999x Privacy Policy

1. Who We Are

999x operates the online casino and sports betting platform accessible at 999x.bio ("the Platform"). References to "999x", "we", "us" or "our" in this Privacy Policy refer to the operator of the 999x platform. This Privacy Policy applies to all personal data processed in connection with your use of the 999x website, account, games, payment services, and customer support channels.

For privacy-related enquiries, you may contact the 999x Data Protection team via live chat (available 24/7) or by email at [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

999x collects personal data through several channels: directly from you when you register or interact with the platform, automatically when you browse or use the site, and from third parties where necessary for identity and payment verification. The categories of personal data collected include:

999x does not knowingly collect special category data (health data, political opinions, religious beliefs) unless you voluntarily provide such information in the context of a responsible gaming self-assessment.

3. How We Use Your Personal Data

999x uses the personal data described above for the following purposes:

• Account Management: To create and maintain your 999x account, verify your identity, and manage your account settings including deposit limits and self-exclusion preferences.
• Payment Processing: To process PKR deposits via JazzCash, Easypaisa, and bank transfers, and to process withdrawals to your verified payment method.
• Fraud Prevention & Security: To detect and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited conduct. 999x's fraud monitoring systems analyse gaming patterns and transaction data to identify suspicious activity.
• Regulatory Compliance: To comply with applicable anti-money laundering (AML), Know Your Customer (KYC), and other regulatory obligations that apply to the 999x platform.
• Responsible Gaming: To monitor player activity for indicators of problem gambling and to implement self-exclusion, deposit limits, and session limits requested by players.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the 999x website, game offering, and payment experience.
• Customer Support: To respond to enquiries, resolve disputes, and communicate important account and platform information to you.
• Marketing Communications: To send you promotional offers and bonus notifications where you have provided your consent to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

999x processes your personal data on the following legal bases:

• Performance of a Contract: Processing necessary to deliver the 999x services you have signed up for, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with KYC, AML, and other regulatory requirements applicable to online gaming operators.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and responsible gaming monitoring where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

999x does not sell your personal data to third parties. We may share personal data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Visa/Mastercard processing networks — for the purpose of executing your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC service providers who assist with CNIC verification and biometric checks where required.
• Game Software Providers: Casino game studios that supply games to the 999x platform may receive technical session data necessary to operate their games. These providers are contractually prohibited from using your data for their own purposes.
• Fraud Prevention Services: Third-party fraud detection and AML screening services that help 999x identify and prevent financial crime.
• Legal & Regulatory Authorities: Law enforcement, regulatory bodies, and courts where 999x is legally required or permitted to disclose personal data.

All third parties with whom 999x shares personal data are subject to contractual data protection obligations and are prohibited from using your data for purposes beyond those specified.

6. Cookies & Tracking Technologies

999x uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help 999x provide a functional, personalised, and secure experience. The types of cookies used at 999x include:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your 999x account. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language settings and game lobby view. These improve your 999x experience but are not essential.
• Analytics Cookies: Help 999x understand how players navigate the platform so we can improve the user experience. Data collected is aggregated and anonymised.
• Marketing Cookies: Used to deliver relevant promotional content to players who have consented. You may opt out at any time via the cookie preference settings accessible on the 999x platform.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the 999x platform.

7. Data Retention

999x retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and KYC documents: Retained for a minimum of 5 years following account closure, in accordance with standard AML compliance requirements.
• Financial transaction records: Retained for a minimum of 5 years following the date of each transaction.
• Gaming session logs: Retained for a minimum of 3 years.
• Customer support communications: Retained for 2 years following the resolution of each matter.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for analytical purposes without identifying individual players.

8. Data Security

999x implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 999x platform.
• Encrypted storage of sensitive account data, including CNIC numbers and payment method references.
• Access controls ensuring that 999x staff can only access personal data on a need-to-know basis.
• Regular security audits and penetration testing of the 999x platform.
• Two-factor authentication (2FA) available for all player accounts to protect against unauthorised login.

Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to affected players, 999x will notify impacted users in accordance with applicable legal requirements.

9. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by 999x:

• Right of Access: You may request a copy of the personal data 999x holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data on your 999x account.
• Right to Erasure: You may request deletion of your personal data where 999x no longer has a lawful basis for retaining it. Note that data subject to regulatory retention obligations (AML, KYC) cannot be deleted before the applicable retention period expires.
• Right to Restrict Processing: You may request that 999x restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to 999x.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, and you may withdraw consent for marketing communications at any time.

To exercise any of these rights, contact the 999x support team via live chat (available 24/7). 999x will respond to verified requests within 30 days.

10. Children's Privacy

The 999x platform is strictly restricted to individuals aged 18 years and above. 999x does not knowingly collect personal data from persons under the age of 18. If 999x becomes aware that a minor has registered an account, that account will be immediately suspended and all personal data associated with it will be deleted after the completion of any legally required investigation. If you believe a minor has registered at 999x, please contact support immediately.

11. Updates to This Privacy Policy

999x may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. The effective date at the top of this Policy reflects the date of the most recent revision. We will notify registered 999x players of material changes via email or in-platform notification before the changes take effect. Continued use of the 999x platform after the updated Policy is posted constitutes your acceptance of the revised terms.

12. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data at 999x, please contact the 999x support team:

• Live Chat: Available 24/7 via the 999x platform — fastest response channel.
• Email: [email protected] (plain text — not a clickable link).

Please include your registered mobile number or 999x account reference when submitting a data-related request so that we can verify your identity before processing the request.