Six core principles underpin every data decision made at 999k — from collection to deletion.
999k collects only the personal data that is genuinely necessary for operating your account, processing payments, meeting legal obligations, and delivering the platform's services. We do not collect data speculatively or beyond what is required.
This policy documents every category of data we collect and every purpose for which it is used. There are no hidden data uses at 999k. If our data practices change, we will update this policy and notify you before the changes take effect.
Your data is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data within 999k is restricted on a strict need-to-know basis, and all staff with data access are subject to confidentiality obligations.
You have meaningful rights over your personal data — including the right to access, correct, port, and in certain circumstances delete it. These rights can be exercised at any time by contacting 999k's support team, and requests are handled within 30 days.
Personal data is retained only for as long as is necessary for the purpose it was collected, or as required by applicable regulatory and legal obligations. Data that is no longer required is securely deleted or anonymised.
999k does not sell, rent, or trade your personal data to third parties for their commercial purposes. Data is shared with third parties only to the minimum extent necessary to operate the platform or comply with legal requirements.
999k is an internationally licensed online gaming platform operating at 999k.cam. The platform offers online casino games, sports betting markets — with a particular focus on cricket and PSL — live dealer tables, slots, fishing games, and related entertainment services to adult players across Pakistan and other permitted jurisdictions.
For the purposes of this Privacy Policy, 999k acts as the data controller in respect of personal data collected from players and visitors to the 999k platform. As data controller, 999k determines the purposes and means of processing personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.
This Privacy Policy applies to all personal data collected by 999k in connection with your use of the 999k website (999k.cam), your 999k account, the platform's games and betting markets, payment services, support interactions, and any promotional or bonus programmes. It applies to all registered players and to visitors who browse the 999k website without registering.
The categories of personal data that 999k collects about you depend on how you interact with the platform. The following table summarises the main categories of data we collect and the primary reason for collecting each category:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile phone number, residential address | Account communication, support, withdrawal verification |
| Financial Data | JazzCash / EasyPaisa account number, bank account details, transaction history | Payment processing, withdrawal verification, AML compliance |
| KYC Documents | Copies of CNIC, passport, utility bills, bank statements | Identity verification, age verification, regulatory compliance |
| Gaming Activity Data | Game history, bet history, deposit and withdrawal records, bonus redemptions | Account management, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device type, browser type, operating system, session duration | Fraud prevention, security monitoring, platform optimisation |
| Usage Data | Pages visited, features used, time spent, click patterns | Platform improvement, personalisation, analytics |
| Communications Data | Live chat transcripts, support emails, complaint records | Support delivery, dispute resolution, quality assurance |
| Marketing Preferences | Communication opt-in/opt-out status, promotional preferences | Sending relevant offers, respecting communication preferences |
999k does not intentionally collect sensitive personal data (such as data relating to racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where specifically required for responsible gaming assessments or legal compliance, and only with appropriate justification. If such data is inadvertently shared with 999k — for example, through a support communication — it will be handled with heightened care and retained only as long as strictly necessary.
999k collects your personal data through the following means:
999k processes your personal data on the following legal bases:
999k uses the personal data we collect for the following specific purposes:
999k does not sell, rent, or trade your personal data. We share data only in the following specific circumstances, and only to the minimum extent necessary:
The 999k website uses cookies and similar technologies. A cookie is a small text file placed on your device by a website you visit. Cookies serve several purposes on the 999k platform:
You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the 999k platform. Clearing all cookies will log you out of your current session.
999k retains personal data for the periods set out below, or for longer where required by law or legitimate business necessity:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Regulatory and AML compliance obligations |
| KYC Documents | Duration of account + 5 years post-closure | Gaming license requirements, AML regulations |
| Financial Transaction Records | 7 years from transaction date | Financial regulatory and tax compliance |
| Gaming Activity Logs | 5 years from account closure | Dispute resolution, responsible gaming, license compliance |
| Support & Communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical & Usage Data | 13 months from collection | Analytics, security monitoring |
| Marketing Preferences | Until opt-out or account closure + 1 year | Consent management, compliance record |
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical purposes without identifying you individually.
