Pak 999 Privacy Policy — What We Collect and How We Keep It Safe

This Privacy Policy applies to all personal data collected and processed by Pak 999 (operating at pak999.biz) in connection with the provision of our online gaming and sports betting platform. It covers every interaction you have with Pak 999 — from the moment you visit our website without an account through to registration, identity verification, deposits, gameplay, betting, withdrawals, and customer support.

Pak 999 is the data controller for all personal information processed under this Policy. If you have questions about how your data is handled, or if you wish to exercise any of your rights as described in this document, you can reach us at privacy@pak999.biz or through our 24/7 live chat support.

By using Pak 999, you confirm that you have read and understood this Privacy Policy. This Policy forms part of our broader Terms and Conditions, which you should also review. We have tried to write this Policy in plain, clear English specifically for our Pakistani user base — because understanding your privacy rights should not require a law degree.

Pak 999 collects personal data across several categories, each of which serves a specific operational or regulatory purpose. We do not collect data speculatively or beyond what is required to run the platform and comply with our legal obligations.

Sensitive Data

Pak 999 does not intentionally collect sensitive personal data (such as health information, religious beliefs, or political views). If you voluntarily disclose such information in a support conversation, it will be treated with additional care and used only for the purpose for which you shared it. Government-issued ID documents collected for KYC purposes are treated as sensitive data and are handled under strict access controls.

Automatically Collected Data

When you visit pak999.biz, our servers automatically log certain technical information including your IP address, the pages you visit, the time and duration of your visits, and the referring URL. This data is collected via server logs and cookies (described further in Section 6). This automated data collection is necessary for the technical operation of the platform and cannot be disabled without preventing the platform from functioning correctly.

Every piece of personal data that Pak 999 holds is used for one or more of the following purposes. We do not use your data for purposes that are incompatible with what you were told at the time of collection.

• Account creation and management: Setting up your Pak 999 account, verifying your identity, maintaining your account balance, and enabling you to access all platform features.
• Payment processing: Processing deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. Verifying that payment methods belong to the account holder to prevent fraud and money laundering.
• Platform operation: Providing sports betting, live casino, Ludo, slots, and all other gaming services. Recording bet placements, settling results, and maintaining accurate account histories.
• Regulatory compliance: Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by applicable regulations. Reporting to relevant authorities when legally required.
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behaviour, applying deposit limits and self-exclusion requests, and sending responsible gaming alerts and reminders.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, account sharing, multiple account abuse, bonus abuse, and unauthorised access attempts.
• Customer support: Responding to your enquiries, resolving account issues, and maintaining records of support interactions for quality assurance.
• Marketing and promotions (with consent): Sending promotional communications about Pak 999 offers, bonuses, and new features — only if you have opted in to receive such communications. You can opt out at any time.
• Platform improvement: Analysing aggregated, anonymised user behaviour data to improve the Pak 999 platform, fix bugs, and develop new features that serve Pakistani players better.

Pak 999 processes your personal data on one or more of the following legal bases, depending on the specific data and purpose involved:

• Contractual necessity: Processing required to fulfil the agreement between you and Pak 999 when you register an account and use our services. This includes identity verification, payment processing, and operating your account.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, responsible gaming, and data protection obligations.
• Legitimate interests: Processing in pursuit of Pak 999's legitimate business interests, including fraud prevention, security monitoring, and platform improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing for specific purposes where you have given us clear, explicit consent — primarily marketing communications. You may withdraw this consent at any time without affecting other uses of your data.

Pak 999 does not sell, rent, or trade your personal data to any third party. Full stop. However, to operate the platform and comply with legal obligations, there are circumstances where we share data with trusted parties.

Service Providers

We share personal data with third-party service providers who help us operate Pak 999, under strict data processing agreements that prohibit them from using your data for any purpose other than providing their service to us. These include payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners), identity verification and KYC service providers, cloud hosting and infrastructure providers, fraud detection and cybersecurity partners, and customer support platform providers.

Regulatory & Legal Authorities

Pak 999 may disclose personal data to competent authorities — including law enforcement, financial intelligence units, or regulatory bodies — where required to do so by applicable law, court order, or regulatory obligation. We will not disclose more than what is required for the specific legal purpose.

