๐Ÿ”’

Privacy Policy โ€“ 123rf Online Gaming Platform Pakistan

At 123rf, protecting your personal information is not an afterthought โ€” it's built into the way the platform works from the ground up. This policy explains clearly what data we collect, why we collect it, how it is stored and secured, and what rights you have over it as a Pakistani player.

Last Updated: 1 January 2025 ยท Version 2.4
256-Bit SSL Encryption

Every connection to 123rf is encrypted using 256-bit SSL, the same standard used by Pakistan's major banks. Your login credentials, payment details, and personal data are fully encrypted both in transit and at rest on our servers.

Zero Data Selling โ€” Ever

123rf does not sell, rent, or trade your personal data to any third party under any circumstances. We don't work with advertising data brokers, we don't monetise your betting history, and we don't share your contact details with outside marketing companies.

CNIC Data Strictly Controlled

Your CNIC information is used solely for identity verification on first withdrawal. It is stored in encrypted form with access restricted to authorised compliance staff only. It is never shared with game providers, payment processors, or any external party except where legally required.

Betting History Is Yours Alone

Your betting history, game records, and transaction logs at 123rf are accessible only to you via your account dashboard and to 123rf's internal compliance team strictly for dispute resolution or legal compliance purposes. No outside parties can access it.

You Control Your Data

You have the right to request a full copy of the personal data 123rf holds about you, to correct any inaccurate information, and to request deletion subject to legal retention obligations. All requests are handled within 30 days by our compliance team.

Marketing Only With Consent

123rf sends promotional messages only to players who have opted in to marketing communications during registration or through account settings. You can unsubscribe from all marketing at any time. Opting out does not affect service communications like withdrawal confirmations or security alerts.

123rf
Privacy at a Glance
Data Sold? Never
Encryption 256-bit SSL
Marketing Opt-Out Anytime
Data Request Within 30 days
Deletion Request Subject to law
Min Age 18 years
01

Introduction

This Privacy Policy describes how 123rf collects, uses, discloses, and protects the personal information of players who register or otherwise use the 123rf online gaming platform, accessible at https://123rf.online. The term "personal information" refers to any data that can identify you as an individual, directly or in combination with other data.

At 123rf, we understand that Pakistani players have genuine concerns about how their information is handled online. Those concerns are reasonable, and this policy is written to address them directly and honestly rather than in vague legal language designed to obscure what we actually do. If you read this policy and still have questions, our support team is available 24/7 at support@123rf.online and will give you a straight answer.

By registering an account at 123rf you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal information as described herein. This policy should be read alongside our Terms and Conditions, which govern the overall use of the 123rf platform.

A Note for Pakistani Players

We know that data privacy feels abstract until something goes wrong. At 123rf, we have never had a data breach, we have never sold player data, and we have never shared betting histories with parties outside the platform. This policy is our written commitment to maintaining those standards indefinitely.


02

Data We Collect

123rf collects personal information from you in the following ways and categories. We only collect data that is genuinely necessary for the purposes described in Section 3.

2.1 Information You Provide Directly
  • Registration data: Full legal name, date of birth, gender, CNIC number, email address, and mobile phone number. This information is required to create an account at 123rf.
  • Identity verification documents: A copy of your CNIC (front and back) and a selfie with your CNIC, collected on first withdrawal to verify your identity in compliance with applicable regulations.
  • Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), IBAN or bank account details for IBFT transfers, or masked card details for Visa/Mastercard transactions. 123rf does not store full card numbers โ€” these are handled by our payment processing partners.
  • Support communications: The content of emails, live chats, or other communications you send to our support team.
  • Responsible gaming settings: Any limits, exclusions, or preferences you set through the responsible gaming tools.
2.2 Information Collected Automatically
  • Device and technical data: IP address, device type, operating system, browser type and version, device identifiers, and screen resolution.
  • Usage data: Pages visited on 123rf, games played, time and duration of sessions, betting patterns, and in-game actions.
  • Transaction data: Full history of deposits, withdrawals, bets, and game results associated with your account.
  • Cookies and tracking data: See Section 8 for a full explanation of how 123rf uses cookies.
  • Location data: General geographic location derived from your IP address. 123rf does not access your device's GPS location.
Data CategoryWhen CollectedRequired?
Name, DOB, CNIC numberRegistrationRequired
Email & mobile numberRegistrationRequired
CNIC photographFirst withdrawalRequired
Payment account detailsFirst depositRequired
IP address & device infoEvery sessionAutomatic
Betting & transaction historyEvery sessionAutomatic
Marketing preferencesRegistration (optional)Optional

123rf
03

How We Use Your Data

123rf uses the personal data it collects for the following specific purposes. We do not use data for purposes beyond those listed here without notifying you and, where consent is required, obtaining it.

