999win Privacy Policy

01 Introduction

999win ("the Platform", "we", "us", "our") operates an online gaming platform accessible at https://999win.ml, offering sports betting, live casino, slots, fish games, bingo, and related services to adult players in Pakistan. This Privacy Policy explains how we collect, use, store, share, and protect personal information that you provide to us or that we collect automatically when you use our platform.

We understand that Pakistani players value their privacy and expect their data to be handled with care. This policy is written in plain language so you can understand exactly what happens with your information — not buried in technical legal language that is difficult to follow.

This Privacy Policy should be read alongside our Terms and Conditions, which form the overall agreement governing your use of 999win. By continuing to use the platform, you confirm your acceptance of both documents.

02 Data We Collect

The categories of personal data we collect about you depend on how you interact with the 999win platform. The main categories are as follows:

We do not collect sensitive personal data such as biometric information, medical records, or religious affiliation. We only collect what is genuinely needed to operate your account and provide our services.

03 How We Collect Data

Your personal data reaches us through several different channels depending on how you use the platform:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your profile settings
• Automatically: When you visit or use any part of the 999win platform — your browser and device automatically send technical data including IP address, device type, and browsing behaviour within the platform
• Through payment processors: When you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer, or card — transaction confirmation data is shared with us by the payment provider
• From verification services: Where identity or age verification requires cross-referencing with third-party databases, those services may return confirming data to us
• Via cookies and tracking technologies: Session cookies, persistent cookies, and similar technologies collect usage and preference data as described in Section 8

04 How We Use Your Data

999win uses your personal data for the following purposes. Each purpose is tied to a specific legitimate reason — we do not process data for purposes unrelated to running your account or the platform:

• Creating and managing your player account, including login and security
• Verifying your identity and age to ensure compliance with the 18+ requirement
• Processing PKR deposits and withdrawals through your chosen payment method
• Settling bets, recording gaming activity, and managing your VIP tier and cashback
• Detecting and preventing fraud, suspicious activity, and unauthorised account access
• Sending you account-related notifications — transaction confirmations, security alerts, and support responses
• Sending promotional communications if you have opted in — this includes bonus offers, PSL betting promotions, and platform updates
• Personalising your experience on the platform — for example, surfacing game categories you use most
• Conducting responsible gaming monitoring — identifying unusual activity patterns that may suggest problem gaming behaviour
• Analysing platform performance and improving features based on how players actually use the site
• Maintaining records required for internal audit and business operations

We do not use your data to build profiles for sale to advertisers, nor do we share your data with third-party marketing companies for their own promotional purposes.

05 Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the gaming and betting services you signed up for — account creation, payment processing, bet settlement
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, internal analytics, and platform improvement
• Consent: Sending promotional emails, SMS notifications, and marketing communications — you can withdraw this consent at any time through your account communication preferences
• Legal obligation: Identity verification, age verification, and transaction record-keeping where required by applicable obligations

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

06 Sharing Your Data

999win does not sell your personal data. We share data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, Easypaisa, Raast, bank partners, and card networks receive only the data needed to process your specific transaction
• Identity verification providers: Third-party KYC services receive identity document data for the purpose of verifying your age and identity — they are contractually prohibited from using this data for any other purpose
• Technology and hosting providers: Our platform infrastructure partners process data on our behalf under strict data processing agreements — they do not have independent rights to use your data
• Fraud prevention services: Shared signals may be exchanged with fraud detection networks to identify and prevent fraudulent transactions — this protects both you and other players
• Legal and compliance requirements: We may be required to disclose data in response to a lawful request from relevant authorities — we will only comply with requests that are properly made and legally valid
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 999win's business, player data may be transferred as part of that transaction — you will be notified if this occurs

All third parties with whom we share data are required to implement appropriate security measures and are prohibited from using your data for their own independent commercial purposes.

07 Payment Data

Financial transactions on 999win are processed in PKR. The platform supports deposits and withdrawals via JazzCash, Easypaisa, Raast, direct bank transfer, debit and credit cards, and other mobile wallets available in Pakistan.

When you make a deposit or request a withdrawal, 999win receives transaction confirmation data — including the amount, timestamp, and a partial or masked identifier for your payment method. Full card numbers, mobile wallet PINs, or online banking passwords are never transmitted to or stored by 999win. Payment authentication happens directly between you and your payment provider.

