rsvip Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") describes how rsvip ("rsvip", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the rsvip online gaming and sports betting platform at rsvip.pro ("Platform").

This Policy applies to all personal data processed in connection with your use of rsvip, including data collected during account registration, identity verification (KYC), payment processing, gaming activity, customer support interactions, and marketing communications.

This Policy should be read alongside rsvip's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By creating a rsvip account or using the Platform, you acknowledge that you have read and understood this Policy.

Data Controller

For the purposes of this Privacy Policy, rsvip is the data controller responsible for the personal data collected through the Platform. As data controller, rsvip determines the purposes and means by which your personal data is processed.

rsvip operates under an international gaming licence and complies with applicable data protection and privacy legislation in the jurisdictions in which it operates. Where rsvip engages third-party service providers to process data on its behalf, those providers act as data processors under binding contractual agreements that restrict their use of your data to the specific services they are engaged to provide.

If you have any questions about how rsvip handles your personal data, or wish to exercise any of your data rights, you may contact rsvip's support team. Contact details are provided in Section 16 of this Policy.

Data We Collect

rsvip collects the following categories of personal data in connection with the operation of the Platform:

rsvip does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is strictly required for identity document verification.

How We Collect Your Data

rsvip collects personal data through the following means:

• Directly from you — when you register a rsvip account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically — through cookies, server logs, and similar tracking technologies when you access or interact with the rsvip Platform. See Section 8 for full details on cookies.
• From third-party identity verification providers — rsvip works with licensed KYC and AML service providers who may cross-reference identity documents against official databases to confirm your identity and age.
• From payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 payment processors may transmit transaction confirmation data to rsvip as part of deposit and withdrawal processing.
• From fraud prevention services — rsvip uses third-party fraud detection tools that may flag unusual account activity by cross-referencing technical data against known fraud indicators.

Legal Basis for Processing

rsvip processes your personal data on the following legal bases:

• Contractual necessity — Processing is required to perform the contract between you and rsvip (i.e., to provide the Platform services, manage your account, process payments, and settle bets).
• Legal obligation — rsvip is subject to licensing conditions, anti-money laundering (AML) regulations, and responsible gaming obligations that require the collection and retention of specific personal data regardless of consent.
• Legitimate interests — rsvip processes certain technical and gaming activity data on the basis of its legitimate interest in preventing fraud, ensuring platform security, and improving the player experience — provided these interests are not overridden by your privacy rights.
• Consent — For optional marketing communications and non-essential cookies, rsvip relies on your freely given, specific, informed, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

How We Use Your Data

rsvip uses your personal data for the following specific purposes:

• To register and maintain your rsvip account, and to verify your identity and age in compliance with our licensing obligations;
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20;
• To provide access to rsvip's sportsbook (including PSL cricket betting and UFC wagering), live casino, slot games, Captain Fisher, Dice, and all other Platform products;
• To detect and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in the rsvip Terms & Conditions;
• To comply with rsvip's responsible gaming obligations — including administering deposit limits, self-exclusion requests, and reality check reminders;
• To respond to customer support queries and resolve disputes;
• To send transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts;
• To send marketing communications (where you have opted in) about rsvip bonuses, promotions, and new platform features;
• To conduct platform analytics and improve the rsvip user experience for Pakistani players;
• To fulfil regulatory reporting obligations to rsvip's licensing authority.

Data Sharing & Disclosure

rsvip does not sell your personal data. rsvip may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data processing obligations:

• KYC and identity verification providers — to confirm your identity, age, and the legitimacy of your identification documents as required by our licensing obligations;
• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processing services, solely to facilitate deposits and withdrawals;
• Game software providers — certain gaming activity data (such as session ID and bet records) may be shared with the licensed game providers who supply casino and sports betting products to the rsvip Platform, to the extent required for game operation and fairness auditing;
• Fraud prevention and AML services — rsvip shares relevant technical and transaction data with licensed fraud detection and anti-money laundering compliance services;
• Regulatory and licensing authorities — rsvip is obligated to provide player data to its licensing authority and relevant law enforcement agencies where required by applicable law or official order;
• Legal and professional advisors — rsvip may share data with its legal counsel, auditors, or insurers where strictly necessary for the conduct of legal proceedings or professional advisory services.

In all cases where rsvip shares data with third-party processors, those processors are bound by written data processing agreements that prohibit them from using your data for any purpose other than the specific service they are contracted to provide.

Cookies & Tracking Technologies

rsvip uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help rsvip remember your preferences, maintain your session, and understand how the Platform is used.

rsvip uses the following categories of cookies:

• Strictly necessary cookies — Required for the Platform to function. These include session authentication cookies, load-balancing cookies, and security cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies — Remember your preferences such as language settings, preferred payment method, and display configurations to improve your rsvip experience.
• Analytics cookies — Help rsvip understand how Pakistani players use the Platform — which pages are most visited, where players encounter difficulty, and how sessions flow. This data is aggregated and anonymised where possible.
• Marketing cookies — Used only where you have consented, to track which rsvip promotional offers you have seen and interacted with, and to avoid serving repetitive promotions.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the rsvip Platform. Disabling analytics or marketing cookies will not affect your ability to bet, play, deposit, or withdraw.

