999we Privacy Policy

This Privacy Policy ("Policy") describes how 999we ("999we", "we", "us", "our") collects, uses, stores, and protects personal data relating to registered players and visitors to the 999we platform, accessible at 999we.app.

999we is the data controller responsible for all personal data collected through the 999we platform. 999we operates under an international gaming licence and is committed to handling all personal data in accordance with applicable data protection legislation and the requirements of its licensing jurisdiction.

This Policy applies to all individuals who:

• Register or apply to register a 999we player account;
• Browse or interact with any part of the 999we platform, including from mobile devices;
• Contact 999we's customer support team via live chat, email, or any other channel;
• Participate in any 999we promotional campaign, bonus offer, or tournament.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and 999we. By using the 999we platform, you confirm that you have read and understood this Privacy Policy.

999we collects personal data through several channels: directly from you when you register and use the platform, automatically through technical systems as you interact with the platform, and in limited circumstances from third-party sources such as payment providers and identity verification services.

Information you provide directly to 999we:

• Registration data: Full legal name, date of birth, email address, phone number, and residential address (including city — Karachi, Lahore, Faisalabad, Islamabad, or elsewhere in Pakistan).
• Identity verification documents: Copy of your National Identity Card (CNIC), passport, or other government-issued ID submitted during the Know Your Customer (KYC) process.
• Payment information: JazzCash wallet number or reference, EasyPaisa mobile account reference, bank account name and branch details for HBL, UBL, or Meezan Bank transfers. Note: 999we does not store full bank account numbers; only the references necessary to process and verify transactions are retained.
• Support communications: Any information you share with the 999we support team via live chat, email to [email protected], or any other support channel.
• Responsible gaming self-declarations: Any voluntary disclosures made when setting deposit limits, requesting self-exclusion, or engaging with responsible gaming tools.

Information collected automatically:

• Technical data: Your IP address, device type (mobile or desktop), operating system, browser type and version, and internet service provider.
• Session and usage data: Pages visited on the 999we platform, games played (including cricket betting, slot, and fishing game sessions), time and duration of activity, and click behaviour.
• Transaction logs: All deposit and withdrawal transactions — including amount in PKR, date, time, payment method used, and transaction status.
• Cookies and similar technologies: Session identifiers and analytics data collected via cookies placed on your device. See Clause 08 for full cookie details.

Information received from third parties:

• Identity verification results from KYC service providers used by 999we to verify the authenticity of identity documents.
• Transaction confirmation data from JazzCash, EasyPaisa, and banking partners confirming that a deposit or withdrawal has been processed.
• Fraud screening data from payment processors used to identify potentially fraudulent transactions before they are approved.

999we uses the personal data it collects exclusively for the following purposes. We do not use your data for any purpose beyond those described here without first obtaining your explicit consent.

• Account creation and management: To create and maintain your 999we player account, verify your identity, and manage your account settings and preferences.
• Transaction processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; to maintain accurate transaction records; and to resolve any payment disputes.
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years before permitting access to real-money gaming features.
• Platform security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, money laundering, and other fraudulent or prohibited activity.
• Customer support: To respond to your queries, complaints, and support requests efficiently and accurately.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to apply deposit limits, loss limits, cooling-off periods, or self-exclusion restrictions where triggered or requested.
• Regulatory compliance: To meet our obligations under the terms of 999we's international gaming licence, including anti-money laundering (AML) reporting and Know Your Customer (KYC) requirements.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the 999we platform for Pakistani players.
• Service communications: To send you transactional emails and notifications relating to your account — such as deposit confirmations, withdrawal updates, and security alerts. These are not marketing messages and cannot be opted out of while your account is active.
• Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and PSL cricket betting updates — but only if you have explicitly opted in to marketing communications. You can opt out at any time via your account settings.

