999r Casino – Privacy Policy

1. Overview

999r ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at 999r.asia. As operator of this platform, 999r acts as the data controller for personal data collected from users ("you", "Player", "User") who access the platform, register an account, or use any of our services.

This Privacy Policy is intended to inform you clearly and transparently about the personal data 999r collects, the purposes for which it is processed, the third parties with whom it may be shared, the period for which it is retained, and the rights you hold in relation to your data. This policy should be read alongside our Terms & Conditions.

999r is committed to handling personal data responsibly and in accordance with applicable international data protection standards. This policy applies to all users of the 999r platform, including Pakistani players who access 999r from Pakistan or while abroad.

2. Personal Data We Collect

999r collects the following categories of personal data from users:

999r does not knowingly collect special category data (such as health data, racial or ethnic origin, or political opinions) unless specifically required for regulatory compliance purposes and with your explicit consent.

3. How We Collect Your Data

3.1 Directly from You

The majority of personal data held by 999r is provided directly by you: at registration, during the KYC process, when making deposits or withdrawals, when contacting support, and when updating your account settings. You are not obligated to provide all requested information, but failure to do so may limit the services available to you — for example, KYC refusal will prevent withdrawals.

3.2 Automatically

When you access 999r, technical data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, the device and browser you use, the pages you visit, and the time you spend on each section of the platform. See Section 10 for full details on our cookie use.

3.3 From Third Parties

999r may receive data about you from third-party sources, including: identity verification providers during KYC processing; payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) in connection with deposit and withdrawal transactions; and fraud prevention and anti-money laundering screening services.

4. How We Use Your Personal Data

999r processes your personal data for the following purposes:

• Account management: Creating and maintaining your 999r account, verifying your identity, and enabling access to platform services.
• Service delivery: Processing deposits and withdrawals in PKR, recording bet and game activity, applying bonuses, and providing casino and sportsbook services.
• Regulatory compliance: Meeting anti-money laundering (AML), know your customer (KYC), and responsible gaming obligations under applicable international gaming regulations.
• Responsible gaming: Monitoring gaming behaviour to detect potential problem gambling indicators, applying self-exclusion orders, and enforcing deposit and loss limits set by users.
• Fraud prevention and security: Detecting and investigating fraudulent activity, duplicate accounts, and prohibited conduct as defined in the Terms & Conditions.
• Customer support: Responding to queries, resolving disputes, and providing technical assistance via live chat and email.
• Platform improvement: Analysing aggregated user behaviour data to improve platform performance, game recommendations, and payment method offerings — particularly relevant to the Pakistani user base.
• Marketing communications: Sending bonus notifications and promotional updates to users who have not opted out. You may opt out of marketing communications at any time via your account settings.

5. Legal Basis for Processing

999r processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have registered for — including account management, payment processing, and game delivery.
• Legal obligation: Processing required by applicable anti-money laundering, fraud prevention, and responsible gaming regulations — including KYC verification and player monitoring.
• Legitimate interests: Processing undertaken for 999r's legitimate interests in fraud prevention, platform security, and service improvement — where these interests are not overridden by your rights.
• Consent: Marketing communications and non-essential cookies, where consent is required and has been given. You may withdraw consent at any time.

6. Data Sharing & Third Parties

999r does not sell your personal data. Data may be shared with the following categories of third parties, under strict contractual data protection obligations:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and any other payment provider used to process your PKR deposits and withdrawals. Data shared is limited to what is necessary to complete the transaction.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity documents — including CNIC — and screen against relevant watchlists.
• Game software providers: Casino and sportsbook software providers whose games are hosted on the 999r platform may process limited technical data (such as session tokens) to deliver their games. They do not receive your identity or financial data.
• Technology and hosting providers: Cloud infrastructure, cybersecurity, and platform analytics providers who process data on 999r's behalf under data processing agreements.
• Regulatory and law enforcement authorities: 999r will disclose personal data to competent authorities when required by law, court order, or regulatory demand — including anti-money laundering reporting obligations.

