Your Privacy Matters to 999win

1 Who We Are

999win ("we", "us", "our", "the Company") operates the online gaming and sports betting platform accessible at 999win.pro. 999win is operated under international gaming regulations and provides casino games, sports betting including PSL cricket markets, and related services primarily to users based in Pakistan.

For all data privacy matters, 999win acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party processors (such as payment providers or identity verification services), those parties act on our instructions and under contractual obligations that protect your data.

For any privacy-related queries or to exercise your data rights, you may contact our support team at any time. Our contact details are provided in Section 14 of this policy.

2 Data We Collect

999win collects the following categories of personal data from users of the platform:

2.1 Identity Data

Full legal name, date of birth, CNIC (Computerised National Identity Card) number, gender, and a copy of your government-issued photo ID as required during KYC verification.

2.2 Contact Data

Pakistani mobile number, email address, and residential address. These are collected at registration and may be updated by contacting support.

2.3 Financial Data

Details of the payment methods you use on 999win, including JazzCash account numbers, EasyPaisa wallet identifiers, HBL or UBL bank account details, SadaPay account references, and USDT TRC20 wallet addresses where applicable. We do not store full card numbers or payment credentials beyond what is operationally necessary for transaction processing.

2.4 Transaction Data

Records of all deposits, withdrawals, bonus claims, wagers, and game results associated with your 999win account, including timestamps, amounts in PKR, and payment method references.

2.5 Technical Data

IP address, browser type and version, device type and operating system, screen resolution, time zone, session duration, and unique device identifiers collected automatically when you access the 999win platform.

2.6 Usage Data

Information about how you interact with the platform, including pages visited, games played, features used, search queries within the platform, and click-stream data.

2.7 Communications Data

Records of your correspondence with the 999win support team via live chat, email, or any other channel, including the content of messages and the date and time of communications.

3 How We Collect Your Data

999win collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and tracking technologies when you access the platform. See Section 7 for full details on cookies.
• Third-party sources: Identity verification data received from KYC providers who cross-reference your submitted documents against official databases. Payment confirmation data received from JazzCash, EasyPaisa, HBL, UBL, SadaPay, and other payment processors. Fraud risk data received from third-party fraud prevention services.
• Publicly available sources: In limited circumstances, 999win may verify information against publicly available records to confirm the accuracy of data you have provided.

4 Why We Use Your Data

The following table summarises the primary purposes for which 999win processes personal data:

999win does not use automated decision-making or profiling in any manner that produces legal or similarly significant effects on users, except as required by our AML and fraud prevention obligations.

5 Legal Basis for Processing

Every instance of data processing at 999win is grounded in one of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the 999win user agreement, including operating your account, processing PKR transactions, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and cooperation with lawful requests from regulatory authorities.
• Legitimate interests: Processing carried out in pursuit of 999win's legitimate business interests — such as fraud prevention, platform security, and internal analytics — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes, such as sending you promotional emails about 999win bonuses, new game launches, or PSL cricket betting offers. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting support.

6 Data Sharing & Disclosure

6.1 Categories of Recipients

999win shares personal data only with the following categories of third parties, and only to the extent strictly necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 network operators receive transaction data necessary to process deposits and withdrawals.
• Identity verification providers: Specialist KYC service providers who verify CNIC documents and confirm user identity against official records.
• Fraud and AML service providers: Third-party services that analyse transaction and behavioural data to detect and prevent fraud and money laundering.
• Technology and hosting providers: Cloud infrastructure and platform technology providers who host and operate the 999win platform under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, regulation, or valid legal process, 999win will disclose personal data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.

6.2 No Sale of Data

999win does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing, advertising, or commercial purposes under any circumstances. This commitment is absolute and without exception.

7 Cookies & Tracking Technologies

999win uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and gather usage analytics. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your platform preferences such as language settings, last-visited game category, and display options. Disabling these may affect your experience.
• Analytics cookies: Collect anonymised data about how users navigate and interact with the 999win platform, helping us identify areas for improvement. This data does not identify you personally.
• Security cookies: Used to detect and mitigate fraud, bot activity, and unauthorised access attempts. These operate silently in the background and are essential to platform security.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may impact your ability to use some features of the 999win platform. No third-party advertising or social media tracking cookies are deployed on 999win.

8 Data Retention

999win retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and KYC records: Retained for a minimum of 5 years from the date of account closure, as required by applicable AML and gaming regulations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 3 years from the date of the communication.
• Technical and usage logs: Retained for 12 months in identifiable form, after which they are anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, at which point they are deleted within 30 days.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

9 Data Security

999win implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 999win platform.
• AES-256 encryption for sensitive data stored in our databases, including financial data and KYC documents.
• Multi-factor authentication requirements for all 999win staff accounts with access to player data.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Regular independent security audits and penetration testing of the 999win platform and infrastructure.
• Automated intrusion detection and real-time monitoring of all systems that process personal data.
• Formal incident response procedures that include notification protocols in the event of a data breach.

10 Your Data Rights

As a 999win user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team through the live chat in your account dashboard or by email at the address provided in Section 14.

• Right of Access: You may request a copy of all personal data that 999win holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections such as email address updates can be made directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our obligations to retain certain data under applicable law (see Section 8).
• Right to Restrict Processing: In certain circumstances, you may request that we limit the way we use your data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request a copy of the data you have provided to 999win in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. Marketing opt-out is available immediately through your account settings.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

999win will respond to all data rights requests within 30 days. In complex cases we may extend this period by a further 30 days, and we will notify you of any such extension.

11 Children's Privacy

999win is strictly an adult platform. Registration is prohibited for any individual under the age of 21. 999win does not knowingly collect personal data from persons under 21 years of age. If we become aware that an account has been registered by a person under 21, that account will be immediately and permanently closed, any deposits will be returned to the originating payment method, and all associated data will be deleted from our systems within 30 days, subject to any mandatory regulatory retention requirements.

If you are a parent or guardian and believe that your child has registered on 999win, please contact our support team immediately so that we can investigate and take appropriate action without delay.

12 Third-Party Links

The 999win platform may contain links to third-party websites or services, such as payment provider portals for JazzCash or EasyPaisa. This Privacy Policy applies solely to data processed by 999win on the 999win.pro platform. Once you navigate to a third-party site, that site's own privacy policy governs the collection and use of your data. 999win is not responsible for the privacy practices of any third-party website and encourages you to review the privacy policy of any external site you visit.

13 Changes to This Privacy Policy

999win reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or platform features. When material changes are made, we will notify registered users by email to the address associated with their account and by displaying a prominent notice on the platform for a minimum of 14 days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this policy periodically. Your continued use of the 999win platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 999win holds about you, please reach out to our dedicated support team. We are available 24 hours a day, 7 days a week, including Pakistani public holidays, via the live chat facility inside your 999win account dashboard.

For written privacy requests, you may also contact us by email. Our privacy support address is: [email protected]

Please include your registered account username and a clear description of your request. We aim to acknowledge all privacy enquiries within 24 hours and resolve them fully within 30 days.

This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all previous versions of the 999win Privacy Policy.