Corporate Transactions

In the unlikely event of a merger, acquisition, or sale of Pak 999 or a substantial portion of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Policy will continue to apply.

Pak 999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, keep your session secure, and understand how users interact with the website. Here is a plain-language breakdown of the cookies we use:

Essential cookies cannot be disabled as they are required for the platform to function. Optional cookies can be managed through your browser settings or through our cookie consent panel, which appears when you first visit the site. Note that disabling optional cookies does not affect your ability to use any core platform feature.

Pak 999 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 — the current industry gold standard for web security. You can verify this by the padlock icon in your browser's address bar when using pak999.biz.
• Encryption at rest: Sensitive data stored in Pak 999 databases — including personal identification details and financial data — is encrypted using AES-256, a military-grade encryption standard.
• Access controls: Access to personal data within Pak 999 is restricted on a strict need-to-know basis. Only employees and contractors who require access to specific data to perform their job functions are granted it, and all access is logged and monitored.
• Two-factor authentication: Pak 999 systems use multi-factor authentication for all internal staff access to platforms that hold personal data.
• Regular security testing: Pak 999 conducts regular vulnerability assessments and penetration tests to identify and address potential security weaknesses before they can be exploited.
• Incident response: Pak 999 maintains a data breach response plan. In the event of a confirmed data breach that is likely to result in risk to affected individuals, we will notify those individuals as quickly as is reasonably practicable.

Pak 999 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The specific retention periods vary by data category:

• Account data: Retained for the duration of your account plus a minimum of 5 years following account closure, as required by AML regulations applicable to gambling operators.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable regulations.
• Transaction and financial records: Retained for a minimum of 7 years from the date of the transaction in compliance with financial record-keeping requirements.
• Betting and gaming history: Retained for the life of your account plus 5 years for regulatory and dispute resolution purposes.
• Customer support records: Retained for 3 years from the date of the interaction, to enable review in the event of escalated disputes.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to any overriding retention requirements.

When personal data is no longer required, Pak 999 securely deletes or anonymises it so that it can no longer be attributed to you. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes.

As a Pak 999 user, you have meaningful rights over your personal data. These are not just legal formalities — they are genuine controls that Pak 999 will honour. Here is what you can ask us to do:

To exercise any of these rights, contact us at privacy@pak999.biz or through your account's live chat. We will acknowledge your request within 5 business days and fulfil it within 30 calendar days. In some cases — for example, where complying with a deletion request would require us to breach our regulatory retention obligations — we will explain why the request cannot be fully fulfilled and what we can do instead.

Pak 999 is an 18+ platform. We do not knowingly collect, process, or store personal data from anyone under the age of 18. Our registration process includes age verification steps specifically designed to prevent minors from creating accounts.

If we discover — through our own checks or via a report from a parent or guardian — that a minor has registered an account and provided personal data, we will immediately close that account, delete the associated personal data (subject to any mandatory retention requirements under AML law), and return any deposited funds to the source account.

If you believe a minor in your care may have registered a Pak 999 account, please contact us immediately at support@pak999.biz. We will investigate and act within 24 hours of receiving your report.

From time to time, the Pak 999 website may contain references or links to third-party websites, services, or resources — for example, links to responsible gaming organisations. Pak 999 has no control over the content, privacy practices, or data handling of these external sites, and this Privacy Policy does not apply to any information you provide when visiting them.

We encourage you to read the privacy policy of any external website you visit. The presence of a link on pak999.biz does not constitute an endorsement of that site's data practices or content.

Pak 999 reviews this Privacy Policy regularly and will update it when necessary — for example, to reflect changes in our data practices, new platform features, regulatory changes, or feedback from users. When we make a material change to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address summarising what has changed.
• Display a prominent notice on the Pak 999 platform for a minimum of 14 days following the update.

Continued use of Pak 999 after a Policy update constitutes acceptance of the updated terms. If you do not agree with any changes, you may close your account by contacting our support team.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how Pak 999 has handled your personal information, please get in touch through any of the following channels: