Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out the basis on which 999q ("the Platform", "we", "us", "our") collects, processes, stores, and shares personal data obtained from users ("the Player", "you", "your") of the 999q online casino and sports betting platform, accessible at 999q.org.

999q is committed to protecting the privacy and personal information of all Pakistani players who use our services — whether you are depositing via JazzCash in Karachi, placing a cricket bet during a PSL match from Lahore , following a live casino game from Islamabad, or spinning slots from Faisalabad. This Policy applies to all personal data collected through the 999q website, mobile platform, live chat support system, and any other interaction you have with 999q as a registered or prospective player.

By registering an account on 999q or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood how we handle your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of 999q and contact our support team to request account closure.

2. Data Controller

For the purposes of this Policy, 999q is the data controller responsible for the personal data you provide when registering and using the platform. 999q operates under international online gaming licensing standards and maintains its data processing activities in accordance with those standards.

All data protection queries, subject access requests, and privacy-related complaints should be directed to the 999q Data Protection team via the contact details set out in Section 14 of this Policy. We aim to acknowledge all formal privacy requests within 5 business days of receipt.

3. Personal Data We Collect

999q collects the following categories of personal data from Pakistani players in the course of account registration, identity verification, and ongoing platform use:

3.1 Identity & Contact Data

• Full legal name as it appears on your Pakistani CNIC (Computerised National Identity Card).
• Date of birth (used for mandatory 21+ age verification).
• CNIC number and a copy of your CNIC document where KYC verification is required.
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad).
• Pakistani mobile number registered to your JazzCash, EasyPaisa, or SIM account.
• Email address used for account registration and correspondence.

3.2 Financial Data

• JazzCash account number or EasyPaisa wallet number associated with your 999q account.
• HBL, UBL, or Meezan Bank account details used for deposit or withdrawal transactions.
• Transaction history — all PKR deposits, withdrawals, and in-platform transfers.
• Bonus redemption history and wagering records associated with promotional offers.

3.3 Technical & Usage Data

• IP address, device type, operating system, and browser information recorded at login.
• Session duration, pages visited, games played, betting markets accessed, and click-path data.
• Login timestamps and geolocation data (country/city level) where applicable.
• Cookie identifiers and similar tracking technologies as described in Section 10.

3.4 Communications Data

• Records of live chat sessions between you and the 999q support team.
• Email correspondence with 999q's support, verification, and compliance teams.
• Records of any responsible gaming requests, self-exclusion notices, or complaints submitted.

4. How We Collect Your Data

999q collects personal data through the following channels:

• Account Registration: Data you voluntarily provide when creating your 999q account, including name, CNIC, date of birth, mobile number, and email address.
• KYC Verification: Documents you upload to satisfy our Know Your Customer requirements, including CNIC copies and payment method proof of ownership.
• Deposit & Withdrawal Transactions: Payment data shared with 999q through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or direct bank transfer when processing PKR transactions.
• Platform Interaction: Technical and usage data collected automatically as you navigate the 999q website, play games, or access sports betting markets such as PSL or ICC World Cup.
• Support Communications: Information you provide directly to the 999q support team via live chat or email.
• Third-Party Verification Services: Identity and fraud screening data received from licensed KYC and AML (Anti-Money Laundering) verification service providers engaged by 999q.

5. Purpose & Legal Basis for Processing

999q processes your personal data only for lawful, specified, and legitimate purposes. The table below sets out the primary purposes for which we process your data and the legal basis for each:

Purpose	Legal Basis
Account registration and identity verification (KYC / CNIC check)	Contractual necessity; Legal obligation
Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank	Contractual necessity
Providing access to cricket betting, live casino, slots, dice, and HRG Live games	Contractual necessity
Preventing fraud, money laundering, and ensuring AML compliance	Legal obligation; Legitimate interests
Responsible gaming monitoring and enforcement of 21+ age restriction	Legal obligation; Legitimate interests
Customer support and dispute resolution	Contractual necessity; Legitimate interests
Platform analytics and service improvement	Legitimate interests
Sending promotional offers, PSL bonus notifications, and platform updates	Consent (you may withdraw at any time)

6. Payment Data & PKR Transactions

All PKR payment transactions on 999q — including deposits via JazzCash and EasyPaisa and bank-to-bank transfers through HBL, UBL, and Meezan Bank — are processed through encrypted payment channels. 999q does not store full bank account credentials or card numbers on its own servers. Payment data is transmitted directly to our licensed payment processing partners using SSL encryption.

Transaction records — including deposit amounts, withdrawal requests, timestamps, and associated payment method identifiers — are retained as part of your account history for a minimum of five years in accordance with AML compliance requirements applicable to international gaming operators. This data may be disclosed to regulatory or law enforcement authorities upon lawful request.

999q will never share your JazzCash wallet number, EasyPaisa account, or bank account details with any third party for marketing or commercial purposes. Payment data is used exclusively for processing your deposits and withdrawals, verifying transaction ownership, and satisfying AML and fraud prevention obligations.

7. Data Sharing & Third Parties

999q does not sell, rent, or commercially transfer your personal data to third parties. We may share your data with the following categories of third parties only where necessary and proportionate:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other licensed payment service providers engaged to process your PKR transactions.
• KYC & AML Service Providers: Licensed identity verification and anti-money laundering screening services used to verify your CNIC and assess fraud risk.
• Game Content Providers: Third-party casino game studios providing live casino, slot, dice, and HRG Live content on the 999q platform. These providers receive only the technical data necessary to deliver the game session.
• Regulatory & Law Enforcement Authorities: Where 999q is legally obligated to disclose data in response to a lawful request from a government body, regulator, or law enforcement agency.
• IT Infrastructure & Hosting Providers: Secure cloud infrastructure and server hosting services engaged to operate the 999q platform, subject to strict data processing agreements.

All third parties engaged by 999q are contractually obligated to process your data only for the specific, disclosed purpose for which it was shared and to maintain appropriate technical and organisational security measures.

8. Data Retention

999q retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account registration and identity data: Retained for the duration of your account plus a minimum of five years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years following the date of the transaction.
• Live chat and email support records: Retained for two years from the date of the interaction.
• Responsible gaming records (self-exclusion, deposit limits, cooling-off periods): Retained for the duration of the restriction plus five years.
• Technical and usage data (log files, session data): Retained for up to 12 months on a rolling basis.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with 999q's internal data destruction procedures.

9. Security Measures

999q employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption applied to all data transmitted between your device and the 999q platform.
• Encrypted storage of all personal data at rest on 999q's secured server infrastructure.
• Two-factor authentication (2FA) available to all players via their registered Pakistani mobile number.
• Role-based access controls ensuring that only authorised 999q personnel can access player data, and only to the extent required by their specific function.
• Regular security audits, vulnerability assessments, and penetration testing of the 999q platform.
• Automated fraud detection and anomalous login monitoring systems.

Despite these measures, no internet transmission or electronic storage system is entirely immune to risk. 999q cannot guarantee absolute security of data transmitted over the internet. You are encouraged to protect your 999q account by using a strong, unique password and enabling 2FA at all times.

10. Cookies & Tracking Technologies

999q uses cookies and similar tracking technologies to operate the platform effectively and to enhance your gaming experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These enable secure login sessions, maintain your account state, and ensure PKR transactions are processed correctly. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences — such as your preferred language, display settings, and last-visited game category — to personalise your 999q experience.
• Analytics Cookies: Collect anonymised data about how players navigate the 999q platform, which cricket betting markets are most popular, and which game categories attract the most engagement. This data helps us improve the platform.
• Session Cookies: Temporary cookies deleted automatically when you close your browser, used to maintain continuity during your active gaming session.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing 999q, but may affect certain personalisation features. Note that disabling strictly necessary cookies may impair your ability to log in or complete PKR transactions.

11. Your Data Rights

As a 999q player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 999q Data Protection team using the details in Section 14.

12. Minors & Age Restriction

999q strictly prohibits the use of its platform by any person under the age of 21. We do not knowingly collect or process personal data from individuals under 21 years of age. If 999q becomes aware that a player under the minimum age has registered an account or provided personal data, we will immediately suspend the account, delete all associated personal data, and return any deposited funds to the originating payment source.

If you are a parent or guardian and believe that your child under the age of 21 has created a 999q account or provided us with personal data, please contact our support team immediately at [email protected]. We will action such notifications as a priority and remove all data relating to the minor within 48 hours of verification.

13. Changes to This Privacy Policy

999q reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational needs. Where material changes are made to this Policy, 999q will notify registered players via email and/or a prominent notice displayed upon login to the platform prior to the changes taking effect.

The effective date at the top of this Policy will always reflect the date on which the most recent version was published. We encourage you to review this Policy periodically. Your continued use of 999q following notification of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

14. Contact & Data Protection Enquiries

For all privacy-related enquiries, subject access requests, data correction requests, or complaints regarding 999q's handling of your personal data, please contact the 999q Data Protection team through the following channels:

• Email: [email protected] — please mark your subject line as "Privacy Request" or "Data Protection Enquiry".
• Live Chat: Available 24/7 directly from the 999q platform with an average response time of under 3 minutes.

We are committed to resolving all privacy-related queries fairly and promptly. Formal subject access requests will be acknowledged within 5 business days and fulfilled within 30 calendar days of identity verification. If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in accordance with 999q's licensing framework.