999x Privacy Policy – How We Protect Your Data

Last Updated: June 2026

1. Introduction

This Privacy Policy ("Policy") describes how 999x ("999x", "we", "us", "our") collects, uses, retains, shares, and protects personal data belonging to users ("you", "Player") of the 999x website at 999x.lat, including all casino gaming, sports betting, and payment services offered on the platform.

By registering a 999x account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to the terms of this Policy, you must not create or use a 999x account.

This Policy should be read in conjunction with the 999x Terms & Conditions, which govern your use of the platform as a whole. Defined terms used in this Policy have the same meaning as in the Terms & Conditions unless otherwise stated.

2. Data Controller

For the purposes of applicable data protection law, 999x is the data controller in respect of personal data collected and processed through the 999x platform. As data controller, 999x determines the purposes for which and the manner in which personal data is processed.

If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data by 999x, please contact us using the details set out in Section 15 (Contact) of this Policy.

3. Data We Collect

999x collects the following categories of personal data from players:

• Identity Data: Full name, date of birth, CNIC or passport number, nationality, and copies of identity documents provided for KYC verification.
• Contact Data: Email address, mobile phone number, and residential address (city and province, at minimum).
• Account Data: Username, encrypted password, account registration date, account status, and communication preferences.
• Financial Data: PKR account balance, transaction history (deposits and withdrawals), payment method details (JazzCash wallet number, Easypaisa account number, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah), and withdrawal request records.
• Gaming Data: Betting history, game session data, sports betting selections, wagering amounts, win/loss records, and bonus participation history across all 999x games and markets.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone, and approximate geolocation derived from IP address.
• Usage Data: Pages visited on the 999x platform, navigation paths, session durations, login timestamps, and feature interaction logs.
• Communications Data: Records of your communications with 999x customer support, including live chat transcripts, email correspondence, and support ticket history.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, cooling-off period activations, and any disclosures made in the context of responsible gaming support interactions.

999x does not collect or store full payment card numbers. Where card payment processing is facilitated, card data is handled exclusively by PCI-DSS compliant payment processors and is not retained by 999x.

4. How We Collect Your Data

999x collects personal data through the following means:

• Direct collection: Data you provide when registering your 999x account, completing KYC verification, making deposits or withdrawal requests via JazzCash, Easypaisa, or bank transfer, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically when you access the 999x platform through cookies, server logs, and session tracking technologies.
• Third-party sources: Identity and fraud risk data received from KYC verification providers, payment processors, and fraud detection services as part of account verification and transaction monitoring processes.

5. How We Use Your Data

999x processes your personal data for the following purposes:

• To register, verify, and maintain your 999x account, including identity verification and KYC compliance.
• To process PKR deposits and withdrawals via your chosen payment method (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) and maintain accurate financial records.
• To operate, personalise, and improve the 999x platform, including game recommendations and sports betting market display preferences.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited activities on the 999x platform.
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and gambling regulation.
• To administer bonuses, promotions, and loyalty programmes applicable to your 999x account.
• To provide customer support and resolve disputes or complaints relating to your 999x account.
• To enforce the 999x Terms & Conditions and this Privacy Policy.
• To send you account notifications, security alerts, transaction confirmations, and, where you have opted in, promotional communications regarding 999x offers.
• To monitor compliance with responsible gaming commitments, including enforcing self-exclusion periods and deposit limits set by players.

6. Legal Basis for Processing

999x processes personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, process transactions, and operate the 999x platform in accordance with the Terms & Conditions you agreed to.
• Legal obligation: Processing required to comply with AML obligations, tax reporting requirements, and other applicable legal and regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and service improvement, where such interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

999x does not sell, rent, or trade your personal data to third parties for their own marketing purposes. 999x may share your personal data with the following categories of recipients in the circumstances described:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers, strictly to the extent necessary to process your PKR deposits and withdrawals.
• KYC and identity verification providers: Third-party services used to verify your identity, age, and address as required for account registration and withdrawal processing.
• Fraud prevention and AML services: Specialist third-party services used to detect and prevent fraudulent activity and money laundering on the 999x platform.
• Game software providers: Licensed game providers whose software runs within the 999x platform may receive anonymised or pseudonymised session data necessary to operate their games.
• Legal and regulatory authorities: Law enforcement agencies, courts, regulators, or other public authorities where disclosure is required by law or necessary to protect the rights, property, or safety of 999x, its players, or the public.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by 999x, subject to binding confidentiality obligations.

