Privacy Policy – 999p Pakistan Online Gaming Platform

999p is Pakistan's dedicated online gaming and sports betting platform, accessible at 999p.online. We operate across all 999p products including PSL Betting, Online Casino, Live Casino and Andar Bahar tables, Fishing Games, Virtual Sports, Live Cricket Score, and the VIP Club programme.

For the purposes of this Privacy Policy, 999p is the data controller. This means we are responsible for deciding how and why your personal data is collected and used. Our contact address for all privacy matters is support@999p.online.

This Privacy Policy applies to all personal data collected via the 999p website, mobile browser interface, and any direct communication you have with the 999p team. By registering on 999p and using the platform, you acknowledge that you have read and understood this Privacy Policy. It should be read alongside our Terms and Conditions.

999p collects only the personal data we genuinely need to provide a safe, fair, and functional gaming service to Pakistani players. We do not collect data speculatively or beyond what is necessary. Here is a breakdown of what we collect and when:

Every piece of data 999p collects serves a specific, genuine purpose. Here are the reasons we collect and hold personal data:

• Account Registration and Management: To create, maintain, and secure your 999p account, including login authentication and account recovery.
• Age and Identity Verification: To confirm that all players are 18 years of age or older as required by our responsible gaming policy, and to prevent underage access to gambling products.
• Payment Processing: To receive PKR deposits via your chosen Pakistani payment method and to send PKR withdrawals back to your registered wallet or bank account.
• Fraud and Money Laundering Prevention: To detect and investigate suspicious activity, duplicate accounts, chargebacks, and potential financial crimes. 999p has legal obligations in this area that require us to collect and retain certain data.
• Responsible Gaming Compliance: To apply the deposit limits, loss limits, cool-off periods, and self-exclusion settings you configure, and to monitor for problem gambling indicators so we can offer appropriate support.
• Customer Support: To handle your queries, complaints, and account-related requests effectively.
• Platform Improvement: Aggregated and anonymised usage data helps us improve the 999p experience – fixing technical issues, optimising game loading times, and developing new features based on how Pakistani players use the platform.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and 999p news via SMS, email, or in-platform notification. You can opt out at any time.

999p processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to deliver the services you signed up for – account creation, payments, bet settlement, and support. Without this processing, 999p could not function as a platform.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, identity verification requirements, and any lawful request from Pakistani regulatory or law enforcement authorities.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming compliance. We balance our legitimate interests against your privacy rights and only process data where our interests do not override yours.
• Consent: Processing for optional marketing communications and certain non-essential cookies. You give this consent at registration or in your account settings and can withdraw it at any time without affecting your core 999p account access.

To give you a concrete idea of how 999p uses your personal data day-to-day, here are the most common scenarios a Pakistani player on 999p might encounter:

• When you register, we use your name, CNIC, and date of birth to verify that you are a real person aged 18 or over in Pakistan. This is a one-time process, and the data is then stored securely for the duration of your account.
• When you make an Easypaisa deposit, your wallet number is passed to our payment processing partner to complete the transaction. We store a reference to the transaction and the amount in PKR – not your full wallet credentials independently.
• When you place a PSL bet or sit at an Andar Bahar table, 999p logs the bet details, stake amount, outcome, and balance change. This data is used to settle bets accurately and to produce your transaction history in your account dashboard.
• When you contact support, the conversation is logged so that follow-up agents can understand the context without asking you to repeat yourself. Transcripts are reviewed periodically for quality and training purposes.
• When our fraud detection system flags unusual account activity – for example, multiple rapid deposits followed by an immediate large withdrawal from a new wallet – a member of our team reviews the flagged data to decide whether the activity is legitimate or suspicious. This may result in temporary account restrictions pending clarification.
• When you opt in to 999p's promotional messages, your mobile number and email address are used to deliver offers relevant to your game history. For example, a player who regularly uses the Andar Bahar tables may receive a notification about a 999p Andar Bahar-specific bonus.

999p does not use your data for automated individual decision-making in a way that produces legal or similarly significant effects, except for fraud detection which is always subject to human review before action is taken.

999p uses cookies and similar lightweight tracking technologies on the platform. A cookie is a small text file placed on your device by a website. Here is how 999p uses them:

• Essential Cookies: Required for the platform to function. These keep you logged in during a session, maintain your game state, and store your session token. You cannot opt out of essential cookies without losing access to the platform.
• Performance Cookies: Help 999p measure page load speed, identify technical errors, and understand which parts of the site players visit most. Data is aggregated and anonymised. You can opt out via your browser settings.
• Analytics Cookies: Used with analytics tools to understand general player behaviour – which games are most popular, at what times players are most active, and whether new features are being used. Always anonymised before analysis.
• Preference Cookies: Remember settings you have chosen, such as your preferred language or display options on the 999p live cricket score section.

