999ad Privacy Policy

This Privacy Policy ("Policy") describes how 999ad ("999ad," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of individuals ("Players," "Users," "you") who access or use the 999ad online casino and sports betting platform, including all associated web interfaces and services.

999ad is fully committed to protecting the privacy and personal data of all Pakistani players using our platform. We operate in accordance with internationally recognised data protection principles and take all reasonable technical and organisational measures to safeguard the personal information entrusted to us. This Policy is designed to give you a clear, transparent, and honest account of exactly how your data is handled at every stage of your 999ad journey — from the moment you register an account through to the end of your relationship with us.

This Policy should be read together with the 999ad Terms & Conditions and Responsible Gaming Policy, both of which form part of the complete agreement between you and 999ad. In the event of any conflict between this Policy and other documents, this Privacy Policy governs all matters relating specifically to the collection and processing of personal data.

For the purposes of this Privacy Policy, the data controller responsible for the personal data of 999ad players is 999ad, operating under its international gaming licence. As data controller, 999ad determines the purposes for which and the means by which personal data is processed in connection with the provision of online casino, sports betting, and associated services to Pakistani players.

All data-related queries, requests to exercise your rights, and privacy complaints should be directed to the 999ad Data Protection team via the contact details provided at the end of this Policy. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within the timelines required under applicable data protection standards.

999ad collects personal data that is necessary to provide you with a secure, compliant, and personalised gaming experience. The categories of personal data we collect include, but are not limited to, the following:

You are not required to provide all of the above data to browse the 999ad platform. However, certain categories of data — particularly identity, contact, and financial data — are mandatory for account registration, KYC completion, and withdrawal processing. Failure to provide mandatory data will limit your ability to use specific platform features.

999ad collects personal data through multiple channels in the course of providing services to Pakistani players. The primary methods of data collection used by 999ad are as follows:

• Direct submission: Data you provide yourself during account registration, KYC document upload, deposit and withdrawal requests, contact form submissions, live chat interactions, and email correspondence with the 999ad support team.
• Automated collection: Technical and usage data collected automatically as you interact with the 999ad platform, including IP addresses, device identifiers, session data, and behavioural data captured through cookies and similar tracking technologies. See Section 10 for full details on our cookie practices.
• Third-party sources: Data received from payment processors such as JazzCash and EasyPaisa in connection with deposit and withdrawal transactions; identity verification service providers used during the KYC process; and fraud prevention partners who provide risk intelligence to protect the platform and its players.

999ad uses the personal data collected from Pakistani players for the following specific and legitimate purposes:

• Account management: Creating and maintaining your 999ad player account, authenticating your identity at login, and managing your account preferences and settings.
• KYC and age verification: Verifying that you are at least 21 years of age and confirming your identity in compliance with our anti-money laundering (AML) and know-your-customer (KYC) obligations before processing any withdrawal from your account.
• Transaction processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, and other supported Pakistani payment channels, and maintaining accurate financial records for each transaction.
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, underage gambling, and unauthorised account access.
• Responsible gaming: Monitoring your usage patterns to identify signs of problem gambling behaviour and providing appropriate interventions, including self-exclusion tools and limit-setting features.
• Customer support: Responding to your enquiries, resolving complaints, processing dispute claims, and providing technical assistance through live chat and email support channels.
• Platform improvement: Analysing aggregated usage data to improve the 999ad platform experience, optimise game recommendations, and develop new features for Pakistani players.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates by email or on-platform messaging — only where you have consented to receive such communications and in compliance with applicable rules on direct marketing.
• Legal compliance: Meeting our obligations under applicable international gaming licence conditions, anti-money laundering regulations, and data protection standards.

999ad processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity in question:

• Contractual necessity: Processing required to perform our contract with you, including registering your account, processing deposits and withdrawals, and providing access to gaming products.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML obligations, age verification requirements, and gaming licence conditions imposed by our licensing authority.
• Legitimate interests: Processing conducted in the pursuit of 999ad's legitimate business interests — including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your own rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — for example, the sending of marketing communications or the use of non-essential cookies. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

999ad does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your data may, however, be shared with the following categories of third parties strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 gateway providers, solely to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents and to screen against sanctions and politically exposed persons (PEP) lists as required under AML obligations.
• Fraud prevention and security partners: Specialised providers who assist 999ad in identifying and preventing fraudulent transactions, bonus abuse, and account takeover attempts.
• Game software providers: Licensed game studios whose titles are available on the 999ad platform may receive limited technical and usage data necessary for game delivery and RNG certification.
• Legal and regulatory authorities: Law enforcement agencies, gaming regulators, financial intelligence units, and other public authorities where disclosure is required by law, court order, or regulatory mandate.
• Professional advisers: Lawyers, auditors, and insurers who require access to relevant data in the course of providing professional services to 999ad, subject to strict confidentiality obligations.

