At 999r, we take the privacy of every Pakistani player seriously. This Privacy Policy explains exactly what personal information 999r collects, why we collect it, how it is used and stored, who it may be shared with, and what rights you have in relation to your data. We are committed to processing your information lawfully, transparently, and securely.
999r employs 256-bit SSL encryption, strict access controls, and data minimisation practices to ensure your personal information is handled with the same care and rigour applied to your account funds.
Our Privacy Commitments
Before reading the full legal text below, here is a plain-language summary of the most important privacy commitments 999r makes to every registered player.
999r practises data minimisation. We collect only the personal information that is necessary to operate your account, process transactions, verify your identity, and comply with our licensing obligations. We do not collect data for its own sake.
999r does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely for the purposes described in this Privacy Policy.
All data transmitted between your device and the 999r platform is protected by 256-bit SSL encryption. Personal data stored on 999r servers is encrypted at rest using industry-standard protocols.
Access to your personal data within 999r is restricted on a need-to-know basis. Only team members who require access to your data to perform their job function are granted it, and all access is logged and audited.
999r provides you with clear mechanisms to access, correct, restrict, and request deletion of your personal data. Your rights in relation to your data are set out in full in Section 9 of this Privacy Policy.
999r does not retain your personal data indefinitely. Retention periods are determined by legal and regulatory obligations — primarily anti-money laundering requirements — and data is securely deleted or anonymised once retention periods expire.
1.1 This Privacy Policy ("Policy") describes how 999r ("we," "us," "our," or "999r"), the operator of the online casino and sports betting platform accessible at 999r.site, collects, processes, stores, and discloses personal information about users ("you," "player," "data subject") of the 999r platform and services.
1.2 This Policy applies to all personal information collected through your interaction with 999r, including during account registration, deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, use of casino games and sports betting markets, communications with 999r support, and browsing of the 999r website.
1.3 By registering a 999r account or using 999r services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein. If you do not accept this Policy, you must not use the 999r platform.
This Policy should be read alongside the 999r Terms & Conditions. Both documents together constitute the full legal framework governing your relationship with 999r. You can find the full Terms & Conditions at /terms-conditions.
2.1 999r collects personal information in several categories depending on how you interact with the platform. The following table summarises the main categories of data collected:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC or passport number, photograph | Account registration and KYC verification |
| Contact Data | Mobile number (e.g. 03xx-xxxxxxx), email address, residential address | Account registration, profile updates |
| Financial Data | JazzCash or EasyPaisa wallet reference, bank account details (HBL, UBL, Meezan Bank), transaction history | Deposits, withdrawals, KYC payment method verification |
| Transaction Data | Deposits, withdrawals, bets placed, games played, bonus credits and deductions, account balance history | Ongoing platform use |
| Technical Data | IP address, device type, browser type and version, operating system, device identifier | Login, platform access, fraud monitoring |
| Usage Data | Pages visited, features used, session duration, game history, betting patterns | Ongoing platform use via cookies and server logs |
| Communications Data | Support chat transcripts, email correspondence, survey responses | Any communication with 999r support or marketing |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, responsible gaming tool usage | Use of responsible gaming features |
2.2 Special Category Data. 999r does not routinely collect special category personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs). Where such data is voluntarily disclosed by a player in the context of a responsible gaming interaction or support communication, it is treated with the highest level of confidentiality and processed only to the extent necessary to assist the player.
3.1 999r processes your personal data for the following purposes:
4.1 999r processes your personal data on the following legal bases:
5.1 We do not sell your personal data. 999r does not sell, rent, or trade personal information with third-party advertisers, data brokers, or marketing networks.
5.2 999r may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
All third-party processors are bound by contract. Every third party that processes personal data on behalf of 999r is required to execute a data processing agreement that restricts their use of your data, requires appropriate security measures, and prohibits onward transfers without 999r's authorisation.
6.1 The 999r platform uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:
6.2 You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 999r platform.
7.1 999r implements a layered security architecture to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our security measures include:
7.2 Data Breach Response. In the event of a data breach that poses a risk to your rights and interests, 999r will notify affected individuals and relevant regulatory authorities in accordance with applicable notification requirements, without undue delay.
