Privacy Policy
for 999k Games

1 Introduction

This Privacy Policy applies to all personal data processed by 999k.games ("999k", "we", "us", "our") in connection with your use of the 999k online gaming platform, including the website at 999k.games, any associated mobile applications, and all related services (collectively, the "Platform").

999k is committed to handling your personal data responsibly, transparently, and in compliance with the data protection obligations applicable under our international gaming licence. We recognise that Pakistani players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

By registering on the 999k Platform or by continuing to use it after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein.

2 Data Controller

999k.games is the data controller for all personal data collected and processed through the Platform. As data controller, 999k determines the purposes and means of processing your personal data, and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all data protection enquiries, requests to exercise your data rights, or concerns about how your personal information is handled, you may contact the 999k Data Protection point of contact through our support channel. Contact details are provided in Section 14 of this Policy.

3 Personal Data We Collect

999k collects personal data through several channels: directly from you during registration and account use, automatically through your use of the Platform, and from third-party sources in connection with identity verification and payment processing. The categories of personal data we collect are as follows:

3.1 Registration and Identity Data

When you create a 999k account, we collect your full legal name, date of birth, gender, nationality, residential address (including city — for example, Karachi, Lahore, Islamabad, or Faisalabad), email address, and mobile number. This information is required to create and maintain your account and to verify your identity in accordance with our KYC obligations.

3.2 Identity Verification Documents

To comply with Know Your Customer (KYC) and anti-money laundering requirements imposed by our international licensing authority, we may collect copies of government-issued identity documents (such as CNIC or passport), proof of address documentation, and proof of ownership of your registered payment methods.

3.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, bonuses, and wager transactions conducted through your 999k account. For payment processing purposes, we collect your JazzCash or EasyPaisa mobile wallet number, bank account details (for HBL, UBL, or Meezan Bank transfers), and cryptocurrency wallet addresses where applicable. Full card numbers or banking credentials are never stored on 999k servers.

3.4 Gaming Activity Data

We collect detailed records of your gaming activity on the Platform, including game sessions, wager amounts, game outcomes, bonus usage, and account balance history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

3.5 Technical and Device Data

When you access the 999k Platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, time zone, and session timestamps. This data is used for platform security, fraud prevention, and service optimisation.

3.6 Communications Data

We retain records of all communications between you and 999k, including live chat transcripts, support email exchanges, and any feedback or complaints you submit. These records are maintained for service quality assurance and regulatory compliance purposes.

4 How We Use Your Personal Data

999k processes your personal data for the following specific purposes:

5 Legal Basis for Processing

999k processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to operate your account, process transactions, and deliver gaming services. This covers the majority of our data processing activities.
• Legal Obligation: Processing required to comply with our international licensing requirements, including KYC identity verification, AML transaction monitoring, responsible gaming obligations, and regulatory reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and service improvement where these interests are not overridden by your rights and interests.
• Consent: Processing for optional marketing communications and use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

6 Data Sharing and Third Parties

999k does not sell your personal data to any third party. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose identified:

6.1 Payment Service Providers

We share relevant transaction data with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing services — to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and applicable financial regulations.

6.2 Identity Verification Partners

We use third-party KYC service providers to verify the identity documents and personal information you submit during the account verification process. These providers are contractually bound to process your data solely for identity verification purposes.

6.3 Game Content Providers

Our live casino and game content partners — including Evolution Gaming, Pragmatic Play, and others — may receive session identifiers and anonymised player identifiers necessary to deliver game content. These providers do not receive your personal identity details beyond what is technically required for game session management.

6.4 Regulatory and Legal Authorities

We may disclose your personal data to our licensing authority, financial intelligence units, law enforcement agencies, or courts where we are legally required to do so. This includes mandatory reporting under anti-money laundering regulations applicable to our licensed operations.

6.5 Professional Advisers

We may share relevant data with our legal, accounting, or auditing advisers where necessary for the provision of professional services, subject to appropriate confidentiality obligations.