Data Retention

rsvip retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or licensing conditions.

• Account and KYC data — Retained for a minimum of 5 years following permanent account closure, in accordance with anti-money laundering regulations applicable under rsvip's gaming licence.
• Transaction records — Deposit, withdrawal, and betting records are retained for a minimum of 5 years following the transaction date.
• Customer support communications — Retained for 3 years from the date of the most recent interaction.
• Marketing consent records — Retained for as long as the consent is active plus 3 years after withdrawal of consent, to demonstrate compliance.
• Technical and session logs — Retained for up to 24 months for fraud detection and platform security purposes.

Upon expiry of the applicable retention period, rsvip will securely delete or irreversibly anonymise the relevant data. Anonymised data may be retained indefinitely for aggregate analytics purposes, as it no longer constitutes personal data.

Data Security

rsvip implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and rsvip's servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial data;
• Role-based access controls ensuring that rsvip staff can only access personal data strictly required for their job function;
• Two-factor authentication (2FA) requirements for all rsvip staff who access production systems containing player data;
• Regular security vulnerability assessments and penetration testing of the rsvip Platform;
• Incident response procedures to detect, assess, and respond to personal data breaches in a timely manner.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rsvip will notify affected players without undue delay and in accordance with its obligations under applicable data protection law.

Your Data Rights

Subject to applicable law and certain limitations, rsvip players have the following rights in relation to their personal data:

• Right of access — You may request a copy of the personal data rsvip holds about you. rsvip will provide this within 30 calendar days of a verified request.
• Right to rectification — You may request correction of inaccurate or incomplete personal data held by rsvip. Certain data (such as your registered name and date of birth) may require supporting documentation before it can be amended.
• Right to erasure — You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to rsvip's legal retention obligations — data required by AML regulations and gaming licence conditions cannot be deleted on request.
• Right to restriction of processing — You may request that rsvip restricts processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability — Where processing is based on consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to rsvip.
• Right to object — You may object to processing based on legitimate interests or to direct marketing at any time. rsvip will cease processing for direct marketing purposes immediately upon receipt of a valid objection.
• Right to withdraw consent — Where rsvip relies on consent as the legal basis for processing (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the rights listed above, please contact rsvip's support team via live chat or email (contact details in Section 16). rsvip will require verification of your identity before processing any data rights request to protect against unauthorised access to your personal data.

Children & Minors

The rsvip Platform is strictly intended for adults aged 21 years and above. rsvip does not knowingly collect, process, or retain personal data relating to any individual under the age of 21.

rsvip employs automated age-screening checks during registration and manual KYC document verification prior to processing the first withdrawal from any account. Where rsvip discovers that an account has been registered by a person under 21 years of age, that account will be immediately closed, all funds will be returned, and all winnings will be voided.

Marketing Communications

rsvip may wish to contact you with information about new games, PSL season promotions, welcome bonuses, reload offers, and other rsvip promotional activity. rsvip will only send you marketing communications if you have explicitly opted in during registration or subsequently through your account settings.

Marketing communications from rsvip may be delivered by:

• Email to your registered address;
• SMS to your registered mobile number;
• In-platform notifications within the rsvip Platform.

You may opt out of marketing communications at any time by updating your notification preferences in your rsvip account settings, or by contacting rsvip support and requesting removal from marketing lists. Opting out of marketing will not affect transactional communications such as deposit confirmations, withdrawal updates, or account security alerts, which are necessary for the operation of your account.

International Data Transfers

rsvip operates under an international gaming licence and uses service providers — including KYC verification platforms, game software providers, and cloud infrastructure services — that may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where such international transfers occur, rsvip ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include:

• Standard contractual clauses incorporated into data processing agreements with third-party providers;
• Transfers to recipients in jurisdictions recognised as providing an adequate level of data protection;
• Binding corporate rules where applicable.

You may request further information about the specific safeguards in place for any international transfer by contacting rsvip support.

Policy Updates

rsvip may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, business practices, or the services offered on the Platform. The "Effective Date" at the top of this page indicates when the current version took effect.

Where updates to this Policy are material — meaning they significantly affect how rsvip processes your data or alter your rights — rsvip will provide advance notice via email to your registered address and/or a prominent notice on the rsvip Platform, at least 14 days before the changes take effect.

We encourage you to review this Policy periodically. Your continued use of the rsvip Platform following a Policy update constitutes your acknowledgement of the revised terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or rsvip's data handling practices, please contact our support team through the following channels:

• Live Chat: Available 24/7 within the rsvip Platform — average response time under 2 minutes.
• Email: [email protected] (this is plain text — not a clickable link). Responses are provided within 4–12 hours.

When submitting a data rights request, please include your registered rsvip username, a description of your request, and any information that may help rsvip verify your identity. rsvip will not process data rights requests from unverified individuals to protect against unauthorised data access.

If you are not satisfied with rsvip's response to your privacy concern, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to the dispute resolution body designated by rsvip's gaming licensing authority.