Privacy Policy — 999dk Data Commitment

1. Introduction

999dk ("we", "us", "our", "the Platform") is committed to protecting the personal information of every player who uses the 999dk.club website. This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by 999dk.

This policy applies to all users of the 999dk platform, including players registered from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and across Pakistan. It covers all pages and services accessible under the 999dk.club domain.

Please read this Privacy Policy carefully alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into our full player agreement. This policy is written in plain English wherever possible, though certain sections use legal terminology where precision is required.

2. Data Controller

For the purposes of applicable data protection legislation, 999dk is the data controller in respect of personal data collected through the 999dk.club platform. As data controller, 999dk determines the purposes and means by which your personal data is processed.

If you have any questions about how 999dk processes your personal data, or if you wish to exercise any of your data rights, you may contact our Data Protection contact point directly at: [email protected]. Please mark the subject line of your correspondence as "Data Privacy Request" to ensure it is directed to the appropriate team.

3. Personal Data We Collect

3.1 Registration Data

When you create a 999dk account, we collect the following information:

• Full legal name
• Date of birth (to verify you meet the 21+ age requirement)
• Residential address (including city and province within Pakistan)
• Email address
• Mobile phone number
• Username and encrypted account password

3.2 Identity Verification (KYC) Data

In compliance with international gaming licensing standards and anti-money laundering obligations, 999dk collects the following identity verification documents before processing withdrawal requests:

• Government-issued photo identification (CNIC, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or equivalent document dated within three months)
• Proof of payment method ownership (e.g., screenshot of your JazzCash or EasyPaisa account, or bank statement showing your name and account number)
• Selfie photograph for liveness verification where required

3.3 Financial Transaction Data

999dk records all deposit and withdrawal transactions processed through the platform. This includes transaction amounts in PKR, timestamps, payment method identifiers (such as your JazzCash mobile number or HBL account reference — not your full bank credentials), and transaction status records.

3.4 Gameplay and Behavioural Data

999dk collects data relating to your use of the platform, including game sessions played, wagers placed, results, session durations, and responsible gaming tool usage. This data is used for account administration, fraud detection, and responsible gaming monitoring purposes.

3.5 Technical and Device Data

When you access 999dk.club, our servers automatically collect certain technical data including your IP address, browser type and version, device type, operating system, referring URL, and session identifiers. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Communications Data

If you contact 999dk support by email or live chat, we retain records of that correspondence including the content of messages and any attachments, to assist with ongoing support queries, quality assurance, and dispute resolution.

4. How We Collect Your Data

999dk collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC, make a deposit or withdrawal request, contact support, or respond to a survey.
• Automatically — through cookies, server logs, and analytics tools when you browse or interact with the 999dk.club website.
• From third-party service providers — such as payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast) who share transaction confirmation data with us to process your financial requests.
• From identity verification providers — who assist 999dk in validating the authenticity of KYC documents submitted by players.

5. How We Use Your Personal Data

999dk uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and administration	Registration data, device data
Age and identity verification (KYC)	Registration data, KYC documents
Processing deposits and withdrawals in PKR	Financial transaction data, KYC data
Fraud prevention and security monitoring	Technical data, transaction data, gameplay data
Responsible gaming monitoring and intervention	Gameplay data, account history, communications data
Customer support and dispute resolution	Communications data, account data, transaction data
Regulatory and legal compliance	All categories as required by law or licensing authority
Promotional communications (opt-in only)	Email address, gameplay preferences
Platform performance and analytics	Technical data, anonymised gameplay data

999dk does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

6. Legal Basis for Processing

999dk processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the player agreement between you and 999dk — including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with anti-money laundering regulations, international gaming licensing requirements, and other applicable legal obligations.
• Legitimate interests: Processing carried out for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement, where those interests are not overridden by your data protection rights.
• Consent: Where you have expressly opted in to receive promotional communications from 999dk. You may withdraw this consent at any time by contacting support or using the unsubscribe mechanism in marketing emails.

7. Data Sharing and Disclosure

7.1 Service Providers

999dk shares personal data with trusted third-party service providers who assist in operating the platform. These providers are contractually bound to process your data only on 999dk's instructions and to maintain appropriate security standards. Categories of service providers include payment processors, KYC and identity verification providers, cloud hosting providers, customer support platform providers, and fraud detection service providers.