All third-party data processors engaged by 999r are contractually required to process data only for the specific purposes authorised by 999r, to implement appropriate security measures, and to comply with applicable data protection standards.

7. Data Retention

999r retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying applicable regulatory retention requirements. Specific retention periods are as follows:

• Account data: Retained for the duration of account activity plus a minimum of five (5) years following account closure, to meet AML and gaming regulatory obligations.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documentation: Retained for a minimum of five (5) years from submission or account closure, whichever is later.
• Support communications: Retained for three (3) years unless subject to an unresolved dispute, in which case until final resolution.
• Technical and analytics data: Aggregated analytics data may be retained indefinitely; individually identifiable technical data is typically anonymised or deleted within 12 months.

Following the expiry of applicable retention periods, data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8. Data Security

999r implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:

• SSL/TLS encryption for all data in transit between your device and 999r's servers.
• Encryption at rest for sensitive stored data, including payment credentials and identity documents.
• Role-based access controls limiting staff access to personal data to those with a genuine operational need.
• Regular security assessments and penetration testing of the 999r platform.
• Incident response procedures for detecting, containing, and reporting data breaches in accordance with applicable obligations.

While 999r takes data security seriously, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own 999r account credentials. If you suspect that your account has been compromised, contact 999r support immediately via live chat.

9. Your Data Rights

Subject to applicable law and the regulatory obligations that 999r must comply with, you have the following rights in relation to your personal data:

• Right of Access: Request a copy of the personal data 999r holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. You may update much of your account information directly in your account settings.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: Request that 999r limits the processing of your data in certain circumstances — for example, while a data accuracy dispute is resolved.
• Right to Object: Object to processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests.
• Right to Data Portability: Request that personal data you have provided to 999r be provided to you in a structured, machine-readable format.

To exercise any of these rights, contact 999r's support team via live chat or the email address below. 999r will respond to verified requests within 30 calendar days. Note that certain rights may be limited by applicable legal and regulatory obligations — for example, 999r cannot delete AML-required KYC records within the mandatory retention period.

10. Cookies & Tracking Technologies

999r uses cookies and similar technologies to operate and improve the platform. Cookies are small data files stored on your device by your browser. 999r uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — including session management, login state, and security tokens. These cannot be disabled without preventing you from using 999r.
• Functional cookies: Remember your preferences — such as language settings and responsible gaming limits — to personalise your experience across sessions.
• Analytics cookies: Collect aggregated information about how users navigate and use the 999r platform, used to improve platform performance and content. No personally identifiable information is shared with analytics providers in aggregated reports.
• Marketing cookies: Used to serve relevant promotional content and measure the effectiveness of 999r's marketing activity. You may opt out of marketing cookies via your account or browser settings.

Most browsers allow you to manage or delete cookies. Disabling cookies beyond strictly necessary ones may affect your experience on the 999r platform.

11. Minors

999r is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. If 999r becomes aware that data has been collected from a person under 18, the account will be closed, the data deleted, and any deposits returned subject to verification. If you believe a minor has registered on 999r, please contact support immediately.

999r employs age verification procedures during registration and KYC processes specifically to prevent minors from accessing the platform. Parents and guardians in Pakistan are encouraged to use parental control software on shared devices to prevent underage access to online gambling platforms.

12. Changes to This Privacy Policy

999r may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Where changes are material — for example, a new category of data being collected or a new purpose for processing — 999r will notify registered users via their registered email address or via a platform notification prior to the change taking effect. Your continued use of the 999r platform following such notification constitutes acceptance of the revised policy.

13. Contact

For any questions, concerns, or data rights requests relating to this Privacy Policy, please contact the 999r data protection team. Support is available 24/7 via live chat on the platform. For written correspondence:

Email: [email protected]

Do not send sensitive personal data — including passwords, payment credentials, or identity documents — via unsecured email. For account security matters and data subject requests requiring identity verification, use the authenticated live chat channel.