999k implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure:
You have the following rights in relation to your personal data held by 999k. These rights may be subject to certain limitations under applicable law, particularly where data is retained for regulatory compliance purposes:
You have the right to request a copy of the personal data that 999k holds about you. We will provide this within 30 days of a valid request, in a commonly used electronic format.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly in your account settings, or contact support for assistance with data that cannot be self-corrected.
In certain circumstances you have the right to request deletion of your personal data. This right is subject to limitations — particularly where 999k is required to retain data to fulfil legal or regulatory obligations (such as AML and KYC record-keeping requirements). Where full deletion is not possible, we will inform you of the specific data categories that must be retained and the reason.
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that this data be transmitted directly to another service provider where technically feasible and where our processing is based on consent or contract.
In certain circumstances — such as where you contest the accuracy of data or have objected to processing pending verification of our legitimate interests — you have the right to request that we restrict how your data is used while the matter is resolved.
Where 999k processes your data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for legal claims. You have an absolute right to object to processing for direct marketing purposes at any time.
To exercise any of these rights, please contact 999k's support team via live chat or at the email address listed in Section 16. We will respond to all valid data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, and we will notify you if an extension is required.
The 999k platform is strictly for adults aged 21 years and above. 999k does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory part of the account registration and KYC process.
If 999k becomes aware that an account has been registered by or on behalf of a person under 21, the account will be immediately suspended, all funds will be frozen pending investigation, and the personal data associated with the account will be processed only to the extent necessary to comply with regulatory reporting obligations before being securely deleted. Any winnings accumulated on an underage account will be forfeited.
If you believe that a minor has accessed or registered on the 999k platform, please contact our support team immediately at the contact details in Section 16. We take all such reports seriously and will act promptly.
Given the international nature of online gaming operations, your personal data may be processed by 999k or its service providers in countries outside Pakistan. Where such transfers occur, 999k ensures that appropriate safeguards are in place to protect your data, including:
999k will not transfer your personal data to any jurisdiction or entity where adequate protections are not in place. You may request further information about the specific safeguards applicable to any international transfer of your data by contacting us as described in Section 16.
With your consent, 999k may send you promotional communications relating to 999k bonuses, new games, cricket betting markets, seasonal promotions, and other offers relevant to your 999k account. These communications may be delivered by email, SMS, or in-platform notifications.
Opting out: You can withdraw your consent for marketing communications at any time by:
Opting out of marketing communications will not affect your ability to receive transactional and account communications — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These communications are not promotional in nature and are sent on the basis of contract or legal obligation rather than consent.
The 999k platform may from time to time contain references to third-party services or content providers — including game studios, payment processors, and sports data providers. This Privacy Policy applies solely to data collected and processed by 999k directly. 999k is not responsible for the privacy practices of third-party providers, even where those providers are integrated into the 999k platform.
Where a third-party provider processes your data in connection with delivering a service on the 999k platform — such as a game studio processing data to run a casino game — this will be done under a data processing agreement with 999k, and the third party will be contractually bound to process your data only in accordance with 999k's instructions and this Privacy Policy.
We encourage you to review the privacy policies of any third-party services you interact with independently of the 999k platform.
999k reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the platform's features and services. The date of the most recent update is always displayed at the top of this page.
Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address and/or through a prominent notice on the 999k platform, in advance of the changes taking effect. Minor updates (such as clarifications, corrections, or formatting changes) may be made without individual notification.
Your continued use of the 999k platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the changes, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, have a concern about how your personal data has been handled, or wish to make a formal data protection complaint, please contact 999k through the following channels:
When submitting a data rights request, please include: your full name as registered on your 999k account, your registered email address or mobile number, and a clear description of the right you wish to exercise or the query you have. This helps us locate your account records and respond accurately and efficiently.
This Privacy Policy is written in English. The English version is the governing version for all purposes. If you are reading this policy in any translated form, please be aware that in the event of any inconsistency between the translated version and the English original, the English version shall prevail.