PKR 999 Privacy Policy – How We Protect Your Data

1Introduction

This Privacy Policy explains how pkr 999 collects, uses, stores and protects the personal information of users who register or interact with the pkr 999 platform at pkr999.biz. It covers all services operated under the pkr 999 brand, including the web platform, any mobile interface, and all customer support channels.

We understand that Pakistani players entrust pkr 999 with personal and financial information and we take that responsibility seriously. This Policy is written plainly — not in dense legal language designed to confuse — because we want every player to genuinely understand how their information is handled.

By registering an account or continuing to use pkr 999, you confirm that you have read and understood this Privacy Policy. If you have questions about anything set out here, our support team is available 24/7 and will respond clearly and promptly.

2Who We Are

pkr 999 is an online casino and sports betting platform operated by the pkr 999 group of companies. The platform is designed specifically for players in Pakistan and all operations, support staff, and payment integrations are structured around the needs of Pakistani players. All accounts are maintained in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, pkr 999 is the data controller — meaning we are the entity that determines how and why your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to handle data only in ways we direct and only for purposes we authorise.

For any privacy-related queries, concerns or requests, pkr 999 can be contacted at: support@pkr999.biz.

3Data We Collect

pkr 999 collects personal data in the following categories. We only collect data that is necessary for a specific, legitimate purpose.

pkr 999 does not collect special category data (such as health data, racial or ethnic origin, or political opinions) unless legally required to do so in very specific regulatory circumstances, in which case you will be explicitly informed.

4How We Collect Your Data

pkr 999 collects personal data through the following channels:

• Account Registration: When you sign up at pkr 999, you provide your name, mobile number, date of birth and other details directly to us.
• Identity Verification (KYC): When we request document verification, you upload identity documents directly through the secure pkr 999 platform.
• Deposits and Withdrawals: When you make a payment at pkr 999, financial details are captured as part of the transaction processing flow via our PCI-DSS compliant payment infrastructure.
• Platform Activity: pkr 999 automatically logs your in-platform behaviour — including games played, bets placed, session times and navigation patterns — as you use the service. This data is generated automatically and is not something you submit deliberately.
• Device and Network Data: Your browser, IP address, device type and connection information are automatically recorded when you access pkr 999. This information is used primarily for security and fraud detection.
• Customer Support Interactions: When you contact pkr 999 support via live chat or email, the contents of those communications are stored as part of your account record.
• Cookies: pkr 999 uses cookies and similar tracking technologies as described in Section 7 of this Policy.

5Why We Use Your Data

pkr 999 processes your personal data only for legitimate, specific purposes. The primary reasons we use your data are:

• Account Management: To create, maintain and operate your pkr 999 account, process your logins, and maintain accurate account records.
• Payment Processing: To process deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments — all denominated in PKR.
• Identity & Age Verification: To comply with our obligation to verify that all players are aged 18 or above and are who they say they are. This is a legal and regulatory requirement that pkr 999 takes seriously.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, identity theft, account takeover and other security threats. Technical and usage data is central to this function at pkr 999.
• Responsible Gaming: Your usage data — session length, bet frequency, deposit patterns — is monitored to identify signs of problem gambling behaviour. pkr 999's responsible gaming tools rely on this data to function effectively.
• Customer Support: To investigate and resolve queries, complaints and disputes raised with the pkr 999 support team.
• Legal Compliance: To meet obligations imposed by applicable law, including anti-money laundering requirements, responding to lawful regulatory requests, and maintaining records required by law.
• Platform Improvement: To analyse aggregate, anonymised usage data in order to improve the pkr 999 platform, fix bugs and develop new features.
• Marketing Communications: To send promotional offers, bonus notifications and relevant updates to players who have opted in to receive such communications from pkr 999. You can withdraw this consent at any time.

