This Privacy Policy applies to all users of the 999pk platform at 999pk.biz. By creating an account or using our services, you confirm that you have read and understood how we handle your personal information. If you have questions before registering, our support team is available 24/7 at support@999pk.biz.
Who We Are — The Data Controller
999pk operates the online gaming platform available at 999pk.biz, offering Pakistani players access to Teen Patti, Ludo Games, Football Betting, Slots, and related promotions and services. For the purposes of this Privacy Policy, 999pk is the data controller responsible for the personal information you provide when you use our platform.
As the data controller, 999pk determines what personal data is collected, the purposes for which it is processed, and how long it is retained. We process your data only for the lawful purposes described in this policy and in compliance with applicable data protection standards relevant to our operations.
If you have any questions about how 999pk handles your personal data, or if you wish to exercise any of your data rights, the primary contact is support@999pk.biz. All privacy-related requests are handled by our dedicated data protection team and receive a response within five business days.
999pk is committed to protecting the personal data of every Pakistani player on our platform.
Personal Data We Collect from You
999pk collects only the personal data that is necessary to provide you with a safe, functional, and compliant gaming service. The data we collect falls into the following categories:
Registration and Identity Data
- Full legal name as it appears on your CNIC
- Date of birth (to verify that you meet the minimum age requirement of 18)
- Pakistani mobile number (used for account verification and communication)
- Email address
- CNIC number (collected during identity verification / KYC process)
- Residential address (required for regulatory compliance)
Financial and Transaction Data
- Payment method details (mobile wallet numbers, bank account details, card numbers — stored in tokenised form only; 999pk does not store full card numbers)
- Deposit and withdrawal history
- Transaction amounts and timestamps
- Bonus claims and promotional activity
Gaming Activity Data
- Games played, bets placed, and game session history
- Bet amounts, outcomes, and win/loss records
- Responsible gaming preferences and limits you have set
Technical and Device Data
- IP address and approximate geographic location (city-level)
- Device type, operating system, and browser information
- Session duration and navigation behaviour on the platform
- Cookie data (described in detail in Section 9)
Communications Data
- Records of support interactions (live chat transcripts, email correspondence)
- Feedback and complaints you submit
- Your marketing communication preferences
999pk never stores full payment card numbers. Financial credentials are tokenised by our payment processors and are not accessible to 999pk staff in readable form.
Identity Verification
CNIC-based KYC is a one-time requirement at 999pk. Once verified, you won't be asked again unless your details change or unusual activity is detected on your account.
Payment Data Tokenised
Card and wallet details processed through 999pk are handled by certified payment processors. We receive a secure token — never your actual card or wallet credentials in full.
Gaming History Is Yours
You can request a full export of your gaming history and account activity at any time by contacting support. 999pk provides this within 10 business days.
How We Collect Your Personal Data
Most of the data 999pk holds about you comes directly from you — through the registration form, identity verification process, deposit and withdrawal transactions, and your interactions with games and support. In addition, some data is collected automatically through your use of the platform:
You provide data when you register, verify your identity, make transactions, contact support, or update your account settings.
Session data, device information, and cookies are collected automatically when you browse or play on 999pk. This data is used to ensure platform security and performance.
Easypaisa, JazzCash, NayaPay, and other payment partners confirm transaction status and provide transaction reference data to 999pk to reconcile your account balance.
When required by our KYC obligations, third-party identity verification services may confirm the authenticity of documents you submit. They do not receive your gaming history.
Why 999pk Uses Your Personal Data
Every piece of data that 999pk collects has a specific, documented purpose. We do not collect data speculatively or retain information that has no ongoing use. The purposes for which we process your personal data are:
- Account management: Creating and maintaining your 999pk account, verifying your identity, and ensuring your account settings are correctly applied.
- Service delivery: Enabling you to deposit, withdraw, play games, and access promotions. Without this processing, the platform cannot function for you.
- Security and fraud prevention: Monitoring account activity for signs of fraud, collusion, bonus abuse, or unauthorised access. This protects both you and other players on the platform.
