Privacy Policy – 999win

1. Introduction

999win ("999win", "the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all users, including Pakistani players who access the Platform at 999win.bio. This Privacy Policy describes what personal data we collect, why we collect it, how we use and store it, who we share it with, and what rights you have in relation to your data.

This Policy should be read in conjunction with the 999win Terms & Conditions and the Responsible Gaming Policy, both of which are published on this site.

2. Data Controller

999win operates as the data controller for personal data collected through the 999win.bio platform. As data controller, 999win determines the purposes and means by which personal data is processed.

For all data-related queries, including access requests, correction requests, deletion requests, and complaints, contact 999win via the support details listed in Section 15 of this Policy.

3. Data We Collect

999win collects the following categories of personal data from registered users:

3.1 Registration Data

• Full name
• Date of birth (for age verification purposes)
• Pakistani mobile number (used as primary contact and for two-factor authentication)
• Email address (where provided)
• Username chosen by the Player

3.2 Identity Verification (KYC) Data

• Government-issued photo identity document (e.g., CNIC — Computerized National Identity Card)
• Proof of address documentation where required
• Selfie or live verification image where required by the KYC process
• Proof of payment method ownership (e.g., screenshot of JazzCash or Easypaisa account)

3.3 Financial Data

• Deposit and withdrawal transaction records in PKR
• Payment method identifiers (e.g., last four digits of card, mobile wallet number)
• Transaction timestamps and amounts

3.4 Gaming Activity Data

• Game history, bet amounts, win/loss records
• Session duration and login timestamps
• Responsible gaming tool settings (deposit limits, self-exclusion status)

3.5 Technical Data

• IP address at registration and login
• Device type, operating system, and browser
• Geolocation data (approximate location derived from IP)
• Cookies and session data (see Section 7)

3.6 Communications Data

• Records of customer support conversations (live chat transcripts, email correspondence)
• Complaint records

4. How We Collect Data

999win collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make deposits or withdrawals, contact support, or update your account settings.
• Automatically: Through your use of the Platform, including IP logging, session cookies, and game server records.
• Third parties: From KYC verification providers who process identity documents on 999win's behalf, and from payment processors who confirm transaction status.

5. Purpose & Legal Basis for Processing

999win processes personal data for the following purposes:

• Account management: To create, maintain, and administer your 999win account. Legal basis: contract performance.
• Payment processing: To process deposits and withdrawals in PKR via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT. Legal basis: contract performance.
• Identity verification: To fulfil KYC and anti-money laundering obligations. Legal basis: legal obligation.
• Fraud prevention and security: To detect and prevent unauthorised account access, bonus abuse, and fraudulent transactions. Legal basis: legitimate interests.
• Responsible gaming: To monitor for signs of problem gambling and enforce responsible gaming tools set by the Player. Legal basis: legitimate interests and legal obligation.
• Customer support: To respond to queries, complaints, and support requests. Legal basis: contract performance and legitimate interests.
• Marketing communications: To send promotional offers and news to Players who have opted in. Legal basis: consent. Opt-out available at any time.
• Legal compliance: To comply with applicable laws, regulatory requirements, and lawful requests from competent authorities. Legal basis: legal obligation.

6. Data Sharing

999win does not sell or rent personal data. We share personal data only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT processing partners receive transaction data necessary to execute your deposits and withdrawals.
• KYC providers: Identity verification providers receive KYC documents solely for the purpose of age and identity verification.
• Game suppliers: Providers such as Pragmatic Play, JILI, Evolution Gaming, and Ezugi receive session and game event data required to run games and resolve disputes.
• Legal and regulatory authorities: 999win will disclose personal data to competent authorities where required to do so by law, court order, or regulatory demand.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 999win's business, personal data may be transferred to the acquirer, subject to equivalent privacy protections.

All third parties receiving personal data from 999win are bound by confidentiality obligations and are prohibited from using that data for any purpose beyond the service they provide to 999win.

7. Cookies & Tracking Technologies

999win uses cookies and similar tracking technologies to operate the Platform and improve the user experience. The types of cookies used include:

• Essential cookies: Required for the Platform to function. These include session management cookies that keep you logged in to your 999win account during a session. These cannot be disabled without affecting Platform functionality.
• Performance cookies: Used to collect anonymised data about how players use the Platform (pages visited, session duration, error rates). This data helps 999win improve the Platform experience.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
• Marketing cookies: Used where you have consented to receive personalised promotional content based on your activity on the Platform.

You may control cookie settings through your browser preferences. Disabling essential cookies will prevent normal Platform operation. For non-essential cookies, your browser settings or the Platform's cookie preference centre (where available) allow selective opt-out.

8. Data Retention

999win retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in any case for the minimum period required by applicable laws and regulations.

• Account data is retained for the duration of your account's active status plus a minimum of five years following account closure, to satisfy anti-money laundering and gaming compliance requirements.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• KYC documents are retained for a minimum of five years following the end of the customer relationship.
• Customer support records are retained for three years from the date of the interaction.
• Marketing consent records are retained for as long as the consent is active and for a reasonable period following withdrawal of consent.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Data Security

999win implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS encryption for all data transmitted between users and the Platform
• Encryption at rest for stored personal data and financial records
• Access controls limiting internal data access to staff with a legitimate operational need
• Regular security assessments and penetration testing
• Two-factor authentication for staff access to production systems

Despite these measures, no data transmission over the internet can be guaranteed to be 100% secure. If 999win becomes aware of a data breach that is likely to result in risk to affected individuals, we will notify affected users as required by applicable law.

10. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data 999win holds about you:

• Right of access: Request a copy of the personal data 999win holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to restriction: Request that 999win restrict processing of your data in certain circumstances.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to data portability: Request your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact 999win support via the details in Section 15. 999win will respond to all rights requests within a reasonable timeframe, typically 30 days. Requests may require identity verification before 999win can fulfil them.

11. Children's Privacy

The 999win Platform is strictly for adults aged 18 and above. 999win does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will delete that data immediately and close the associated account.

If you believe that a minor may have registered a 999win account, please contact support immediately using the details in Section 15.

12. International Data Transfers

Personal data collected by 999win may be processed in jurisdictions outside of Pakistan where 999win's infrastructure, game suppliers, KYC providers, or payment processors operate. Where such transfers occur, 999win takes reasonable steps to ensure that personal data receives a comparable level of protection to that applied in Pakistan, including through contractual data protection clauses with receiving parties.

By registering a 999win account, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan as described in this Policy.

13. Third-Party Services

The 999win Platform integrates third-party services including game providers, payment processors, and analytics tools. These third parties operate under their own privacy policies, and 999win is not responsible for their data practices beyond the contractual obligations described in Section 6. Players are encouraged to review the privacy policies of any third-party services they interact with through the Platform.

999win does not include third-party advertising networks on the Platform that would result in the collection of personal data by advertisers without your knowledge.

14. Changes to This Privacy Policy

999win reserves the right to update this Privacy Policy at any time. The date of the most recent update is displayed at the top of this document. Material changes will be communicated to registered users via their registered email address or via a prominent notice on the Platform prior to the change taking effect.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and close your account.

15. Contact Us

For all privacy-related queries, access requests, correction requests, deletion requests, or complaints regarding how 999win handles your personal data, contact us via:

• Live Chat: Available 24/7 within the Platform after login
• Email: [email protected] (plain text — not a clickable link)

999win will acknowledge all privacy-related requests within 5 business days and endeavour to fulfil requests within 30 days. Complex requests may require additional time, in which case 999win will notify you of the extended timeframe.