999pk Privacy Policy

This Privacy Policy is issued by 999pk, the operator of the online gaming platform accessible at https://999pk.ws (the "Platform"). 999pk is the data controller responsible for the personal information you provide when registering, playing, transacting, or communicating with us.

999pk is operated under an international gaming licence. The Platform is designed specifically for the Pakistani market and serves registered users across all major cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, and beyond. All data processing activities described in this Privacy Policy are conducted in compliance with the obligations placed on 999pk by its licensing authority.

For all privacy-related enquiries, data subject requests, or complaints, you may contact our dedicated Data Protection team at [email protected]. Our support team is available 24/7 via live chat on the Platform and will respond to written privacy queries within 48 hours on business days.

999pk collects personal data through several channels: during account registration, during the KYC (Know Your Customer) verification process, through your ongoing use of the Platform, and via your communications with our support team. The categories of personal data we collect are outlined in the table below:

999pk does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless this is specifically required by our AML/KYC obligations or by a regulatory authority in connection with a specific investigation. We collect only what is necessary and proportionate to the purposes described in this Privacy Policy.

Every piece of personal data collected by 999pk is used for a clearly defined purpose. We do not process personal data in ways that are incompatible with the original purpose for which it was collected. The primary purposes for which we use your data are as follows:

• Account Creation & Management: To register your 999pk account, verify your identity via CNIC, maintain your account profile, and ensure you can securely log in and manage your settings.
• KYC & AML Compliance: To verify that you are who you say you are, that you are at least 21 years of age, that you are not on any sanctions list, and that your deposit and withdrawal activity is consistent with anti-money laundering regulations applicable to 999pk's licensing jurisdiction.
• Processing PKR Transactions: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, GrabPay, and Cash Deposit channels — and to maintain accurate transaction records for your account.
• Game & Bet Settlement: To record, settle, and pay out bets on cricket, PSL markets, slots, crash games, and live casino tables accurately and in a timely manner.
• Bonus & Promotion Administration: To determine your eligibility for promotional offers, credit bonuses to your PKR wallet, track wagering requirement fulfilment, and enforce bonus terms consistently.
• Fraud Prevention & Platform Security: To detect and prevent fraudulent account activity, multi-accounting, bot usage, bonus abuse, match-fixing, and any other prohibited conduct described in our Terms & Conditions.
• Responsible Gaming Enforcement: To honour deposit limits, self-exclusion requests, cooling-off periods, and session time reminders set by you, and to proactively identify players who may be exhibiting signs of problem gambling behaviour.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide account assistance through live chat and email.
• Platform Improvement: To analyse aggregated, anonymised usage patterns to improve the performance, stability, and feature set of the 999pk Platform — this analysis does not involve identifying individual players.
• Legal & Regulatory Obligations: To comply with requests from our licensing authority, respond to lawful information requests from regulatory bodies, and retain records as required by applicable law.

999pk processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing is necessary to perform the contract we have with you — i.e., to operate your 999pk account, process PKR deposits and withdrawals, settle bets, and deliver the gaming services you have registered to use.
• Legal Obligation: Processing is required to comply with KYC/AML obligations, age verification requirements, and any lawful information requests from the regulatory authority under whose licence 999pk operates.
• Legitimate Interests: Processing is necessary for 999pk's legitimate interests in preventing fraud, securing the Platform, improving services, and enforcing Terms & Conditions — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — such as for marketing communications or optional data processing activities — we will obtain that consent clearly and separately, and you retain the right to withdraw it at any time without detriment to your account or service access.

999pk does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. Full stop. Data sharing with third parties is limited strictly to what is necessary for the legitimate operational purposes listed below:

• Payment Processors: Your financial data — including JazzCash wallet numbers, EasyPaisa details, and bank account references — is shared with the relevant payment service providers solely to process your PKR deposit or withdrawal instruction. Each payment processor is contractually obligated to use your data only for that specific purpose.
• Identity Verification Providers: Your CNIC details and biometric verification data may be processed by our KYC technology partner solely for the purpose of completing mandatory identity verification. This partner operates under strict confidentiality obligations.
• Game Software Providers: Certain anonymised technical data — such as session IDs and game round logs — is shared with our licensed game software providers (slot studios, crash game operators, live casino providers) for the purpose of game outcome verification and technical support. No personally identifiable information is shared with game software providers beyond what is technically necessary.
• Regulatory & Law Enforcement Authorities: 999pk will disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies when required to do so by law, court order, or regulatory instruction. We will only disclose the minimum data necessary to comply with any such obligation.
• Professional Advisers: Legal counsel, auditors, and accountants acting in an advisory capacity to 999pk may have access to your data on a confidential, need-to-know basis in connection with specific legal, audit, or compliance matters.

