Privacy Policy — How 999xxx Handles Your Personal Data

1. Introduction

This Privacy Policy explains how 999xxx ("we", "us", "our") collects, uses, stores and protects the personal information of users ("you", "your") who register and play on the 999xxx platform at https://999xxx.biz. It applies to every person who creates a 999xxx account, visits the website or contacts our customer support team.

999xxx is committed to handling your personal data responsibly and transparently. We collect only what is genuinely necessary to operate your account, process your transactions and keep the platform secure. Nothing more. The language in this policy is intentionally plain — we want every Pakistani player to understand exactly what happens to their information, not just those with a legal background.

By registering at 999xxx or using any feature of the platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described in it. This policy should be read alongside the Terms and Conditions.

2. What Data 999xxx Collects

2.1 Registration Data

When you create a 999xxx account, we collect: your full name, date of birth, Pakistani mobile number, email address (if provided) and the username and password you choose. This information is required to create and verify your account.

2.2 Identity Verification Data

For age verification and anti-fraud purposes, 999xxx may request a copy of a government-issued identity document — typically a CNIC or Passport — for certain accounts. This document is used solely for verification and is stored securely with restricted internal access.

2.3 Financial and Payment Data

When you make a deposit or request a withdrawal at 999xxx, we collect the payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card), the transaction amount in PKR, the date and time of the transaction and a reference number. For card payments, only the card type and last four digits are stored. Full card numbers are never stored on 999xxx systems. Mobile wallet account numbers are tokenised before storage.

2.4 Gaming and Behavioural Data

We record a log of your game sessions at 999xxx — which games were played, bet amounts, game outcomes, session duration and total wagering activity. This data is used to process your account history, handle any game disputes, calculate bonus wagering progress and detect unusual patterns that may indicate fraud or problem gambling behaviour requiring responsible gaming intervention.

2.5 Technical and Device Data

When you access 999xxx, our systems automatically collect certain technical data: your IP address, device type, operating system version, browser type, screen resolution and general geographic location based on IP. This data is used for security monitoring, fraud detection and platform optimisation — for example, ensuring the mobile version of 999xxx works correctly on the device types most commonly used by Pakistani players.

2.6 Customer Support Records

If you contact the 999xxx support team via live chat, email or any other channel, we retain a record of that conversation. These records are used for quality assurance, dispute resolution and to maintain a history of your support interactions so that agents can assist you more efficiently in future contacts.

3. How 999xxx Uses Your Data

999xxx uses your personal data only for the following purposes. We do not use your data for anything not listed here, and we do not process your data in ways you would reasonably find unexpected or objectionable.

• Account operation: Creating, managing and securing your 999xxx account — processing logins, managing your balance and maintaining your transaction history.
• Payment processing: Executing your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payment channels. Verifying that payment accounts belong to the registered account holder.
• Age and identity verification: Confirming that you meet the 18+ age requirement and that your account belongs to the person whose details were registered.
• Fraud and security: Detecting and preventing fraudulent account activity, suspicious payment patterns, multi-accounting and any other behaviour that may harm the integrity of 999xxx or other players.
• Responsible gaming: Monitoring gaming patterns for signs of problem gambling behaviour and enabling our responsible gaming team to make proactive contact where appropriate.
• Customer support: Resolving queries, disputes and complaints using your account and interaction history.
• Platform improvement: Using aggregated, anonymised technical and behavioural data to identify performance issues and improve the 999xxx experience for Pakistani players overall.
• Marketing communications: Sending you promotions and bonus offers by SMS or email — only if you have not opted out. You can withdraw marketing consent at any time.
• Legal compliance: Meeting our obligations under applicable law, including responding to valid legal requests and regulatory requirements.

4. Data Sharing and Third Parties

999xxx does not sell, rent or share your personal data with third parties for their own commercial or marketing purposes. Period. The only circumstances in which your data is shared with any external party are the following strictly limited situations:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and card payment networks receive only the transaction data necessary to process your specific deposit or withdrawal. They do not receive your gaming history or any account information beyond what is required for the transaction.
• Identity verification providers: If 999xxx uses a third-party verification service to authenticate your CNIC or passport, that service receives only the document you submit and returns a verified/not-verified result. They do not retain your document beyond the verification process.
• Game providers: The game software studios whose titles are hosted on 999xxx receive anonymised session data to enable game functionality and RNG certification audits. They do not receive your name, contact details or payment information.
• Legal and regulatory authorities: If 999xxx receives a valid legal order or regulatory requirement to disclose specific data, we are obligated to comply. We will inform the affected player where we are legally permitted to do so.

All third parties who handle any 999xxx player data are required by contract to use that data only for the specific purpose it was shared, to maintain appropriate security standards and to delete it when the purpose is fulfilled. 999xxx does not transfer player data outside of secured, contracted relationships.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit. 999xxx uses cookies to keep you logged in between sessions, remember your preferences, analyse how the platform is used and detect suspicious activity. Without essential cookies, the 999xxx platform cannot function correctly.

