999pk Privacy Policy

1.1 999pk is committed to safeguarding the privacy and personal data of every player who uses our platform. We understand that for players across Karachi, Lahore, Islamabad, Faisalabad, and the rest of Pakistan, trust is everything — and that begins with being transparent about how we handle your data.

1.2 This Policy applies to all personal data collected and processed in connection with your use of 999pk, including data collected through our website at 999pk.club, our mobile-optimised interfaces, our customer support channels, and any communications we send to you.

1.3 999pk acts as the data controller in respect of your personal data. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are bound by contractual obligations that require them to handle your data in accordance with this Policy and applicable data protection law.

1.4 If you are under 21 years of age, you must not use 999pk or provide any personal data to us. Please refer to our Responsible Gaming page for further information on our age verification procedures.

2.1 Data You Provide Directly. When you register for a 999pk account or interact with our platform, you provide us with data including:

• Full legal name and date of birth;
• National identity card (CNIC) number or equivalent government-issued identification;
• Residential address (including city, province, and postal code);
• Mobile phone number and email address;
• Payment method details (e.g., JazzCash account number, EasyPaisa mobile number, or bank account details for HBL, UBL, or Meezan Bank);
• Documents submitted for identity or payment method verification purposes.

2.2 Data Collected Automatically. When you use the 999pk platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser information;
• Session duration, pages visited, and navigation patterns on 999pk;
• Game history, wagering activity, deposit and withdrawal records;
• Cookie identifiers and similar tracking data (see Clause 5).

2.3 Data from Third Parties. In limited circumstances, 999pk may receive data about you from third-party identity verification providers, fraud prevention databases, or payment processing partners. This data is used solely for the purposes described in this Policy and is not combined with your 999pk profile for unrelated marketing purposes.

3.1 999pk uses your personal data for the following purposes:

3.2 999pk will not use your personal data for any purpose not listed above without first obtaining your explicit consent or having a clear legal basis to do so.

4.1 999pk processes your personal data only where a valid legal basis exists. The legal bases we rely on are:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your 999pk account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, tax reporting obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing necessary for 999pk's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given us explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5.1 999pk uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, remember your preferences, maintain your login session, and gather anonymised analytics on how players use 999pk.

5.2 Essential Cookies are strictly necessary for the 999pk platform to function. They include session management cookies, authentication tokens, and security cookies. These cannot be disabled without impairing the functionality of your 999pk account.

5.3 Analytics Cookies help 999pk understand how players navigate the platform, which pages are most visited, and where technical issues occur. Data collected via analytics cookies is aggregated and anonymised — it is not used to identify individual players.

5.4 Marketing Cookies are used, with your consent, to personalise the promotional offers and bonus communications you receive from 999pk. You may withdraw consent for marketing cookies at any time through your account settings.

5.5 You may also manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the performance of the 999pk platform and some features may not function as intended.

6.1 999pk does not sell, rent, or lease your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment Processors: We share necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your deposits and withdrawals.
• Identity Verification Providers: We share identity documents and biographic data with regulated KYC (Know Your Customer) service providers to verify your age and identity.
• Fraud Prevention Services: We may share data with financial crime prevention databases to detect and prevent money laundering, match-fixing, and related offences.
• Technology & Hosting Providers: Our platform infrastructure providers may have access to personal data as part of providing server, cloud hosting, and security services — under strict confidentiality and data processing agreements.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction — including in connection with anti-money laundering investigations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 999pk's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 All third-party service providers who process personal data on behalf of 999pk are required to enter into data processing agreements that obligate them to handle your data securely, confidentially, and only for the specific purposes for which it was shared.

7.1 In order to operate the 999pk platform, your personal data may be transferred to and processed in countries outside Pakistan. This may include countries where our technology infrastructure, game content providers, or identity verification partners are based.

7.2 Where data is transferred internationally, 999pk takes appropriate steps to ensure that your data receives a level of protection equivalent to that applied within Pakistan. These steps may include entering into standard contractual clauses approved by relevant data protection authorities, or transferring data only to recipients in countries that offer an adequate level of data protection.

7.3 If you wish to obtain further information about the specific safeguards in place for international data transfers involving your personal data, please contact the 999pk support team using the details in Clause 13.

8.1 999pk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data in transit between your device and 999pk servers;
• AES-256 encryption for sensitive personal data stored in our databases;
• Multi-factor authentication requirements for all 999pk administrative access;
• Regular penetration testing and vulnerability assessments of our platform infrastructure;
• Strict role-based access controls limiting data access to personnel with a legitimate need;
• Comprehensive audit logging of all access to and modifications of personal data records.

8.2 While 999pk takes every reasonable precaution to protect your data, no system can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, 999pk will notify affected players and relevant authorities in accordance with applicable law and as promptly as the circumstances allow.

8.3 You also have a role in keeping your data safe. Please use a strong, unique password for your 999pk account and never share your login credentials with anyone. If you suspect your account has been compromised, contact the 999pk support team immediately via live chat.

9.1 999pk retains your personal data for as long as your account remains active and for a further period after account closure as required by law. The primary retention periods that apply to 999pk player data are:

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data sanitisation techniques. 999pk conducts scheduled data purge cycles to ensure compliance with these retention limits.

10.1 As a 999pk player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us using the details in Clause 13.

10.2 999pk will respond to all data rights requests within 30 calendar days. In complex cases this may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

10.3 We may need to verify your identity before processing a data rights request. This is to protect your data from unauthorised access by a third party claiming to act on your behalf.

11.1 The 999pk platform is strictly intended for adults aged 21 years and older. 999pk does not knowingly collect, process, or store personal data from any person under the age of 21.

11.2 If 999pk becomes aware that personal data has been submitted by or on behalf of a person under 21 years of age, we will immediately suspend the associated account, delete the data in question, and — where appropriate — report the incident to the relevant authorities.

11.3 Parents and guardians who believe their child may have registered on 999pk or provided personal data to us should contact the 999pk support team immediately via live chat or email. We take all such reports extremely seriously and will act on them without delay.

12.1 999pk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered 999pk players by posting a notice on the platform and, where appropriate, by sending a notification to your registered email address.

12.2 The effective date shown at the top of this document indicates when the current version of the Policy was last updated. We encourage you to review this Policy periodically to stay informed about how 999pk protects your personal data.

12.3 Your continued use of the 999pk platform following notification of any change to this Policy will constitute your acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue use of 999pk and may request account closure by contacting our support team.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 999pk handles your personal data, please get in touch with us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from within your 999pk account dashboard. This is the fastest way to reach our support team.
• Email: [email protected] — we aim to respond to all privacy-related email enquiries within 48 hours.

13.2 For data rights requests — including access, rectification, erasure, or portability requests — please contact us via email with the subject line "Data Rights Request" and include your registered 999pk username and a description of your request. We will acknowledge receipt within 5 business days.

13.3 If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection or regulatory authority in the jurisdiction applicable to your situation.