999n Privacy Policy
Your Data, Your Rights

This Privacy Policy ("Policy") is issued by 999n ("the Company", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who visit, register on, or otherwise interact with the 999n platform accessible at 999n.ws and any associated subdomains or mobile applications operated by the Company.

999n is committed to protecting the privacy and personal data of all players, with particular regard to users accessing the platform from Pakistan, including major cities such as Karachi, Lahore, Islamabad, and Faisalabad. We operate in accordance with applicable data protection principles and the requirements imposed by our international gaming licence.

This Policy should be read together with the 999n Terms & Conditions, which set out the overall contractual framework governing your use of the platform. By registering a 999n account or continuing to use our services, you acknowledge that you have read and understood this Policy.

999n collects the minimum personal data necessary to operate a regulated gaming platform responsibly and in compliance with our licensing obligations. The categories of personal data we collect include:

We do not collect sensitive personal data such as biometric data (beyond document photographs required for KYC), religious beliefs, political opinions, or health data, unless specifically required and explicitly consented to in connection with a responsible gaming assessment.

999n uses the personal data it collects for the following specific purposes. Each purpose is grounded in a legitimate legal basis as described in Section 4 of this Policy:

• Account Management: To create, maintain, and administer your 999n player account, including processing login authentication and managing account settings.
• Transaction Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment methods, and to maintain accurate financial records.
• Identity Verification (KYC): To verify player identity and age (21+ requirement) in compliance with our licensing obligations and applicable anti-money laundering regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct on the 999n platform.
• Regulatory Compliance: To meet the requirements imposed by our international gaming licence, including player protection obligations, responsible gaming monitoring, and reporting duties.
• Customer Support: To respond to your enquiries, process complaints, and provide technical assistance through the 999n support team.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to administer deposit limits and self-exclusion requests, and to provide relevant support resources where appropriate.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the overall performance and user experience of the 999n platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given explicit consent to receive such communications.

Every instance of personal data processing carried out by 999n rests on one of the following recognised legal bases:

• Contractual Necessity: Processing required to perform the contract with you — i.e., to operate your 999n account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable law, including KYC verification, anti-money laundering record-keeping, and regulatory reporting duties imposed by our gaming licence.
• Legitimate Interests: Processing carried out in pursuit of 999n's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, informed consent — primarily in the context of marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

999n does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: Financial data is shared with licensed payment service providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely to facilitate the processing of your deposits and withdrawals.
• Game Content Providers: Game session data (such as bets placed and outcomes) is shared with our licensed third-party game providers to the extent technically necessary to deliver the game experience and resolve disputes.
• KYC and AML Service Providers: Identity and document data may be passed to specialist identity verification and fraud screening services under contract to 999n for the purpose of conducting required player verification checks.
• Regulatory Authorities: We are obligated to disclose personal data to our licensing regulator, financial intelligence units, and law enforcement agencies where required by applicable law or a valid legal order.
• Technology Infrastructure Providers: Technical data may be processed by our hosting, cloud infrastructure, and cybersecurity partners under strict data processing agreements that prohibit independent use of your data.
• Professional Advisors: In the context of legal proceedings, audits, or regulatory investigations, personal data may be disclosed to legal counsel, auditors, or insurance providers under confidentiality obligations.

As an internationally licensed gaming operator, 999n's operational infrastructure may involve the transfer of personal data to servers or service providers located outside Pakistan. Such transfers are made necessary by the global nature of our technology stack, game provider network, and licensing requirements.

Where personal data is transferred internationally, 999n ensures that appropriate safeguards are in place to maintain a standard of protection consistent with applicable data protection principles, including:

• Contractual clauses that bind the recipient to data protection obligations equivalent to those applicable to 999n.
• Transfer only to jurisdictions or service providers that maintain recognised data security and privacy standards.
• Ongoing monitoring of third-party compliance with the agreed data protection terms.

If you have questions about the specific safeguards applied to any international transfer of your personal data, you may contact us at the address provided in Section 14 of this Policy.

