999b Privacy Policy – How We Handle Your Personal Data

1. Introduction

999b is committed to protecting the personal information of everyone who uses its platform. This Privacy Policy sets out clearly what data we collect from you, the purposes for which that data is used, how it is stored and protected, who it may be shared with, and what choices you have regarding your own information.

This policy should be read alongside the Terms and Conditions, which together form the complete agreement governing your use of 999b. If there is ever a conflict between the two, the Terms and Conditions take precedence on matters of platform use, and this Privacy Policy takes precedence on matters relating to personal data.

We have written this policy in plain language, because we think you deserve to actually understand it — not just scroll past it. If anything here is unclear or you have a question that is not answered, you can reach our support team at the contact details provided at the end of this page.

2. Data We Collect

The information 999b collects from you falls into a few distinct categories depending on how and when you interact with the platform.

Information you provide directly:

• Full name and date of birth — collected at registration for identity and age verification purposes.
• Contact details — including your mobile number and email address, used for account communication and security alerts.
• Identity verification documents — such as a copy of your CNIC or passport, requested when our compliance process requires it.
• Payment information — including details related to your JazzCash or Easypaisa account, Raast ID, bank account, or card details used for PKR deposits and withdrawals.

Information collected automatically:

• Device information — the type of device, operating system version, and browser you use to access 999b.
• IP address and approximate location — used to detect unusual login activity and maintain platform security.
• Session and usage data — pages visited, features used, time spent on different sections, and click activity within the platform.
• Transaction history — a log of all deposits, withdrawals, bets, and game activity associated with your account.

Data Type	Collected At	Primary Purpose
Name & date of birth	Registration	Identity & age verification
Contact details	Registration	Account communication, security
Payment method details	First deposit	PKR transaction processing
ID documents	Verification request	Compliance & fraud prevention
Device & IP data	Platform access	Security & fraud detection
Betting & game activity	Platform use	Account records, responsible gaming

3. How We Use Your Data

999b uses your personal data for the following purposes:

• Account management: Creating and maintaining your account, verifying your identity, and enabling you to log in securely.
• Transaction processing: Processing PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, Bank Transfer, and card payments.
• Security and fraud prevention: Monitoring for unusual login patterns, detecting potential fraud, and protecting your account from unauthorised access.
• Platform improvement: Understanding how users navigate and use 999b so we can improve the experience over time.
• Compliance: Meeting our obligations under applicable laws and regulations, including anti-money laundering and age verification requirements.
• Communication: Sending you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts. We do not send unsolicited promotional messages without your consent.
• Responsible gaming: Monitoring activity patterns to identify signs of problematic gambling behaviour and, where appropriate, prompting players to use available tools such as deposit limits or self-exclusion.

4. Sharing Your Data

999b does not sell, rent, or trade your personal data. However, there are circumstances in which your data may be shared with third parties, all of which are governed by strict contractual protections:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners, and card processing services receive the minimum data necessary to process your PKR transactions.
• Identity verification providers: Third-party KYC (Know Your Customer) services may receive your identity documents for verification purposes. These providers are bound by confidentiality agreements and are not permitted to use your data for any other purpose.
• Fraud detection and security services: Specialised security partners may receive anonymised or aggregated data to assist with fraud pattern detection.
• Legal and regulatory requirements: Where we are required by law, court order, or a regulatory body to disclose personal data, we will do so. We will notify you where we are legally permitted to do so.

No data sharing with social media platforms, advertising networks, data brokers, or any organisation outside of these operational needs takes place.

5. Payment Data and PKR Transactions

Given that all deposits and withdrawals on 999b are handled in PKR, and that the platform is designed specifically for Pakistani players, payment-related data deserves specific attention.

When you make a deposit using JazzCash or Easypaisa, the transaction is processed through the respective mobile wallet system. 999b receives a transaction confirmation and your wallet identifier, but does not store your full JazzCash or Easypaisa PIN or any equivalent authentication credentials. The same applies to Raast transfers and standard bank deposits.

For card payments, card details are handled by our payment processing partner using tokenisation. 999b does not store full card numbers on its own servers. The token reference is linked to your account solely for the purpose of processing withdrawals back to the same card.

