Privacy Policy – 999bet Pakistan Data Protection Statement

1. Who We Are

999bet (operated by 999bet International Ltd, referred to as "we", "us" or "our") is responsible for the personal data of all players registered on the 999bet platform at 999bet-vip.com. We act as the data controller in relation to all personal information you provide when registering, depositing, playing or interacting with our customer support team.

This Privacy Policy applies to all information collected through the 999bet website, mobile interface and any associated communications channels including email and live chat. By registering an account at 999bet, you confirm that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data We Collect

999bet collects personal data from you directly (when you provide it) and indirectly (through your use of the platform). The categories of data we collect include:

2.1 Identity Data

• Full legal name as it appears on your CNIC
• Date of birth
• CNIC number (collected during KYC verification)
• Profile photograph or ID document scans submitted for verification

2.2 Contact Data

• Email address (used for account communications and support)
• Pakistani mobile phone number
• City and province of residence

2.3 Financial Data

• Easypaisa / JazzCash / NayaPay / SadaPay account numbers
• Bank account IBFT details where provided
• Visa/Mastercard details (processed securely; full card numbers are never stored on 999bet servers)
• Transaction history including deposits, withdrawals and bonus activity

2.4 Technical Data

• IP address at time of registration and login
• Device type, operating system and browser version
• Session duration and pages visited on the 999bet platform
• Geolocation data (country/city level, not precise GPS)

2.5 Gaming Activity Data

• Games played, stakes placed and outcomes
• Sports markets accessed and bets placed
• Bonus claims, wagering progress and VIP tier activity
• Responsible gaming settings and any self-imposed limits or exclusions

2.6 Communications Data

• Live chat and email support transcripts
• Responses to surveys or feedback requests from 999bet

3. How We Use Your Data

Every use of your personal data at 999bet serves a specific, legitimate purpose. We do not process data speculatively or beyond what is necessary for the purposes listed below:

4. Legal Basis for Processing

999bet processes your personal data under the following legal bases, referenced in the table above:

• Contract: Processing is necessary to deliver the services you've registered for – your account, deposits, withdrawals and access to games.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, KYC requirements and responsible gaming obligations imposed on us as an operator.
• Legitimate Interest: Processing that serves 999bet's reasonable business interests – fraud prevention, platform security, service improvement – where those interests are not overridden by your privacy rights.
• Consent: Where you have explicitly agreed to receive promotional emails or marketing messages from 999bet. You can withdraw this consent at any time by updating your communication preferences in your account dashboard or by emailing our data team.

5. Payment Data & Financial Information

Payment data is handled with particular care at 999bet. When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, your payment credentials are processed through encrypted, PCI-DSS compliant channels.

Important: Full Visa/Mastercard numbers are never stored on 999bet's servers. Only a tokenised reference is retained to facilitate withdrawals to your card. Mobile wallet account numbers (Easypaisa, JazzCash etc.) are stored in encrypted form, accessible only to the 999bet payments team for the purpose of processing your withdrawal requests.

All financial transaction records at 999bet are retained for a minimum of five years from the date of the transaction to comply with anti-money laundering regulations applicable to online gaming operators. These records may be shared with relevant regulatory or law enforcement authorities where required by law.

6. Cookies & Tracking Technologies

999bet uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device when you visit a website. We use cookies to keep you logged in, remember your preferences and understand how players use the 999bet platform so we can improve it.

6.1 Types of Cookies We Use

• Essential Cookies Required – These are necessary for the platform to function. They keep your session active, maintain your login state and ensure secure transactions. These cannot be disabled.
• Functional Cookies Optional – Remember your language preference, display settings and last-visited game category on 999bet.
• Analytics Cookies Optional – Help us understand which pages and features are used most, how players navigate the platform and where improvements can be made. Data collected is aggregated and anonymised.
• Security Cookies Required – Used to detect and prevent fraud, suspicious login attempts and bot activity on the 999bet platform.

6.2 Managing Cookies

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 999bet platform – for example, you may need to log in again on each visit if session cookies are disabled. For full control, you can also clear all stored cookies from your browser at any time.

