999rs Privacy Policy — How We Handle Your Personal Data

1Introduction

This Privacy Policy explains how 999rs ("we", "us", "the Platform") collects, stores, uses and protects personal information provided by players ("you") when using the 999rs website at 999rs.onl, including all platform sections — Casino, Live Casino, Sports, Bet, Bingo, Promotions and any associated services.

We take privacy seriously. The information you provide to 999rs is used to operate your account, process transactions, meet compliance obligations and — where you have consented — to communicate with you about the platform. We do not use your data for any purpose beyond what is described in this policy.

This Privacy Policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and 999rs.

2Data We Collect

999rs collects personal data through two main channels: information you provide directly when registering and using the platform, and data collected automatically through platform usage. The table below summarises the main categories:

We do not collect sensitive personal data such as biometric data, political opinions, religious beliefs or health information as part of standard account operation. Where additional documentation is required for compliance purposes, this is explicitly requested and the purpose is explained at the time.

3How We Use Your Data

Personal data collected by 999rs is used for the following purposes:

• Account management: Creating, maintaining and securing your account, including authentication and access control.
• Transaction processing: Handling deposits and withdrawals through supported PKR payment methods including JazzCash, Easypaisa, Raast, bank transfer and mobile wallets.
• Identity verification (KYC): Verifying your identity and age before processing withdrawal requests or where required for compliance purposes.
• Responsible gaming: Monitoring gaming activity to support the platform's responsible gaming commitments — including deposit limit management, self-exclusion and session time controls.
• Platform security: Detecting and preventing fraud, suspicious activity, unauthorised account access and abuse of promotional offers.
• Platform improvement: Analysing aggregated usage data to improve platform performance, navigation and the overall experience for Pakistan players.
• Customer support: Responding to queries, resolving disputes and managing account-related communications.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates — only where you have explicitly opted in to receive these.

4Payment Data

All financial transactions on 999rs are processed in PKR. Deposits and withdrawals are handled through our payment processor partners who operate their own security and compliance standards.

When you make a deposit or withdrawal using JazzCash, Easypaisa, Raast, a bank transfer or a card, the payment information you provide is transmitted directly to the relevant payment processor through an encrypted connection. 999rs retains a record of your transaction amounts, dates and payment method types for account management and compliance purposes but does not store complete payment credential details.

• Card numbers, mobile wallet PINs and bank account credentials are not stored in full on 999rs servers.
• Transaction records are retained for the period required under applicable compliance obligations.
• Payment method information may be used to verify the source of funds for large withdrawals as part of KYC compliance.

5Data Sharing and Third Parties

999rs does not sell your personal data to third parties. We share data only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and other payment partners receive the transaction data necessary to process your deposit or withdrawal. These processors operate under their own privacy frameworks and security standards.
• Identity verification providers: Where a third-party KYC verification service is used, your identification documents are shared with that provider for the sole purpose of verifying your identity. The provider is contractually bound to use your data only for this purpose.
• Game software providers: Your gaming activity data (bets placed, game outcomes, session data) may be processed by third-party game providers whose software runs within the 999rs platform. This is necessary for game settlement and technical support.
• Compliance and legal obligations: Where required by law or in response to a valid legal request, 999rs may disclose personal data to relevant authorities. We will only do so to the extent required and will not disclose more data than is necessary.
• Business transfers: In the event of a merger, acquisition or restructuring, personal data held by 999rs may be transferred to the succeeding entity. Players will be notified of any such change that materially affects how their data is used.

6Cookies and Tracking Technologies

999rs uses cookies and similar technologies to make the platform work properly and to understand how players use it. Cookies are small data files stored on your device when you access the website.

• Essential cookies: Required for the platform to function. These include session cookies that maintain your login state while you are active on the site. Disabling essential cookies will prevent the platform from working correctly.
• Performance and analytics cookies: Used to collect aggregated data on how players navigate the platform — which sections are most used, where sessions typically start and end, and how long pages take to load. This data helps us improve the platform experience.
• Preference cookies: Store your display and notification preferences so you do not need to re-enter them each session.