6. Cookies and Tracking

999b uses cookies — small files stored in your browser — to manage sessions, remember your login state, and understand platform usage patterns. Cookies used by 999b fall into the following categories:

• Essential cookies: Required for the platform to function. These handle session authentication and keep you logged in as you navigate between sections. You cannot opt out of these without losing platform functionality.
• Analytics cookies: Used to understand which parts of the platform are most used, how long sessions last, and where users encounter difficulties. This data is aggreg ated and does not identify individual users.
• Preference cookies: Store your platform preferences such as language and display settings so you do not need to re-configure them on each visit.

999b does not use third-party advertising cookies or cross-site tracking cookies. You can manage or clear cookies through your browser settings at any time, though disabling essential cookies will affect your ability to use the platform normally.

7. Data Retention

999b retains your personal data for as long as your account remains active, and for a defined period after account closure. The retention periods we apply are based on the type of data and the reason it was collected:

• Account and identity data: Retained for the full duration of your account and for a minimum of five years after account closure, in line with standard compliance requirements for financial services.
• Transaction records: Full records of PKR deposits, withdrawals, and betting activity are retained for a minimum of five years from the date of each transaction.
• Identity verification documents: Retained for as long as required to meet our compliance obligations and then securely deleted.
• Session and usage logs: Retained for a shorter period, typically up to twelve months, for security and fraud investigation purposes.

When data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

8. Security Measures

Protecting your data is something 999b takes seriously at a technical and operational level. The following security measures are in place across the platform:

• All data transmitted between your device and 999b servers is encrypted using HTTPS with TLS.
• Account passwords are stored using one-way hashing — they are never stored in plain text and cannot be retrieved even by 999b staff.
• Access to personal data within 999b's systems is restricted to staff with a genuine operational need and is governed by internal access controls.
• Login activity is monitored for anomalies such as access from unfamiliar devices or locations, with alerts generated for suspicious patterns.
• Regular security reviews and system audits are conducted to identify and address potential vulnerabilities.

While 999b takes all reasonable technical precautions, no internet-based system can guarantee absolute security. You play an important role in keeping your account safe — use a strong, unique password, do not share your login details with anyone, and contact support immediately if you suspect your account has been accessed without your permission.

9. Your Data Rights

As a 999b user, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data 999b holds about you at any time.
• Right to correction: If any of the data we hold is inaccurate or out of date, you can ask us to correct it.
• Right to deletion: You can request that your personal data be deleted. We will action this subject to any legal or compliance retention requirements that prevent immediate deletion — for example, transaction records that must be kept for regulatory purposes.
• Right to restrict processing: In certain circumstances, you can ask us to restrict how we use your data while a query or complaint is being resolved.
• Right to data portability: You can request a copy of your personal data in a structured, machine-readable format.

To exercise any of these rights, contact the 999b support team. We aim to respond to all data requests within a reasonable timeframe. Some requests may require identity verification before we can action them, to ensure we are responding to the correct account holder.

10. Minors and Under-18 Policy

999b is strictly a platform for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of the registration process, and additional verification may be requested at any point during account use.

If 999b becomes aware that a registered account belongs to a person under 18, the account will be closed immediately, all data will be handled in accordance with this policy, and any balance will be forfeited as per the Terms and Conditions.

If you are a parent or guardian and believe your child has registered on 999b without your knowledge, please contact our support team immediately so the account can be reviewed and closed.

11. Changes to This Privacy Policy

999b may update this Privacy Policy from time to time to reflect changes in platform features, legal requirements, or how we handle personal data. When meaningful changes are made, we will notify registered users and update the effective date shown at the top of this page.

We encourage you to review this policy periodically. Continuing to use 999b after an update has been posted means you accept the revised policy. If you disagree with any changes, you should stop using the platform and contact support to arrange account closure.

12. Contact and Data Queries

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, you can reach the 999b support team through the contact information available in your account dashboard or via the support channel listed on the platform.

We aim to respond to all privacy-related queries promptly. For formal data access or deletion requests, please include your registered account details so we can verify your identity before actioning the request.