999win Privacy Policy

1. Who We Are & Scope

This Privacy Policy is issued by 999win ("999win", "we", "us", "our"), the operator of the online gaming platform accessible at https://999win.lat ("the Platform"). 999win acts as the data controller in respect of personal data collected through the Platform.

This Policy applies to all personal data collected from individuals who visit, register on, or interact with the 999win Platform, including Pakistani players who access 999win via mobile devices or desktop browsers. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions.

2. Data We Collect

999win collects the following categories of personal data:

999win does not knowingly collect special category data (as defined under applicable data protection law) except where strictly necessary for regulatory compliance, such as processing self-exclusion requests which may implicitly reference health-related circumstances.

3. How We Collect Your Data

999win collects personal data through the following means:

• Direct collection: Data you provide voluntarily during account registration, KYC verification, cashier transactions, support interactions or when setting responsible gaming limits on your 999win account.
• Automated collection: Technical and usage data collected automatically as you navigate the Platform, including via cookies, log files and session tracking technologies.
• Third parties: Identity and financial verification data received from KYC/AML service providers; fraud prevention signals received from payment processors including JazzCash and Easypaisa networks; analytics data from platform performance tools.

4. Purposes & Legal Basis for Processing

999win processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery — necessary for the performance of the contract between you and 999win. This includes operating your account, processing PKR deposits and withdrawals, and delivering the gaming services you request.
• Identity and age verification (KYC) — necessary for compliance with 999win's legal obligations and to fulfil its responsible gaming commitments. 999win is strictly an 18+ platform and must verify that users meet the age threshold.
• Anti-Money Laundering (AML) and fraud prevention — necessary for compliance with applicable legal obligations. Transaction monitoring and suspicious activity reporting are conducted in accordance with AML standards.
• Responsible gaming monitoring — legitimate interest and legal compliance. 999win monitors usage patterns to identify potentially problematic gambling behaviour and to enforce player-set limits or platform-initiated restrictions.
• Marketing communications — based on your consent, where given. 999win may send you information about promotions, bonuses and new games via your registered contact details. You may withdraw consent at any time via your account settings.
• Platform improvement and analytics — legitimate interest. Aggregated and anonymised usage data helps 999win improve platform performance, game offerings and the mobile experience for Pakistani players.
• Legal claims and compliance — necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.

5. Sharing Your Data

999win does not sell your personal data to third parties. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank and Bank Alfalah receive financial data necessary to process PKR deposits and withdrawals to and from your 999win account.
• KYC/AML providers: Third-party identity verification and AML screening services that assist 999win in meeting its regulatory compliance obligations.
• Technology and hosting providers: Cloud infrastructure, security monitoring and CDN providers that process data on 999win's behalf under contractual data processing agreements.
• Game content providers: Where live casino and game software is provided by licensed third-party studios, limited technical data necessary for game delivery may be shared.
• Regulatory and law enforcement authorities: Where 999win is legally required or compelled by court order to disclose data to government bodies, regulators or law enforcement agencies.
• Successor entities: In the event of a merger, acquisition or sale of assets, personal data may be transferred to the relevant successor entity subject to equivalent privacy protections.

6. International Transfers

999win may transfer personal data to processors or sub-processors located outside Pakistan where necessary for service delivery. Where such transfers occur, 999win takes appropriate steps to ensure that your data receives an adequate level of protection consistent with this Privacy Policy, including the use of contractual data transfer mechanisms where applicable. By using the Platform, you acknowledge and consent to such transfers where they are necessary for the provision of 999win's services.

7. Data Retention

999win retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting requirements. Specific retention periods include:

• Account and transaction data: retained for a minimum of five (5) years following account closure to satisfy AML and tax record-keeping obligations.
• KYC documentation: retained for a minimum of five (5) years following the end of the customer relationship.
• Communications and support logs: retained for two (2) years following the relevant interaction.
• Marketing preferences and consent records: retained for the duration of the account and for one (1) year following any consent withdrawal.
• Technical and usage data: retained in aggregated or anonymised form indefinitely for platform analytics purposes; individual-level technical data is deleted or anonymised within twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

8. Cookies & Tracking Technologies

999win uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help 999win deliver a functional, secure and personalised experience. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function. They enable account login session management, security features and cashier functionality. These cannot be disabled.
• Performance cookies: Collect anonymised data about how visitors use the Platform, helping 999win identify pages that are slow or generating errors — particularly important for optimising the mobile experience used by most Pakistani players.
• Functionality cookies: Remember your preferences (e.g., language settings) to personalise your 999win experience across sessions.
• Analytics cookies: Used to understand aggregate usage patterns and improve Platform features and game library.

You can control non-essential cookies via your browser settings. Note that disabling certain cookies may impair Platform functionality. 999win does not use cookies to serve third-party advertising.

9. Security Measures

999win employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and the 999win Platform;
• Encryption of sensitive data fields, including financial credentials and identity documents, at rest;
• Two-step verification (2SV) available to all account holders and recommended for all Pakistani players;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Automated fraud detection and unusual login activity monitoring.

While 999win takes all reasonable steps to protect your data, no transmission over the internet is entirely secure. You are also responsible for maintaining the security of your own account credentials. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, 999win will notify affected users in accordance with applicable law.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 999win:

• Right of access: You may request a copy of the personal data 999win holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some data (such as your name and date of birth, once verified) may require re-submission of identity documentation to amend.
• Right to erasure: You may request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose it was collected. Note that 999win may be required to retain certain data for legal or regulatory compliance reasons notwithstanding an erasure request.
• Right to restriction: You may request that 999win restricts the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on your consent or contract performance and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes. Where you object to direct marketing, 999win will cease processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time via your account settings without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact 999win support via the Help section of the Platform. 999win will respond to valid requests within a reasonable timeframe and in any case within thirty (30) days. 999win may need to verify your identity before processing a request.

11. Children's Privacy

999win is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is conducted as part of the KYC process. If 999win discovers that personal data has been collected from a minor, that data will be deleted immediately and the associated account closed. Parents or guardians who believe that a minor may have registered on 999win should contact us immediately via the support channel so that the account can be investigated and closed without delay.

12. Changes to This Policy

999win may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or Platform features. The "Last updated" date at the top of this Policy will be revised accordingly. Where changes are material, 999win will notify registered users via the Platform or via their registered contact details. Your continued use of the 999win Platform following notification of any change constitutes your acceptance of the updated Policy.

13. Contact

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by 999win, please contact our support team through the Help section of the Platform. You may also reach us by email at the following address — note this is for informational reference only and is not a clickable link:

[email protected]

999win aims to resolve all privacy-related enquiries promptly and fairly. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.