999we processes your personal data only where it has a valid legal basis for doing so. The legal bases on which 999we relies are as follows:

• Contract performance: Processing that is necessary to deliver the 999we service to you — including account management, transaction processing, and customer support — is carried out on the legal basis of contract performance. Without this processing, 999we cannot operate your account.
• Legal obligation: Certain processing — particularly identity verification (KYC), transaction record-keeping, and AML reporting — is required by the terms of 999we's gaming licence and applicable financial regulations. This processing cannot be refused by players.
• Legitimate interests: 999we processes technical and security data on the basis of legitimate interests — specifically, the interest of keeping the platform secure, preventing fraud, and maintaining the integrity of gaming outcomes. 999we has assessed that this processing does not override players' privacy rights.
• Vital interests: Responsible gaming data — including self-exclusion status and problem gambling indicators — may be processed on the basis of vital interests where there is a genuine risk to the player's wellbeing.
• Consent: Marketing communications and non-essential cookies are processed only where you have given explicit, freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

999we does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your PKR deposits and withdrawals. Each payment provider operates under its own privacy policy and applicable financial services regulations.
• Identity verification providers: Third-party KYC and document verification services receive copies of identity documents submitted by players for the purpose of age and identity verification. These providers are contractually prohibited from using your data for any other purpose.
• Game software providers: Third-party casino game developers and sports data providers receive anonymised session identifiers necessary to deliver game content and betting market data. They do not receive your full personal profile.
• Regulatory authorities: 999we is required to share certain player data — including identity records and transaction histories — with the regulatory authority responsible for our gaming licence, and with law enforcement agencies where required by law. This includes AML reporting obligations.
• Professional advisers: Legal, financial, and compliance advisers engaged by 999we may access personal data on a need-to-know basis, subject to professional confidentiality obligations.
• Business transfers: In the event that 999we undergoes a merger, acquisition, or sale of assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and given the opportunity to request account closure before the transfer takes effect.

999we's platform infrastructure and data processing systems are operated from the jurisdiction in which 999we holds its international gaming licence. As a result, personal data collected from Pakistani players may be transferred to and stored in servers located outside of Pakistan.

Where personal data is transferred internationally, 999we ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required in the originating jurisdiction. These safeguards include:

• Contractual clauses in data processing agreements with all international service providers that impose equivalent data protection standards;
• Transfer only to jurisdictions that maintain adequate data protection frameworks recognised by 999we's licensing authority;
• Technical security measures — including encryption in transit and at rest — that apply equally to data regardless of where it is stored.

If you would like further information about the specific safeguards 999we has in place for international data transfers, please contact the 999we support team at [email protected].

999we implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption: All data transmitted between your device and the 999we platform is encrypted using TLS (Transport Layer Security). Data stored on 999we's servers is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within 999we is restricted to employees and contractors with a genuine need to access that data in the course of their duties. All internal access is logged and audited.
• Payment security: PKR payment credentials are handled in accordance with the security requirements of each payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank). 999we does not store full payment account numbers.
• Penetration testing: 999we's platform undergoes regular security assessments and penetration testing to identify and remediate potential vulnerabilities.
• Incident response: 999we maintains a data breach response procedure. In the event of a personal data breach that poses a risk to player rights, 999we will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

While 999we takes all reasonable steps to protect your personal data, no internet-based system is completely immune from security risks. You also have a responsibility to keep your own account credentials secure — please review Clause 03 of the Terms & Conditions for your account security obligations as a player.

999we uses cookies and similar browser-based storage technologies on the 999we platform. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What is a cookie? A cookie is a small text file placed on your device by a website you visit. Cookies help websites remember information about your visit — such as your login session — so that you do not need to re-enter information on every page.

Categories of cookies used by 999we:

• Strictly necessary cookies: These cookies are essential for the 999we platform to function. They maintain your login session, remember your preferred language, and enable secure processing of your PKR deposits and withdrawals. These cookies cannot be disabled without disrupting the platform's core functions.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the 999we platform — such as which game categories are visited most frequently and how long sessions last. This data helps 999we improve the platform experience for Pakistani players. These cookies are enabled by default but can be disabled in your browser settings.
• Functional cookies: These cookies remember your preferences — such as your preferred payment method display or game category filter settings — to provide a more personalised experience. Disabling them will not break the platform but may result in a less personalised experience.

What 999we does NOT use cookies for:

• 999we does not use third-party advertising or retargeting cookies.
• 999we does not allow social media platforms to place tracking pixels on the 999we platform.
• 999we does not use cookies to build advertising profiles or sell your browsing behaviour to any third party.

You can manage or delete cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies will impair your ability to use the 999we platform, including logging in and processing transactions.

999we treats responsible gaming data as a special and sensitive category of personal data that warrants the highest level of privacy protection. This includes all data relating to:

• Self-exclusion requests and self-exclusion status;
• Deposit limits, loss limits, and session time limits set by the player;
• Cooling-off period activations;
• Any risk assessments or player welfare reviews conducted by 999we's responsible gaming team;
• Voluntary disclosures of gambling-related difficulties made through the support channel.

