999n Privacy Policy

999n ("999n", "we", "us", or "our") operates the online gaming platform accessible at 999n.bio. 999n is an internationally oriented gaming brand serving English-speaking Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We offer cricket betting, sports wagering, live casino, and slots, all accessible via JazzCash, EasyPaisa, and major Pakistani banks.

As the operator of this platform, 999n acts as the data controller for personal data collected through the website, mobile applications, and any related services. This Privacy Policy applies to all visitors, registered players, and former account holders who have interacted with 999n in any capacity.

This policy is drafted in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, which 999n voluntarily adopts as a best-practice standard for all players regardless of their country of residence.

999n collects personal data only to the extent necessary to provide gaming services, comply with regulatory obligations, prevent fraud, and improve the player experience. We do not collect data beyond what is reasonably required for these stated purposes. The categories of personal data we may collect are set out below.

999n does not knowingly collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification. Where such data is incidentally provided during KYC, it is processed solely for verification purposes and not retained beyond that purpose.

Every piece of personal data collected by 999n is used for a specific, documented purpose. We do not use your data for purposes incompatible with those listed below. Where we intend to use data for a new purpose not covered by this policy, we will update this Privacy Policy and notify you in advance.

• Account Creation and Management: To register your account, verify your identity, maintain your player profile, and manage your account preferences throughout your relationship with 999n.
• Transaction Processing: To process deposits, withdrawals, and any other financial transactions you initiate on the platform, including reconciling payments through JazzCash, EasyPaisa, and partner banks.
• KYC and Regulatory Compliance: To satisfy know-your-customer (KYC) requirements, verify your age (21+ minimum), and fulfil anti-money laundering (AML) obligations under applicable international gaming licence standards.
• Responsible Gaming Monitoring: To monitor for signs of problem gambling behaviour, administer self-exclusion requests, enforce deposit limits, and ensure player welfare obligations are met.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide general account assistance through email and live chat channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and any other conduct that violates our Terms & Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve website performance, game selection, and the overall player experience.
• Promotional Communications: To send you bonus offers, tournament alerts, PSL cricket betting promotions, and platform updates — only where you have consented to receive such communications. You may withdraw consent at any time.

999n processes personal data only where a valid legal basis exists. The primary legal bases we rely upon, consistent with internationally recognised data protection frameworks, are as follows:

• Contractual Necessity: Processing required to perform the gaming services contract with you — including account management, transaction processing, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing necessary to comply with KYC, AML, and other regulatory obligations imposed by our international gaming licence is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of 999n's legitimate interests, provided those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies is carried out solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

999n does not sell, rent, or trade your personal data to any third party. We share data only in the limited circumstances described below, and in every case, we apply appropriate contractual and technical safeguards to protect your information.

All third-party service providers engaged by 999n are required to process your personal data only on our documented instructions, maintain appropriate technical and organisational security measures, and refrain from using your data for their own independent purposes. Where a third party is involved in processing your payment data, they are also required to maintain PCI-DSS compliance at a minimum.

999n uses cookies and similar tracking technologies to operate the platform, remember your preferences, prevent fraud, and — where you have consented — deliver relevant promotional content. The cookies we use fall into the following categories:

• Strictly Necessary Cookies Always Active
  Required for the platform to function — session management, login authentication, security tokens, and load balancing. These cannot be disabled without breaking core platform functionality.
• Functional Cookies Opt-Out Available
  Remember your preferences such as language, preferred payment method, and responsible gaming settings. Disabling these may affect personalisation features.
• Analytical Cookies Opt-Out Available
  Collect anonymised data about how players use the platform — which pages are visited, how long sessions last, and which features are most used. This helps us improve the platform without identifying individual players.
• Marketing Cookies Consent Required
  Used to deliver promotional content relevant to your interests, including cricket betting offers and PSL season promotions. These are only activated where you have provided explicit consent.

You may manage your cookie preferences at any time through the cookie settings panel accessible in your account, or by adjusting your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from accessing the 999n platform.

999n retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligations. The retention periods below represent our standard practice; individual circumstances may require longer retention where, for example, a legal dispute is ongoing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes.