  • Account creation and management: Your registration data is used to create and maintain your 123rf account, authenticate your logins, and manage your account settings and preferences.
  • Identity verification and fraud prevention: Your CNIC data and identity documents are used to verify your identity, confirm that you meet the minimum age requirement of 18 years, and detect and prevent fraudulent activity including duplicate accounts and bonus abuse.
  • Processing deposits and withdrawals: Your payment details are used solely to process the financial transactions you request. 123rf does not store full payment credentials โ€” sensitive payment data is handled by our certified payment processor partners.
  • Providing and improving the gaming experience: Usage data and betting history allow us to provide the games and features you use and to identify technical issues. Aggregated, anonymised usage data may be used to improve the platform โ€” this analysis does not identify individual players.
  • Customer support: Communications you send to our support team are used to resolve your query and are stored to maintain a record of the support provided.
  • Responsible gaming obligations: Your betting patterns and session data may be reviewed to identify signs of problem gambling and, where appropriate, to contact you proactively or apply safeguards in accordance with our Responsible Gaming policy.
  • Legal and regulatory compliance: Where required by applicable law, 123rf may use your data to fulfil reporting obligations, respond to lawful requests from government or regulatory authorities, or defend against legal claims.
  • Marketing communications (with consent only): If you opted in to marketing at registration or through your account settings, we may send you information about bonuses, new games, and promotions at 123rf. You can withdraw this consent at any time.

04

Legal Basis for Processing

123rf processes your personal data on the following legal bases:

  • Contractual necessity: Most data processing at 123rf is necessary to perform the contract between you and us โ€” that is, to provide you with the gaming platform, process your transactions, and manage your account. Without this processing, we could not provide the service.
  • Legal obligation: Certain processing is required by applicable laws and regulations, including identity verification requirements, anti-money laundering obligations, and record-keeping requirements.
  • Legitimate interests: We process some data on the basis of our legitimate business interests, including fraud detection, platform security, and aggregate analytics โ€” provided those interests are not overridden by your privacy rights.
  • Consent: Where processing is not strictly necessary (such as sending marketing messages or using non-essential cookies), we will ask for your consent before doing so and you may withdraw consent at any time without affecting the lawfulness of prior processing.

05

Data Sharing and Disclosure

123rf does not sell, rent, or trade your personal data. We share data with third parties only in the limited circumstances described below, and always under strict contractual data protection obligations:

  • Payment processors: To process your deposits and withdrawals, 123rf shares the minimum necessary payment-related data with our certified payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer processors, and card payment gateways). These partners are contractually prohibited from using your data for any purpose other than processing the specific transaction.
  • Identity verification providers: CNIC verification is processed by a contracted identity verification service that operates under strict data protection terms. Verified data is not retained beyond the verification process by the third-party provider.
  • Game providers: To deliver live dealer games and certain RNG game titles, technical session data (not your personal identification data) may be shared with the game provider's infrastructure to facilitate gameplay. Game providers do not receive your CNIC, payment details, or contact information.
  • Legal and regulatory disclosure: 123rf may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, valid legal process, or to protect the rights and safety of 123rf or its users. We will notify you of any such disclosure to the extent permitted by law.
  • Business continuity: In the event of a merger, acquisition, or sale of 123rf or its assets, player data may be transferred to the successor entity. Players will be notified of any such transfer and the successor entity will be bound by this Privacy Policy.
What We Never Do

123rf never shares your betting history, game records, or personal data with advertisers, data analytics companies, marketing agencies, or any other commercial third party. Your information is not a product at 123rf โ€” it is your information, held in trust.


123rf
06

Data Security

The security of your personal data is something 123rf invests in continuously. The following technical and organisational measures are in place to protect your information:

  • 256-bit SSL/TLS encryption on all connections between your device and 123rf servers. This means all data in transit is unreadable to any party that intercepts it.
  • Encryption at rest for all stored personal data, identity documents, and financial records. Data is stored in encrypted form on access-controlled servers.
  • Role-based access controls ensuring that 123rf staff can only access personal data that is directly relevant to their job function. Customer support agents, for example, cannot access CNIC documents; only authorised compliance staff can.
  • Multi-factor authentication on all internal administrative systems. Staff accounts accessing player data require hardware-backed authentication.
  • Regular security audits conducted by independent third-party security firms. Any vulnerabilities identified are patched within defined SLA timelines.
  • Intrusion detection and monitoring running 24/7. Anomalous access patterns trigger automatic alerts and account lockouts where necessary.
  • Data breach response plan tested annually. In the unlikely event of a breach affecting your personal data, 123rf will notify affected players within 72 hours of becoming aware of the breach.