999p does not use advertising or retargeting cookies that track you across other websites. You can manage cookie preferences through your browser settings. Clearing cookies will log you out of 999p.

999p does not sell, rent, or trade your personal data to any third party. Full stop. We share your data only in the limited, necessary circumstances described below:

• Payment Processors: Your deposit and withdrawal data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT systems, and Visa/Mastercard processing networks as necessary to complete your PKR transactions. These processors operate under their own privacy obligations.
• Identity Verification Partners: Where identity verification is required (for example, CNIC verification or age confirmation), we may share the necessary documents with a third-party identity verification service provider operating under strict data protection contracts with 999p.
• Game Technology Providers: Live casino table software and fishing game engines are supplied by third-party providers. These providers receive only the minimum data necessary to run the game session (session identifier, bet amount, outcome). They do not receive your personal identity data.
• Legal and Regulatory Authorities: Where 999p receives a lawful request from Pakistani authorities (such as the Federal Investigation Agency or a court order), we are obligated to comply. We will notify you of any such disclosure unless legally prohibited from doing so.
• Internal Group Companies: Where 999p operates as part of a corporate group, relevant data may be shared with affiliated companies that provide infrastructure or operational support, always under the same data protection standards as 999p itself.

Data security is not an afterthought at 999p – it is built into the platform's infrastructure. Here are the measures in place to protect your personal and financial information:

• TLS Encryption in Transit: All data exchanged between your device and 999p's servers is encrypted using TLS (Transport Layer Security). The padlock in your browser confirms this when you are on 999p.online.
• Encrypted Storage: Personal data and financial records are stored in encrypted databases. Sensitive fields such as identification numbers and payment references use additional field-level encryption.
• Access Controls: 999p staff can only access player data relevant to their role. A customer support agent cannot access financial records they have no reason to view. Access logs are maintained and reviewed.
• Two-Factor Authentication: 999p accounts support two-factor authentication via mobile OTP to prevent unauthorised logins even if your password is compromised.
• Regular Security Reviews: The 999p platform undergoes periodic security assessments. Vulnerabilities identified are addressed on a priority basis based on their potential impact on player data.
• Incident Response: In the event of a data breach, 999p has a defined incident response procedure. Affected players will be notified by email without undue delay, along with guidance on protective steps to take.

999p keeps your personal data only as long as is necessary for the purpose it was collected, or as required by applicable law. Here are the general retention guidelines:

• Active Account Data: Held for the full duration of your active 999p account plus a period after closure to satisfy legal and audit obligations.
• Financial Transaction Records: Retained for a minimum of 5 years following the transaction date in compliance with anti-money laundering regulations applicable to financial service providers.
• Identity Verification Documents: Retained for the life of the account plus 5 years post-closure.
• Support and Complaint Records: Retained for 2 years from the date the issue was closed, unless the matter is subject to ongoing legal proceedings.
• Marketing Opt-In Records: Retained for 1 year after the last consent-based interaction, or until you withdraw consent, whichever comes first.
• Technical and Server Logs: Retained for 90 days for security and fraud detection purposes, then automatically deleted.

When data is no longer required, 999p deletes or anonymises it securely. Anonymised data (where your identity cannot be recovered) may be retained indefinitely for statistical and platform improvement purposes.

As a 999p player and data subject, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at support@999p.online:

999p is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If a person under 18 attempts to register on 999p and succeeds by providing false information, their account will be closed and any deposited funds returned to the payment source upon discovery.

Parents or guardians who believe a minor may have registered on 999p should contact us immediately at support@999p.online. We will investigate and act promptly. 999p also recommends that families in Pakistan use parental control software on shared devices to prevent minors from accessing online gaming platforms.

999p may update this Privacy Policy to reflect changes in our data practices, new legal requirements, or new platform features. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to your registered address explaining the key changes
• Display a notice on the 999p platform for a reasonable period

We encourage you to review this page periodically even without a notification, as minor clarifications may be made without individual alerts. Your continued use of 999p after a policy update confirms you accept the revised terms.

If you have any question about how 999p handles your personal data, or if you want to exercise any of your privacy rights, you can contact us via:

• Email: support@999p.online (use subject: "Privacy – [your query]")
• Live Chat: Available after logging in to your 999p account

If you believe that 999p has not handled your personal data appropriately or has violated your privacy rights, you have the right to raise a formal complaint. To do so, email support@999p.online with the subject line "Formal Privacy Complaint" and include as much detail as possible. 999p will:

1. Acknowledge your complaint within 48 hours
2. Investigate and provide a full response within 14 business days
3. If the issue cannot be resolved internally, advise you on further escalation options

We take privacy complaints seriously and handle all formal submissions independently of the commercial team to ensure objectivity.