r92 Privacy Policy – How We Handle Your Data in Pakistan

1 Who This Policy Applies To

This Privacy Policy applies to all individuals who access or use r92 at r92.onl — including visitors who browse the platform without registering and registered players who hold an active r92 account. It covers all sections of the platform: sports betting, live casino, slot games, fish games, the VIP programme, and all account management functions.

r92 is operated as an online gaming and sports betting platform serving Pakistani players. The data practices described in this policy are those of r92 as the data controller responsible for how personal information is collected and processed on this platform.

2 What Personal Data r92 Collects

r92 collects personal data through three main channels: information you provide directly during registration and account use, information generated automatically by your use of the platform, and information provided by third parties during identity verification and payment processing.

Information you provide directly:

• Full name as it appears on your CNIC or identity document
• Pakistani mobile number used for registration and account security
• Date of birth (for age verification purposes)
• Email address (if provided for account communication)
• Identity document details submitted during KYC verification (CNIC number, document images)
• Payment method details provided when making deposits or setting up withdrawal methods

Information collected automatically:

• Device type and browser information when you access r92
• IP address and approximate geographic location
• Session activity data — pages visited, features used, time spent on the platform
• Betting and gaming activity records including stake amounts, game selections, and results
• Login timestamps and account activity logs for security monitoring

Information from third parties:

• Payment confirmation references from JazzCash, Easypaisa, Raast, and banking partners
• Identity verification results from KYC processing services where used
• Fraud prevention signals from payment security providers

3 Why r92 Collects Personal Data

Every piece of personal data r92 collects serves a specific, necessary purpose. We do not collect information speculatively or for purposes beyond operating the platform and keeping it secure for Pakistani players.

r92 does not use your personal data for targeted advertising, third-party marketing, or profiling for commercial sale. Your data is used to operate your account and keep the platform working reliably and securely.

4 KYC Identity Verification

Know Your Customer (KYC) verification is a standard requirement for online platforms handling real-money transactions. On r92, KYC is required before your first withdrawal can be processed. It is a one-time process — once your identity is verified, future withdrawals proceed without repeated document submission.

During KYC, r92 may request:

• A clear image or scan of your CNIC (front and back) or passport
• A confirmation that your registered payment method — JazzCash wallet, Easypaisa account, bank account — belongs to you and matches the account name
• In some cases, a selfie or liveness check to confirm document ownership

KYC documents submitted to r92 are stored securely and used solely for identity verification and fraud prevention. They are not used for any marketing purpose and are not shared with unrelated third parties. Where r92 uses a third-party KYC verification service provider, that provider is contractually bound to handle your data only for verification purposes.

5 Payment Data and PKR Transactions

All financial transactions on r92 are conducted in PKR. When you make a deposit via JazzCash, Easypaisa, Raast, or bank transfer, the transaction is processed through the relevant payment provider's secure system. r92 receives a payment confirmation reference but does not store your full mobile wallet credentials, full bank account details, or full payment card numbers on its own servers.

r92 retains transaction records — deposit amounts, withdrawal amounts, dates, payment references, and PKR balances — as part of standard financial record-keeping. These records are necessary for:

• Resolving deposit or withdrawal queries from players
• Supporting fraud investigation and prevention
• KYC and compliance verification
• Accurate VIP cashback calculation

Withdrawal requests on r92 are processed only to verified payment methods associated with the account holder's confirmed identity. This requirement protects players from unauthorised withdrawals by third parties.

6 How r92 Shares Personal Data

r92 does not sell your personal data. Data sharing is limited to specific categories of service providers and is governed by confidentiality requirements.

r92 may share your data with:

• Payment processing providers: JazzCash, Easypaisa, Raast, and banking partners receive the transaction information necessary to process PKR deposits and withdrawals. These providers have their own privacy obligations and terms.
• KYC verification services: Where a third-party provider is used to process identity documents, your document data is shared with that provider solely for verification. r92 selects providers with appropriate data security standards.
• Fraud prevention services: IP data, device fingerprints, and session behaviour may be processed by fraud detection systems to identify and prevent account abuse.
• Platform infrastructure providers: Cloud hosting, content delivery, and database management services that underpin the r92 platform may process data as part of normal operations. These providers are bound by data processing agreements.