7.2 Regulatory and Legal Disclosure

999dk may disclose personal data to gaming licensing authorities, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. 999dk will not disclose more data than is strictly required to satisfy any such legal obligation.

7.3 No Sale of Data

999dk does not sell, rent, lease, or otherwise transfer your personal data to unaffiliated third parties for their own commercial or marketing purposes under any circumstances.

8. Cookies and Tracking Technologies

8.1 What Cookies 999dk Uses

999dk uses cookies and similar tracking technologies on the 999dk.club website. Cookies are small text files placed on your device that help the platform function correctly and allow us to understand how players interact with the site.

• Strictly necessary cookies: Required for the platform to function — including session management, login state, and security tokens. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate 999dk.club, which pages are visited most frequently, and where technical errors occur. This data helps us improve the platform experience.
• Preference cookies: Used to remember your platform settings and preferences, such as language selection and responsible gaming tool configurations.

8.2 Managing Cookies

You may control and manage cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the 999dk platform. Disabling analytics or preference cookies will not prevent you from accessing the platform but may affect your experience. Detailed cookie management instructions are available in the help documentation of your chosen browser.

9. Data Retention

999dk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our international gaming licensing obligations:

• Account and KYC records: Retained for a minimum of 5 years from the date of account closure, as required by anti-money laundering compliance obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay records: Retained for a minimum of 3 years from the date of each game session.
• Customer support communications: Retained for 2 years from the date of the last correspondence in a support thread, or until any associated dispute is fully resolved.
• Marketing opt-in records: Retained for 3 years from the date of the last marketing communication sent, or until consent is withdrawn, whichever comes first.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 999dk's internal data disposal procedures.

10. Your Data Rights

Subject to applicable law and our legal retention obligations, you hold the following rights in respect of your personal data held by 999dk:

• Right of access: You may request a copy of all personal data held by 999dk about you (commonly known as a Subject Access Request).
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For certain data fields (such as your registered name or date of birth), correction will require submission of supporting KYC documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purpose it was collected, subject to our legal retention obligations which may require us to retain certain records.
• Right to restriction: You may request that 999dk restrict processing of your data in certain circumstances — for example, while a correction request is being assessed.
• Right to data portability: You may request a copy of the personal data you have provided to 999dk in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. Note that objecting to certain processing activities may limit our ability to provide platform services.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". 999dk will respond within 30 calendar days. We may request identity verification before processing certain rights requests to protect your account security.

11. Security Measures

999dk implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and the 999dk.club servers
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular penetration testing and security audits by independent third parties
• Multi-factor authentication for administrative platform access
• Automated anomaly detection and intrusion monitoring systems

While 999dk takes data security seriously and maintains robust controls, no system is completely immune to risk. In the event of a security incident that affects your personal data, 999dk will notify you in accordance with its breach notification obligations as described in Section 1.

12. Children and Minors

The 999dk platform is strictly intended for individuals aged 21 years and over. 999dk does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered a 999dk account, please notify us immediately at [email protected]. Upon confirmation, the account will be immediately closed, all associated data will be deleted to the extent permitted by law, and any funds held will be returned to the depositing payment method.

13. Third-Party Websites and Services

The 999dk.club website does not contain links to third-party websites for external services. However, where you interact with third-party payment providers (such as JazzCash, EasyPaisa, HBL, or Raast) as part of your deposit or withdrawal process, you will be subject to those providers' own terms and privacy policies during any interaction that occurs on their platforms or apps. 999dk is not responsible for the data practices of third-party payment providers.

14. Changes to This Privacy Policy

999dk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal and regulatory requirements. Where changes are material — meaning they significantly affect your rights or the way your data is used — 999dk will notify you by email to your registered address and/or by displaying a prominent notice on 999dk.club before the changes take effect.

The "Last Updated" date at the top of this page reflects when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Your continued use of the 999dk platform following the publication of changes constitutes your acceptance of the updated policy.

15. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the way 999dk handles your personal data, please contact us:

Email: [email protected]

Please note that this email address is displayed as plain text only and is not a clickable link. Copy the address and paste it into your email client. Mark your subject line as "Privacy Policy Enquiry" or "Data Rights Request" as appropriate to ensure prompt routing to the correct team.

For matters relating to responsible gaming, self-exclusion, or deposit limits, please visit the 999dk Responsible Gaming page for dedicated guidance and support tools.