Contents
1. About This Privacy Policy
This Privacy Policy explains how 999p collects, uses, stores and protects the personal information of players who register and use the 999p platform at 999p.run. It applies to all players accessing 999p from Pakistan and covers every part of the service — cricket betting, live casino, online casino, baccarat, slots, virtual sports and the VIP Club.
When you create a 999p account, deposit funds, place a bet, claim a bonus or simply browse the platform, you are sharing certain information with us. We want you to understand exactly what that information is, why we hold it and how we keep it secure. Privacy is not something we treat as a legal formality — it is a real commitment to every 999p player.
This policy should be read alongside the 999p Terms and Conditions and Responsible Gaming Policy. If you have questions about anything in this document, our support team is available 24/7 via live chat or at support@999p.run.
999p is the data controller for the personal information you provide when using the 999p platform. We determine the purposes for which your data is processed and the means by which it is handled.
999p — Privacy Protection for Every Pakistani Player
Your personal data is handled with the same care we apply to every part of the 999p experience
2. Personal Data We Collect at 999p
999p collects personal data through different interactions — when you register, when you deposit or withdraw, when you play games and when you contact our support team. The categories of data we collect are listed below.
999p does not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs or health data, unless specifically required for responsible gaming purposes — for example, if you voluntarily share health information in the context of a self-exclusion request.
We also collect data automatically through cookies and similar technologies when you visit 999p.run. This includes page views, time spent on different sections of the platform and which features you interact with. This data helps us improve the 999p experience for all Pakistani players.
3. Why 999p Collects and Uses Your Data
Every piece of data 999p holds has a specific purpose. We do not collect information speculatively or hold it beyond what is required. The primary reasons we process your personal data are:
- Account operation: Your name, date of birth and contact details are needed to create and maintain your 999p account, and to communicate important account information to you.
- Identity verification (KYC): Regulations require 999p to verify the identity of players before processing withdrawals. This protects you and ensures no third party can access your funds.
- Payment processing: Financial data is used to process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard. We retain transaction records as required.
- Game delivery and personalisation: Gaming data allows 999p to deliver your betting history, display your balance accurately and personalise the lobby based on your game preferences.
- Responsible gaming: Session data and gaming history allow 999p to monitor for signs of problem gambling and apply limits where accounts show concerning patterns — even before a player asks for help.
- Security and fraud prevention: Technical and financial data helps us detect and prevent fraud, account takeover attempts and financial crime on the 999p platform.
- Legal and regulatory compliance: Certain records must be retained to meet legal obligations. 999p does not retain data beyond what is required for these purposes.
- Platform improvement: Aggregated, anonymised usage data helps us understand how Pakistani players use 999p and where improvements can be made.
999p will only send promotional emails or messages if you have opted in to receive them. You can withdraw this consent at any time from your account settings or by contacting support. Withdrawing marketing consent does not affect your ability to continue using the 999p platform.
Data Security at 999p — Never Compromised
Every transaction and account detail is protected by industry-standard encryption across the 999p platform
4. Legal Basis for Processing Your Data
999p processes your personal data on the following legal grounds. Each processing activity is matched to the appropriate basis:
- Contractual necessity: Processing your data is necessary to deliver the services you signed up for on 999p — operating your account, processing bets, paying out winnings and providing customer support.
- Legal obligation: Certain processing activities are required to comply with applicable regulations — including identity verification, transaction record-keeping and reporting obligations.
- Legitimate interests: 999p processes some data for legitimate business purposes — such as fraud prevention, platform security and improving the user experience — where these interests are not overridden by your rights.
- Consent: Where 999p relies on your consent — for example, for marketing communications — you can withdraw that consent at any time without affecting your account.
If you have questions about the specific legal basis applied to any particular processing activity at 999p, you can request this information by contacting our support team at support@999p.run.