999n implements a layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include both technical controls and organisational policies, reviewed and updated on a continuous basis.

• Encryption at Rest: All stored personal data — including identity documents, financial records, and gaming history — is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your device and the 999n platform is protected by TLS 1.3 (Transport Layer Security), ensuring that information cannot be intercepted during transmission.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. 999n staff may only access player data where their specific role requires it, and all access is logged for audit purposes.
• Two-Factor Authentication (2FA): All internal staff accounts with access to player data require two-factor authentication. Players are also encouraged to enable 2FA on their own accounts for additional protection.
• Penetration Testing: 999n conducts regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, 999n will notify affected players without undue delay, and no later than 72 hours after becoming aware of the breach.

As a 999n player, you hold a set of clearly defined rights with respect to your personal data. 999n is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights below, contact us at [email protected] with a clear description of your request and your registered username.

999n will acknowledge all data rights requests within 5 business days and will provide a substantive response within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of Access: You have the right to request a copy of all personal data we hold about you, along with information about how that data is being used and who it has been shared with.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Minor corrections (such as email address updates) can be made directly in your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that certain data must be retained for regulatory compliance and cannot be deleted on request.
• Right to Restrict Processing: You have the right to request that 999n restricts the processing of your data — for example, while the accuracy of data is contested or a legitimate interest objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including any direct marketing or analytical profiling. Where you object to direct marketing, processing must cease immediately.
• Right Not to be Subject to Automated Decision-Making: 999n does not make decisions that produce significant legal or similarly significant effects on you solely through automated processing without human review, except where this is strictly necessary for fraud prevention or regulatory compliance.

999n enforces a strict minimum age requirement of 21 years for all registered players. The 999n platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts confirmed to belong to individuals under 21 are immediately suspended.

If you are a parent or guardian and believe that a minor in your household has registered on the 999n platform — whether using their own identity or yours — please contact us immediately at [email protected]. We will investigate and take appropriate action, including account suspension and safe return of any deposited funds through verified channels, within one business day of receiving your notification.

We recommend that parents and guardians use parental control software to restrict access to online gaming platforms on shared or household devices. 999n bears no liability for underage access resulting from a failure to secure household devices or the sharing of adult credentials with minors.

As an internationally oriented platform, 999n may process and store your personal data on servers located outside of Pakistan. Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that recognised under the GDPR framework, 999n will implement appropriate transfer safeguards, including:

• Standard Contractual Clauses (SCCs): Legally binding contractual terms between 999n and the receiving entity, requiring the recipient to protect your data to an equivalent standard.
• Data Processing Agreements: Contractual agreements requiring all data processors to apply technical and organisational security measures consistent with this Privacy Policy.
• Adequacy Decisions: Where the destination country has been recognised as providing an adequate level of data protection, transfers may proceed on the basis of that adequacy finding.

If you would like further information about the specific safeguards in place for international transfers of your personal data, please contact us at [email protected].

999n reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. Where changes are material — affecting how we use your data or your rights as a player — we will provide at least 14 days' advance notice by email to your registered address and by a prominent notice on the 999n platform.

Non-material changes — such as typographical corrections, clarifications of existing practices, or minor structural updates — may be implemented without advance notice and take effect upon publication. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the 999n platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change, you should cease using the platform and contact us to arrange account closure before the change takes effect.

If you have questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how 999n has handled your personal data, please reach out to our Data Protection team through the following channels:

• Email: [email protected] — include "Privacy Request" or "Data Complaint" in the subject line along with your registered username.
• Live Chat: Available 24/7 via the chat widget in your logged-in 999n account. Ask to be escalated to the Data Protection team for formal requests.
• Response Timeframe: Acknowledgement within 5 business days; substantive response within 30 days.

If you are dissatisfied with 999n's response to a data protection complaint, you have the right to escalate the matter to the relevant supervisory authority or data protection regulator in your jurisdiction. 999n will cooperate fully with any such regulatory investigation.

Document Version: January 2026  |  Effective Date: 1 January 2026  |  Supersedes: All previous versions of the 999n Privacy Policy.