999d Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 999d ("the Platform," "we," "us," or "our") collects, processes, stores, and protects personal data relating to individuals ("players," "you," or "your") who access or use the 999d online casino and sports betting platform at 999d.bio. 999d is committed to processing personal data lawfully, transparently, and in a manner that respects the privacy rights of every player.

This Policy should be read alongside the 999d Terms & Conditions and Responsible Gaming policy. By registering on 999d or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you have questions about how 999d handles your personal data, you are welcome to contact our support team at any time via live chat or by email. Contact details are provided in Section 15 of this Policy.

2. Data Controller

For the purposes of applicable data protection law, 999d acts as the data controller in respect of all personal data collected from players through the platform. As data controller, 999d determines the purposes and means of processing personal data and is responsible for ensuring that processing activities comply with applicable data protection obligations.

Where 999d engages third-party service providers — including payment processors, identity verification services, and fraud prevention platforms — those providers act as data processors operating under contractual data processing agreements that restrict their use of player data to the specific purpose for which it was shared.

3. Data We Collect

999d collects the following categories of personal data from players, depending on how they interact with the platform:

3.1 Registration Data

When you create a 999d account, we collect the information you provide in the registration form, which includes:

• Full legal name as it appears on your national identity documents
• Date of birth (used for mandatory age verification — 999d is strictly 21+)
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan)
• Mobile phone number (used for account verification and support communications)
• Email address (used for account notifications and correspondence)
• Username and password (password stored in hashed, non-reversible format)

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and prevent fraud, underage gambling, and money laundering, 999d may request the following verification documents at any point during your use of the platform:

• Copy of a valid Pakistani CNIC (Computerised National Identity Card) or passport
• Proof of residential address (e.g., a recent utility bill or bank statement)
• Proof of payment method ownership (e.g., a screenshot of your JazzCash or EasyPaisa account showing your name and mobile number)
• A selfie or short video for liveness verification where required

3.3 Financial Transaction Data

For every deposit and withdrawal processed through your 999d account, we record transaction details including the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20), transaction amount in PKR, transaction date and time, and the transaction reference number. Full payment instrument credentials (such as complete card numbers or mobile wallet PINs) are never stored by 999d — these are handled directly by our PCI-DSS-compliant payment processors.

3.4 Gameplay and Betting Data

999d records all gaming activity on the platform, including wagers placed, games played (slots, Dragon Tiger, live tables, cricket betting markets, etc.), bet amounts, game outcomes, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting purposes.

3.5 Technical and Device Data

When you access the 999d platform, our servers automatically record certain technical data, including your IP address, browser type and version, device type and operating system, session timestamps, and pages or game screens visited. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

If you contact 999d support via live chat or email, we retain records of those communications — including the content of messages and any attachments — for quality assurance, dispute resolution, and regulatory audit purposes.

4. How Data Is Collected

999d collects personal data through the following means:

• Directly from you — when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact support, or update your account profile.
• Automatically — through server logs, session tracking, and cookies when you browse or interact with the 999d platform.
• From third-party service providers — including identity verification services, payment processors, and fraud detection platforms, which may provide supplementary data to verify the accuracy of information you have submitted.

5. Purpose and Legal Basis for Processing

999d processes personal data only where a lawful basis for processing exists. The table below sets out the primary purposes for which 999d processes personal data and the corresponding legal basis for each:

Processing Purpose	Legal Basis
Account registration and authentication	Performance of contract (Terms & Conditions)
Processing deposits and withdrawals in PKR	Performance of contract
Identity and age verification (KYC)	Legal obligation under licensing requirements
Fraud detection and prevention	Legitimate interests of 999d and player protection
Responsible gaming monitoring	Legal obligation and legitimate interests
Customer support and dispute resolution	Performance of contract and legitimate interests
Platform security and technical operations	Legitimate interests of 999d
Regulatory reporting and compliance	Legal obligation
Sending account-related notifications	Performance of contract
Promotional communications (where opted in)	Consent

6. Sharing Your Data

999d does not sell, rent, or trade personal data to third parties. We share personal data only in the following limited and necessary circumstances:

6.1 Payment Processors

To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, 999d shares the minimum necessary transaction and identity data with the relevant payment processor. These providers operate under data processing agreements and are not permitted to use your data for any purpose other than processing the specific transaction.

6.2 Identity Verification Services

Where 999d uses a third-party KYC provider to verify CNIC documents or conduct liveness checks, relevant identity data is shared with that provider solely for the purpose of completing the verification. KYC providers are bound by confidentiality obligations and applicable data protection law.

6.3 Fraud Prevention and Security

999d may share technical data — including IP addresses, device identifiers, and transaction patterns — with fraud prevention platforms and security partners to detect and prevent account takeover, bonus abuse, and financial fraud. This is carried out under our legitimate interest to protect the platform and its players.

