rsvip Privacy
Policy

rsvip is an internationally licensed online gaming platform operating at rsvip.bet. rsvip offers cricket betting, live casino, slot games, instant games, and the exclusive Tower game format to players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, and all other cities — as well as to eligible players internationally.

For the purposes of this Privacy Policy, rsvip acts as the data controller in respect of the personal data you provide when registering an Account, depositing or withdrawing funds, placing bets, or otherwise interacting with our platform. As data controller, rsvip is responsible for determining the purposes and means by which your personal data is processed.

All data processing activities carried out by rsvip are governed by the applicable data protection requirements under our international gaming licence and the principles set out in this Privacy Policy. If you have any questions about rsvip's role as data controller, please contact us at [email protected].

rsvip collects personal data from you in three main ways: information you provide directly, information generated through your use of the platform, and information received from third-party service providers. The categories of personal data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name as it appears on your CNIC or other accepted identity document
• Date of birth (used solely to verify you meet the 21+ age requirement)
• CNIC number or other national identification number
• Residential address
• Email address
• Pakistani mobile number
• Username and encrypted password

2.2 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method details including JazzCash wallet IDs, EasyPaisa mobile numbers, HBL/UBL/Meezan Bank account references, Raast IDs, and 1LINK transaction references
• Transaction history, including bet stakes, game results, and bonus credit usage
• Account balance history in PKR

2.3 KYC Verification Data

• Copies of identity documents submitted during KYC (e.g., CNIC scan or photograph)
• Proof of address documents
• Selfie or liveness check image where required by our verification partner
• KYC verification status and decision records

2.4 Usage & Technical Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Session start and end times, pages visited, and features used
• Game play history including game names, bet amounts, and outcomes
• Responsibe gaming tool usage (e.g., deposit limit settings, cooling-off activations)

2.5 Communications Data

• Contents of support tickets, live chat messages, and emails you send to rsvip
• Records of promotional communications sent to you and your interaction with them
• Complaint and dispute records

rsvip processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first notifying you and, where required, obtaining your consent.

rsvip will never use your personal data to make fully automated decisions that produce legal or similarly significant effects on your Account without human review — for example, any decision to permanently close your Account based on fraud detection is reviewed by a member of the rsvip compliance team before action is taken.

rsvip processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your Account, process transactions, and deliver gaming services. Without this processing, rsvip cannot provide its services to you.
• Legal obligation: Processing required to comply with legal and regulatory obligations under our international gaming licence, including KYC verification, anti-money laundering record-keeping, and responsible gaming monitoring.
• Legitimate interests: Processing necessary for rsvip's legitimate interests, including fraud prevention, platform security, and aggregate analytics — where those interests are not overridden by your rights and interests.
• Consent: Where rsvip sends you marketing communications or promotional offers, this is done on the basis of your explicit consent, which you may withdraw at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

rsvip does not sell, rent, or trade your personal data with any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for each purpose:

5.1 KYC & Identity Verification Partners. rsvip uses a third-party KYC verification service to process CNIC documents and liveness checks. This partner receives only the identity and document data necessary to perform the verification and is contractually prohibited from using that data for any other purpose.

5.2 Payment Processors. To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and Cash OTC channels, rsvip shares necessary transaction data with the relevant payment service provider. Each provider processes this data under their own privacy terms and applicable financial regulations.

5.3 Fraud Prevention & Security Services. rsvip uses fraud detection and security services that may process IP addresses, device fingerprints, and transaction patterns to identify suspicious activity. These providers act as data processors under rsvip's instruction and are bound by data processing agreements.

5.4 Regulatory & Licensing Authorities. rsvip may be required to disclose player data to its international licensing authority, financial intelligence units, or law enforcement bodies in response to lawful requests. rsvip will comply with such requests to the extent required by law and will notify affected players where legally permitted to do so.

5.5 Business Transfers. In the event of a merger, acquisition, or sale of all or part of rsvip's business, player data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and the privacy practices of the receiving entity before the transfer takes effect.

5.6 With Your Consent. rsvip will share your personal data with any other third party only where you have given explicit, informed consent for that specific sharing. You may withdraw such consent at any time.

rsvip uses cookies and similar technologies (such as local storage and session tokens) to operate the platform and improve your experience. Below is a summary of the types of cookies rsvip uses:

rsvip does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies. You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your rsvip Account.

rsvip retains your personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, taking into account our legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account data: Retained for the full duration of your Account registration plus a minimum of 5 years after Account closure.
• KYC documents: Retained for a minimum of 5 years from the date of verification, in accordance with anti-money laundering regulations applicable under our international licence.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, for AML compliance and dispute resolution purposes.
• Support and communications records: Retained for a minimum of 2 years from the date of the last communication.
• Marketing consent records: Retained for as long as you remain a registered player, or until consent is withdrawn, whichever is sooner.
• Anonymised analytics data: May be retained indefinitely as it can no longer be linked to any individual player.

