999ck Privacy Policy

999ck ("we", "us", "our", "the Platform") is committed to safeguarding the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out in plain, transparent terms how we handle your personal information — from the moment you first visit 999ck.bio through to your ongoing use of our casino games, sports betting markets, and account management features.

We recognise that privacy is a fundamental right. Pakistani players entrust us with sensitive personal and financial data when they register, deposit funds via JazzCash or EasyPaisa, or place bets on PSL cricket matches. We take that trust seriously and have designed our data practices accordingly.

This policy should be read alongside the 999ck Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to how we process your information in the context of account management and player protection.

For the purposes of applicable data protection law, 999ck operates as the data controller in respect of all personal data collected through the 999ck platform. This means 999ck determines the purposes for which, and the manner in which, your personal data is processed.

999ck operates under an internationally recognised online gaming licence. Queries relating to data protection, including requests to exercise your rights under this policy, should be directed to the 999ck data protection contact detailed in Section 15 of this document.

The categories of personal data 999ck collects depend on the nature of your interaction with the platform. The table below summarises the key categories:

We do not intentionally collect special categories of personal data (such as health data, biometric data, or data concerning religious beliefs) unless you voluntarily provide such information, for example when requesting self-exclusion support. Where such data is received, it is handled with additional safeguards.

999ck collects personal data through several distinct channels:

• Direct interactions: Data you actively provide when you create your account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically each time you access 999ck.bio, including data gathered through cookies, web beacons, and server logs. See Section 10 for full details on our cookie practices.
• Third-party sources: Information received from identity verification agencies, fraud prevention databases, payment processors (such as JazzCash and EasyPaisa), and anti-money laundering screening services. This data supplements the information you provide directly and helps us comply with our regulatory obligations.
• Responsible gaming systems: Data generated by the platform's responsible gaming tools, including deposit limit settings, loss limit configurations, session time records, and self-exclusion requests.

999ck processes your personal data for the following clearly defined purposes:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and authenticate your login sessions.
• Service delivery: To enable you to place sports bets, access casino games, participate in promotions, and use all other features of the 999ck platform.
• Payment processing: To process deposits and withdrawals in PKR via your chosen payment method, and to maintain an accurate transaction record.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and the conditions of our international gaming licence.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct on the platform.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, apply responsible gaming tools as requested, enforce self-exclusion decisions, and comply with player protection obligations.
• Customer support: To respond to your queries, resolve complaints, and maintain records of support interactions for quality assurance purposes.
• Marketing and promotions: To send you information about 999ck bonuses, promotions, and new features where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform improvement: To analyse usage patterns and player behaviour in aggregate to improve the quality, performance, and personalisation of the 999ck platform.

999ck processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to perform the contract between you and 999ck — i.e., to operate your account, process your transactions, and deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML legislation, KYC obligations, and licensing conditions.
• Legitimate interests: Processing carried out for purposes that are in 999ck's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes such as direct marketing, where we rely on your explicit consent. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.

999ck does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

• Identity verification providers: Third-party KYC and age verification agencies used to confirm your identity and eligibility to use the platform.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment gateways — solely for the purpose of processing your transactions.
• Fraud prevention and AML services: Screening databases and financial crime prevention agencies used to detect and prevent money laundering and fraudulent activity.
• Technology and infrastructure providers: Cloud hosting providers, software vendors, and IT security firms that support the operation and maintenance of the 999ck platform under binding data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or the direction of a competent regulatory or law enforcement authority, we may disclose personal data without prior notice.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by 999ck, subject to professional confidentiality obligations.

999ck retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data: Retained for the full duration of your account's existence on the 999ck platform.
• Account closure: Following voluntary or enforced account closure, core account and transaction records are retained for a minimum of five (5) years to satisfy AML record-keeping obligations and to handle any potential disputes or regulatory inquiries that may arise after closure.
• KYC and verification documents: Retained for the same five-year post-closure period, or longer where required by the applicable licensing authority.
• Customer support records: Retained for a minimum of three (3) years following the resolution of the relevant interaction.
• Marketing data: Retained until you withdraw your consent to receive marketing communications or for a maximum of two (2) years from your last active engagement with a marketing communication, whichever comes first.
• Technical and usage logs: Generally retained for up to twelve (12) months for platform performance analysis and security purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction practices.

999ck employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your device and 999ck servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data encryption at rest: Sensitive data stored on 999ck infrastructure, including financial data and identity documents, is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted to authorised 999ck personnel and service providers on a strict need-to-know basis. All access is logged and subject to periodic review.
• Multi-factor authentication: Internal systems holding personal data are protected by multi-factor authentication requirements for all staff access.
• Penetration testing: The 999ck platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning.
• Incident response: 999ck maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframes required by applicable law.

999ck uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, and gather analytical data that helps us improve our services. The following categories of cookies are in use:

• Strictly necessary cookies: Essential for the platform to function correctly. These cookies enable core features such as session management, authentication, and security. They cannot be disabled without significantly impairing platform functionality.
• Analytical / performance cookies: Used to collect anonymised data about how users navigate the 999ck platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This information is used exclusively to improve platform performance.
• Functional cookies: Enable personalised features such as remembering your language preference, display settings, and recently played games.
• Marketing cookies: Used, where you have consented, to deliver promotional content about 999ck bonuses and new features that is relevant to your interests and gameplay history.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the availability of some platform features. Strictly necessary cookies cannot be disabled as they are integral to platform security and session integrity.

Depending on the jurisdiction in which you are located, you may hold some or all of the following rights in respect of your personal data held by 999ck:

• Right of access: You may request a copy of the personal data 999ck holds about you, together with information about how it is being processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. You may also update certain account details directly within your 999ck account settings.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to overriding legal obligations — for example, we cannot delete financial records that we are required to retain for AML compliance purposes.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute regarding the accuracy of data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. Objections to direct marketing will be acted upon immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact 999ck using the details in Section 15. We will respond to all verifiable requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

The 999ck platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has accessed 999ck and provided personal data, please contact our support team immediately at [email protected] so that we can investigate and take the appropriate action without delay.

999ck operates as an internationally licensed platform and may process or store personal data on servers located outside of Pakistan. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that applicable in your home jurisdiction, 999ck implements appropriate safeguards to protect your data during and after transfer.

Such safeguards may include the use of standard contractual clauses approved by competent data protection authorities, binding corporate rules, or transfers to jurisdictions that have received an adequacy determination from the relevant authority. Details of the specific safeguards applicable to any given transfer are available upon request by contacting our data protection contact.

999ck reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players through an on-platform notification or by email to your registered address, as appropriate.

The effective date of the current version is displayed at the top of this document. We encourage you to review this policy periodically. Your continued use of the 999ck platform following any amendment constitutes your acknowledgement of the updated policy. If you do not agree with the amended policy, you should discontinue use of the platform and may request voluntary account closure as described in the Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how 999ck handles your personal data, please get in touch with our support team through any of the following channels:

• Live Chat: Available 24/7 directly within the 999ck platform — the fastest route for urgent privacy queries.
• Email: [email protected] — for formal data rights requests, complaints, and document submissions. Please use the subject line "Privacy Request" to ensure your message is routed to the correct team. We aim to acknowledge all privacy-related emails within 48 hours.

When submitting a data rights request, please include your registered 999ck username and a clear description of your request so that our team can assist you as efficiently as possible. All requests are handled in strict confidence.