999p Privacy Policy — Your Data, Protected

1. Who We Are

999p is an online entertainment platform operating at 999p.bar and offering casino games, live casino, slots, and sports betting services including cricket, Pakistan Super League (PSL), T20 matches, football, and esports. When this policy refers to "999p", "we", "us" or "our", it refers to the platform and its operating entity.

We act as the data controller for personal information collected through the platform. This means we are responsible for deciding how and why your data is processed, and for ensuring it is handled in accordance with this policy.

For any privacy-related questions, our support team is reachable via live chat on the platform or by email at [email protected].

2. Data We Collect

We collect personal data in three main ways: information you provide directly, information generated through your use of the platform, and information received from third-party services involved in operating your account.

Category	Examples	How Collected
Identity Data	Full name, date of birth, CNIC copy (if verification requested)	Registration form, verification process
Contact Data	Email address, mobile number	Registration form
Account Data	Username, password (hashed), account preferences	Registration & account settings
Transaction Data	Deposit amounts, withdrawal amounts, transaction references, dates	Platform payment processing
Gaming Activity	Bets placed, games played, session duration, bet history	Platform activity logs
Technical Data	IP address, device type, browser type, operating system	Automatic collection via server logs
Usage Data	Pages visited, features used, time on site, click paths	Cookies and analytics tools

We do not collect special categories of sensitive personal data such as health information, religious beliefs, or political opinions.

3. Why We Collect It

Every piece of data 999p collects serves a specific operational purpose. We do not gather information speculatively or without a clear reason. The main purposes for data collection are:

• Account operation: To create and manage your 999p account, verify your identity, and ensure your balance is accurately maintained in PKR.
• Transaction processing: To process deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer, and other supported methods, and to maintain an accurate transaction history for your account.
• Security and fraud prevention: To detect and prevent fraudulent activity, unauthorised account access, multi-accounting, and other forms of abuse that could harm you or other players.
• Legal compliance: To meet anti-money laundering (AML) and identity verification obligations where applicable, and to maintain records required for dispute resolution.
• Platform improvement: To understand how players use the platform so we can improve features, fix issues, and build a better experience for Pakistani users.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates, security alerts, and — only if you opt in — promotional messages about bonuses and offers.
• Responsible gaming: To monitor gaming patterns and, where our tools detect signs of potentially problematic behaviour, to provide appropriate intervention options including self-exclusion and deposit limits.

4. How We Use Your Data

In practical terms, here is how your data flows through the 999p platform on a day-to-day basis:

• When you register, your name, email, date of birth, and mobile number are used to create your account and send you a verification message.
• When you make a deposit via JazzCash or Easypaisa, the transaction reference, amount, and date are recorded against your account. Your wallet number is passed to the payment provider but is not stored on 999p's servers after the transaction completes.
• When you place a bet on a PSL match or spin a slot, the bet details are logged in your account history for your reference and for dispute resolution if needed.
• Your IP address and device data are checked at login and during gameplay to detect suspicious access patterns and protect your account from unauthorised use.
• If you contact support via live chat or email, the conversation is recorded and linked to your account so our team can provide consistent, informed assistance.

5. Sharing Your Data

999p does not sell, rent, or trade your personal data. We share it only in the following limited and necessary circumstances:

• Payment processors: When you make a deposit or withdrawal, the relevant payment provider (e.g. JazzCash, Easypaisa, your bank) receives transaction data necessary to complete the payment. These providers operate under their own privacy policies and are responsible for data processed on their platforms.
• Identity verification services: If we request identity verification, your documents may be shared with a third-party verification provider. This data is used exclusively for the purpose of confirming your identity and age.
• Technical service providers: Our platform relies on hosting, security, and analytics providers. These companies process data on our behalf under strict data processing agreements and may not use your data for their own purposes.
• Legal obligations: We may disclose personal data to competent authorities if we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of 999p, its users, or the public.
• Business transfers: If 999p undergoes a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify affected users in advance where possible.

In every case, we apply the principle of minimum necessary disclosure — we share only the data that is genuinely required for the purpose at hand.