- Regulatory compliance: Fulfilling our anti-money laundering (AML) obligations, age verification requirements, and any other legal obligations applicable to online gaming operations.
- Payment processing: Facilitating deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card processors.
- Customer support: Responding to your queries, resolving disputes, and improving our service based on feedback.
- Responsible gaming: Monitoring gaming patterns that may indicate problematic behaviour and intervening appropriately, including applying limits or reaching out to offer support.
- Marketing communications: Sending you information about promotions, new games, and special offers — but only where you have provided consent. You can withdraw consent at any time.
- Platform improvement: Analysing aggregate, anonymised usage data to understand how players interact with the platform and where improvements can be made.
Marketing messages from 999pk are opt-in only. You can unsubscribe from promotional communications at any time through your account settings or by contacting support.
Your data at 999pk is used only for the purposes described in this policy — never sold, never misused.
Who 999pk Shares Your Data With
999pk does not sell your personal data to any third party. Your information is not traded, rented, or exchanged for commercial purposes. We share data only where it is necessary to operate our platform or comply with legal obligations, and only with trusted partners who are contractually required to handle your data securely.
The categories of third parties with whom 999pk may share your data include:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, Visa/Mastercard acquiring banks — receive the information necessary to process your transactions. They process data under their own privacy policies and are bound by payment card industry security standards.
- Identity verification providers: Third-party KYC services receive the documents and identity data you submit for verification. They confirm authenticity and return a verification result. They do not receive your transaction or gaming history.
- Game providers: Where games are powered by third-party game studios or live dealer providers, those providers may receive session data to facilitate gameplay and resolve technical disputes. They do not receive your financial or identity data.
- Technical infrastructure providers: Hosting, security, and analytics providers who operate parts of the 999pk technical infrastructure. These providers process data only on our instruction and are prohibited from using it for their own purposes.
- Regulatory and law enforcement authorities: We will disclose personal data to government authorities, financial intelligence units, or law enforcement agencies when legally required to do so, including in connection with anti-money laundering investigations or court orders.
All third parties who handle 999pk player data are bound by data processing agreements that prohibit them from using your information for any purpose beyond what is necessary to deliver their specific service to us.
How Long 999pk Retains Your Data
999pk retains personal data for as long as is necessary for the purposes described in this policy. The retention periods below reflect both operational needs and regulatory obligations:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | Regulatory / AML compliance |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| KYC documents | 5 years post-account closure | Anti-money laundering regulations |
| Gaming history | Duration of account + 3 years | Dispute resolution, responsible gaming |
| Support correspondence | 3 years from last interaction | Dispute resolution reference |
| Technical/session logs | 12 months rolling | Security monitoring |
| Marketing preferences | Until you withdraw consent | Consent-based processing |
When the retention period for any category of data expires, 999pk securely deletes or anonymises that data so it can no longer be associated with you. Data retained for regulatory compliance cannot be deleted before the applicable period expires even if you request account closure.
Your Data Rights at 999pk
As a player on 999pk, you have meaningful rights over your personal data. These rights are not bureaucratic formalities — they are genuine controls you can exercise at any time by contacting support@999pk.biz:
Request a copy of all personal data 999pk holds about you. We provide this in a readable format within 10 business days.
If any data we hold about you is incorrect or outdated, you can request that we correct it. Some corrections may require re-verification.
Request deletion of your personal data. This right applies subject to our legal retention obligations. Data required for AML or financial compliance cannot be deleted before the mandatory period expires.
Request your data in a structured, machine-readable format so you can transfer it to another service if you choose.
Object to processing of your data for direct marketing at any time. You can also object to other processing activities where our legal basis is legitimate interest.
Request that we restrict processing of your data in certain circumstances — for example while a dispute is being investigated — without deleting the data entirely.
To exercise any of these rights, email support@999pk.biz with the subject line "Data Rights Request" and describe what you are requesting. We will acknowledge your request within 48 hours and provide a substantive response within 10 business days. We may need to verify your identity before processing the request to protect against unauthorised access to another person's data.
999pk players across Pakistan have full rights over their personal data — we make exercising those rights straightforward.