5.2 Types of Cookies Used by 999xxx

• Essential cookies: Required for the 999xxx platform to operate — session management, security tokens and login state. These cannot be disabled.
• Functional cookies: Remember your language preference, last visited game room and display settings to improve your experience. You can disable these without losing core platform functionality.
• Analytics cookies: Collect anonymised data about which parts of 999xxx are most used, how long sessions last and where performance issues occur. This data helps us improve the platform for Pakistani players. No personally identifiable information is included in analytics data.

5.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from logging into 999xxx. Disabling analytics cookies will not affect your ability to play or withdraw.

6. How 999xxx Secures Your Data

Data security is taken seriously at 999xxx. The following technical and organisational measures are in place to protect your personal information:

• SSL/TLS encryption: All data transmitted between your device and 999xxx is encrypted using current SSL/TLS standards. The padlock symbol in your browser confirms this is active.
• Encrypted data storage: Personal data and financial records stored on 999xxx servers are encrypted at rest. Raw data is not accessible to unauthorised parties even if physical storage media were to be compromised.
• Access controls: Internal access to player data at 999xxx is restricted on a strict need-to-know basis. Support agents see only the account information required to resolve your query. Sensitive fields such as identity documents are accessible only to the compliance team.
• Two-factor authentication: 999xxx offers optional two-factor authentication (2FA) for player account logins. We strongly recommend all players enable this feature for additional account security.
• Fraud monitoring: Automated systems monitor 999xxx accounts continuously for unusual activity — including login from unexpected locations, rapid changes to payment methods and suspicious transaction patterns. Flagged accounts are reviewed by our security team.
• Security audits: 999xxx undergoes periodic security assessments to identify and address vulnerabilities before they can be exploited.

No online platform can offer a 100% guarantee against all possible data security risks. However, 999xxx implements industry-standard protections and continuously monitors systems to minimise the risk to your data. In the event of a data breach that poses a risk to your rights, we will notify affected players promptly and take immediate remedial action.

7. How Long 999xxx Keeps Your Data

999xxx does not hold your personal data indefinitely. The following retention periods apply:

• Active account data: Retained for as long as your 999xxx account is active.
• Transaction records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• Identity verification documents: Retained for 5 years from the date of last account activity.
• Game history: Retained for 3 years from the date of each session. Can be reviewed in your account panel throughout this period.
• Support interaction records: Retained for 2 years from the date of each interaction.
• Marketing consent records: Retained until you opt out, after which only a record of the opt-out itself is retained.

After the applicable retention period, data is securely and permanently deleted from 999xxx systems. Data requested for deletion by a player following account closure will be processed within 30 days, subject to any legal retention obligations that prevent earlier deletion.

8. Your Data Rights as a 999xxx Player

You have the following rights regarding your personal data held by 999xxx. To exercise any of these rights, contact our support team via live chat or email at support@999xxx.biz.

9. Children's Privacy

999xxx is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we discover during the age verification process — or at any point thereafter — that an account belongs to someone under 18, that account will be closed immediately. Any funds in the account will be frozen and returned to the payment source, with gaming winnings forfeited.

If you are a parent or guardian and believe your child may have created a 999xxx account, please contact our support team immediately at support@999xxx.biz with details of the account. We will investigate and take action within 24 hours of receiving your report.

10. Marketing Communications

999xxx may send you promotional offers, bonus notifications and platform updates by SMS and/or email if you have given consent at registration or subsequently opted in. All marketing communications from 999xxx:

• Clearly identify 999xxx as the sender
• Include a clear, one-click opt-out mechanism
• Are relevant to your 999xxx account and gaming interests
• Are not sent to players who have opted out
• Are not sent to players who have activated self-exclusion

We do not sell your contact details to any marketing company. All marketing messages come exclusively from 999xxx and relate to your account and available promotions. You can opt out at any time from your account settings panel or by replying STOP to any SMS from 999xxx.

11. Third-Party Links

The 999xxx website does not contain links to external websites. All navigation links on 999xxx lead to other pages within the 999xxx platform only. If you access 999xxx through a third-party link — for example, from a search engine result or a social media post — please be aware that 999xxx has no control over external sites and this Privacy Policy applies only to the 999xxx platform itself.

The 999xxx payment flow redirects to third-party payment screens for Easypaisa, JazzCash and other providers to complete your transaction. These payment screens are operated by the respective payment companies and governed by their own privacy policies. 999xxx is not responsible for data handling practices of external payment providers once you leave the 999xxx platform to complete a transaction.

12. Changes to This Privacy Policy

999xxx may update this Privacy Policy from time to time to reflect changes in our data practices, new features added to the platform or evolving legal requirements. When we make any material change to this policy, we will notify registered players via their registered contact details and post a clear notice on the 999xxx website at least 7 days before the updated policy takes effect.

The date at the top of this page ("Last Updated") will always reflect when changes were most recently made. We recommend reviewing this policy periodically. Your continued use of 999xxx after an updated policy takes effect constitutes your acceptance of the changes. If you do not accept the changes, you may close your account before the updated policy takes effect.

13. Contact 999xxx About Privacy

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how your information is being handled at 999xxx, please contact us through the following channels. Our team is available 24 hours a day and responds in Urdu and English.

We aim to acknowledge all privacy-related emails within 48 hours and resolve most requests within 30 days. For urgent matters — such as suspected unauthorised access to your account — please use the live chat option for the fastest response.