Your role in account security. While 999r maintains robust platform-level security, you are responsible for maintaining the security of your own 999r account credentials. Never share your password with anyone. Enable Two-Factor Authentication. Report any suspected unauthorised access to 999r support immediately.
8.1 999r retains personal data for no longer than is necessary for the purposes for which it was collected, subject to overriding legal and regulatory retention requirements. The following retention periods apply:
8.2 Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in accordance with 999r's data disposal procedures. Anonymised data may be retained for analytical purposes without time limit, as it no longer constitutes personal data.
9.1 Subject to applicable law and the conditions of 999r's licensing obligations, you have the following rights in relation to your personal data held by 999r:
Data Subject Rights
You have the right to request a copy of the personal data 999r holds about you, along with information about how that data is being processed.
If any personal data 999r holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
In certain circumstances, you have the right to request the deletion of your personal data held by 999r, subject to overriding legal retention obligations.
You may request that 999r restricts the processing of your personal data in certain circumstances, for example while a dispute or rectification request is being resolved.
Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, machine-readable format for transfer to another provider.
You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. You may withdraw marketing consent at any time.
You have the right not to be subject to decisions based solely on automated processing that produce significant effects on you, except where necessary for contract performance or legally authorised.
Submit a data rights request to 999r by contacting support. 999r will acknowledge requests within 5 business days and respond substantively within 30 calendar days.
10.1 The 999r platform is not directed at, and is not intended to be used by, individuals under the age of 21. 999r does not knowingly collect personal data from any person under the age of 21.
10.2 If 999r becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately deleted and the associated account will be closed in accordance with our Terms & Conditions and age verification obligations.
10.3 If you believe that 999r may have inadvertently collected data from a person under the age of 21, please contact 999r support immediately so that the matter can be investigated and resolved without delay.
11.1 As an internationally licensed online gaming operator, 999r may transfer personal data to, and process personal data in, countries outside of Pakistan. Where such transfers occur, 999r ensures that appropriate safeguards are in place to protect your data to the same standard as required under this Policy.
11.2 Cross-border data transfers may occur in the context of: payment processing through international banking networks; use of internationally hosted infrastructure and cloud services; sharing data with 999r's licensing authority in its jurisdiction; and engagement of KYC verification providers operating in multiple jurisdictions.
11.3 In all cases of cross-border transfer, 999r implements contractual safeguards requiring recipients to maintain security and confidentiality standards consistent with this Policy.
12.1 999r reviews and may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, applicable law, or regulatory guidance. When material changes are made, registered players will be notified via email or platform notification prior to the changes taking effect.
12.2 The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the 999r platform following notification of changes constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you must cease using the platform and contact support to close your account.
13.1 If you have any questions, concerns, or complaints about this Privacy Policy or 999r's handling of your personal data, or if you wish to exercise any of your data rights, please contact 999r's support team.
13.2 Contact Details: All privacy-related enquiries should be submitted via email to: [email protected] | Subject line: "Privacy Enquiry"
13.3 999r's support team is available 10:00 AM – 2:00 AM PKT, seven days a week. We will acknowledge privacy enquiries within 5 business days and provide a full response within 30 calendar days of receiving your request.
Dispute Resolution. If you are dissatisfied with 999r's response to a privacy enquiry, you may have the right to refer the matter to the data protection authority in the applicable jurisdiction or to 999r's licensing authority's dispute resolution mechanism. Contact 999r support for guidance on the applicable escalation path for your specific concern.
Your data is protected. Your balance is in PKR. Your live casino, slots, and cricket betting are waiting.
999r services are strictly available to players aged 21 and above. The collection and processing of personal data described in this Privacy Policy applies exclusively to adult users. 999r will not knowingly collect, process, or retain personal data from any individual under the age of 21.
Your personal data is used to deliver a safe, fair, and responsible gambling environment. For information about responsible gaming tools available to 999r players, please visit our Responsible Gaming page.