Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how rsvip ("rsvip", "we", "us", "our") collects, uses, stores, shares and protects personal data relating to individuals ("User", "you", "your") who access or use the rsvip platform at rsvip.cam ("Platform"), including its associated mobile interface, betting services and casino gaming features.

rsvip is an online sports betting and casino gaming information platform targeting the Pakistan market. All Platform content is presented in English for Pakistani players. This Policy is written in English and forms part of our agreement with you alongside the Terms & Conditions.

By accessing the Platform, creating an account or interacting with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

rsvip does not represent that this Policy satisfies any specific requirement of Pakistani data protection law. Applicable privacy legislation in your jurisdiction may confer additional rights. This document is not legal advice.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial information and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure and destruction.
• "Data Controller" means rsvip, which determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of rsvip under a data processing agreement.
• "KYC" means Know Your Customer — the identity and address verification process required by applicable compliance obligations.
• "AML" means Anti-Money Laundering — legal obligations requiring rsvip to monitor, detect and report suspicious financial activity.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement by a User to the processing of their Personal Data for a stated purpose.
• "Cookie" means a small text file placed on a User's device by the Platform to enable certain features and collect usage data.

3. Data We Collect

3.1 Data You Provide Directly

When you register an account, verify your identity or contact support, rsvip collects Personal Data that you actively provide, including:

• Full legal name, date of birth and residential address (including city — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or other).
• Email address and contact phone number.
• Government-issued identity documents submitted for KYC purposes (e.g., CNIC, passport, driving licence).
• Payment method details, including account numbers or wallet references associated with services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — collected for transaction processing only, not to imply endorsement by those providers.
• Communications you send to our support team via email or live chat.
• Responsible gambling preferences — such as deposit limit settings or self-exclusion requests — where you elect to use those tools.

3.2 Data Generated by Your Use of the Platform

When you use the Platform, rsvip automatically collects certain technical and behavioural data, including:

• Device information: device type, operating system, browser type and version, screen resolution.
• Network information: IP address, approximate geolocation (country and city level), internet service provider.
• Session data: login timestamps, session duration, pages visited, features accessed.
• Betting and gaming activity: markets bet on (cricket, PSL, ICC tournaments, football, UFC, slots, live dealer, etc.), stake amounts, wager outcomes and bonus usage.
• Cookie and tracking data as described in Section 9 below.

3.3 Data From Third Parties

rsvip may receive Personal Data about you from third-party sources, including KYC verification providers, fraud-prevention databases, payment processors and, where applicable, responsible gambling self-exclusion registries. This data is used solely to fulfil our compliance obligations and to protect the integrity of the Platform.

4. Legal Basis for Processing

rsvip processes Personal Data on the following legal bases, depending on the purpose:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract
Identity verification (KYC) and age checks	Legal obligation; performance of contract
Processing deposits and withdrawals	Performance of contract
Fraud prevention and AML monitoring	Legal obligation; legitimate interests
Customer support and dispute resolution	Performance of contract; legitimate interests
Platform security and abuse prevention	Legitimate interests
Responsible gambling tool management	Legal obligation; performance of contract
Marketing communications	Consent (withdrawable at any time)
Analytics and platform improvement	Legitimate interests; consent (for non-essential cookies)

5. Data Processing

5.1 Account Management

Personal Data collected at registration is used to create and maintain your account, verify your identity and age, process your transactions, and provide you with access to the Platform's features. This data is essential to our contractual relationship with you — without it, we cannot provide the service.

5.2 Compliance Processing

rsvip is subject to legal obligations relating to KYC, AML and responsible gambling. Processing for these purposes may include screening your identity against sanctions lists, monitoring your transaction patterns for indicators of money laundering or match-fixing, and enforcing self-exclusion or limit restrictions you have applied to your account. Compliance processing may result in your account being flagged, suspended or referred to relevant authorities where required by applicable law.

5.3 Marketing Communications

Where you have provided explicit consent, rsvip may send you promotional communications about offers, new sports markets (such as upcoming PSL fixtures or ICC T20 events), casino game launches and platform updates. You may withdraw this consent at any time by updating your account notification preferences or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

5.4 Automated Decision-Making

rsvip uses automated systems for fraud detection, AML monitoring and responsible gambling limit enforcement. These systems may make decisions that affect your account — for example, automatically suspending a transaction that matches a fraud pattern. Where such automated decisions produce significant effects, you have the right to request human review. Contact our support team to exercise this right.

