order or a regulatory investigation. We will, where legally permissible, notify affected users of such disclosures.
• Corporate Transactions: In the event of a merger, acquisition, or sale of business assets, user data may be transferred to the acquiring entity. You will be notified of any such transfer and any material changes to the way your data is processed.

rich888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

• Active account data is retained for the lifetime of your rich888 account plus a minimum of five (5) years following account closure, as required by anti-money-laundering and gaming license obligations.
• Financial transaction records are retained for a minimum of seven (7) years in line with financial record-keeping standards applicable to licensed gaming operators.
• Support communications are retained for three (3) years from the date of the last correspondence.
• Technical and usage data (logs, IP records, session data) is retained for twelve (12) months before being anonymised or deleted.
• Marketing consent records are retained for the duration of your opt-in status plus three (3) years thereafter as evidence of consent.

When the applicable retention period expires, rich888 will securely delete or anonymise your data so that it can no longer be associated with you as an individual.

rich888 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• TLS/SSL Encryption: All data transmitted between your device and the rich888 Platform is encrypted using Transport Layer Security (TLS) with a minimum of 128-bit encryption.
• Encrypted Data Storage: Sensitive data — including financial details and identity documents — is stored in encrypted databases with access restricted to authorised personnel only.
• Access Controls: rich888 staff operate on a strict need-to-know basis. Internal access to user data is role-restricted and logged for audit purposes.
• Two-Factor Authentication: rich888 strongly recommends enabling two-factor authentication (2FA) on your account, adding an additional layer of protection beyond your password.
• Regular Security Audits: The Platform undergoes periodic security assessments and penetration testing conducted by independent cybersecurity specialists.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, rich888 will notify affected users as soon as practicable and take immediate steps to contain and remediate the breach.

rich888 uses cookies and similar technologies to provide a functional, personalised, and secure experience on the Platform. A cookie is a small text file stored on your device when you visit a website.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit, shopping cart equivalents for your betslip, and security tokens. You cannot opt out of these without disabling the Platform entirely.
• Functional Cookies: Remember your preferences — such as your chosen language, preferred deposit method, and display settings — so you don't have to re-enter them on every visit to rich888.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform so we can improve navigation, page performance, and game loading times. No individual user is identifiable from this data.
• Security Cookies: Used to detect and prevent fraudulent activity, multi-account behaviour, and bot-driven access attempts on the rich888 Platform.

rich888 does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies on this Platform. You can manage or delete cookies at any time through your browser settings. Note that disabling functional cookies may affect your experience on the Platform.

As a rich888 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at the details provided in Section 13. We will respond within 30 days of receiving a valid request.

The rich888 Platform is strictly intended for users who are 21 years of age or older. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the rich888 registration process, and accounts that fail to pass age verification will be suspended pending review.

If rich888 becomes aware that personal data has been collected from a person under 21 years of age without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on rich888, please notify us immediately at the contact address in Section 13 so we can investigate and act promptly.

As an internationally licensed gaming platform, rich888 may process and store your personal data on servers located outside Pakistan. Where such transfers occur, rich888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or greater than the protections applicable within Pakistan.

Safeguards used for international transfers include:

• Contractual data processing agreements with all third-party processors that impose binding data protection obligations.
• Transfer of data only to jurisdictions or service providers that maintain adequate data protection standards as assessed by rich888's compliance team.
• Data minimisation — only the minimum personal data required for a specific processing purpose is transferred to any external party or jurisdiction.

rich888 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our services, new legal or regulatory requirements, or improvements to how we explain our data practices to users across Pakistan.

When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the rich888 Platform for a reasonable period following the change.
• Where the change significantly affects how your data is processed, send a direct notification to the email address registered on your rich888 account.

Your continued use of the rich888 Platform after any updated Privacy Policy is posted constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Platform and request account closure in accordance with Section 9.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rich888 handles your personal data, please contact our Data Protection team using the details below. We aim to acknowledge all privacy-related enquiries within 3 business days and resolve them within 30 days.

Please include your registered rich888 username or email address in any privacy request so we can locate your account and process your request accurately. For security purposes, we may ask you to verify your identity before actioning certain requests such as data access or erasure.