999r Privacy Policy

This Privacy Policy ("Policy") is issued by 999r ("999r", "we", "us", "our") and governs the collection, use, storage, transfer, and protection of personal data provided by users ("you", "your") of the 999r platform accessible at 999r.bio and all associated services (the "Platform").

999r is committed to handling your personal data responsibly and transparently. This Policy is written in plain, accessible English for our Pakistani player base and is intended to give you a clear understanding of your data privacy rights and our obligations. By registering an account on the 999r Platform, you confirm that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the 999r Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the Platform.

999r collects personal data from you through a number of channels during your use of the Platform. The categories of data we collect include:

Registration & Identity Data:

• Full legal name as it appears on your national identity document.
• Date of birth (used to verify that you are 18 years of age or older).
• Pakistani mobile number used for account registration and communications.
• Email address (where provided).
• Username selected during registration.

Identity Verification Data:

• Copy of government-issued photo identification (e.g., CNIC, passport) when requested for verification purposes.
• Proof of address documentation where applicable.

Financial & Transaction Data:

• JazzCash or Easypaisa mobile wallet numbers used for deposits and withdrawals.
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah, or other supported institutions) provided for IBFT transactions.
• USDT wallet addresses where applicable.
• Transaction history including deposit amounts, withdrawal requests, and PKR balance movements.

Usage & Technical Data:

• IP address and approximate geographic location at the time of login.
• Device type, operating system, and browser information.
• Game session data including bet history, game outcomes, session durations, and wagering patterns.
• Login timestamps and account activity logs.

Communications Data:

• Records of support interactions via email or chat with the 999r support team.
• Marketing preference settings and promotional opt-in/opt-out records.

999r processes your personal data only for legitimate, defined purposes. The primary purposes for which we use the data we collect are:

• Account Management: Creating and maintaining your 999r account, verifying your identity, processing login sessions, and managing account security.
• Age & Identity Verification: Confirming that you meet the 18+ age requirement before permitting account activation and real-money gameplay.
• Payment Processing: Executing your deposit and withdrawal requests via JazzCash, Easypaisa, and supported Pakistani bank channels.
• Game Delivery: Facilitating your access to cricket betting markets, live casino tables, slots, Hi-Lo, Royal Fishing, and all other 999r Platform features.
• Responsible Gaming Compliance: Monitoring gameplay patterns to identify problem gambling indicators and enforcing responsible gaming limits and self-exclusion requests.
• Anti-Fraud & Security: Detecting and preventing fraud, money laundering, bonus abuse, multiple account registration, and other prohibited conduct as described in our Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance through the 999r support team.
• Legal & Regulatory Compliance: Meeting any applicable legal obligations including Anti-Money Laundering (AML) requirements and record-keeping obligations.
• Communications: Sending account notifications, transaction confirmations, security alerts, and — where you have opted in — promotional communications about 999r offers and PSL betting promotions.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the 999r Platform experience for Pakistani players.

999r processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and 999r — including account creation, payment processing, and game delivery.
• Legitimate Interests: Processing carried out to advance the legitimate business interests of 999r, including fraud prevention, security monitoring, and Platform improvement, where such interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including AML and identity verification requirements.
• Consent: Processing based on your freely given, specific, and informed consent — including the sending of marketing communications. Consent may be withdrawn at any time by contacting 999r at [email protected].

999r does not store full payment credentials on its own servers. JazzCash and Easypaisa transactions are processed through the respective mobile financial service providers' secure APIs. Bank IBFT transactions are handled through encrypted banking channels. USDT transactions are processed on-chain with no private key storage on the 999r Platform.

Transaction records (amounts, timestamps, payment method identifiers, and status) are retained for a minimum period of five (5) years to satisfy applicable anti-money laundering record-keeping requirements. These records are accessible to authorised 999r personnel and, where legally required, to competent regulatory or law enforcement authorities.

999r uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain your login session, and analyse Platform performance. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for the Platform to function — including session management, authentication, and security features. These cannot be disabled.
• Functional Cookies: Used to remember your preferences (such as language and display settings) to improve your 999r experience across sessions.
• Analytics Cookies: Used to collect anonymised data about how visitors use the Platform — page views, session duration, navigation paths — to help 999r improve the product. No personally identifiable information is contained in analytics data.

You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging into your 999r account.

999r does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Your data may be shared only in the following limited circumstances:

• Payment Processors: JazzCash, Easypaisa, and partner banks receive only the minimum data required to process your transaction.
• Game Technology Providers: Third-party game studios and live casino technology providers may receive anonymised session data necessary to deliver their games on the 999r Platform. These providers operate under strict data processing agreements.
• Identity Verification Services: Where third-party KYC/AML services are used to verify your identity documents, the minimum necessary data is shared under strict contractual protections.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory directive, 999r may disclose your data to competent authorities without prior notice to you.
• Business Transfers: In the event of a merger, acquisition, or sale of 999r's business assets, your personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party recipients of 999r user data are contractually obligated to process that data only for the specified purpose and to maintain appropriate security standards.

999r retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specifically:

• Account registration and identity data is retained for a minimum of five (5) years following account closure.
• Transaction and financial records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for a minimum of two (2) years.
• Game session logs are retained for a minimum of two (2) years for dispute resolution and responsible gaming monitoring purposes.

Following the expiry of the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be attributed to you.

999r employs a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 999r Platform.
• Encrypted storage of sensitive personal data including identity documents and financial records.
• Access controls limiting 999r employee access to personal data on a strict need-to-know basis.
• Regular security assessments and monitoring of Platform infrastructure.
• Incident response procedures for detecting and responding to data security breaches.

While 999r takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own 999r login credentials. Never share your password or mobile OTP with anyone, including persons claiming to be 999r staff.

As a 999r user, you hold the following rights with respect to your personal data, which you may exercise by contacting us at [email protected]:

• Right of Access: You may request a copy of the personal data 999r holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held on your account.
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligation to retain certain records as described in the Data Retention section.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while a dispute is under investigation.
• Right to Object: You may object to processing of your data based on legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

999r will acknowledge data rights requests within 5 business days and aim to fulfil them within 30 days. Complex requests may take longer, in which case we will notify you of the expected timeline.

The 999r Platform is strictly for persons aged 18 years and above. 999r does not knowingly collect, store, or process personal data relating to persons under 18 years of age. If 999r becomes aware that personal data of an individual under 18 has been collected, that account will be closed immediately, all data deleted within a reasonable timeframe, and any associated balances forfeited in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor may have registered on the 999r Platform should contact us immediately at [email protected] so that we can investigate and take appropriate action.

999r reserves the right to update this Privacy Policy at any time. When material changes are made, 999r will notify registered users via email to their registered address and/or via a prominent notice on the Platform. The "Last Updated" date at the top of this document indicates the version currently in effect.

Your continued use of the 999r Platform following notification of changes constitutes your acceptance of the revised Policy. If you do not agree to an updated Policy, you must cease using the Platform and may close your account by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999r handles your personal data, please contact our support team:

Email: [email protected] (plain text — not a clickable link)

Response Time: Acknowledgement within 5 business days; resolution within 30 days

Support Hours: 24 hours a day, 7 days a week

Please include your registered username and a clear description of your query or data rights request. 999r treats all privacy enquiries as a priority and will handle your request with full confidentiality.