How 999pk Secures Your Personal Data
The security of your personal data is taken seriously at 999pk. We implement a layered set of technical and organisational measures designed to protect your information against unauthorised access, loss, alteration, or disclosure. These measures include:
- Encryption in transit: All data transmitted between your device and the 999pk platform is encrypted using TLS 1.2 or higher. Connections over plain HTTP are not accepted.
- Encryption at rest: Sensitive personal data stored in our databases is encrypted at rest using industry-standard algorithms.
- Access controls: Personal data is accessible only to 999pk staff who require it for their specific role. Access is logged and audited. No one at 999pk has unrestricted access to all player data.
- Two-factor authentication: Available on all 999pk accounts. We strongly recommend enabling 2FA to add a second layer of protection against unauthorised access.
- Fraud monitoring: Automated systems monitor account activity in real time for patterns consistent with fraud, account takeover, or money laundering. Suspicious activity triggers investigation before funds are released.
- Regular security reviews: 999pk's security infrastructure undergoes regular internal and external review to identify and address vulnerabilities before they can be exploited.
Despite these measures, no online platform can guarantee absolute security. If you suspect your 999pk account has been compromised, change your password immediately and contact support. We will investigate and take appropriate action.
Enable two-factor authentication on your 999pk account from your account settings. It takes two minutes to set up and significantly reduces the risk of unauthorised access.
Cookies and Tracking Technologies
999pk uses cookies and similar tracking technologies to make the platform work correctly, to understand how it is used, and to improve the experience for players. A cookie is a small text file stored on your device when you visit a website. It does not contain executable code and cannot access other files on your device.
| Cookie Name / Category | Type | Purpose | Duration |
|---|---|---|---|
| Session / Authentication | Keeps you logged in during your session. Without this, the platform cannot function. | Session | |
| CSRF Protection | Security cookie that prevents cross-site request forgery attacks on your account. | Session | |
| Language / Preferences | Remembers your language preference and display settings between visits. | 1 year | |
| Analytics (anonymised) | Aggregated, anonymised data on how players navigate the platform. Used to identify and fix usability issues. No individual player is identified. | 12 months | |
| Fraud Detection | Device fingerprinting data used to detect account takeover and fraudulent activity. Cannot be disabled without impacting platform security. | 30 days |
Essential and security cookies cannot be disabled as they are required for the platform to function and to protect your account. Functional and analytics cookies can be managed through your browser settings. Disabling analytics cookies has no impact on your ability to play games or make transactions.
999pk does not use advertising or tracking cookies that follow you across other websites. Our cookies are strictly limited to those required for platform operation and internal analytics.
If you are a parent or guardian and believe that a minor has registered on 999pk, please contact us at support@999pk.biz immediately with as much detail as possible. We take these reports seriously and will act on them without delay.
We use date-of-birth collection during registration and CNIC verification as part of our age verification process. These measures are designed to prevent underage access and are applied to every new registration.
999pk does not control the privacy practices of game providers whose titles appear on our platform. Where third-party game providers process data about your gameplay, this is disclosed in the relevant game's information page. In all cases, these providers are prohibited from using gameplay data for any purpose other than facilitating the game you are playing.
When we make material changes to this policy — changes that meaningfully affect how your data is used or your rights in relation to it — we will notify registered players via the email address or mobile number on their account at least 7 days before the changes take effect. For minor clarifications and non-material corrections, updates may be made without advance notice.
Continued use of the 999pk platform after the effective date of any policy update constitutes your acceptance of the revised policy. If you disagree with material changes, you have the right to close your account before the changes take effect.
Email: support@999pk.biz (Subject: "Privacy Request")
Live Chat: Available on 999pk.biz, 24 hours a day, 7 days a week
Languages: Urdu and English
Response Time: Acknowledgement within 48 hours, substantive response within 10 business days
If you are not satisfied with how 999pk has handled your personal data or responded to your data rights request, you have the right to escalate your complaint. Please contact support first to allow us the opportunity to resolve the matter directly before escalation.
By using 999pk, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described. This policy was last updated in January 2025 (Version 3.1). For questions, contact support@999pk.biz.