6. Data Sharing and Disclosure

rsvip does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following circumstances:

• KYC and Identity Verification Providers: We share identity documents and personal details with specialist third-party providers to complete age and identity verification.
• Payment Processors: Transaction data is shared with payment service providers to process deposits and withdrawals. Payment references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual — those providers process transactions under their own terms and privacy policies.
• Fraud Prevention and AML Services: We share data with specialist providers and databases to detect, prevent and investigate fraud, money laundering and other financial crime.
• Technology and Infrastructure Providers: We share data with cloud hosting, analytics and security providers that support the operation of the Platform, all under data processing agreements that restrict their use of your data.
• Regulatory and Law Enforcement Authorities: We disclose Personal Data to competent authorities where legally required to do so — for example, in response to a valid court order, regulatory investigation or AML reporting obligation.
• Business Transfers: In the event of a merger, acquisition or sale of rsvip's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. International Data Transfers

rsvip operates in an international environment and your Personal Data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, rsvip takes steps to ensure that appropriate safeguards are in place — including contractual protections with data processors — to maintain a standard of protection consistent with the purposes described in this Policy. International transfers for KYC and AML purposes may be required to fulfil legal obligations in the operator's licensing jurisdiction.

8. Data Retention

rsvip retains Personal Data for as long as necessary to fulfil the purposes set out in this Policy and to comply with applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of the account relationship and for a period thereafter as required by the operator's licensing jurisdiction.
• KYC and Identity Documents: Retained for a minimum of five years from the date of the last transaction, or longer where required by AML regulations.
• Transaction Records: Retained for a minimum of five years to satisfy financial record-keeping obligations.
• Marketing Consent Records: Retained for the duration of consent and for a reasonable period thereafter to demonstrate compliance.
• Support and Communication Records: Retained for up to three years following the closure of the relevant support case, or longer where a dispute remains unresolved.

When data is no longer required, it is securely deleted or anonymised in accordance with our internal data governance procedures.

9. Cookies & Tracking Technologies

9.1 Types of Cookies Used

rsvip uses the following categories of cookies on the Platform:

• Essential Cookies: Required for the Platform to function — including session authentication, security tokens and load balancing. These cannot be disabled.
• Analytical Cookies: Used to understand how users navigate the Platform, which pages are visited most frequently and where errors occur. This data is used in aggregate to improve the Platform. Analytical cookies may be set with your consent.
• Preference Cookies: Remember your language, display and notification preferences to improve your experience across sessions.
• Marketing Cookies: Used — only with your explicit consent — to deliver relevant promotional content about rsvip offers, including cricket and PSL betting promotions.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse non-essential cookies or delete existing cookies. Please be aware that disabling certain cookies may affect the functionality of the Platform — in particular, disabling essential cookies will prevent you from logging in or using the cashier.

10. Your Rights

Depending on applicable law in your jurisdiction, you may have the following rights in relation to your Personal Data:

• Right of Access: You have the right to request a copy of the Personal Data rsvip holds about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: In certain circumstances, you may request the deletion of your Personal Data. This right may be limited where we are required to retain data for legal or regulatory reasons — particularly KYC and AML records.
• Right to Restrict Processing: You may request that we restrict processing of your Personal Data in certain circumstances, such as while a rectification request is under review.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for fraud prevention purposes. We will consider your objection and respond within a reasonable timeframe.
• Right to Withdraw Consent: Where processing is based on consent — including marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact rsvip support at the email address provided in Section 15. We will respond within 30 days. Requests may be subject to identity verification before we process them.

11. Minors and Under-Age Access

The rsvip Platform is strictly intended for adults aged 18 years and over — or the higher minimum age required by the operator or applicable license jurisdiction. We do not knowingly collect or process Personal Data from individuals under the applicable minimum age. If you believe that a minor has accessed the Platform or provided us with Personal Data, please contact our support team immediately. Upon confirmation, we will take prompt steps to delete the relevant data and close any associated account.

Local laws, including any applicable provisions of Pakistani law, may impose additional restrictions on access by minors or on the minimum legal gambling age. Users are responsible for complying with all applicable local laws. This is not legal advice.

12. Data Security

rsvip implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and our servers.
• Encryption of sensitive Personal Data at rest, including identity documents and payment information.
• Role-based access controls ensuring that only authorised personnel can access Personal Data, and only to the extent necessary for their function.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures to detect, contain and notify affected Users in the event of a data breach, in accordance with applicable regulatory requirements.

While we take all reasonable precautions, no system is completely immune to security threats. You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with any third party and do not transmit sensitive account information via email.

13. Third-Party Links and Services

The Platform may contain references to or integrations with third-party services. This Policy applies only to data processed by rsvip. Third-party services — including payment providers, sports data feeds and analytics tools — operate under their own privacy policies. rsvip is not responsible for the data practices of third-party services accessed through or in connection with the Platform. We encourage you to review the privacy policies of any third-party service you interact with.

14. Changes to This Policy

rsvip reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify registered Users via the Platform or by email to the address on record. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of the Platform following the effective date of any change constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a privacy-related concern, please contact the rsvip team. The email address below is provided as plain text only and is not a clickable link.

Data Enquiries Email: [email protected]

Please include "Privacy Request" or "Data Rights" in your subject line to ensure your message reaches the appropriate team. We aim to respond to all privacy-related enquiries within 30 days. Where a request is complex or involves a large volume of data, we may require an extension — in which case we will notify you of the delay and provide a revised response timeline.

Support is available in English and Urdu. Do not include your account password, full payment card details or other sensitive credentials in any email correspondence.