5. Who 999p Shares Your Data With
999p does not sell or rent your personal data to any third party. We share data only where necessary to deliver the service and only with partners who are bound by appropriate data protection obligations. The categories of third parties who may receive your data are:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank networks (IBFT) and card scheme operators (Visa, Mastercard) receive the financial data needed to process your PKR transactions.
- Game and live casino providers: To deliver live casino streams and casino game functionality, 999p works with certified game providers. These providers receive the minimum data needed to authenticate your session and settle game results.
- Identity verification services: Third-party KYC providers may process your identity documents to verify your identity during the 999p account verification process.
- Fraud and security platforms: Specialist fraud detection services may receive technical data — such as IP addresses and device identifiers — to help protect the 999p platform and its players.
- Technology infrastructure: Cloud hosting and platform infrastructure providers store data on 999p's behalf under strict contractual data protection terms.
- Regulatory and legal authorities: Where required by law, court order or regulatory direction, 999p may be obligated to disclose data to relevant authorities.
Some of 999p's service partners operate internationally. Where your data is processed outside Pakistan, 999p ensures that appropriate safeguards are in place, including contractual protections that require international partners to treat your data to the same standard applied within Pakistan.
6. PKR Payments and Financial Data at 999p
Because all transactions on 999p are conducted in Pakistani Rupees, the financial data we hold relates specifically to PKR amounts, payment method identifiers (such as your Easypaisa or JazzCash mobile number) and transaction timestamps. 999p does not store full card numbers — only masked references required for transaction matching and dispute resolution.
Financial data held by 999p is used exclusively for the following purposes:
- Processing your deposit into your 999p account balance
- Paying out winnings and processing withdrawal requests to your registered payment method
- Investigating transaction disputes or discrepancies if you contact support
- Meeting financial record-keeping requirements under applicable regulations
- Detecting and preventing fraudulent financial transactions on the 999p platform
Transaction records at 999p are retained for as long as required by applicable financial regulations. The standard minimum retention period for financial transaction records is five years from the date of the transaction, unless a regulatory requirement specifies a different period.
Your 999p account balance is ring-fenced from operational funds. The money in your account belongs to you and is available for withdrawal at any time, subject to the standard verification and processing procedures set out in the 999p Terms and Conditions.
7. Cookies and Tracking Technologies
999p uses cookies and similar technologies on the 999p.run website. Cookies are small text files placed on your device when you visit the site. They help the platform function correctly, remember your preferences and allow 999p to understand how players use different features. Below is an overview of the cookie categories used on 999p.
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to play on 999p, but it may mean that certain preferences are not remembered between sessions. Disabling essential cookies will prevent the platform from functioning correctly.
Your PKR, Your Privacy — 999p Keeps Both Safe
Financial data at 999p is encrypted, ring-fenced and processed solely for your benefit
8. How Long 999p Retains Your Data
999p retains personal data only for as long as it is needed for the purpose it was collected, or for as long as applicable regulations require it to be kept. The general retention approach applied to different data categories is outlined below.
- Account and identity data: Retained for the lifetime of your 999p account plus a minimum of five years after account closure, as required for regulatory compliance and audit purposes.
- Financial transaction records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
- Gaming history: Retained for five years from the date of each gaming session. This data supports responsible gaming monitoring and potential dispute resolution.
- Identity verification documents: Retained for as long as your 999p account is active and for five years following closure. Original document images are stored in encrypted form.
- Support communications: Retained for three years from the date of the last communication, unless a longer period is required for an ongoing dispute or regulatory matter.
- Technical and analytics data: Anonymised after 13 months in standard cases; non-anonymised technical data is retained for up to 24 months for security and fraud investigation purposes.
When a retention period expires, 999p will either delete the data securely or anonymise it so that it can no longer be linked to you as an individual. If you request account closure, we will begin the deletion process for data categories that do not need to be retained under any applicable legal requirement.
9. Your Privacy Rights as a 999p Player
As a player on 999p, you have a number of rights in relation to your personal data. These rights apply regardless of whether your account is currently active. To exercise any of these rights, contact us at support@999p.run or through the live chat inside your account.
