999p Privacy Policy — Your Data, Handled Carefully

This Privacy Policy explains how 999p collects, uses, stores, and protects the personal information of players who register and use the 999p platform at 999p.wine. It applies to all users of the website, including visitors who browse without registering, registered account holders, and anyone who contacts 999p support.

By creating a 999p account or using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to your personal information being handled as described here. This policy should be read alongside the Terms and Conditions and Responsible Gaming pages.

We take your privacy seriously. This policy is written in plain language so that every 999p player in Pakistan can understand exactly what happens to their information — from the moment they sign up through to account closure.

999p collects personal information in two ways: information you provide directly, and information collected automatically when you use the platform.

Information you provide directly:

• Registration details: your full name, date of birth, email address, and mobile number at the time of account creation.
• Identity verification documents: a copy of your CNIC or other government-issued ID when required for account verification or withdrawal processing.
• Address information: your city and residential address, which may be requested during the verification process.
• Support communications: any information you share when contacting 999p via live chat, email, or any other support channel.
• Responsible gaming preferences: details of any deposit limits, loss limits, session reminders, or self-exclusion settings you apply to your account.

Information collected automatically:

• Device and browser data: device type, operating system, browser version, and screen resolution when you access the platform.
• IP address and approximate location: used to detect unusual login activity and ensure the platform is functioning correctly for your region.
• Usage data: which pages you visit, how long you spend on them, which games you play, and how you navigate between sections of the site.
• Session data: login timestamps, bet history, deposit and withdrawal records, and bonus activity linked to your account.
• Cookie data: see the Cookies section below for full details.

Every piece of data that 999p collects serves a specific, legitimate purpose. We do not collect information simply because we can. Below is a clear breakdown of why each type of data is used.

• To operate your account: your registration details are used to create and maintain your 999p account, verify your identity, and ensure that one account is held per person.
• To process deposits and withdrawals: payment references and transaction records are essential for processing PKR deposits via JazzCash, Easypaisa, Raast, and bank transfer, and for paying out withdrawals to your registered method.
• To provide customer support: when you contact 999p, your account details and any previous support history are used to resolve your query accurately and efficiently.
• To protect against fraud and abuse: login IP addresses, device data, and betting patterns help us identify unusual activity, prevent unauthorised account access, and detect attempts to exploit the platform.
• To enforce responsible gaming tools: your self-set deposit limits, loss limits, and self-exclusion preferences are stored and actively enforced whenever you use the platform.
• To personalise your experience: usage data helps 999p surface relevant promotions — such as PSL betting offers or slot bonuses — in a way that matches your activity on the platform.
• To send service communications: important account notifications, security alerts, and transaction confirmations are sent to your registered email or mobile number. These are not optional as they are operationally necessary.
• To send promotional communications (with consent only): bonus offers, cricket match promotions, and seasonal campaigns are only sent where you have opted in. You can opt out at any time from account settings.
• To improve the platform: aggregated, anonymised usage data is used to understand how players navigate 999p, which helps the team identify areas where the experience can be made better.

All financial transactions on 999p are denominated in Pakistani Rupees (PKR). When you make a deposit using JazzCash, Easypaisa, Raast, a bank transfer, or a debit or credit card, the payment is processed directly through that provider's own secure systems.

999p does not store full card numbers, JazzCash PINs, Easypaisa account passwords, or any other sensitive payment credentials on its servers. What 999p does retain is a transaction reference, the payment method type, the amount in PKR, and the date and time of the transaction. This information is required to:

• Confirm that a deposit has been received and credit your account balance.
• Process withdrawal requests back to your original payment method.
• Resolve any payment disputes or discrepancies if they arise.
• Maintain accurate financial records linked to your account for the duration required by our retention policy.

999p uses cookies and similar tracking technologies to keep the platform running correctly and to understand how it is being used. A cookie is a small text file stored on your device when you visit a website. The cookies used on 999p fall into the following categories:

• Essential cookies: these are necessary for the platform to function. They keep you logged in during a session, remember your language preference, and maintain the items in your bet slip. Without these cookies, basic features of 999p would not work correctly.
• Analytics cookies: these collect anonymised data about how visitors use 999p — which pages are visited most, how long sessions last, and where users navigate from. This information is used in aggregate form only and cannot identify you personally.
• Functional cookies: these remember your preferences, such as your preferred sports categories, display settings, or whether you have previously dismissed a notification. They improve your experience but are not strictly essential.
• Security cookies: used to detect and prevent fraudulent logins, bot activity, and other security threats. These are essential and cannot be disabled.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect some features of the platform but will not prevent you from accessing your account or placing bets.

999p does not sell your personal data to any third party. However, to operate the platform effectively, we do share certain data with carefully selected service providers and partners. All such parties are required to handle your data securely and use it only for the specific purpose for which it was shared.