7 Cookies and Tracking Technologies

The 999k Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state, security tokens, and cookies that remember your account preferences. These cookies cannot be disabled without affecting core Platform functionality.
• Performance Cookies: Used to collect anonymised data about how players use the Platform — which pages are visited, how long sessions last, and which features are used most. This data helps us improve the Platform for Pakistani players.
• Functional Cookies: Used to remember your preferences such as language, currency display settings, and whether you have previously acknowledged certain notices on the Platform.
• Marketing Cookies: Used only where you have given explicit consent, to deliver relevant promotional content and measure the effectiveness of our marketing activities.

You can manage your cookie preferences through the cookie settings panel available on the Platform. Withdrawing consent for non-essential cookies will not affect your ability to access and use core 999k services.

8 Data Retention

999k retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account relationship with 999k and for a minimum of five (5) years following account closure, as required by our AML compliance obligations.
• Transaction and gaming activity records: Retained for a minimum of five (5) years from the date of the transaction or gaming session, in accordance with licensing and financial record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the KYC check or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Marketing preference records: Retained for the duration of the consent or until consent is withdrawn, and for one (1) year thereafter as evidence of consent status.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with 999k's data destruction procedures.

9 Your Data Protection Rights

As a 999k player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the 999k support team using the details in Section 14. We will respond to all valid requests within thirty (30) days.

Note that certain rights are subject to limitations where data retention is mandated by our regulatory obligations. In such cases, we will explain the specific limitation when responding to your request.

10 Children's Privacy

The 999k Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from any person under the age of 21.

Age verification is conducted during the registration process to enforce this requirement. Where 999k becomes aware that personal data has been collected from a person under the age of 21, such data will be immediately deleted and the associated account will be closed, with deposited funds returned to the original payment source.

11 Security Measures

999k implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 999k Platform.
• Encrypted storage for sensitive data fields including identity document images and payment method records.
• Role-based access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Two-factor authentication (2FA) available to all 999k account holders and enforced for all administrative personnel.
• Regular security audits and penetration testing conducted by independent security professionals.
• Intrusion detection systems that monitor the Platform for anomalous access patterns and potential security incidents.
• Segregated funds storage — player funds are held separately from operational capital in protected accounts.

While 999k takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account secure by maintaining strong, unique login credentials and enabling two-factor authentication on your 999k account.

12 International Data Transfers

As an internationally licensed gaming platform, 999k may transfer your personal data to, and process it in, jurisdictions outside Pakistan — including the jurisdiction in which our licensing authority is based, and the locations of our technology infrastructure and third-party service providers.

Where personal data is transferred internationally, 999k ensures that appropriate safeguards are in place to protect your data, including contractual data protection obligations imposed on recipient parties that meet the standards required by our licensing authority.

By using the 999k Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data as described in this section.

13 Updates to This Privacy Policy

999k may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable regulatory requirements, or improvements to how we communicate our privacy practices to players.

Where changes are material — meaning they affect how we collect, use, or share your personal data in a way that is less favourable to you — we will notify you by email or via an in-Platform notice at least seven (7) days before the changes take effect. For minor or clarificatory changes, we will update the "Last Updated" date at the top of this Policy and the updated version will apply from the date of publication.

Your continued use of the 999k Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should close your Account before the effective date of the amendment.

14 Contact & Data Rights Requests

For any questions about this Privacy Policy, to exercise your data protection rights, or to raise a concern about how 999k handles your personal information, please contact us through the following channels:

• Live Chat: Available 24/7 from within your 999k account — the fastest channel for all support and data rights queries from players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan.
• Email: [email protected] — for formal data rights requests, please use the subject line "Data Rights Request" to ensure prompt routing to the appropriate team.
• Response Time: We acknowledge all data rights requests within 48 hours and provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline.

For further information about your rights and our obligations as a data controller, please also refer to our Terms & Conditions.