Right of Access
You can request a copy of all personal data that 999p holds about you. We will provide this in a readable format within 30 days of receiving your request.
Right to Correction
If any of your personal data held by 999p is inaccurate or outdated, you have the right to request that it be corrected. Contact support with the details that need updating.
Right to Deletion
You can request deletion of your personal data where it is no longer needed, or where you withdraw consent. Deletion may be subject to legal retention obligations 999p must observe.
Right to Object
You have the right to object to 999p processing your data for purposes based on legitimate interests. We will review the objection and respond within 30 days.
Right to Restriction
In certain circumstances you can request that 999p limits how your data is processed — for example, while a correction request is being reviewed — without requesting full deletion.
Right to Portability
For data you provided to 999p under consent or contractual necessity, you can request a structured, machine-readable copy to transfer to another service if you choose.
Email support@999p.run with the subject line "Privacy Request" and state clearly which right you wish to exercise and for which data category. We will acknowledge your request within 72 hours and aim to respond fully within 30 days. Complex requests may take up to 60 days — we will inform you if this is the case.
10. How 999p Keeps Your Data Secure
Security is not an afterthought at 999p — it is built into every layer of the platform. The following technical and organisational measures are in place to protect your personal data.
- Encryption in transit: All data transmitted between your device and 999p.run is encrypted using TLS 1.3. This protects your login credentials, financial data and personal information from interception.
- Encryption at rest: Sensitive personal data — including identity documents and payment details — is encrypted in storage using AES-256 or equivalent standards.
- Access controls: Access to personal data within 999p is restricted to staff who require it for their specific role. All access is logged and regularly audited.
- Two-factor authentication: 999p supports two-factor authentication (2FA) for player accounts. Enabling 2FA adds an additional layer of protection against unauthorised access.
- Regular security reviews: The 999p platform undergoes regular security testing and vulnerability assessments to identify and address potential weaknesses before they can be exploited.
- Incident response: In the unlikely event of a data breach affecting your personal information, 999p will notify affected players promptly and take immediate steps to contain and remediate the incident.
While 999p takes every reasonable precaution to protect your data, no online system can be guaranteed 100% secure. We encourage all players to use a strong, unique password for their 999p account and to enable 2FA where possible. If you suspect unauthorised access to your account, contact 999p support immediately.
11. Children's Privacy
999p is strictly an adult platform. No person under the age of 18 is permitted to register or use the 999p service. We do not knowingly collect personal data from anyone under 18. If we become aware that personal data has been collected from an underage person, that data will be deleted immediately and the associated account will be closed.
If you believe that a minor may have registered on 999p, please contact us immediately at support@999p.run. We take underage access to gaming platforms very seriously and will act on any credible report without delay. Age verification checks are conducted on all accounts prior to the processing of any withdrawal, and additional checks are applied when a player's account activity is inconsistent with an adult profile.
12. Changes to This Privacy Policy
999p may update this Privacy Policy from time to time to reflect changes in our practices, changes in the services we offer or changes in applicable regulations. When we make changes, we will update the effective date shown at the top of this page and, where the changes are material, notify affected players by email to the address registered on their 999p account.
We encourage you to review this policy periodically. The most recent version will always be available at 999p.run/privacy-policy. If you continue to use the 999p platform after an updated policy has been published, you are considered to have accepted the revised version. If you disagree with any change, you have the right to close your account and request deletion of your personal data as set out in Section 9 of this policy.
Minor updates — such as corrections to language or formatting that do not change the substance of the policy — may be made without specific notification. The effective date will be updated to reflect any change, however minor.
13. Contact 999p About Privacy
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, there are two ways to reach the 999p privacy team:
We will acknowledge all privacy-related enquiries within 72 hours. Formal data subject requests will receive a full response within 30 days. If your concern relates to how 999p has handled your data in a way you consider unlawful, you also have the right to escalate to the relevant data protection authority in your jurisdiction.