999d Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to all users of 999d — the online gaming platform available at https://999d.click. It describes how 999d ("we", "us", "the Platform") collects, processes, stores, and protects personal data belonging to registered players and visitors from Pakistan and elsewhere.

Privacy at 999d is not an afterthought — it is built into how the platform operates. We collect only the data we genuinely need to run your account, process your transactions, keep the platform safe, and comply with applicable regulations. We do not sell your personal data to third parties, and we do not use it for purposes beyond those described in this policy.

By registering an account on 999d, depositing funds, or simply visiting the website, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, you should not use 999d. For questions or concerns, contact us any time at support@999d.click.

The types of personal data 999d collects depend on how you interact with the platform. When you register an account and use our services, we may collect the following categories of information:

999d uses your personal data strictly for the following purposes. Each purpose is linked to a specific business or legal need — we do not use data for any purpose not described here without first obtaining your consent.

• Account Management: Creating, maintaining, and securing your 999d player account. This includes account login, identity verification, password resets, and account preference management.
• Payment Processing: Facilitating deposits and withdrawals through your chosen payment method (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard). Transaction data is retained for accounting and dispute resolution purposes.
• Game Provision: Operating 999d's games and betting markets, calculating and crediting winnings, maintaining game histories, and resolving disputes about game outcomes.
• Fraud Prevention & Security: Monitoring account activity to detect and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited activities. This includes automated screening of unusual patterns.
• Regulatory Compliance: Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. This may include verifying your identity through third-party services and retaining transaction records as required.
• Responsible Gaming: Monitoring for indicators of problem gambling behaviour and applying the responsible gaming settings you configure on your 999d account.
• Customer Support: Responding to your support queries, complaints, and feedback. Support communications are retained to enable continuity of service and to protect both parties in disputes.
• Service Improvement: Analysing aggregated, anonymised usage data to improve the 999d platform, identify bugs, and develop new features. Individual player data is not used for this purpose without anonymisation.
• Marketing Communications: Sending you promotional offers, tournament announcements, and platform updates, but only if you have opted in to receive such communications. See Section 11 for details on managing your marketing preferences.

999d processes your personal data only where we have a valid legal basis to do so. The legal bases we rely on are:

• Contract Performance: Processing necessary to perform our contractual obligations to you as a registered player — including running your account, processing payments, and providing access to games.
• Legal Obligation: Processing required by applicable law, including KYC/AML regulations, tax reporting requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, and service improvement, where our interests (and those of our players) outweigh any privacy impact and are not overridden by your rights.
• Consent: Processing for optional purposes such as receiving marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

999d shares personal data with third parties only where necessary, and only with parties who are contractually bound to protect that data to the same standard as 999d. We never share data for commercial gain. The following categories of third parties may receive limited personal data:

• Payment Service Providers: Easypaisa, JazzCash, NayaPay, SadaPay, and bank/card processors receive the minimum data required to process your deposit or withdrawal (account number, transaction amount, reference). These providers are bound by their own strict data protection obligations.
• Identity Verification Services: Where KYC verification is required, your identity documents (CNIC, selfie) may be processed by a certified third-party identity verification provider. These providers are contractually bound to use your data solely for verification purposes.
• IT Infrastructure & Cloud Providers: 999d's platform is hosted on secure servers operated by contracted infrastructure providers. These providers host data on 999d's behalf under strict data processing agreements.
• Regulatory Authorities & Law Enforcement: 999d will disclose personal data to relevant authorities where legally obliged to do so, including in response to valid court orders, regulatory investigations, or AML reporting obligations.
• Game Technology Suppliers: Some 999d games are provided by licensed third-party suppliers. These suppliers may receive anonymised gameplay data for technical purposes but do not receive personal identity or financial data.

Protecting player data is an ongoing investment at 999d, not a one-time setup. Our security framework includes both technical and organisational measures designed to prevent unauthorised access, disclosure, loss, or destruction of personal data.

Technical measures in place at 999d include:

• 256-bit TLS encryption on all data transmitted between player devices and 999d servers
• AES-256 encryption for sensitive data stored in our databases
• Multi-factor authentication (MFA) for internal staff systems
• Regular automated vulnerability scanning and periodic penetration testing
• Real-time intrusion detection and anomaly monitoring
• Automated backups to geographically separate, encrypted storage

Organisational measures include:

• Role-based access control — staff can only access data required for their specific function
• Mandatory privacy and security training for all 999d staff with data access
• Documented data handling procedures and incident response plans
• Non-disclosure agreements with all staff and contracted service providers

Despite these measures, no online platform can guarantee absolute security against all possible threats. We strongly recommend that all 999d players use a strong, unique password, enable any available two-factor authentication, and never share account credentials with anyone.

