Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, 999p (operating the platform at 999p.asia) acts as the data controller in respect of personal data submitted by Users through the 999p registration process, account management interface, payment processing flow, and all other interactions with the 999p platform. Any questions or requests relating to the processing of your personal data should be directed to the 999p Data Protection contact address set out in Section 13 of this Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register a 999p Account or use 999p Services, we collect the following categories of personal data that you provide to us:

• Identity Data: Your real name, date of birth, and any government-issued identification documents submitted as part of the Know Your Customer (KYC) verification process.
• Contact Data: Your registered Pakistani mobile number and any email address optionally provided.
• Financial Data: Payment method identifiers (e.g., your JazzCash or Easypaisa registered number, bank account reference numbers) necessary for deposit and withdrawal processing. 999p does not store full bank account credentials or payment card numbers on its servers.
• Account Credentials: Your chosen username. Your password is stored in a cryptographically hashed form only – 999p cannot recover or read your plaintext password.
• Communications Data: The content of any correspondence you send to 999p support, including live chat transcripts, for quality assurance and dispute resolution purposes.

2.2 Information Collected Automatically

When you access the 999p platform, we automatically collect certain technical and behavioural data, including:

• Device & Connection Data: IP address, device type, operating system, browser type and version, mobile network operator, and screen resolution.
• Usage Data: Pages visited within 999p.asia, games played, bets placed, time and duration of sessions, navigation paths, and feature interactions.
• Transaction Data: A full record of all deposits, withdrawals, bets, game rounds, bonus activations, and balance adjustments associated with your 999p Account.
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 6 below.

3. How We Use Your Data

999p processes personal data for the following purposes:

• Account Management: To create, maintain, and administer your 999p Account, including identity verification, authentication, and account security.
• Service Delivery: To process bets, run casino games, calculate and credit winnings, process deposits and withdrawals, and deliver all other 999p Services you access.
• Regulatory Compliance: To fulfil anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations, including age verification, transaction monitoring, and suspicious activity reporting.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, collusion, and other prohibited activities.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to apply responsible gaming tools activated by the User, and to enforce self-exclusion and deposit limit settings.
• Customer Support: To respond to queries, resolve disputes, investigate complaints, and improve service quality.
• Communications: To send transactional notifications (deposit confirmations, withdrawal updates, security alerts) to your registered mobile number. Promotional communications are sent only where you have opted in or where permitted under applicable law.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the 999p platform, fix bugs, optimise performance, and develop new features.

4. Legal Basis for Processing

999p processes personal data on the following legal bases depending on the purpose of processing:

• Contractual Necessity: Processing necessary to perform the contract between 999p and the User, including account administration, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML, KYC, and responsible gaming obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by the User's fundamental rights and freedoms.
• Consent: Processing for optional promotional communications where the User has expressly opted in. Consent may be withdrawn at any time by contacting 999p support.

5. Sharing Your Personal Data

999p does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Payment Processors: We share the minimum necessary financial and identity data with payment service providers including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah solely for the purpose of processing deposits and withdrawals.
• Game Providers: Session data (player ID, game session identifiers, bet and win amounts) is shared with third-party game studios (Evolution, Ezugi, Pragmatic Play, PG Soft, JILI, Spribe, and others) to deliver their licensed games within the 999p platform. These providers operate under contractual data processing agreements with 999p.
• Regulatory Authorities: We will disclose personal data to competent authorities, law enforcement agencies, or courts where required by applicable law, legal process, or regulatory demand, including mandatory suspicious transaction reports.
• Fraud Prevention Services: We may share data with third-party fraud detection and identity verification services for the purpose of protecting Users and the 999p platform from fraudulent activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 999p's business, personal data held by 999p may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties to whom 999p discloses personal data are required to maintain appropriate technical and organisational security measures and to process such data only for the purposes for which it was shared.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. 999p uses cookies and similar technologies (including local storage and session storage) on 999p.asia for the purposes described below.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your 999p Account during a session. These cookies cannot be disabled without disrupting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game lobby view, and responsible gaming tool configurations.
• Analytical Cookies: Collect anonymised data about how Users navigate the 999p platform to help us improve performance and user experience. Data collected through analytical cookies is aggregated and does not identify individual Users.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and abuse of the platform.

