999d Privacy Policy – How We Handle Your Personal Data

1. Scope & Controller Identity

This Privacy Policy ("Policy") applies to all personal data processed by 999d in connection with the operation of the 999d.win website, its gaming services, its mobile-optimised interface, and any related communications (collectively, the "Platform"). By registering an account on 999d.win or otherwise using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, the data controller responsible for your personal information is 999d (referred to herein as "999d", "we", "us", or "our"). If you have any questions regarding how your personal data is processed, please contact us at the address set out in Section 13 below.

2. Information We Collect

999d collects personal data through a variety of means as part of operating a regulated online gaming and sports betting platform. The categories of data we collect include:

2.1 Registration & Account Data. When you create a 999d account, we collect your full name, email address, date of birth, country and city of residence (within Pakistan, e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad), and account password (stored in hashed, non-readable form). This information is required to open and maintain your account.

2.2 Identity Verification (KYC) Data. To comply with Know Your Customer (KYC) requirements and enforce the 18+ age restriction, we may collect a copy of your Computerised National Identity Card (CNIC) or other government-issued identity document, along with a selfie or proof-of-liveness photograph where required. This data is processed solely for identity verification and fraud prevention purposes.

2.3 Financial & Transaction Data. We collect records of all deposits and withdrawals made through your 999d account, including the payment method used (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, or USDT TRC20), transaction amounts in PKR, and transaction timestamps. We do not store complete card numbers or mobile wallet PINs — payment processing is handled by PCI-DSS compliant third-party processors.

2.4 Gaming Activity Data. We retain records of your betting and gaming activity, including wagers placed, games played, bet amounts, outcomes, and bonus usage. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical & Device Data. When you access 999d.win, we automatically collect your IP address, browser type and version, device type, operating system, referring URL, and session duration. This data is collected via server logs and, where applicable, cookies.

2.6 Communications Data. If you contact 999d's support team — whether via live chat, email, or another channel — we retain a record of that correspondence, including any attachments or screenshots you submit.

3. How We Use Your Information

999d uses the personal data it collects for the following purposes:

• To create, verify, and manage your 999d account and facilitate your use of the Platform;
• To process deposits and withdrawals in PKR and maintain accurate financial records of all transactions on your account;
• To verify your identity and age through KYC procedures, ensuring compliance with the 18+ age restriction;
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, collusion, and other prohibited conduct;
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and triggering intervention protocols where applicable;
• To resolve disputes, handle complaints, and enforce the Terms and Conditions;
• To communicate with you about your account, including security alerts, transaction confirmations, and support responses;
• To send you marketing communications about 999d promotions and offers, where you have provided consent to receive such communications (you may withdraw this consent at any time);
• To improve the performance, security, and user experience of the 999d Platform through aggregated analytics.

4. Legal Basis for Processing

999d processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and 999d — including account management, payment processing, and game settlement;
• Legal obligation: Processing required to comply with applicable KYC, anti-money-laundering, and age verification obligations;
• Legitimate interests: Processing carried out in pursuit of 999d's legitimate interests in fraud prevention, platform security, and responsible gaming, where those interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent — applicable to optional marketing communications.

5. Sharing of Personal Data

999d does not sell your personal data to third parties. We may share your data with the following categories of recipients where strictly necessary:

• Payment processors: JazzCash, Easypaisa, and banking partners receive the minimum data necessary to process your deposit or withdrawal transactions. These providers are contractually bound to use your data only for payment processing;
• Identity verification providers: Third-party KYC service providers who process CNIC copies and liveness checks on our behalf under strict data processing agreements;
• Game content providers: Licensed studios (such as Pragmatic Play, Evolution, JILI, and PG Soft) may receive anonymised session identifiers to facilitate game loading and bet settlement — no identifiable personal data is shared for this purpose;
• Law enforcement and regulators: Where required by lawful authority, court order, or regulatory obligation, 999d will disclose personal data to the relevant public body;
• Fraud prevention networks: Where there is reason to believe an account is being used for fraud or money laundering, relevant data may be shared with industry fraud prevention services.

6. Cookies & Tracking Technologies

999d.win uses cookies and similar technologies to ensure the Platform functions correctly and to improve your experience. The categories of cookies used include:

• Essential cookies: Required for the Platform to function — session authentication, CSRF protection, load balancing. These cannot be disabled without breaking core functionality;
• Analytics cookies: Used to understand aggregate usage patterns — pages visited, session duration, device type. Data is processed in anonymised form;
• Preference cookies: Store your interface preferences such as language settings and display options.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from logging in or using certain features of 999d.win.

7. Data Retention

999d retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements;
• KYC documents are retained for the same five-year minimum period;
• Support communication records are retained for three (3) years;
• Analytics data in anonymised form may be retained indefinitely for statistical purposes.

8. Security Measures

999d implements technical and organisational security measures proportionate to the risks associated with processing your personal data. These include HTTPS/TLS encryption for all data in transit between your browser and 999d servers; AES-256 encryption for sensitive data at rest; bcrypt hashing for account passwords (which are never stored in plain text); access controls limiting staff access to personal data to those with a verified operational need; and regular security reviews of platform infrastructure.

Notwithstanding the above, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your 999d login credentials. If you suspect unauthorised access to your account, contact 999d support immediately and change your password.

9. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by 999d:

• Right of access: You may request a copy of the personal data 999d holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 999d's legal retention obligations;
• Right to restriction: You may request that 999d restrict the processing of your data in certain circumstances;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on legitimate interests in circumstances where your particular situation justifies it.

To exercise any of these rights, please contact 999d's support team through the official channel set out in Section 13. We will respond to all valid requests within a reasonable timeframe, and in any event within 30 calendar days.

10. Children's Privacy

999d is an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. The 18+ age restriction is enforced at registration through date-of-birth collection and verified through KYC documentation. If 999d becomes aware that a registered account belongs to a person under 18, that account will be immediately closed, all data deleted (subject to legal retention obligations), and any balance voided. Parents or guardians who believe a minor may have registered an account on 999d.win should contact our support team immediately.

11. International Data Transfers

To deliver the 999d Platform, some personal data may be processed by service providers operating outside Pakistan — for example, game content providers and cloud infrastructure partners whose servers may be located in different jurisdictions. Where such transfers occur, 999d ensures that appropriate contractual safeguards are in place — including standard contractual clauses or equivalent data protection agreements — to ensure your data receives a standard of protection consistent with this Policy.

12. Changes to This Policy

999d reserves the right to update this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. For material changes — such as new categories of data collection or new sharing arrangements — we will make reasonable efforts to notify registered users via email prior to the change taking effect. Your continued use of the 999d Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a complaint about how 999d has handled your personal data, please contact our support team through the official 999d support channel. All privacy-related enquiries are handled with strict confidentiality. Contact: support@999d.win (plain text — not a clickable link).

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.