All third-party service providers engaged by 999ad are subject to contractual data processing agreements that require them to handle your personal data only in accordance with 999ad's instructions and to implement appropriate technical and organisational security measures.

999ad retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations — whichever is the longer period.

• Active account data: Retained for the duration of your account's active status on the 999ad platform.
• KYC and identity verification records: Retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Support and communications records: Retained for up to three (3) years following the resolution of the relevant enquiry or complaint, unless a longer retention period is required for legal proceedings.
• Marketing consent records: Retained for as long as you remain opted in, and for a reasonable period thereafter to demonstrate your consent history.

When personal data is no longer required for any lawful purpose, 999ad will securely delete or anonymise it in accordance with industry-standard data disposal practices. Anonymised, aggregated data that can no longer identify you individually may be retained indefinitely for statistical and analytical purposes.

999ad implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 999ad platform.
• Two-factor authentication (2FA) available to all registered players as an additional layer of account access protection.
• Encrypted storage of sensitive personal data and KYC documents in access-controlled server environments.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Role-based access controls ensuring that only authorised 999ad personnel with a legitimate operational need can access specific categories of player data.
• 24/7 security monitoring with automated anomaly detection to identify and respond to suspicious access patterns in real time.

999ad uses cookies and similar tracking technologies to enable essential platform functionality, improve your user experience, and gather aggregated analytics data that helps us understand how Pakistani players interact with the platform.

The categories of cookies used by 999ad include:

• Strictly necessary cookies: Essential for the operation of the 999ad platform, including maintaining your login session, managing your account preferences, and enabling secure transactions. These cookies cannot be disabled without impairing core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data on how players navigate and use the 999ad platform. This data is used to identify areas for improvement and optimise the user experience. No individually identifiable data is shared with analytics providers.
• Functional cookies: Enable enhanced functionality and personalisation, such as remembering your preferred language, region, or game categories, so that your experience is consistent across sessions.
• Marketing cookies: Used only where you have explicitly consented, to deliver relevant promotional content and track the effectiveness of 999ad's marketing communications. You may withdraw consent for marketing cookies at any time via the cookie settings on the 999ad platform.

You may manage your cookie preferences at any time through your browser settings or the 999ad platform cookie consent tool. Please note that disabling strictly necessary cookies may affect your ability to use core platform features.

As a 999ad player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the 999ad Data Protection team using the details in Section 15 of this Policy.

The 999ad platform is strictly restricted to individuals who are 21 years of age or older. 999ad does not knowingly collect, store, or process the personal data of any person under the age of 21. Age verification is a mandatory step in the KYC process and must be completed before any withdrawal is permitted.

If 999ad becomes aware that personal data has been collected from an individual who was under 21 years of age at the time of collection, that account will be immediately suspended, all associated data will be flagged for review, and the account will be closed in accordance with the 999ad Terms and Conditions. Deposited funds will be returned where legally required, and no winnings generated during the underage period will be payable.

As an internationally licensed online gaming platform, 999ad may process or store some of your personal data in server infrastructure located outside of Pakistan. Where such international transfers occur, 999ad ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international data transfers may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection by the relevant licensing authority. Details of the specific safeguards applicable to any particular transfer are available upon written request to the 999ad Data Protection team.

999ad reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. Where changes are material, 999ad will notify registered players by posting a prominent notice on the platform or by sending a notification to your registered email address prior to the changes taking effect.

The effective date displayed at the top of this Policy reflects the date of the most recent revision. Your continued use of the 999ad platform after any update to this Policy constitutes your acceptance of the revised version. We encourage you to review this Policy periodically so that you remain informed about how your personal data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 999ad holds about you, please reach out to us through the following channels:

• Live Chat: Available 24/7 directly on the 999ad platform — the quickest way to reach our support and data protection team for urgent privacy matters.
• Email: [email protected] — responses within 2 to 4 hours during standard operating periods. For formal data subject requests, please use the subject line "Privacy Request" to ensure your message is routed directly to the 999ad Data Protection team.

We take all privacy enquiries seriously and will respond to formal data subject rights requests within 30 calendar days of receipt of a verified request. In cases of particular complexity, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.