• You may only use payment methods registered in your own name — third-party payment arrangements are not permitted
• For security purposes, withdrawals are returned to the same payment method used for the most recent qualifying deposit
• Transaction records are retained for the period required by our record-keeping obligations
• If a payment is flagged by our fraud detection systems, we may request additional verification before processing the transaction

If you believe a transaction on your 999win account was unauthorised, contact our support team immediately. We take payment security seriously and will investigate all reports promptly.

08 Cookies & Tracking

999win uses cookies and similar tracking technologies to make the platform work correctly, improve your experience, and understand how players use the site. Here is a breakdown of the types of cookies we use:

• Essential cookies: Required for the platform to function — these handle session management, login state, and security. You cannot opt out of essential cookies without stopping use of the platform
• Functional cookies: Remember your preferences such as language settings, game lobby layout, and notification preferences so you do not have to reconfigure them on every visit
• Analytics cookies: Help us understand which pages and games are most popular, where players drop off, and how to improve the overall experience — this data is analysed in aggregate and does not identify you individually
• Performance cookies: Monitor platform speed and identify technical errors — used by our engineering team to keep the platform running smoothly during high-traffic periods such as PSL match days

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent the 999win platform from functioning correctly — you will not be able to log in or place bets without them.

We do not use cookies to track your activity across unrelated third-party websites, and we do not share cookie data with advertising networks for the purpose of serving ads on other platforms.

09 Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes described in this policy, unless a longer retention period is required. Our general retention approach is as follows:

• Active account data: Retained for the lifetime of your account and for a defined period after account closure — typically five years from the date of account closure, to cover any disputes or legal claims that may arise
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping obligations
• Identity verification documents: Retained for the duration of your account and for five years following account closure
• Support communications: Retained for three years from the date of the communication, or longer if the communication relates to a complaint or legal matter
• Gaming activity logs: Retained for five years for responsible gaming monitoring purposes and dispute resolution
• Marketing preferences and consent records: Retained for as long as you are a registered player, plus two years following account closure

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

10 Security Measures

Protecting your personal data is something we take seriously at 999win. We implement a range of technical and organisational security measures to protect your data against unauthorised access, loss, or misuse:

• All data transmitted between your device and the 999win platform is encrypted using TLS (Transport Layer Security) — look for the padlock icon in your browser's address bar
• Passwords are stored using strong one-way hashing — our staff cannot read your password, only reset it
• Access to player data within 999win is restricted to staff who need it to perform their role — access is logged and audited
• Payment data is handled through PCI-DSS compliant payment processors — 999win does not store full card or wallet credentials on its own servers
• Our systems are regularly reviewed for vulnerabilities and updated to address emerging security threats
• Suspicious account activity triggers automated alerts — our security team investigates flagged accounts and contacts affected players when necessary

11 Your Rights

As a 999win player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account details and the specific request:

We will respond to all valid data rights requests within 30 days. In complex cases we may extend this to 60 days — we will inform you if an extension is needed. We do not charge a fee for standard requests.

12 Minors & Under-18s

999win is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or older, and we conduct age verification checks on accounts before processing withdrawal requests or when suspicious activity is flagged.

If you are a parent or guardian and believe that a minor has registered an account on 999win using false information, please contact our support team immediately at [email protected]. We will investigate the report, close the account if confirmed, and delete all associated personal data as required.

We also encourage parents and guardians to use parental control software to prevent minors from accessing online gaming platforms on shared devices.

13 Policy Updates

999win may update this Privacy Policy from time to time to reflect changes in how we operate, changes in technology, or changes in applicable requirements. When we make material changes, we will:

• Update the "Last Updated" date shown at the top of this page
• Display an in-platform notification the next time you log in after a material update
• For significant changes, send a notification to your registered mobile number or email address

We encourage you to review this Privacy Policy periodically. Continued use of the 999win platform after any update constitutes acceptance of the revised policy. If you do not agree with any change, you may request account closure through our support team.

14 Contact & Complaints

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy complaint, please contact the 999win support team:

All privacy-related complaints will be acknowledged within 48 hours of receipt and investigated within 14 days. If you are not satisfied with our response, you have the right to escalate your complaint through appropriate channels available to you.