6.3 Managing Cookies

You may control cookie settings through your browser's built-in cookie management tools. Please note that disabling strictly necessary cookies will prevent you from logging in to your 999p Account and using 999p Services. Instructions for managing cookies are available in the help documentation of all major browsers.

7. Data Retention

999p retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Account data is retained for the duration of the active account relationship and for a minimum period of five (5) years following account closure, to comply with applicable AML, regulatory, and audit trail requirements.
• Transaction records (deposits, withdrawals, bets, game rounds) are retained for a minimum of five (5) years from the date of the transaction.
• KYC and identity verification documents are retained for the period required by applicable anti-money laundering regulations, typically five (5) years from the date of submission.
• Customer support communications are retained for two (2) years from the date of the last interaction, unless a longer retention period is required for an unresolved dispute.
• Anonymised or aggregated analytical data may be retained indefinitely as it does not constitute personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

8. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 999p:

• Right of Access: You have the right to request a copy of the personal data 999p holds about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Many data fields can be updated directly within your 999p Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 999p's legal retention obligations described in Section 7.
• Right to Restriction: You may request that 999p restrict processing of your personal data in certain circumstances, such as while a data accuracy dispute is resolved.
• Right to Object: You may object to processing based on legitimate interests. 999p will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., promotional communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact 999p via the details in Section 13. We will respond within a reasonable timeframe and in any event within thirty (30) days of receiving a verifiable request.

9. Data Security

999p implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Users' devices and 999p servers.
• Cryptographic hashing of account passwords using industry-standard algorithms. Plaintext passwords are never stored.
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the 999p platform infrastructure.
• Automatic session timeout for inactive 999p Account sessions.
• Optional two-step verification (OTP-based) for 999p Account login, which all Users are strongly encouraged to activate.

While 999p employs industry-standard security practices, no digital platform can guarantee absolute security. In the event of a personal data breach that poses a risk to Users, 999p will notify affected Users and relevant authorities in accordance with applicable requirements.

10. Children's Privacy

999p Services are strictly intended for adults aged 18 years and above. 999p does not knowingly collect personal data from any individual under the age of 18. If 999p becomes aware that personal data has been collected from a minor, that data will be promptly deleted and the associated account closed. If you are a parent or guardian and believe that a minor in your care has registered on 999p, please contact 999p support immediately using the contact details in Section 13.

11. Third-Party Links

The 999p platform may contain links to third-party websites or services (for example, links to responsible gaming resource organisations). This Privacy Policy applies solely to the 999p platform. 999p is not responsible for the privacy practices or content of any third-party website. Users are encouraged to review the privacy policies of any third-party sites they visit via links from 999p.asia.

12. Changes to This Privacy Policy

999p reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, operational practices, or platform features. Material changes to this Policy will be communicated to registered Users via SMS to the registered mobile number and/or by a notice on the 999p platform. The revised Policy will take effect from the date stated in the "Last updated" notice at the top of this page. Continued use of 999p Services following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should cease using 999p Services and contact support to request account closure.

13. Contact Us

For any privacy-related queries, to exercise your data rights, or to raise a concern about how 999p handles your personal data, please contact the 999p Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: 24/7 support via the chat widget on 999p.asia
• Subject line: Please include "Privacy Request" or "Data Rights" in your message subject to ensure prompt routing to the correct team.

When submitting a data rights request, please include your registered mobile number for identity verification. 999p will acknowledge receipt of your request and provide a substantive response within thirty (30) days. Complex requests may require additional time, in which case 999p will notify you of the expected resolution date.