This Privacy Policy explains what personal data 999p collects from Pakistani players, why we collect it, how we use and store it, who we share it with, and what rights you hold over your own information. We are committed to handling your data with transparency and care.
1.1 The data controller responsible for the personal data of 999p players is the legal entity that holds the international gaming licence under which 999p operates ("999p", "we", "us", "our"). As the data controller, 999p determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is conducted in accordance with applicable data protection principles and this Policy.
1.2 For all data protection enquiries, requests to exercise your rights, or concerns relating to how 999p handles your personal information, please contact our Data Protection team through the channels described in Section 15 of this Policy.
1.3 999p's operations are directed toward Pakistani players. While 999p operates under an international gaming licence, we acknowledge the importance of robust data protection for all users of the platform, including those based in Pakistan, and we apply internationally recognised data protection standards to all personal data we process.
999p collects the following categories of personal data in connection with the operation of its online gaming platform. We collect only the data that is necessary for the specified purposes and do not collect data excessively or without justification.
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, selfie/photograph for KYC verification | Registration & KYC verification |
| Contact Data | Pakistani mobile number, email address | Registration |
| Financial Data | JazzCash / EasyPaisa account numbers, bank account details (HBL, UBL, Meezan Bank, etc.), deposit & withdrawal transaction records, USDT wallet addresses | Deposit / withdrawal processing |
| Gaming & Betting Data | Wager amounts, game choices, session durations, win/loss records, betting history, casino game participation | Ongoing platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, geolocation (city-level) | Ongoing platform use |
| Usage Data | Pages visited, features used, time and duration of visits, referral source, click patterns | Ongoing platform use |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion status, session limit preferences, responsible gaming assessment responses | Account settings / assessments |
| Marketing Preferences | Communication opt-in/opt-out status, preferred contact channels, promotion redemption history | Registration & account settings |
3.1 Direct Collection
The majority of personal data we hold about you is provided directly by you — during the account registration process, when completing KYC verification, when making deposits or requesting withdrawals, when contacting our support team, or when responding to surveys or promotions. Any information you voluntarily provide through the 999p platform is collected and stored by us.
3.2 Automated Collection
Certain data is collected automatically as you interact with 999p.site. This includes Technical Data and Usage Data collected through server logs, browser storage mechanisms, and tracking technologies including cookies (see Section 8). This automated collection occurs whether or not you are logged into your Account at the time of the visit.
3.3 Third-Party Sources
In limited circumstances, 999p may receive personal data about you from third parties, including: (a) payment service providers such as JazzCash and EasyPaisa, who may confirm transaction authenticity; (b) identity verification services used during the KYC process; (c) fraud detection and AML screening services; and (d) analytics providers who aggregate anonymised usage data from multiple sources.
999p processes your personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis for each purpose.
5.1 Payment Service Providers: We share necessary financial and identity data with payment processors including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast to facilitate deposit and withdrawal processing. These providers process data only as necessary to complete the relevant transaction.
5.2 Game & Technology Providers: 999p's platform incorporates games and technology licensed from third-party providers. These providers may receive certain session and wagering data as necessary to deliver their games and maintain RNG integrity audits. All such providers are contractually bound to process this data only for the agreed purpose.
5.3 Identity Verification & KYC Services: CNIC documents and associated identity data are transmitted to third-party KYC verification services for the purpose of confirming your identity and satisfying our regulatory obligations. These services operate under strict data confidentiality agreements.
5.4 AML & Fraud Screening Services: Transaction and identity data may be processed by third-party AML screening services to detect and prevent money laundering, fraud, and other financial crime. Such processing is required under our operating licence conditions.
5.5 Legal & Regulatory Authorities: We may disclose personal data to relevant governmental, regulatory, or law enforcement authorities where required or permitted by applicable law, including in response to lawful court orders or regulatory investigations.
5.6 Professional Advisors: In specific circumstances, 999p may share personal data with legal, financial, or other professional advisors where such disclosure is necessary for the provision of professional services (for example, in connection with dispute resolution, litigation, or audit).
6.1 As an internationally licenced online gaming platform, 999p may transfer personal data to servers and service providers located outside of Pakistan. Where such transfers occur, 999p takes steps to ensure that your personal data is afforded an equivalent level of protection to that which applies within Pakistan.
6.2 Where personal data is transferred to third-party service providers located in jurisdictions without an equivalent level of data protection, 999p implements appropriate contractual safeguards — including standard contractual clauses or equivalent instruments — to protect transferred data.
6.3 By accepting this Privacy Policy and using the 999p platform, you acknowledge and consent to the transfer of your personal data across international borders as described in this Section, subject to the safeguards described herein.
7.1 999p retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is used, the resulting data no longer constitutes personal data and may be retained indefinitely for analytical purposes.
8.1 999p uses cookies and similar tracking technologies on 999p.site. Cookies are small data files stored on your device that help us recognise returning visitors, maintain your login session, and understand how the platform is used. The following categories of cookies are used:
8.2 You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before cookies are placed. Please note that disabling cookies may affect the functionality of the 999p platform, including your ability to stay logged in.