• Payment processors: JazzCash, Easypaisa, Raast, and bank partners receive transaction details necessary to process your deposits and withdrawals. Each of these providers operates under their own privacy frameworks.
• Identity verification providers: where KYC checks are required, your identification documents may be shared with a third-party verification service to confirm authenticity. These providers are bound by strict data handling obligations.
• Casino game software providers: to deliver live casino and slot content, certain session data is shared with the game studio providing the title. This is limited to what is needed to run the game and record the result accurately.
• Sports data and odds providers: live cricket, PSL, and other sports betting markets rely on real-time data feeds from third-party suppliers. These providers receive no personal player data.
• Fraud prevention and security services: anonymised behavioural and device data may be shared with security platforms to detect and prevent fraudulent activity across the platform.
• Legal and compliance requirements: 999p may disclose personal data where required by law or in response to a valid legal process. In such cases, we will disclose only the minimum information necessary.

We do not share your personal data with advertising networks, data brokers, or any third party for purposes unrelated to the operation of your 999p account.

Protecting the personal and financial information of every 999p player is a core operational priority. The platform employs a range of technical and organisational measures to keep your data safe.

• Encryption in transit: all data exchanged between your device and 999p servers is protected by TLS encryption, the same standard used by banks and financial institutions.
• Encryption at rest: sensitive data stored on 999p systems — including personal details and financial records — is encrypted using strong algorithms so that it cannot be read without the correct decryption keys.
• Access controls: access to personal data within 999p systems is restricted on a need-to-know basis. Staff cannot access player data outside of what is required to perform their role.
• Two-factor authentication: players are encouraged to enable two-factor authentication on their accounts. This adds a critical additional layer of protection against unauthorised logins.
• Regular security reviews: 999p conducts periodic reviews of its data security practices to identify and address potential vulnerabilities before they can be exploited.
• Incident response: in the event of a data security incident, 999p has procedures in place to assess and contain the issue quickly and to notify affected users where required.

While 999p takes every reasonable precaution, no online system can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their account and to enable two-factor authentication where available.

999p retains personal data only for as long as it is genuinely needed. The retention period depends on the type of data and the reason it was collected.

• Active account data is retained for the duration of your account's existence. This includes your registration details, transaction history, and bet records.
• Transaction and financial records may be retained for a longer period after account closure where required to maintain accurate financial records and resolve any outstanding disputes.
• Identity verification documents are retained for the period required to support our KYC obligations and for dispute resolution purposes, after which they are securely deleted.
• Support communications are retained for a reasonable period to allow follow-up on open queries and to maintain a record of how issues were handled.
• Anonymised analytics data may be retained indefinitely as it contains no personal identifiers and is used only for platform improvement purposes.

When data is no longer required and retention is not mandated by any other obligation, it is securely deleted or irreversibly anonymised.

999p is strictly an adults-only platform. No person under the age of 18 is permitted to register an account, deposit funds, or participate in any betting or casino activity on the platform.

999p does not knowingly collect personal data from anyone under 18 years of age. If we become aware that a registered account belongs to a minor, the account will be closed immediately, any balance will be returned to the depositing payment method, and all associated personal data will be deleted in accordance with this policy.

If you believe a minor has registered an account on 999p, please contact support immediately so the situation can be addressed without delay.

As a 999p player, you have specific rights regarding your personal data. You can exercise any of these rights by contacting 999p support. We aim to respond to all data rights requests within a reasonable timeframe.

• Right to Access: you can request a copy of the personal data 999p holds about you. We will provide this in a clear, readable format.
• Right to Rectification: if any personal data we hold about you is inaccurate or out of date, you have the right to request that it be corrected. You can update many details directly from your account settings.
• Right to Erasure: in certain circumstances, you can request that 999p delete your personal data. This right may be limited where data retention is required by legal or contractual obligations, such as financial records.
• Right to Restrict Processing: you can ask 999p to limit how your data is used in specific circumstances, for example while a dispute about accuracy is being resolved.
• Right to Data Portability: you can request that personal data you have provided to 999p be supplied to you in a structured, machine-readable format.
• Right to Object: you have the right to object to your personal data being used for direct marketing. Opting out of promotional communications can be done at any time from your account settings.

To exercise any of the above rights, contact 999p support via live chat or email. We may need to verify your identity before processing a data rights request to ensure we are sharing or modifying information for the correct account holder.

999p may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable data protection standards, or improvements in how we explain our practices. When changes are made, the "Last updated" date at the top of this page will be revised.

For changes that materially affect how your personal data is handled, 999p will make reasonable efforts to notify registered players through the platform or via account notification. However, it remains your responsibility to review this page periodically, especially before making significant use of the platform after an extended absence.

Continued use of the 999p platform after a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and may request account closure.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, please get in touch with the 999p team.

• Live Chat: available 24/7 directly from within your logged-in account — the fastest way to reach us.
• Email: [email protected] — for privacy-related requests and data rights enquiries.
• FAQ: for quick answers to common questions, visit the FAQ page.

When submitting a data rights request, please include your registered email address and a brief description of your request so we can locate your account and respond accurately. We will verify your identity before actioning any request that involves accessing or modifying personal data.