6. Payment Data

Because many of our Pakistani players transact via mobile wallets, it is worth explaining our payment data practices in specific detail:

• JazzCash and Easypaisa: When you initiate a deposit, you enter your mobile wallet number and approve the transaction through your wallet app. 999p receives only the confirmation reference and amount — your full wallet credentials and PIN are processed entirely within the JazzCash or Easypaisa environment and are never accessible to 999p.
• Raast and Bank Transfer: Bank account numbers and IBAN details used for withdrawals are stored only as long as needed to process the specific transaction and are deleted or anonymised once the transfer is confirmed.
• Cards: Card payments are processed by a PCI-DSS compliant payment gateway. 999p does not see or store full card numbers at any point in the transaction.
• Transaction history: A record of amounts, dates, and payment methods used is retained in your account for your own reference and for dispute resolution. This history does not include full wallet numbers, card numbers, or bank account details.

7. Cookies & Tracking

The 999p website uses cookies and similar technologies to keep the platform working correctly and to understand how it is being used. Here is a straightforward breakdown of the cookies we use:

• Essential cookies: These are required for the platform to function. They keep you logged in during your session, maintain your language preference, and remember your cart or active bet slip. You cannot opt out of essential cookies without disabling the platform entirely.
• Analytics cookies: We use anonymised analytics to understand which pages are most visited, how long players spend on different sections, and where users drop off. This helps us prioritise improvements. Analytics data is aggregated and does not identify individual users.
• Preference cookies: These remember your display settings and other preferences so you do not have to set them every time you visit.

We do not use third-party advertising cookies or allow external ad networks to track you across other websites through our platform. You can manage cookie preferences through your browser settings at any time.

8. Data Security

Protecting the data of our Pakistani players is a core operational priority at 999p. The security measures we maintain include:

• TLS encryption on all data transmitted between your browser or app and our servers, ensuring that your login credentials, account data, and payment details cannot be intercepted in transit.
• Hashed passwords — your account password is never stored in plain text. It is processed through a one-way cryptographic hash so that even 999p staff cannot read it.
• Encrypted data at rest for sensitive fields including identity documents and financial data.
• Access controls limiting which staff can view personal data, on a strict need-to-know basis. Internal data access is logged and audited.
• Regular security reviews of our platform infrastructure to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication available to all users and strongly recommended to add an additional layer of protection to your account.

While we take every reasonable precaution, no online platform can guarantee absolute security. If you suspect that your account has been compromised, contact 999p support immediately via live chat so we can act quickly to protect your account and funds.

9. Data Retention

We retain personal data for as long as your account is active and for a reasonable period thereafter in case of disputes or legal requirements. In practice:

• Active account data is retained for the full duration your account remains open with 999p.
• Transaction records are retained for a minimum of five years after the relevant transaction to support dispute resolution and financial record-keeping.
• Identity verification documents are retained for the period required to satisfy our verification obligations and then securely deleted.
• If you close your account, we will delete or anonymise your personal data within a reasonable period, except for data we are required to retain under legal obligations.
• Support chat logs are retained for up to two years to help our team provide consistent service and resolve recurring issues.

When data is no longer needed, it is securely deleted or irreversibly anonymised so that it can no longer be associated with you.

10. Your Rights

As a 999p user you have the following rights in relation to your personal data. To exercise any of these rights, contact support via live chat or email and we will respond within a reasonable timeframe:

• Right of access: You can request a copy of the personal data we hold about you, including your account information, transaction history, and any identity data on file.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct it. For basic account details such as email address, you can update these directly in account settings.
• Right to erasure: You can request that we delete your personal data. We will honour this request where there is no legal or contractual reason to retain the data. Note that transaction records required for financial compliance may need to be retained for a defined period even after account closure.
• Right to restrict processing: In certain circumstances you can ask us to limit how we use your data while a dispute or query is being resolved.
• Right to data portability: You can request your personal data in a structured, machine-readable format.
• Right to object: You can object to the processing of your data for direct marketing purposes at any time. Simply update your communication preferences in account settings or contact support.

11. Children's Privacy

999p is strictly an adults-only platform. The minimum age to register and use any feature of the platform is 18 years. We do not knowingly collect personal data from individuals under the age of 18.

If we become aware that an account has been registered by a minor, we will close the account immediately, return any deposited funds where possible, and delete the personal data associated with the account. If you believe a minor has registered on the platform, please notify us at [email protected] so we can investigate and take appropriate action promptly.

12. Policy Changes

999p may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or legal requirements. When we make changes, the updated policy will be published on this page with a revised "Last updated" date at the top.

For material changes that significantly affect how we handle your data, we will notify you via in-platform notification or by email to your registered address at least 7 days before the changes take effect. Your continued use of 999p after the effective date of any change constitutes your acceptance of the updated policy.

We encourage you to review this page periodically so you are always up to date with how your information is being handled.

13. Contact & Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please reach out to the 999p support team through one of the following channels: