xxx999 Privacy Policy — How We Handle Your Personal Data

1. About This Policy

This Privacy Policy explains how xxx999 collects, processes, stores and protects the personal data of Pakistani players who register and use the xxx999 platform. We have written this policy to be clear and readable rather than a wall of legal jargon. If you have a question that this document doesn't answer, you can contact us directly at support@xxx999.im and we will respond within two business days.

xxx999 is the data controller for all personal data collected through the platform. That means we determine the purposes and means by which your personal data is processed, and we are responsible for ensuring that processing is lawful, fair, and transparent. Where third-party service providers process data on our behalf — for example, payment processors like Easypaisa and JazzCash — they do so as data processors, bound by contractual obligations that align with the standards set out in this Policy.

This Policy was last updated in January 2024. The version history is maintained at the bottom of this page. If you are a returning xxx999 player who last read this Policy under a previous version, the key changes are noted in the amendments section.

2. Personal Data We Collect

xxx999 collects personal data in three main ways: information you provide directly during registration or in the course of using the platform; information generated automatically by your use of the platform; and information received from regulated third-party service providers for identity verification and payment processing purposes. The table below summarises the categories and specific items of data collected.

3. How We Use Your Personal Data

xxx999 uses the personal data collected for the following specific purposes. We do not use your data for purposes not listed here without first updating this Policy and notifying you through your account.

• Account management: Creating and maintaining your registered xxx999 account, processing logins, and enabling access to the platform's features.
• Payment processing: Facilitating deposits to and withdrawals from your xxx999 account via your chosen Pakistani payment method — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card.
• Identity verification (KYC): Confirming your identity and age (18+) as required by xxx999's operating licence and anti-money-laundering obligations before processing withdrawals.
• Fraud prevention and security: Detecting and preventing unauthorised account access, fraudulent transactions, and abuse of the xxx999 platform including bonus abuse and collusion.
• Regulatory compliance: Meeting anti-money-laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations under the terms of xxx999's operating licence.
• Platform improvement: Using aggregated, anonymised technical data to understand how Pakistani players use xxx999 and to improve the platform's performance, navigation, and features.
• Customer support: Resolving queries, complaints, and disputes raised through the xxx999 support channels.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive these. See Section 11 for full details.
• Responsible gaming monitoring: Identifying patterns in account activity that may indicate problem gambling behaviour, as part of xxx999's responsible gaming programme.

4. Legal Basis for Processing

xxx999 processes personal data under one or more of the following legal grounds for each processing activity:

• Contractual necessity: Processing required to deliver the service you have contracted for by registering a xxx999 account — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and the conditions of xxx999's operating licence — including KYC verification, AML monitoring, and regulatory reporting.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics where this does not override your rights and freedoms.
• Consent: Processing for marketing communications where you have given explicit opt-in consent. You may withdraw this consent at any time.

5. Who We Share Your Data With

xxx999 does not share personal data with any party except in the circumstances listed below, and only to the minimum extent necessary for the specified purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, Visa and Mastercard processing partners. These entities receive only the transaction data necessary to process your specific deposit or withdrawal.
• Identity verification providers: KYC and document verification service providers who confirm the authenticity and validity of identity documents submitted for withdrawal verification. These providers process data under strict contractual data processing agreements.
• Platform technology providers: Game software providers and platform infrastructure providers who host or deliver parts of the xxx999 service. These providers process data only as directed by xxx999 and may not use it for their own purposes.
• Regulatory authorities: xxx999's licensing authority and law enforcement agencies where legally required — for example, in response to a valid legal order or as part of AML/CTF reporting obligations.
• Professional advisors: Legal, audit, and compliance advisors bound by professional confidentiality obligations, where required for the operation and regulatory compliance of xxx999.

6. Data Retention

xxx999 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to regulatory minimum retention requirements. The following retention periods apply:

• Active account data: Retained for the full duration of your xxx999 account and for a period of 5 years following permanent account closure, as required by AML regulations.
• Transaction and bet records: Retained for 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for 5 years from the date of verification or account closure, whichever is later. Document images are stored in encrypted form.
• Support communications: Retained for 3 years from the date of the most recent communication in each support thread.
• Marketing consent records: Retained for the duration of your consent plus 1 year, to demonstrate compliance with consent requirements.
• Technical logs: Retained for 12 months on a rolling basis for security monitoring and fraud detection purposes.

When retention periods expire, data is either securely deleted or anonymised such that it can no longer be linked to any individual player. xxx999 conducts annual data retention audits to ensure compliance with these schedules.

7. Security Measures

Protecting the personal data of xxx999 players is a technical and operational priority. The following security measures are in place:

• TLS/SSL encryption: All data in transit between your device and xxx999 servers is encrypted. This includes login, payment, bet placement, and account management actions.
• Password hashing: Account passwords are stored as cryptographic hashes using a modern, salted algorithm. xxx999 does not store your password in a readable form and cannot recover it — only reset it through the verified reset process.
• Two-factor authentication (2FA): Available to all xxx999 account holders and recommended. 2FA adds an additional verification step using your registered Pakistani mobile number before account access is granted.
• Data segregation: Player funds and player personal data are held in systems segregated from xxx999's operational infrastructure, reducing the blast radius of any potential security incident.
• Access controls: Internal access to player data is restricted to xxx999 team members who require it for their specific role. Access logs are maintained and reviewed regularly.
• Automated threat monitoring: xxx999's infrastructure is monitored continuously for unusual access patterns, potential intrusion attempts, and data exfiltration signals.

8. Cookies & Similar Technologies

xxx999 uses cookies and similar browser storage technologies to operate the platform, maintain session security, remember your preferences, and gather anonymised usage analytics. We do not use advertising cookies or tracking pixels that report your activity to third-party ad networks.

You can control functional and analytics cookies through your browser settings. Essential cookies cannot be disabled without preventing the xxx999 platform from functioning. Most modern smartphone browsers on Android and iOS allow you to manage cookie preferences through the browser settings menu.

9. Your Privacy Rights

As a player on the xxx999 platform, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at support@xxx999.im with your account mobile number and the specific right you wish to exercise. We will respond within 30 days.

10. Children's Privacy

xxx999 is strictly an adults-only platform. The minimum age for registration is 18 years. xxx999 does not knowingly collect or process personal data from individuals under 18. If we become aware that an account belongs to a person under 18, the account is closed immediately and any data held is handled in accordance with our obligations — deposits are returned to the verified source and no bonus or wagering activity is retained.

If you are a parent or guardian and believe that a person under 18 in your household has registered an xxx999 account, please contact us immediately at support@xxx999.im. We will investigate and take action within 24 hours of receiving a report.

11. Marketing Communications

xxx999 sends marketing communications — including bonus offers, PSL season promotions, VIP Club updates, and general platform news — only to players who have opted in to receive them. The opt-in option is presented during registration and can be changed at any time through your account notification settings.

• If you opt in, you may receive marketing messages via SMS to your registered Pakistani mobile number and/or push notifications within the platform.
• You can withdraw your marketing consent at any time by updating your notification preferences in your xxx999 account settings, or by contacting support@xxx999.im. Withdrawal of consent takes effect within 48 hours.
• Withdrawing marketing consent does not affect your account access or any other aspect of the service. It only means you will no longer receive promotional messages from xxx999.
• Transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — are sent regardless of your marketing preference as they are necessary for the operation of your account.
• xxx999 does not share your contact details with any third party for marketing purposes. You will never receive third-party marketing as a result of being a xxx999 player.

12. Changes to This Privacy Policy

xxx999 reviews and updates this Privacy Policy regularly to reflect changes in our data processing practices, new services added to the platform, and evolving regulatory requirements. When we make material changes — meaning changes that affect how we collect, use, or share your personal data in a way that could affect your rights — we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered xxx999 account at least 14 days before the changes take effect.
• Summarise the key changes in the notification so you can review what has changed without reading the entire document again.

Minor corrections, clarifications, or additions that do not materially affect your rights or our data processing practices may be made without prior notice. In all cases, the current version of the Privacy Policy is the version published on this page.

If you continue to use xxx999 after a material change takes effect, you are acknowledging that you have reviewed the updated Policy. If you do not accept a material change to this Policy, you may close your account by contacting support@xxx999.im before the change takes effect.

13. Contact Us About Privacy

If you have any question about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data security issue, please contact xxx999 through any of the following channels:

• Email: support@xxx999.im — for formal privacy requests, data access requests, or detailed queries about data handling. We respond to all emails within 48 hours during business days and commit to a substantive response within 5 business days for data rights requests.
• Live chat: Available 24/7 through your xxx999 account. For urgent privacy concerns or suspected security incidents, live chat is the fastest way to reach our team.

xxx999 takes privacy complaints seriously. If you raise a privacy concern and are not satisfied with the response you receive, you have the right to escalate the matter to the relevant supervisory authority under the terms of xxx999's operating licence. Contact support for details of the appropriate authority and the escalation process.