999w Privacy Policy — How We Handle Your Personal Data

This Privacy Policy is issued by 999w, the online gaming platform accessible at https://999w.biz ("999w", "we", "us", "our"). For the purposes of data protection, 999w is the data controller responsible for the personal information you provide when registering, depositing, placing bets, or otherwise interacting with the platform.

This policy applies to all personal data collected through the 999w website, any mobile-optimised version of the platform, and any communications between you and 999w including customer support interactions, emails, and live chat conversations.

999w collects personal data through three main channels: information you provide directly during registration and account management, information generated automatically by your use of the platform, and information provided by third-party payment processors and identity verification services.

999w uses the personal data it collects for specific, legitimate purposes only. We do not process your data for any purpose beyond what is described in this policy. The main purposes for which we use your data are:

• Account creation and management: To register your account, maintain your PKR balance, and manage your profile settings and preferences.
• Payment processing: To process deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payment networks. To verify that payments are made from accounts registered in your name.
• Identity verification (KYC): To verify your identity and age as required by responsible gaming obligations. CNIC verification may be required before large withdrawals are processed.
• Fraud prevention and security: To detect and prevent fraudulent account activity, money laundering, bonus abuse, and multi-accounting. Transaction patterns are monitored by automated systems for anomalous behaviour.
• Legal and regulatory compliance: To maintain records as required by applicable laws and regulations, and to respond to lawful requests from regulatory or law enforcement authorities.
• Customer support: To respond to your queries, resolve complaints, and process responsible gaming requests such as deposit limits and self-exclusion.
• Platform improvement: To understand how Pakistani players use 999w, which games are most popular, and where technical improvements are needed. This analysis uses aggregated, anonymised data wherever possible.
• Responsible gaming: To monitor for signs of problematic gaming behaviour and, where appropriate, make responsible gaming interventions.

999w processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing your identity, contact, financial, and transaction data is necessary to fulfil the contract between you and 999w — specifically, to operate your account, process bets, and pay out winnings. Without this processing, we cannot provide the service.
• Legal obligation: Certain processing activities — particularly identity verification, transaction record-keeping, and fraud reporting — are required by applicable laws and regulations. 999w must perform this processing regardless of consent.
• Legitimate interests: Processing technical and usage data for fraud prevention, platform security, and service improvement is based on 999w's legitimate interests in operating a secure and high-quality platform. We balance these interests against your privacy rights and only collect the minimum data needed.
• Consent: Where we rely on your consent as the legal basis for processing — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

999w uses cookies and similar tracking technologies on its platform for the following purposes. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality.

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cannot be disabled without breaking core platform functionality.
• Analytical cookies: Used to understand how players navigate the 999w platform — which pages they visit, how long they spend on each game, and where they encounter technical issues. This data is aggregated and anonymised. It helps us improve the experience for Pakistani players without identifying individual users.
• Functional cookies: Remember preferences you have set, such as your preferred game filters, deposit amount shortcuts, and responsible gaming reminder settings. These improve your experience on return visits to 999w.

999w does not sell, rent, or trade your personal data to any third party. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, partner banks, and card networks receive the minimum data required to process your transactions — typically your name, account reference, and transaction amount.
• Identity verification providers: Third-party KYC services receive identity document data (such as CNIC details) for the purpose of age and identity verification. These providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Game providers: Licensed game developers whose titles are hosted on 999w may receive your player ID and session data to operate the game. They do not receive your name, CNIC, or financial details.
• Fraud prevention services: Automated fraud detection platforms may receive transaction and technical data to identify and prevent fraudulent activity. This processing protects your account as well as the platform.
• Legal and regulatory authorities: 999w will disclose your data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, or where we reasonably believe disclosure is necessary to prevent fraud, criminal activity, or harm to individuals.

All third parties with whom 999w shares personal data are required to maintain appropriate technical and organisational security measures and to use your data only for the specified purpose.

999w retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligations that require longer retention. The following retention periods apply:

After the applicable retention period has expired, 999w will securely delete or anonymise your personal data so that it can no longer be associated with you.

Every player on 999w has the following rights regarding their personal data. To exercise any of these rights, contact our support team at support@999w.biz. We will respond within 30 days and there is no charge for making a request.

999w takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data in transit between your device and 999w is encrypted using TLS 1.2 or higher. This is the same standard used by Pakistani banks and financial institutions for online transactions.
• Encrypted data storage: Personal data stored on 999w servers is encrypted at rest. Database access is strictly controlled and logged.
• Access controls: Internal access to player personal data is restricted to staff members who require it for their specific role. Access is granted on a least-privilege basis and reviewed regularly.
• Two-factor authentication: 999w offers 2FA for player accounts and requires it for all internal staff accounts with access to player data.
• Regular security testing: 999w's platform undergoes regular security assessments including vulnerability scanning and penetration testing.
• Incident response plan: 999w maintains a documented incident response procedure. In the event of a confirmed data breach, affected players will be notified within 72 hours of us becoming aware of the incident.

999w is an adult platform and does not knowingly collect personal data from individuals under the age of 18. Registration requires confirmation that you are aged 18 or over, and age verification procedures are applied to all accounts.

If 999w becomes aware that it has inadvertently collected personal data from an individual under 18, that data will be deleted immediately, the associated account will be permanently closed, and any funds deposited will be returned to the payment source via the original payment method where possible.

If you are a parent or guardian and believe that a minor has created a 999w account without your knowledge, please contact us immediately at support@999w.biz. We will investigate and take appropriate action without delay.

999w may send you marketing communications about new games, promotions, bonuses, and platform updates if you have opted in to receive them. You can manage your marketing preferences at any time through your account settings or by contacting our support team.

• Marketing communications are sent by SMS, email, or in-app notifications — based on the contact details registered with your 999w account.
• You can opt out of all marketing communications at any time by updating your account notification preferences or replying STOP to any SMS from 999w.
• Opting out of marketing does not affect essential service communications — you will still receive transaction confirmations, security alerts, and support responses.
• 999w will not share your contact details with third parties for the purpose of marketing their products or services to you.

999w reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. The "Last Updated" date at the top of this page shows when the current version was published.

When material changes are made to this policy — changes that significantly affect how we use your personal data — we will notify registered players by email and/or via a notice on the 999w platform at least 14 days before the updated policy comes into effect. For minor changes that do not materially affect your data rights, we will update the policy and the "Last Updated" date without separate notification.

Continued use of the 999w platform after the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you may close your account and request deletion of your personal data in accordance with Section 8.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data that 999w holds about you, please get in touch with our team. We are available 24 hours a day, seven days a week.

• Email: support@999w.biz — mark your email subject "Privacy Request — [your 999w username]" for faster handling.
• Live Chat: Available when you are logged in to your 999w account — the fastest way to reach us for urgent data-related queries.
• Response Time: All privacy requests will be acknowledged within 48 hours. Full responses to data access, deletion, and correction requests will be provided within 30 days.

If you are not satisfied with 999w's response to a privacy concern, you have the right to escalate your complaint formally. Submit a written complaint with the subject "Formal Privacy Complaint" to support@999w.biz and we will treat it as a formal escalation subject to our internal complaints procedure.