999r Privacy Policy

999r (referred to in this Policy as "999r", "we", "us", or "our") is the operator of the online gaming and sports betting platform accessible at 999r.cam. 999r operates under a valid international gaming license and provides casino games, live dealer tables, and sports betting services to eligible players, including players based in Pakistan.

For the purposes of this Privacy Policy, 999r acts as the data controller in respect of the personal data collected from players and visitors to the 999r platform. As data controller, 999r determines the purposes and means by which personal data is processed.

If you have any questions about how 999r processes your personal data, you may contact our support team at any time via Live Chat on the platform or by email at [email protected].

999r collects personal data in the following categories. We collect only what is necessary to deliver our Services and meet our legal and licensing obligations.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where strictly required by our KYC or age-verification obligations under the terms of our international gaming license, in which case such data is collected and handled with enhanced security controls.

999r uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your 999r account, verify your identity and age, maintain your account records, and manage your login credentials securely.
• Service Delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other 999r platform Services for which your account is eligible.
• Financial Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; to maintain accurate transaction records; and to investigate any disputed transactions.
• KYC and Fraud Prevention: To verify your identity and age in accordance with our gaming license requirements; to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor player activity for indicators of problem gambling behaviour; to apply responsible gaming tools and restrictions where requested or where required under our licensing obligations; and to communicate with players about responsible gaming resources.
• Customer Support: To respond to your support enquiries, complaints, and account-related requests across Live Chat, Messenger, Viber, and email.
• Legal and Regulatory Compliance: To comply with the requirements of our international gaming license, anti-money laundering regulations, and any applicable laws or orders from competent authorities.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve platform performance, game selection, and user experience. This analysis uses anonymised data only and cannot be used to identify individual players.
• Communications: To send you transactional notifications (account confirmations, deposit receipts, withdrawal notifications, bonus alerts) and, where you have consented, promotional communications about 999r offers and new features.

999r processes your personal data only where a valid legal basis exists. The applicable legal bases for our data processing activities are as follows:

• Contractual Necessity: Processing necessary to perform our contract with you — that is, to operate your 999r account and deliver the Services you have registered for, including processing your deposits and withdrawals.
• Legal Obligation: Processing required to comply with applicable law and the requirements of our international gaming license, including KYC verification, age verification, anti-money laundering checks, and the maintenance of mandatory transaction records.
• Legitimate Interests: Processing conducted in pursuit of 999r's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics for service improvement.
• Consent: Where we rely on your consent as the legal basis for processing — specifically, for sending promotional communications — you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

999r shares personal data with third parties only in the following circumstances:

• Payment Processors: Your financial data is shared with the relevant payment processor (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) to the extent necessary to execute your deposit or withdrawal transaction. Each payment processor is subject to its own data protection obligations.
• Game Providers: Certain technical data (such as a session token or anonymised player identifier) may be shared with 999r's game software providers to facilitate game session loading and result verification. Game providers do not receive your full identity or financial details.
• KYC and Identity Verification Partners: Where required for age or identity verification, your identity documentation may be processed by a licensed third-party KYC service provider operating under equivalent data protection standards.
• Regulatory and Law Enforcement Authorities: 999r will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by law, by order, or by the terms of our international gaming license. We will notify affected players of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale affecting the 999r platform, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any consequent changes to their data controller relationship.

All third-party service providers with whom 999r shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection requirements.

The 999r platform uses cookies and similar tracking technologies to deliver and improve our Services. The following types of cookies are used:

• Essential Cookies: Necessary for the operation of the platform — including session management, login authentication, and security functions. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences (such as language settings and responsible gaming tool configurations) to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated and anonymised data about how players navigate the 999r platform, which helps us identify usability issues and improve the platform over time. This data is not used to identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent core 999r platform functions from operating correctly and may prevent you from logging into your account.

999r retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with our legal and licensing obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active 999r account and for a period of no less than five (5) years following account closure, as required under our gaming license and anti-money laundering obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC and Identity Documents: Retained for the period required by our gaming license, which is typically five (5) years from the end of the business relationship.
• Support Communications: Retained for three (3) years from the date of the interaction, to assist with ongoing player relationship management and complaint resolution.
• Anonymised Analytics Data: May be retained indefinitely, as it cannot be used to identify individual players.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is subject to a dispute, investigation, or legal proceeding, it will be retained until that matter is fully resolved.

999r implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and the 999r platform.
• Encryption of sensitive data at rest, including financial data and identity documentation.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the 999r platform infrastructure.
• Secure password hashing using industry-standard algorithms — 999r does not store passwords in plain text.
• Monitoring and logging of access to personal data systems for security audit purposes.

While 999r takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and for notifying 999r support immediately if you suspect any unauthorised access to your account.

Subject to applicable law and the requirements of our gaming license, you hold the following rights in respect of the personal data that 999r holds about you:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe, typically within 30 days of receipt of a valid request.
• Right of Rectification: You may request the correction of any personal data that is inaccurate or incomplete. Where data is used for KYC or regulatory purposes, supporting documentation may be required.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal or regulatory obligation requires its retention.
• Right to Restrict Processing: You may request that we restrict our processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interests as our legal basis, subject to 999r demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the 999r support team via Live Chat or at [email protected]. We may require identity verification before processing your request. We will respond within 30 days of receipt of a verified request.

999r does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from an underage individual, that account will be immediately suspended, all associated funds will be withheld pending investigation, and all personal data will be deleted as soon as practicable subject to any mandatory retention obligations.

If you believe that a minor has created a 999r account or that an account is being used by a person under 21, please contact our support team immediately at [email protected].

As an online platform operating under an international gaming license, 999r may process and store your personal data in jurisdictions outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to the standards applicable in Pakistan, 999r implements appropriate safeguards to ensure that your data continues to receive adequate protection. These safeguards include contractual clauses with data recipients that impose data protection obligations equivalent to those applicable to 999r.

By using the 999r platform, you acknowledge and consent to the transfer of your personal data to the jurisdictions in which 999r and its service providers operate, subject to the protections described in this Policy.

999r reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform operations. Material changes to this Policy will be communicated to registered players via their registered mobile number or through a prominent notice on the 999r platform, not less than seven (7) days before the changes take effect where practicable.

The current version of this Privacy Policy, together with the date on which it was last updated, is always available at 999r.cam/privacy-policy. Continued use of the 999r platform following the effective date of any updated Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes, you should cease using the platform and contact support to arrange account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 999r handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the 999r platform. Average response time: 3–5 minutes.
• Messenger / Viber: Available through the 999r official channels.
• Email: [email protected] — for formal privacy enquiries, please include "Privacy Request" in the subject line of your message.

999r will acknowledge formal privacy complaints within 24 hours and provide a substantive response within 5 business days. Where a complaint cannot be resolved through our internal process, you may have the right to escalate your complaint to the relevant supervisory authority under applicable data protection law.