Your Privacy Matters at 999p

1 Who We Are

999p is an online sports betting and casino platform operated under international gaming compliance standards, providing services to eligible users including those based in Pakistan. The platform is accessible at 999p.im and any associated mobile-optimised or localised versions of that domain.

For the purposes of this Privacy Policy, "999p", "we", "us", and "our" refer to the operator of the 999p platform. "You" and "your" refer to any individual who accesses, browses, registers with, or uses the 999p platform in any capacity. "Personal data" refers to any information that can identify you as an individual, whether directly or in combination with other data.

If you have any questions about how your personal data is handled, or wish to exercise any of your data rights, you can reach the 999p data team at [email protected]. We aim to acknowledge all privacy-related queries within 5 business days.

2 Personal Data We Collect

999p collects the following categories of personal data from users of our platform. We only collect data that is necessary for the specific purposes outlined in this Privacy Policy.

3 How We Collect Your Data

999p collects personal data through the following channels and methods:

• Direct interaction: Data you provide when creating your account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys or promotions;
• Automated collection: Technical and usage data collected automatically when you access the 999p platform, including through cookies, server logs, and similar tracking technologies as described in Section 7;
• Third-party sources: In limited circumstances, 999p may receive data from third parties — such as identity verification service providers, fraud detection agencies, or payment processors — to supplement and verify the information you have provided directly. This only occurs where legally permitted and where such verification is necessary for compliance purposes;
• Public sources: Where relevant for fraud prevention or AML compliance, 999p may cross-reference information against publicly available databases or sanctions lists.

999p does not purchase personal data from data brokers or other commercial data sources for marketing purposes.

4 How We Use Your Personal Data

999p uses the personal data we collect for the following purposes:

1. Account registration and management: To create and maintain your 999p account, authenticate your identity at login, and manage your account preferences and settings;
2. Service delivery: To process your bets on cricket, PSL, football, and other sports markets; to enable your participation in casino, slot, jackpot, and Dragon Gate games; and to administer your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20;
3. Identity verification and KYC compliance: To verify that you meet our eligibility requirements, including the 21+ age requirement, and to satisfy our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) standards;
4. Fraud and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions;
5. Responsible gaming: To monitor betting patterns, enforce deposit limits, session reminders, and self-exclusion arrangements, and to identify users who may be displaying signs of problem gambling;
6. Customer support: To respond to your queries, complaints, and support requests, and to maintain records of our communications for quality assurance and dispute resolution;
7. Platform improvement: To analyse usage patterns and technical performance data in order to improve the 999p platform, fix bugs, optimise game loading times, and develop new features;
8. Marketing communications: To send you promotional offers, bonus announcements, PSL season updates, and other marketing messages — but only where you have opted in or where we have a legitimate interest, and always with a clear opt-out mechanism (see Section 12);
9. Legal compliance: To comply with applicable laws, regulatory requirements, court orders, and the lawful requests of competent authorities.

5 Legal Basis for Processing

For each purpose for which we process your personal data, 999p relies on one of the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and 999p — i.e., to deliver the betting and gaming services you have registered to use, process your deposits and withdrawals, and manage your account;
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements, age verification obligations, and data retention requirements imposed by regulators;
• Legitimate interests: Processing carried out for 999p's legitimate business interests, where those interests are not overridden by your rights — including fraud detection, platform security, responsible gaming monitoring, and analytics for service improvement;
• Consent: Where you have given your explicit consent to a specific use of your data, such as receiving marketing communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Personal Data

999p does not sell, rent, or otherwise trade your personal data with third parties for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT network processors — to facilitate deposits and withdrawals on your behalf. These providers process your financial data under their own privacy policies and are bound by data protection obligations;
• Identity verification providers: Third-party KYC and AML service providers who assist 999p in verifying user identities and screening against sanctions lists or fraud databases;
• Game content providers: Software providers whose games are available on the 999p casino lobby. These providers may receive limited technical data (such as session tokens) to deliver game content, but do not receive your personal identity or financial information beyond what is required for the game session;
• IT and infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who support the operation and security of the 999p platform infrastructure;
• Professional advisers: Legal, financial, and compliance advisers who require access to relevant data in the course of providing professional services to 999p;
• Law enforcement and regulatory bodies: Where required by law, court order, or regulatory obligation, 999p may disclose personal data to relevant authorities. This includes cooperating with investigations into financial crime, fraud, or other criminal activity associated with your account.