All third parties with whom 999x shares personal data are required to process that data in compliance with applicable data protection law and solely for the purposes for which it was shared.

8. International Data Transfers

The 999x platform is operated with server infrastructure that may be located outside Pakistan. By using 999x and providing your personal data, you acknowledge that your data may be transferred to and processed in countries other than your country of residence. 999x implements appropriate safeguards — including data processing agreements and, where applicable, standard contractual clauses — to ensure that such transfers comply with applicable data protection requirements and that your personal data receives an adequate level of protection.

9. Data Retention

999x retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Specific retention periods applicable to the key categories of data held by 999x are as follows:

• Account and identity data: Retained for the duration of your 999x account and for a minimum of five (5) years following account closure, in accordance with AML regulatory obligations.
• Financial and transaction data: Retained for a minimum of five (5) years following the date of each transaction, in accordance with applicable financial record-keeping requirements.
• Gaming data: Retained for the duration of your account and for up to five (5) years following account closure for regulatory compliance and dispute resolution purposes.
• Technical and usage data: Retained for up to twenty-four (24) months, after which it is aggregated and anonymised or deleted.
• Customer support communications: Retained for up to three (3) years from the date of the last communication for quality assurance and dispute resolution purposes.
• Self-exclusion and responsible gaming records: Retained indefinitely to enforce self-exclusion commitments and prevent circumvention through re-registration.

10. Cookies and Similar Technologies

The 999x platform uses cookies and similar browser-based technologies to deliver and improve the platform. The types of cookies used by 999x include:

• Strictly necessary cookies: Required for the 999x platform to function. These include session authentication cookies that keep you logged in to your 999x account. These cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players interact with the 999x platform, enabling us to identify and fix errors and improve the user experience.
• Functional cookies: Used to remember your preferences, such as language settings, game filter preferences, and display options within the 999x lobby.

You can manage or delete cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 999x platform, including session persistence and personalisation features.

11. Your Data Rights

Subject to applicable law, you have the following rights in respect of personal data held about you by 999x:

• Right of access: You may request a copy of the personal data 999x holds about you and information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by 999x.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 999x's legal retention obligations (particularly AML and financial record-keeping requirements, which may prevent immediate deletion).
• Right to restrict processing: You may request that 999x restricts processing of your personal data in certain circumstances, for example where you contest the accuracy of the data pending verification.
• Right to data portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing of your personal data where processing is based on legitimate interests or for direct marketing purposes.

To exercise any of the above rights, please contact the 999x data privacy team using the contact details in Section 15 of this Policy. 999x will respond to verified requests within 30 days. We may need to verify your identity before processing a data rights request.

12. Children and Minors

The 999x platform is strictly for adults aged 18 years and over. 999x does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account with 999x, please contact our support team immediately at [email protected].

13. Data Security

999x implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include HTTPS/TLS encryption for all data transmitted between your browser and the 999x platform, encrypted storage of passwords and sensitive account data, access controls limiting internal access to personal data on a need-to-know basis, and regular security reviews of platform infrastructure.

While 999x takes data security seriously, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 999x login credentials and for the security of the device from which you access your account. Report any suspected account security breach to 999x support immediately.

14. Changes to This Policy

999x reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players by email to their registered address or by posting a prominent notice on the 999x platform before the changes take effect. The updated Policy will be dated at the top of this page. Continued use of the 999x platform after any updated Policy takes effect constitutes your acceptance of the changes.

15. Contact

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 999x handles your personal data, or if you wish to exercise any of your data rights, please contact the 999x support and data privacy team:

Email: [email protected]

999x customer support is available 24/7 via live chat (accessible after 999x login) and email. The support team endeavours to respond to all privacy-related enquiries within 72 hours. Formal data rights requests will be processed within 30 calendar days of receipt of a verified request.