You can manage cookie preferences through your browser settings. Restricting all cookies will affect platform functionality. Essential cookies cannot be disabled without impacting your ability to use the platform.

7Data Security

Protecting your personal data is a core responsibility we take seriously. 999rs implements the following security measures:

• SSL/TLS encryption on all data transmission between your device and our servers.
• Secure storage of personal and financial data with access controls limiting internal data access to authorised personnel only.
• Regular security reviews and monitoring of platform infrastructure for vulnerabilities.
• Two-factor authentication options for account access where available.
• Incident response procedures to detect, contain and respond to any data security breach in a timely manner.

Despite these measures, no online platform can guarantee absolute security against all possible threats. You also play a role in keeping your account secure — use a strong, unique password for your 999rs account and do not share your login credentials with anyone. If you suspect unauthorised access to your account, contact support immediately.

8Data Retention

999rs retains personal data for as long as it is needed for the purposes described in this policy, or as required by applicable law and compliance obligations. General retention guidelines are as follows:

• Active account data is retained for the duration of the account's active life plus any mandatory post-closure retention period required for compliance.
• Transaction and financial records are retained for a minimum period as required under standard financial record-keeping obligations.
• KYC and identity documents are retained for the mandatory period following account closure.
• Customer support records — including chat logs and email correspondence — are retained for a reasonable period to support dispute resolution and account history.
• Marketing communication records (opt-in status, communication logs) are retained until consent is withdrawn and for a reasonable period thereafter.

When data is no longer required and the applicable retention period has passed, it is securely deleted or anonymised so it can no longer be linked to an individual player.

9Your Data Rights

You have rights over the personal data 999rs holds about you. These rights can be exercised by contacting the support team through the platform's support channels.

To exercise any of the above rights, contact 999rs support through the in-platform support channel or via the email address listed in the footer of this page. We will respond to rights requests within a reasonable timeframe. Where a request relates to withdrawal, significant data deletion or data portability, identity verification may be required before the request can be processed.

10Children and Under-18 Users

999rs is strictly an adult platform for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If during the account verification process it is established that a registered user is under 18, the account will be closed immediately. Any real-money deposits will be refunded and any data collected during the underage period will be deleted once the refund process has been completed and any compliance obligations have been met.

If you believe that a person under 18 has registered an account on 999rs, please contact support immediately so the situation can be investigated and resolved promptly.

11Marketing Communications

999rs sends promotional communications — including bonus offers, platform updates and sports betting promotions — only to players who have explicitly opted in to receive them during registration or through account settings.

• Marketing emails and notifications are sent to the email address and mobile number associated with your account.
• You can opt out of marketing communications at any time by updating your notification preferences in your account settings.
• Opting out of marketing does not affect transactional communications — these include deposit confirmations, withdrawal notifications, KYC requests and account security alerts, which are sent regardless of your marketing preferences.
• We do not share your contact details with third-party marketing companies or advertising networks.

12Updates to This Privacy Policy

999rs may update this Privacy Policy from time to time to reflect changes in platform operations, data practices or applicable legal requirements. When changes are made, the updated policy will be published on this page with a revised date shown at the top.

Where changes are significant — for example, a material change in how we use your personal data — we will notify registered players through a platform notice or account communication before the changes take effect. For minor updates that do not affect the substance of data processing, the updated policy will be published without individual notification.

It is your responsibility to review this policy periodically. Continued use of 999rs after a policy update constitutes acceptance of the revised Privacy Policy.

13Contact Us About Privacy

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your personal data has been handled, you can contact the 999rs privacy team through the following channels:

• Through the in-platform support channel when logged in to your account — this is the fastest route for account-specific privacy queries.
• By written correspondence to the support email address shown in the footer of this page. Written responses are handled during support operating hours.

For questions related to responsible gaming tools — including deposit limits, session reminders and self-exclusion — please visit the Responsible Gaming page. For general account questions, the FAQ page covers the most common topics.