6Legal Basis for Processing Your Data

pkr 999 processes your personal data under the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing your registration data, KYC information and payment details is necessary to perform the contract between pkr 999 and you — i.e., to provide you with the gaming services you have signed up for.
• Legal Obligation: Certain data processing at pkr 999 — particularly identity verification, anti-money laundering checks and data retention for regulatory purposes — is required by law. pkr 999 cannot offer services without complying with these requirements.
• Legitimate Interests: pkr 999 processes technical and usage data under legitimate interests for fraud prevention, platform security and service improvement. These interests are balanced against your privacy rights and do not override them.
• Consent: Where pkr 999 processes your data for marketing communications, we rely on your explicit consent. You can withdraw consent at any time by updating your notification preferences in your account settings or by contacting support.

7Cookies & Tracking Technologies

pkr 999 uses cookies and similar technologies to make the platform function correctly, improve your experience, and support security and analytics. Here is how we categorise and use them:

• Strictly Necessary Cookies: These are essential for pkr 999 to function. They maintain your session while you are logged in, remember your language and currency preferences, and prevent cross-site request forgery. You cannot opt out of these without stopping use of the platform.
• Security Cookies: Used by pkr 999 to detect fraudulent logins, session hijacking attempts and other security anomalies. These operate silently in the background and are critical for account protection.
• Analytics Cookies: pkr 999 uses anonymised analytics to understand how players navigate the platform — which pages are most visited, where players drop off, which features are used most. This data is aggregated and does not identify you individually.
• Preference Cookies: These remember your display preferences, such as whether you prefer decimal or fractional odds in the sports betting section of pkr 999.
• Marketing Cookies: Where you have consented, pkr 999 may use cookies to personalise promotional communications and track the effectiveness of specific campaigns. You can opt out of marketing cookies at any time through your account preferences.

8Data Sharing

pkr 999 does not sell your personal data to any third party. Full stop. Your data is not a product we monetise. We share personal data only in the following limited and necessary circumstances:

• Payment Processors: When you deposit or withdraw at pkr 999 via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, the relevant payment processor receives only the transactional data necessary to complete the payment. These processors are bound by their own security certifications and data protection obligations.
• Game Software Providers: Third-party game providers who supply content to the pkr 999 platform may receive limited technical data (such as session tokens and stake information) necessary to operate the game in real time. They do not receive your identity or contact data.
• KYC and Identity Verification Providers: pkr 999 may use accredited identity verification services to assist with document checks. These providers process only the documents and data required for verification and are bound by contractual data processing agreements.
• Fraud Prevention and Security Services: Anonymised technical data may be shared with fraud prevention networks to identify and block known fraudulent patterns. No identifiable personal data is included in these exchanges.
• Regulatory Authorities and Law Enforcement: pkr 999 will disclose personal data to regulators, law enforcement or other government authorities when required to do so by law — for example, in response to a lawful court order or an anti-money laundering investigation. We do not disclose data voluntarily beyond what is legally required.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of the pkr 999 business, player data may be transferred as part of that transaction. We will notify players in advance of any such transfer and ensure the receiving entity operates under equivalent or stronger data protection standards.

9Data Retention

pkr 999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods at pkr 999 are as follows:

• Active Account Data: Retained for the lifetime of your pkr 999 account and for a period of 5 years following account closure. This is required for regulatory and legal compliance purposes, including anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction records — including deposits, withdrawals and bet history — are retained for a minimum of 5 years from the date of the transaction, in line with financial services record-keeping standards applicable to pkr 999.
• KYC Documents: Identity verification documents are retained for 5 years following account closure. Physical or digital copies held in our secure KYC system are destroyed or permanently deleted at the end of this retention period.
• Support Communications: Chat logs and email correspondence with pkr 999 support are retained for 3 years from the date of the interaction, to allow reference in case of related disputes or regulatory enquiries.
• Technical and Log Data: Server logs and IP data are typically retained for 12 months for security purposes and then deleted or anonymised.
• Marketing Preference Data: Retained until you withdraw consent or close your account. If you opt out of marketing, your opt-out preference is retained indefinitely to ensure we do not contact you again.