Given that 999pk operates an exclusively PKR-denominated cashier serving Pakistani players, financial data handling deserves specific attention. When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, GrabPay, or Cash Deposit, the following data handling practices apply:

• Your mobile wallet number or bank account details are transmitted to the relevant payment processor using end-to-end 256-bit SSL encryption. This data is never stored on 999pk's primary application servers in unencrypted form.
• Withdrawal requests are verified against your account's KYC-confirmed identity before processing. Withdrawals are only released to payment accounts registered in your own verified name — no third-party withdrawals are permitted.
• Transaction records — including deposit amounts in PKR, withdrawal amounts, transaction timestamps, and payment method references — are retained for the legally required period as outlined in Section 8 of this Privacy Policy.
• For transactions above certain PKR thresholds, 999pk's AML compliance process may flag the transaction for additional review. In such cases, you may be asked to provide source-of-funds documentation. This is a regulatory requirement, not a discretionary decision.

999pk uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to remember your preferences, to keep your session secure, and to generate aggregated analytics about Platform usage. The categories of cookies we use are as follows:

• Essential Cookies: These are strictly necessary for the Platform to function. They include session authentication cookies, CSRF protection tokens, and load-balancing cookies. You cannot opt out of essential cookies without ceasing to use the Platform.
• Preference Cookies: These remember your display preferences, language settings, and responsible gaming tool configurations so you do not need to reset them on each visit.
• Analytics Cookies: These collect anonymised, aggregated data about how players navigate the Platform — which pages are visited most, where sessions begin and end, and how game lobbies are used. This data helps us improve the Platform experience for all Pakistani users. No individual player is identified through analytics cookies.
• Security Cookies: These help us detect and prevent fraudulent login attempts, multi-accounting, and bot activity on the Platform.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not impair your ability to play games, deposit, or withdraw on the 999pk Platform, but may affect certain personalisation features. 999pk does not use third-party advertising cookies or behavioural tracking cookies that build profiles for external advertisers.

999pk retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by our licensing obligations and applicable law. The following retention schedule applies:

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Self-exclusion records are retained indefinitely to ensure that formerly excluded players cannot re-register in violation of their exclusion.

As a 999pk player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with your full name, registered mobile number, and a description of your request. We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that 999pk holds about you, including your account data, KYC records, transaction history, and gaming logs.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that erasure requests cannot override our legal obligation to retain certain data for the periods specified in Section 8.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, and to opt out of direct marketing communications at any time with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

999pk takes the security of your personal data seriously and has implemented a multi-layered technical and organisational security framework to protect your information against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 999pk Platform is encrypted using industry-standard TLS 1.3 protocols. This protects your login credentials, payment details, and personal information during transit.
• Encrypted Data Storage: Sensitive personal data — including CNIC numbers, financial account references, and KYC documents — is stored in encrypted form on access-controlled servers. Encryption keys are managed separately from the data they protect.
• Two-Factor Authentication (2FA): 999pk offers optional SMS-based 2FA for all registered Pakistani mobile numbers. We strongly recommend enabling 2FA on your account for an additional layer of login security.
• Access Controls: Access to player personal data within the 999pk organisation is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Fraud Detection Systems: Automated fraud detection monitors login activity, transaction patterns, and gameplay behaviour in real time to identify and respond to suspicious activity before it causes harm.
• Regular Security Audits: The 999pk Platform undergoes periodic third-party security audits and penetration testing to identify and remediate vulnerabilities proactively.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your personal data, 999pk will notify affected players promptly and take immediate remediation steps in accordance with our incident response procedures and applicable regulatory obligations.

Age verification is a mandatory step in the 999pk registration process. During KYC verification, your date of birth as stated on your CNIC is verified against your submitted identity documentation. Any account found to belong to a person under 21 years of age will be immediately suspended, all funds within the account will be frozen pending review, and the case will be referred to our compliance team for appropriate action.

If you are a parent or guardian and you believe that a minor has registered a 999pk account or submitted personal data to the Platform, please contact us immediately at [email protected]. We will investigate and take immediate action to delete all personal data associated with that account.

999pk reserves the right to update, revise, or replace this Privacy Policy at any time. The most current version of the Privacy Policy will always be published at https://999pk.ws/privacy-policy with an updated effective date shown at the top of this page.

Where a material change is being made to the Privacy Policy — one that significantly affects how we collect, use, or share your personal data — 999pk will notify registered players via email to their registered address and/or via an in-platform notification at least seven (7) days before the change takes effect. Minor updates such as clarifications, formatting changes, or corrections to typographical errors may be made without prior notice.

Your continued use of the 999pk Platform after any revision to this Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the revised Privacy Policy, you should close your account and withdraw any available balance before the revised policy takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or to the way 999pk handles your personal data, please get in touch through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the 999pk Platform. For straightforward privacy questions, live chat is the fastest route to an answer.
• Email: [email protected] — for data subject access requests, erasure requests, consent withdrawal, or formal privacy complaints. Please include "Privacy Request" in the subject line of your email. We aim to acknowledge all written privacy requests within 48 hours and to resolve them within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the regulatory body under whose licence 999pk operates. Contact details for the applicable authority will be provided upon request via our support team.