When retention periods expire, personal data is securely deleted from rsvip's active systems or irreversibly anonymised. Backup copies are purged in line with rsvip's routine backup rotation schedule.

rsvip implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and rsvip.bet;
• Encryption of sensitive data fields (including CNIC numbers and payment method references) in our databases;
• Role-based access controls ensuring that rsvip staff can only access player data relevant to their specific job function;
• Regular security assessments and penetration testing of the rsvip platform infrastructure;
• Two-factor authentication requirements for all rsvip administrative systems;
• Incident response procedures for detecting, reporting, and addressing personal data breaches promptly.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rsvip will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. Breach notifications will be sent to the email address registered on your Account.

As a player whose personal data is processed by rsvip, you have the following rights in relation to that data. To exercise any of these rights, please contact [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of Access: You have the right to request a copy of the personal data rsvip holds about you (a "subject access request"). rsvip will respond within 30 days of receiving a valid request.
• Right to Rectification: If any personal data rsvip holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic Account details directly through your Account dashboard.
• Right to Erasure: In certain circumstances, you have the right to request that rsvip delete the personal data it holds about you. This right is subject to rsvip's legal obligations — for example, we cannot erase transaction records we are required to retain under AML regulations.
• Right to Restriction: You may request that rsvip restrict the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data while rsvip investigates.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to rsvip processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Objections to marketing will be processed immediately; other objections will be assessed within 30 days.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

rsvip aims to resolve all data rights requests within 30 calendar days. Where a request is complex or voluminous, this period may be extended by up to a further 60 days, in which case rsvip will notify you of the extension and the reason for it within the initial 30-day period.

rsvip's services are strictly intended for individuals who are 21 years of age or older. rsvip does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the rsvip registration and KYC process, and rsvip will not permit any player to deposit, wager, or withdraw funds until their age has been verified as meeting the 21+ minimum requirement.

If rsvip discovers or has reasonable grounds to believe that a registered player is under 21 years of age, the Account will be immediately suspended, any funds held in the Account will be frozen pending investigation, and the matter will be handled in accordance with rsvip's underage gambling prevention procedures under our licence obligations.

If you are a parent or guardian and believe that a person under 21 in your household has created an rsvip Account without your knowledge, please contact us immediately at [email protected] so that we can take prompt action. rsvip recommends that parents and guardians use parental control software on shared devices to prevent minors from accessing online gaming platforms.

rsvip operates under an international gaming licence and, as a result, your personal data may be processed in countries outside Pakistan. Specifically, our KYC verification partner, fraud prevention service providers, and certain platform infrastructure components may process data in jurisdictions other than Pakistan.

Where personal data is transferred internationally, rsvip ensures that appropriate safeguards are in place to protect the data in a manner consistent with the protections described in this Privacy Policy. These safeguards include:

• Contractual clauses in data processing agreements with all international service providers requiring them to maintain data protection standards equivalent to those applied by rsvip;
• Restrictions on sub-processing — service providers may not engage further sub-processors without rsvip's prior written consent;
• Regular assessment of the data protection practices of key international service providers.

If you would like further information about the safeguards in place for specific international data transfers, please contact [email protected].

rsvip reserves the right to update or amend this Privacy Policy at any time. Material changes — that is, changes that significantly affect how we use your data or your rights in relation to that data — will be communicated to registered players via email to the address on their Account, or via a prominent notice on rsvip.bet, at least 7 days before the changes take effect.

Non-material changes (such as clarifications of existing practices, corrections of typographical errors, or updates to contact information) may be made without prior notice but will always be reflected in the "Effective Date" shown at the top of this page.

Your continued use of rsvip's services following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the changes, you must stop using rsvip's services and submit an Account closure request as described in rsvip's Terms & Conditions.

The current version of this Privacy Policy is always available at rsvip.bet/privacy-policy. We recommend that you review this page periodically to stay informed of how rsvip is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to rsvip's handling of your personal data, please contact our support team using the details below. All privacy-related communications should be sent in English for efficient processing.

For responsible gaming support, Account restrictions, or self-exclusion requests, please visit our Responsible Gaming page. For general Account and gaming queries, our 24/7 support team is available at [email protected].