999d retains personal data only for as long as is necessary for the purpose it was collected and to meet our legal and regulatory obligations. Our standard retention periods are as follows:

• Account and identity data is retained for the duration of your active account plus 5 years after account closure, in compliance with AML record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history) are retained for 5 years from the date of each transaction.
• KYC documents (CNIC copies, verification photos) are retained for 5 years from the date of verification or account closure, whichever is later.
• Support communications are retained for 2 years from the date of the interaction.
• Marketing preferences and consent records are retained for 3 years from the last update or until withdrawal of consent.
• Technical log data (IP addresses, session tokens) is retained for 12 months for security and fraud detection purposes.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

999d uses cookies and similar technologies to make the platform work correctly, remember your preferences, and improve your experience. A cookie is a small text file stored on your device when you visit a website. Here is how 999d uses cookies:

• Essential Cookies: Required for the platform to function. These manage your login session, remember your game settings, and maintain security. They cannot be disabled without affecting your ability to use 999d.
• Functional Cookies: Remember your preferences such as language, preferred payment method, and responsible gaming settings so you don't have to re-enter them on every visit.
• Analytics Cookies: Help 999d understand how players use the platform — which games are most popular, where users encounter difficulties, how long sessions last. All data collected by analytics cookies is aggregated and anonymised.
• Security Cookies: Support fraud detection and prevention systems by identifying suspicious patterns of access or activity.

999d does not use advertising or tracking cookies from third-party ad networks. We do not track your activity outside of the 999d platform.

As a user of 999d, you have meaningful rights over your personal data. 999d respects and supports the exercise of these rights. Here is what you are entitled to request:

To exercise any of these rights, email support@999d.click with "Privacy Request" in the subject line. Please include your registered mobile number and a clear description of your request. We will respond within 30 days. In some cases — particularly where legal retention obligations apply — we may not be able to fulfil a deletion request fully, in which case we will explain the reason clearly.

999d operates a strict 18+ policy. We do not knowingly collect personal data from individuals under 18 years of age. Our registration process requires confirmation that you are 18 or over, and 999d reserves the right to verify age through identity document checks at any time.

If 999d discovers or is informed that a player is under 18, the account will be immediately closed, all gaming activity will be voided, and any funds deposited by or on behalf of the minor will be returned via the original payment method to the account holder. Where child safety concerns are present, appropriate authorities will be notified.

If you believe a minor has registered on 999d using false information, please contact our support team immediately at support@999d.click. We take such reports seriously and act on them without delay.

999d may send you promotional communications about bonuses, tournaments, new game launches, and platform updates — but only if you have opted in to receive them during registration or in your account settings. We send these communications via SMS to your registered Pakistani mobile number and/or email if provided.

You can withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in Account Settings → Communications on 999d
• Replying STOP to any promotional SMS received from 999d
• Emailing support@999d.click with "Unsubscribe" in the subject line

Withdrawing marketing consent does not affect your ability to use 999d or receive essential service communications such as transaction confirmations, security alerts, and account verification messages. These service messages are sent regardless of marketing preferences because they relate to the operation of your account.

The 999d platform may contain references or links to third-party services in limited contexts (such as payment provider apps). This Privacy Policy applies only to 999d itself and does not cover how those third parties handle your data.

When you make a payment through Easypaisa, JazzCash, or another provider, you are interacting with that provider's systems and their own privacy policies apply. 999d recommends reviewing the privacy policies of any third-party services you use in connection with your 999d account.

999d is not responsible for the privacy practices of any third party, regardless of whether a link to their service appears on our platform.

999d may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes, we will notify you by SMS to your registered mobile number at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Minor updates that do not materially affect how we process your data (such as formatting corrections or clarifications) may be made without formal notification. We recommend reviewing this page periodically.

Continued use of 999d after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any change, you may close your account and request deletion of your data by contacting support.

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact the 999d support team. We are available 24 hours a day, 7 days a week and aim to respond to all privacy-related queries within 24 hours.

When contacting us about a privacy matter, please include your registered 999d mobile number and a clear description of your request or concern. This helps us locate your account and respond efficiently. We will never ask for your password or full payment details via email.

For questions related to 999d's Terms of Service, please visit the Terms and Conditions page. For responsible gaming support and tools, visit the Responsible Gaming page.