7 How r92 Protects Your Data

r92 applies a combination of technical and operational security measures to protect personal data:

• SSL/TLS encryption: All data transmitted between your device and r92 is encrypted in transit. Look for the secure padlock in your browser when accessing the platform.
• Access controls: Personal data is accessible only to r92 staff and systems with a legitimate operational need. Access logs are maintained.
• Secure storage: Data is stored on servers with industry-standard security configurations, regular security updates, and restricted physical and network access.
• Account security: Accounts are protected by passwords. r92 recommends using a strong, unique password for your r92 account and not reusing it across other platforms.
• Fraud monitoring: Automated systems monitor account activity for patterns associated with fraud, multi-accounting, and unauthorised access attempts.

No online platform can guarantee absolute security, but r92 takes all reasonable measures to protect player data from unauthorised access, loss, or disclosure. If you suspect your account has been accessed without your authorisation, contact r92 support immediately.

8 Cookies and Platform Tracking

r92 uses cookies — small data files stored on your device by your browser — to support the platform's core functionality. r92's cookie use is limited to operational and security purposes.

Cookies r92 uses:

• Session cookies: Keep you logged into your account while you navigate between pages on r92. These expire when you close your browser.
• Security cookies: Help identify and prevent fraudulent access attempts, CSRF attacks, and session hijacking.
• Preference cookies: Remember basic platform settings such as language or display preferences.
• Analytics cookies: Collect aggregated, anonymised data about how players use r92 — which pages are visited, which features are used most — to help improve the platform. This data is not linked to individual player identities.

r92 does not use cookies to track you across other websites or build advertising profiles. Third-party advertising cookies are not deployed on r92.

You can manage or disable cookies through your browser settings. Disabling session cookies will prevent you from staying logged in to r92, and some platform features may not work correctly without cookies enabled.

9 How Long r92 Retains Your Data

r92 retains personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by operational and compliance needs:

• Active account data: Retained for the duration of your active account on r92 plus a standard post-closure period.
• Transaction and financial records: PKR transaction history is retained for a minimum of several years following account closure for financial record-keeping and dispute resolution purposes.
• KYC documents: Retained for the period required for identity verification compliance. Documents are securely deleted once the retention period expires.
• Security and fraud investigation data: Retained for the period necessary to investigate and resolve any active or potential fraud or abuse cases.

When an account is voluntarily closed and the standard retention period has passed, personal data is deleted or anonymised from r92's systems. Anonymised data — where no individual can be identified — may be retained for statistical and platform improvement purposes indefinitely.

10 Your Data Rights

As a player on r92, you have the following rights regarding your personal data. To exercise any of these rights, contact r92 support via live chat or at [email protected]:

11 Children's Privacy

Age verification is a mandatory step during KYC, and r92 will void and close any account found to belong to someone under 18. If you are a parent or guardian and believe your child has created an r92 account, contact support immediately at [email protected]. Any data associated with an under-18 account will be deleted promptly upon confirmation of the player's age.

12 Changes to This Privacy Policy

r92 may update this Privacy Policy from time to time to reflect changes in data practices, platform features, or applicable requirements. When significant changes are made, r92 will notify active players through account dashboard notifications or email to the address on file.

The "Last updated" date at the top of this page reflects the most recent revision. We encourage Pakistani players to review this policy periodically to stay informed about how r92 handles their data.

Continued use of r92 following a policy update constitutes acceptance of the revised terms. If you disagree with an updated policy, you can close your account and request deletion of your data by contacting support.

13 Contact for Privacy Matters

For any privacy-related request — data access, correction, deletion, objection, or a general question about how r92 handles your personal information — you can reach r92 through the following channels:

• Live Chat: Available 24/7 through your r92 account — fastest response for account-specific queries
• Email: [email protected] — for formal data requests, account closure, or written privacy correspondence

Data access and deletion requests will be responded to within a reasonable timeframe, typically within 30 days of receipt. Complex requests involving large transaction histories may take longer, and r92 will communicate a timeline if that is the case.