6.4 Regulatory and Legal Disclosure

999d may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts where such disclosure is required by applicable law, a valid court order, or a binding regulatory direction. In such cases, 999d will disclose only the data required to comply with the specific legal obligation and will notify the affected player where permitted by law to do so.

6.5 Business Transfers

In the event that 999d undergoes a merger, acquisition, or sale of all or substantially all of its assets, player personal data may form part of the transferred assets. Players will be notified of any such transfer and any material changes to data processing arrangements that result from it.

7. Data Retention

999d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or our licensing obligations. The following general retention guidelines apply:

• Account and registration data — retained for the duration of the account relationship and for a minimum period following account closure as required under applicable anti-money laundering regulations.
• KYC verification documents — retained for a minimum period following account closure, in line with licensing and financial crime prevention requirements.
• Financial transaction records — retained for the period required under applicable financial record-keeping obligations.
• Gameplay and betting history — retained to support dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Support communications — retained for a reasonable period following resolution of the relevant support interaction.
• Technical and device logs — retained for a shorter period commensurate with their security and operational purpose, after which they are deleted or anonymised.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in a manner that prevents recovery or re-identification.

8. Security Measures

999d implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between players and the 999d platform
• Encryption of sensitive data at rest within 999d's database infrastructure
• Role-based access controls ensuring that only authorised staff can access personal data, limited to what is necessary for their specific function
• Multi-factor authentication requirements for internal administrative access to player data systems
• Regular security audits and penetration testing of platform infrastructure
• Automated monitoring for unusual access patterns and potential data breach indicators
• Secure data disposal procedures ensuring personal data is irretrievably destroyed when it is no longer required

While 999d takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their 999d account and to enable any available account security features such as two-step verification.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by the 999d platform when you visit or interact with it. They allow the platform to recognise your device across multiple sessions, maintain your login state, and remember certain preferences. 999d uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

9.2 Types of Cookies Used

• Strictly necessary cookies — required for the platform to function correctly, including maintaining your authenticated session and remembering items in your betting slip. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies — used to collect aggregated, anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve platform performance and user experience.
• Functional cookies — used to remember player preferences such as language settings and display preferences across sessions.
• Security cookies — used to detect fraudulent behaviour, bot activity, and account takeover attempts.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser's settings. Please note that disabling certain cookies may affect the functionality of the 999d platform. Instructions for managing cookies are available in the help documentation of all major browsers.

10. Your Privacy Rights

As a player on 999d, you have the following rights in relation to your personal data. These rights can be exercised by contacting the 999d support team via live chat or email:

• Right to Access: You may request a copy of the personal data 999d holds about you at any time. We will respond to access requests within a reasonable period.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations that prevent immediate deletion.
• Right to Restrict Processing: In certain circumstances, you may request that 999d restrict the processing of your personal data while a query or complaint is being resolved.
• Right to Data Portability: Where processing is based on consent or contract, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on 999d's legitimate interests, subject to 999d demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Protection of Minors

999d is strictly an adult platform. The minimum age to register and use 999d is 21 years. We do not knowingly collect personal data from individuals under the age of 21. Age verification is applied as a mandatory step during the registration process, and additional documentary age verification may be requested at any time during a player's use of the platform.

If 999d becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately closed, the data deleted in accordance with our retention policy, and any deposits refunded where possible. If you believe a minor has registered on 999d, please notify our support team immediately so that appropriate action can be taken without delay.

12. International Data Transfers

999d operates under an international gaming licence and may process or store personal data on servers located outside of Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that available under applicable Pakistani law, 999d implements appropriate safeguards — such as contractual data transfer agreements — to ensure that your personal data continues to receive an adequate standard of protection regardless of where it is processed.

By registering on 999d, you acknowledge and consent to the transfer of your personal data to other jurisdictions where this is necessary for the operation of the platform, subject to the safeguards described above.

13. Third-Party Services and Links

The 999d platform may reference or integrate with third-party service providers — including payment gateways, live dealer game studios, and identity verification services — in order to deliver certain platform features. While 999d selects third-party providers carefully and requires them to operate under appropriate data protection agreements, 999d is not responsible for the privacy practices of those providers beyond the scope of their contractual obligations to 999d.

Players should be aware that third-party payment applications such as JazzCash and EasyPaisa operate under their own independent privacy policies when processing transactions. 999d encourages players to review the privacy policies of any third-party service they use in connection with their 999d account activity.

14. Changes to This Privacy Policy

999d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. Where changes are material, 999d will make reasonable efforts to notify registered players via the email address on record or through a notification displayed on the platform.

The revised Policy will be effective from the date it is published on this page. Your continued use of the 999d platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the platform and may request account closure by contacting the support team.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999d processes your personal data, please contact the support team through any of the following channels:

• Live Chat: Available 24/7 directly within the 999d platform dashboard
• Email: [email protected] (responses within 4 hours during standard operating periods)

When submitting a data rights request or privacy-related query, please include your registered account username and the email address associated with your 999d account so that we can locate your records promptly and respond efficiently.