This data is accessible only by the responsible gaming and compliance teams within 999we on a strict need-to-know basis. It is never used for marketing or promotional purposes. It is never shared with third parties except where required by our licensing obligations or where the player's vital interests necessitate disclosure — for example, reporting to a national self-exclusion register where required by the licensing jurisdiction.

Self-exclusion data is retained permanently to ensure that a player who has self-excluded cannot circumvent the exclusion by re-registering. This is a player protection measure, not a marketing measure. For further information on 999we's responsible gaming tools, please visit the Responsible Gaming page.

As a 999we player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact 999we's support team at [email protected] with your account username and a description of your request.

• Right of access: You have the right to request a copy of all personal data that 999we holds about you, together with information about how it is being used. 999we will provide this within 30 days of receiving a valid request.
• Right to rectification: If any personal data that 999we holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic contact details can be updated directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to overriding legal obligations — 999we cannot delete data that it is required to retain under its licensing or AML obligations.
• Right to restrict processing: In certain circumstances — such as where you contest the accuracy of data we hold — you may request that 999we restrict processing of your personal data while the matter is resolved.
• Right to data portability: Where processing is based on your consent or a contract, you have the right to receive a copy of your personal data in a structured, machine-readable format that can be transferred to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests at any time. 999we will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications or non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The 999we platform is strictly for adults aged 21 years and older. 999we does not knowingly collect personal data from any individual under the age of 21. This age restriction applies equally to all Pakistani players regardless of city or province.

All applicants for a 999we player account are required to submit identity verification documents confirming their date of birth before real-money gaming features are activated. Accounts where age verification fails or is declined are immediately suspended pending further review.

If 999we becomes aware that personal data has been collected from a player who is under 21 years of age, we will immediately:

• Suspend the relevant account;
• Return any remaining balance via the original payment method (JazzCash, EasyPaisa, or bank transfer as applicable);
• Permanently delete all personal data associated with the underage account, subject to any retention obligations required by our licensing authority.

If you believe that a minor has registered a 999we account, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports without delay.

999we retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law and licensing obligations. The key retention periods are as follows:

• Active accounts: All personal data associated with an active 999we account is retained for the duration of the account's activity.
• Closed accounts: Following account closure, identity data, contact data, gaming data, and responsible gaming data are retained for a minimum of five years. This period is required by 999we's licensing authority to enable regulatory audits.
• Financial records: Transaction records — including all PKR deposits and withdrawals via JazzCash, EasyPaisa, and bank transfer — are retained for a minimum of seven years following the transaction date. This is a legal requirement related to AML compliance.
• Self-exclusion records: Self-exclusion data is retained permanently to prevent a self-excluded player from re-registering. This is a player protection measure mandated by responsible gaming best practices.
• Technical and analytics data: IP address logs and session analytics data are retained for a maximum of 12 months from the date of collection.
• Support communications: Customer support transcripts and email correspondence are retained for three years from the date of the last communication in a case.

Upon expiry of the applicable retention period, 999we will securely delete or anonymise your personal data so that it can no longer be used to identify you. If you request account deletion before a retention period has expired, 999we will restrict access to your data but cannot delete it until the legal retention period has elapsed.

999we may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When material changes are made to this Policy, 999we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date;
• Send a notification to all registered 999we players via the email address associated with their account, summarising the key changes;
• Where required by applicable law, seek fresh consent from players before applying new processing purposes that were not covered by the previous version of this Policy.

Your continued use of the 999we platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms, subject to any rights you have under applicable data protection law. If you do not accept the revised Privacy Policy, you should cease using the 999we platform and request account closure by contacting our support team.

We encourage all 999we players — whether based in Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan — to review this Privacy Policy periodically to stay informed about how your personal data is being handled.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Clause 10, or wish to raise a concern about how 999we handles your personal data, please contact the 999we support and data team using the details below.

Email (plain text — not a clickable link):
[email protected]

Response time: 999we aims to acknowledge all data-related enquiries within 48 hours and to provide a full response within 30 calendar days.

What to include in your request:

• Your full name as registered on your 999we account;
• Your 999we account username or registered email address;
• A clear description of the request (e.g., access request, deletion request, objection to processing);
• For security verification purposes, 999we may ask you to confirm your identity before processing any data rights request.