Despite these measures, no digital system is completely immune to risk. You also play a role in keeping your account secure โ€” please use a strong, unique password for your 123rf account and enable two-factor authentication if available.


07

Data Retention Periods

123rf retains personal data for as long as is necessary for the purposes it was collected and as required by applicable law. Specific retention periods are as follows:

  • Active account data: Retained for the lifetime of your active account plus a minimum of five (5) years after account closure to meet legal and regulatory record-keeping obligations.
  • Transaction and betting records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
  • Identity verification documents: CNIC copies and selfies are retained for five (5) years from the date of verification or account closure, whichever is later.
  • Support communications: Retained for two (2) years from the date of the last communication in the support thread.
  • Marketing consent records: Retained for as long as marketing consent is active, plus one (1) year after consent is withdrawn as evidence of the consent history.
  • Security and fraud logs: IP address logs and device identification data retained for two (2) years for fraud prevention purposes.

When data reaches the end of its retention period, it is securely deleted or anonymised. Anonymised data (which cannot be linked to any individual) may be retained indefinitely for aggregate analytics.

Deletion Requests: You have the right to request deletion of your personal data. However, where data must be retained by law (such as transaction records), we cannot delete it before the legal retention period expires. We will delete all data that is not subject to a legal retention obligation within 30 days of receiving a valid deletion request.

08

Cookies and Tracking Technologies

123rf uses cookies and similar technologies to make the platform function correctly and to provide a better experience. A cookie is a small file placed on your device when you visit a website. Here is how we use them:


09

Your Privacy Rights

As a player at 123rf, you have the following rights in relation to your personal data. To exercise any of these rights, contact our privacy team at support@123rf.online. We will respond within 30 days.

Right to Access

Request a copy of all personal data 123rf holds about you. We will provide this in a structured, readable format within 30 days.

Right to Rectification

Request that any inaccurate or incomplete personal data held by 123rf be corrected. We will update the data and confirm the correction.

Right to Erasure

Request deletion of your personal data. We will delete data not subject to legal retention obligations. Data required by law will be deleted once the retention period expires.

Right to Restrict Processing

Request that we restrict processing of your data โ€” for example, while you contest the accuracy of your data or while a complaint is being investigated.

Right to Portability

Request a machine-readable export of the personal data you provided to 123rf, for the purpose of transferring it to another service if you choose.

Right to Withdraw Consent

Withdraw consent for marketing communications or analytics cookies at any time through your account settings or by emailing support@123rf.online. Withdrawal does not affect prior lawful processing.


10

Children's Privacy

123rf strictly prohibits use of the platform by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18. Age verification is conducted during registration and on first withdrawal.

If 123rf becomes aware that personal data has been collected from a person under 18, the account will be immediately closed, the data will be deleted, and any deposits will be returned to the depositing payment method without deduction. If you believe a minor has registered on our platform, please contact us immediately at support@123rf.online.


11

Third-Party Links

The 123rf platform may contain links to third-party websites or services, such as links to payment provider help pages or regulatory information pages. This Privacy Policy applies only to the 123rf platform. We are not responsible for the privacy practices of any third-party website, and we encourage you to read the privacy policy of any external site you visit via a link from 123rf.


12

Changes to This Privacy Policy

123rf may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Notify all registered players by email at the address associated with their account, at least 7 days before the changes take effect.
  • Display a prominent notice on the 123rf homepage for at least 7 days before changes take effect.

Minor changes โ€” such as corrections of typographical errors or clarifications that do not alter the substance of our data practices โ€” may be made without advance notice. Your continued use of 123rf after an update to this policy constitutes acceptance of the revised terms. If you disagree with any change, you may close your account by contacting our support team.


13

Contact Our Privacy Team

For any privacy-related questions, data access requests, deletion requests, or complaints, please contact the 123rf privacy team using the following details. We aim to respond to all privacy-related enquiries within 30 days.

  • General Privacy Enquiries: support@123rf.online
  • Data Access / Deletion Requests: privacy@123rf.online
  • Data Breach Reports: security@123rf.online
  • Response Time: All privacy requests acknowledged within 48 hours; fully resolved within 30 days.

If you are not satisfied with the response to your privacy complaint, you have the right to raise the matter with the relevant data protection authority in your jurisdiction.

Play at 123rf โ€“ Your Privacy Protected

Register today. Your data is encrypted, never sold, and fully under your control. Deposit via Easypaisa or JazzCash and claim your 100% welcome bonus up to Rs 15,000.

Register Free

Related Policies at 123rf

๐Ÿ”’

Your Data Is Safe at 123rf

Register with confidence. 123rf encrypts everything, sells nothing, and gives you full control over your data. Join hundreds of thousands of Pakistani players on the platform built to respect your privacy.