7. Sharing Your Data with Third Parties

999bet does not sell, rent or trade your personal data. We share data with third parties only in the following specific circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and bank IBFT partners receive the minimum data necessary to process your transaction (account number, amount, reference). Card transactions are processed by our PCI-DSS compliant payment gateway partner.
• Game providers: When you play a game at 999bet, the relevant studio (e.g. Evolution Gaming, JILI, Pragmatic Play) may receive your anonymised player ID and bet data for the purpose of game operation, RNG auditing and dispute resolution. No personally identifiable information beyond a 999bet-generated player reference is shared.
• KYC verification providers: If you submit identity documents, these may be processed by an accredited third-party KYC service provider under a data processing agreement with 999bet. These providers are contractually prohibited from using your data for any purpose other than identity verification.
• Regulatory & law enforcement authorities: We may be legally required to share account and transaction data with relevant authorities in connection with AML investigations, fraud investigations or regulatory audits. We comply fully with all lawful data requests.
• Analytics service providers: Anonymised, aggregated platform usage data may be processed by analytics partners to help 999bet understand overall platform performance. No individually identifiable data is included.

8. How We Protect Your Data

Data security is not an afterthought at 999bet – it is built into the platform at every level. The following measures are in place to protect your personal and financial information:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 999bet's servers.
• Encrypted storage for all sensitive data including CNIC references, payment account numbers and KYC documents.
• Access controls: Internal access to personal data is restricted to 999bet staff who require it to perform their specific job function. All access is logged and audited.
• Two-factor authentication (2FA) available for all player accounts and mandatory for administrative accounts within 999bet.
• Penetration testing conducted by independent security professionals on a regular schedule to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: In the unlikely event of a data breach, 999bet has a documented incident response plan that includes notifying affected players and relevant authorities within the timeframes required by applicable law.

While 999bet takes every reasonable measure to protect your data, no online platform can guarantee absolute security. We encourage all players to use strong, unique passwords for their accounts and to enable two-factor authentication.

9. Data Retention

999bet retains your personal data for as long as your account is active and for a defined period after closure. Specific retention periods are as follows:

• Active account data: Retained for the full lifetime of your 999bet account.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction to comply with AML regulations.
• KYC documents: Retained for 5 years post-account closure. Physical copies (if any) are securely destroyed after this period.
• Customer support communications: Retained for 3 years, after which transcripts are anonymised.
• Technical/log data (IP, device): Retained for 12 months for security and fraud prevention purposes, then deleted.
• Marketing preferences & consent records: Retained for 3 years from the last recorded interaction or consent renewal.

When data is no longer required and its retention period has expired, 999bet securely deletes or anonymises it so that it can no longer be associated with you as an individual.

10. Your Privacy Rights

As a player at 999bet, you have the following rights in relation to your personal data. To exercise any of them, email support@999bet-vip.com with the subject line "Data Rights Request". We will respond within 30 days.

11. Protection of Minors

The 999bet platform is strictly for players aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. As part of our KYC verification process, all players are required to confirm their age and provide supporting documentation before withdrawals are processed.

If 999bet becomes aware that an account has been registered by a minor, the account will be immediately suspended, all activity will be reviewed, any winnings will be voided and the funds returned to the original payment method. Parents or guardians who believe a minor may have registered at 999bet are encouraged to contact us immediately at support@999bet-vip.com.

12. Changes to This Privacy Policy

999bet may update this Privacy Policy from time to time to reflect changes in our practices, applicable law or the structure of the platform. When material changes are made, we will notify registered players by email at least seven days before the new version takes effect.

The date at the top of this page shows when the Policy was last revised. We encourage all 999bet players to review this page periodically. Continued use of the platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

13. Contact Our Data Team

For any privacy-related queries, data rights requests or concerns about how 999bet handles your personal information, please get in touch:

• Email: support@999bet-vip.com (subject: "Privacy Query" or "Data Rights Request")
• Live Chat: 24/7 via the platform after login – select "Privacy & Data" as the query category
• Response time: Data rights requests responded to within 30 days; general privacy queries within 48 hours
• Language: Support available in English and Urdu

If you are not satisfied with how 999bet has handled your personal data, you have the right to escalate your concern to the relevant data protection authority in the jurisdiction applicable to our operations.