7 Cookies & Tracking Technologies

The 999p platform uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate and improve the platform. Below is an overview of the types of cookies we use:

You can manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the 999p platform, and some features may not operate correctly. Disabling analytics or marketing cookies will not affect your ability to bet, deposit, or play games on 999p.

8 Data Retention

999p retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with standard AML and KYC record-keeping requirements;
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required for financial compliance purposes;
• KYC and identity documents: Retained for the duration of your account and for a period of at least 5 years following account closure;
• Support communications: Retained for up to 3 years from the date of the last communication, unless the matter relates to an ongoing dispute, legal claim, or investigation in which case records are retained until resolution;
• Marketing preferences and consent records: Retained for as long as you hold an active account, and for up to 2 years following account closure for evidence of consent or opt-out;
• Technical and usage logs: Typically retained for 12 months for platform performance and security monitoring purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. Where data has been anonymised, it may be retained indefinitely for aggregate statistical or research purposes.

9 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that 999p holds about you:

1. Right of access: You have the right to request a copy of the personal data 999p holds about you, along with information about how it is being used. We will respond to access requests within 30 days;
2. Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly from your 999p account settings, or contact support for assistance with more complex corrections;
3. Right to erasure: In certain circumstances, you have the right to request that 999p delete your personal data — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent. Please note that this right is subject to our legal obligation to retain certain data for AML/KYC compliance and financial record-keeping, which may override erasure requests;
4. Right to restrict processing: You have the right to request that 999p temporarily restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested;
5. Right to data portability: Where processing is based on your consent or contractual necessity, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format;
6. Right to object: You have the right to object to processing based on legitimate interests, including profiling carried out for personalisation purposes. You also have the right to object to the processing of your data for direct marketing purposes at any time;
7. Rights related to automated decisions: You have the right not to be subject to decisions based solely on automated processing where those decisions produce significant effects on you, and to request human review of such decisions.

10 Security Measures

999p takes the security of your personal data seriously. We have implemented a range of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption of personal and financial data both in transit (using TLS/SSL protocols) and at rest;
• Access controls that restrict internal access to personal data on a strict need-to-know basis, with all access logged and regularly audited;
• Two-factor authentication (2FA) options for user accounts, strongly recommended for all registered users;
• Regular security assessments and penetration testing of the 999p platform infrastructure;
• Monitoring systems to detect and respond to unusual activity, including suspicious login attempts and potential data breaches;
• Staff training on data protection obligations and secure data handling practices.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, 999p will take appropriate steps to contain the breach and will notify affected users as soon as reasonably practicable, in accordance with applicable notification requirements.

11 Children's Privacy & Age Policy

The 999p platform is strictly for users aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. The 21+ age restriction is enforced through our registration process and KYC verification procedures.

If 999p becomes aware that personal data has been collected from an individual below the age of 21 — whether through a misrepresentation during registration or any other means — we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned through the payment method used to deposit, less any applicable charges.

If you are a parent or guardian and believe that a minor in your care has registered on or used the 999p platform, please contact us immediately at [email protected] with relevant account details. We will investigate and act swiftly to address the situation.

12 Marketing Communications

With your consent — or where 999p has a legitimate interest — we may send you marketing communications about promotions, bonuses, new games, PSL season offers, and other 999p platform features. These communications may be sent by email, SMS to your registered mobile number, or via in-platform notifications.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email from 999p;
• Replying "STOP" to any SMS marketing message;
• Adjusting your notification and marketing preferences from within your 999p account settings;
• Contacting support at [email protected] and requesting removal from all marketing lists.

Please allow up to 5 business days for opt-out requests to take effect across all communication channels. Please note that opting out of marketing communications does not opt you out of service-related communications — such as deposit confirmations, withdrawal notifications, security alerts, and important account notices — which are necessary for the operation of your account.

13 Changes to This Privacy Policy

999p reserves the right to update or amend this Privacy Policy at any time. When material changes are made, 999p will notify registered users via the email address or mobile number on file, and the updated Privacy Policy will be published on this page with a revised effective date.

Your continued use of the 999p platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Minor changes — such as typographical corrections, formatting updates, or clarifications that do not materially alter the substance of any section — may be made without specific user notification, but will always be reflected in the updated document published on this page.

14 Contact Us & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999p handles your personal data, please contact us using the details below. Our team is available 24/7 and will respond to privacy-related queries with appropriate care and promptness.

Contact the 999p privacy team at: [email protected]

Please include the subject line "Privacy Query" or "Data Rights Request" along with your registered account username and a clear description of your question or request. This helps our team route your query to the right person and respond as quickly as possible. We aim to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 days.