9.1 Where you have provided consent during registration or subsequently through your Account settings, 999p may send you marketing communications about promotions, new game releases, bonus offers, and platform updates via SMS to your registered Pakistani mobile number and/or email to your registered address.
9.2 You may withdraw your consent to marketing communications at any time by: (a) updating your marketing preferences in your Account settings; (b) replying STOP to any SMS communication; (c) clicking the unsubscribe link in any email communication; or (d) contacting 999p support directly.
9.3 Withdrawal of consent to marketing communications does not affect the lawfulness of processing carried out before withdrawal, nor does it affect 999p's right to send you transactional or service communications (such as deposit confirmations, withdrawal processing notifications, or Account security alerts), which are sent on the basis of contractual necessity and cannot be opted out of while your Account is active.
9.4 Players who have self-excluded from the 999p platform under Section 9.5 of the Terms & Conditions are automatically removed from all marketing communications lists and will not receive any promotional content from 999p for the duration of their self-exclusion period.
10.1 999p implements technical and organisational measures designed to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure, or access. These measures are reviewed and updated regularly to address emerging security threats and evolving best practices.
10.2 Specific security measures in place at 999p include:
10.3 No data transmission or storage system can be guaranteed to be one hundred percent secure. While 999p takes all reasonable steps to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, 999p will notify affected players without undue delay and in accordance with applicable regulatory obligations.
As a 999p player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact 999p's Data Protection team as described in Section 15. 999p will respond to all verifiable data rights requests within thirty (30) calendar days.
Request a copy of the personal data 999p holds about you (subject access request).
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where processing is no longer justified, subject to our legal retention obligations.
Request that we limit the processing of your data to storage only while a dispute or objection is being resolved.
Receive your personal data in a structured, machine-readable format for transfer to another service provider.
Object to processing based on legitimate interests, including profiling and direct marketing communications.
12.1 If you have reason to believe that a minor under the age of 21 has registered an Account on 999p or provided personal data through the platform, please notify us immediately at [email protected]. 999p takes all such notifications seriously and will investigate and act promptly.
12.2 999p employs age verification measures — including CNIC verification during KYC — to identify and remove underage players. Parents or guardians who are concerned about underage gambling should consider the use of parental control software and internet filtering tools to restrict access to gambling websites.
13.1 The 999p platform may contain references to or integrations with third-party services — including payment processors such as JazzCash and EasyPaisa, game providers, and customer support tools. Where you interact with these third-party services, their own privacy policies and data practices apply to any personal data collected directly by them.
13.2 999p is not responsible for the privacy practices of third-party websites or services that may be accessible through links from the 999p platform. We encourage you to read the privacy policies of any third-party services you interact with through the platform.
14.1 999p reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly affect your data rights or the way we process your personal information — we will notify you in advance by posting a notice on the platform and/or sending a communication to your registered email address or mobile number, as applicable.
14.2 The effective date of the most current version of this Policy is displayed at the top of this document. Continued use of the 999p platform following a Policy update constitutes acceptance of the revised Policy. If you do not agree with any update, you should discontinue use of the platform and request Account closure.
14.3 We recommend that you review this Privacy Policy periodically to stay informed about how 999p collects and uses personal data. The current version is always available at 999p.site/privacy-policy.
For any query, concern, or request relating to this Privacy Policy or to your personal data held by 999p, please contact us through the following channels. All email addresses are displayed as plain text — they are not clickable links.
This Privacy Policy was last reviewed and updated on 1 January 2026. The version published at 999p.site/privacy-policy is always the current operative version.
These are the six concrete data protection commitments built into every 999p player account — not aspirations, but operational standards applied to every Pakistani player on the platform.
Every byte of data exchanged between your device and 999p — including login credentials, CNIC uploads, and JazzCash transaction data — is protected by 256-bit SSL encryption, the same standard used by major Pakistani banks.
999p has never sold and will never sell player personal data to third parties for commercial purposes. Your data works for you — to run your account, process your JazzCash deposits, and deliver customer support — nothing more.
Every 999p player holds the right to access, correct, export, and delete their personal data. Submit a request through live chat or email and receive a substantive response within 30 days — no bureaucratic runaround.
Data is held only as long as legally and operationally necessary. Gaming history and account data is deleted or anonymised in accordance with the retention schedule published in this Policy — not retained indefinitely.
Your 999p account password is stored using one-way cryptographic hashing. No employee, agent, or system administrator at 999p can view your password in plain text — not even during a support interaction.
Marketing communications from 999p are entirely opt-in. If you have consented and later change your mind, unsubscribe in one click from any SMS or email. Self-excluded players are automatically removed from all marketing lists immediately.
Questions about your data, a subject access request, or want to update your marketing preferences? Our support team responds in under three minutes, 24/7, in Urdu and English.
Login to Your Account About 999p