999n retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by our legal or regulatory obligations. The following retention guidelines apply:

• Account Data: Retained for the duration of your active account relationship with 999n, and for a minimum of five (5) years following account closure, in accordance with our licensing anti-money laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction on the relevant account, or longer where required by applicable regulatory guidance.
• Financial Transaction Records: Retained for a minimum of five (5) years in compliance with financial record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming audit purposes.
• Support Communications: Retained for two (2) years from the date of the last relevant communication, unless the subject matter requires longer retention for legal proceedings.
• Marketing Data: Retained until you withdraw consent, at which point marketing records are updated to reflect your opt-out status and are retained only to evidence the withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

999n implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the 999n platform.
• Encrypted storage of sensitive personal data including KYC documents and financial records using industry-standard encryption protocols.
• Role-based access controls that restrict access to personal data to only those 999n personnel and authorised third parties who require it for legitimate operational purposes.
• Multi-factor authentication requirements for staff access to systems holding personal data.
• Regular penetration testing and independent security audits conducted by qualified third-party cybersecurity specialists.
• Incident response procedures that include notification protocols in the event of a confirmed personal data breach affecting player accounts.
• Physical and logical segregation of production data environments from development and testing systems.

The 999n website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players use the site so we can continuously improve the experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the 999n platform to function. They enable core features such as account login sessions, security tokens, and load balancing. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences such as language settings, preferred game categories, and last login details to provide a more personalised experience on return visits.
• Analytics Cookies: These cookies collect aggregate, anonymised data about how players navigate the 999n platform — pages visited, time on page, and interaction patterns — to help us identify areas for improvement.
• Marketing Cookies: Where you have given consent, these cookies help us deliver relevant promotional content and measure the effectiveness of our marketing campaigns. They do not collect sensitive personal data.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use certain features of the 999n platform, including maintaining a logged-in session.

Subject to applicable law and any overriding legal obligations that may limit the exercise of these rights in specific circumstances, you have the following rights in relation to your personal data held by 999n:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations described in Section 7.
• Right to Restrict Processing: In certain circumstances you may request that we restrict processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

With your consent given at registration or at any subsequent point, 999n may send you marketing communications about promotions, bonuses, new game releases, and platform updates by email or SMS. The following terms govern our marketing practices:

• Marketing communications are sent only to players who have actively opted in. We do not send unsolicited marketing to individuals who have not given explicit consent.
• Every marketing communication we send includes a clear and functional unsubscribe mechanism. You may opt out of marketing communications at any time by using the unsubscribe link in any email or by contacting support at [email protected].
• Withdrawal of marketing consent does not affect your ability to receive service-related communications that are necessary to the administration of your account, such as transaction confirmations, security alerts, and KYC verification requests.
• We do not share your contact details with third-party marketers for the purpose of sending you independent promotional communications.

The 999n platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals below the age of 21. This age threshold reflects the minimum age requirement applied under 999n's responsible gaming policy and gaming licence obligations.

Where 999n becomes aware that personal data has been collected from an individual who is below the minimum age, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage individual will be returned to the originating payment method, subject to the successful completion of identity verification.

If you believe that a minor has registered on the 999n platform, please contact us immediately at [email protected] so that we can investigate and act promptly.

999n reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the expansion of platform services. The following process governs policy amendments:

• Material changes to this Policy — particularly those that affect your data rights or the purposes for which we process your data — will be communicated to registered players by email to the address associated with their account, at least fourteen (14) days before the changes take effect.
• Minor updates such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to contact information may be made without advance notice and will be reflected in the "Last Updated" date at the top of this page.
• Continued use of the 999n platform after the effective date of a material amendment constitutes acceptance of the revised Policy. If you do not accept the revised terms, you must cease using the platform and request account closure before the amendment takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 999n has handled your personal data, please contact us using the details below:

Please include your registered account username and a clear description of your enquiry or request when contacting us. For data rights requests, we will require you to complete an identity verification step before processing your request to protect the security of your personal data.