When data is no longer required and the retention period has expired, pkr 999 permanently deletes or anonymises it so that it can no longer be associated with you as an individual.

10Security Measures

Protecting the data you entrust to pkr 999 is a technical and operational priority. The security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and pkr 999 servers is encrypted using industry-standard TLS/SSL protocols. This applies to every page, every login, and every transaction.
• PCI-DSS Compliance: Payment data at pkr 999 is processed through infrastructure certified to PCI-DSS (Payment Card Industry Data Security Standard) standards. Card and account details are never stored in unencrypted form.
• Password Hashing: Your pkr 999 account password is stored as a one-way cryptographic hash. Even pkr 999 staff cannot retrieve your actual password — only reset it. This is why we will never ask you for your password.
• Two-Factor Authentication (2FA): pkr 999 offers optional 2FA for all accounts. We strongly recommend enabling it. 2FA adds a second verification step that protects your account even if your password is compromised.
• Real-Time Fraud Monitoring: pkr 999 operates continuous automated monitoring for suspicious login attempts, unusual transaction patterns and account takeover indicators. Alerts are reviewed by our security team around the clock.
• Access Controls: Internal access to player personal data at pkr 999 is restricted on a strict need-to-know basis. Only staff members who require access to specific data to perform their job functions can access it, and all access is logged and auditable.
• Regular Security Audits: pkr 999 undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

11Your Rights Over Your Personal Data

You have meaningful rights over the personal data pkr 999 holds about you. These rights can be exercised at any time by contacting our support team. Here is what you are entitled to:

To exercise any of these rights, contact pkr 999 at support@pkr999.biz. We will acknowledge your request within 48 hours and complete it within 30 days. If we need more time due to complexity, we will notify you and explain why.

12Children's Privacy

pkr 999 is strictly an 18+ platform. We do not knowingly collect or process personal data from anyone under the age of 18. Age verification is a core part of our registration process and we reserve the right to request proof of age at any point.

If pkr 999 discovers that we have inadvertently collected personal data from a minor, we will immediately close the account, delete all associated personal data, and — where a deposit was made — return the funds to the verified payment source.

If you believe that a minor is using a pkr 999 account, please contact us immediately at support@pkr999.biz. We take these reports extremely seriously and investigate them as the highest priority.

13Third-Party Links

The pkr 999 platform does not contain links to external third-party websites. All navigation within pkr 999 remains within the pkr999.biz domain and associated platform pages. This policy applies to all data interactions within the pkr 999 platform itself.

If you access pkr 999 via a link from a third-party website or application, please be aware that pkr 999 has no control over those third parties' data practices. This Privacy Policy covers only the pkr 999 platform and does not extend to any external site, application or service you may have used to reach us.

14Changes to This Privacy Policy

pkr 999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in legal requirements, or improvements to our data protection practices. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

When material changes are made to this Policy — changes that meaningfully affect how your data is collected, used or shared — pkr 999 will notify registered players through in-platform announcements or by email before the changes come into effect. Minor clarifications or formatting updates may be made without prior notice.

We encourage all pkr 999 players to review this page periodically. Your continued use of the pkr 999 platform after any update to this Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you should contact support to close your account and withdraw any remaining balance.

15Contact Us

For any privacy-related questions, data subject requests, or concerns about how pkr 999 handles your personal information, please reach out through the following channels:

• Email: support@pkr999.biz — for formal data requests, complaints and sensitive privacy matters. We target a response within 4 business hours.
• Live Chat: Available 24/7 within the pkr 999 platform. Use this channel for quick clarifications or to initiate a formal request that will then be documented via email.

When submitting a data subject request, please include your registered mobile number and a brief description of your request so we can locate your account and handle your query efficiently. We will never ask for your pkr 999 password via any channel — if a message claiming to be from us requests your password, please report it to us immediately as it is not from pkr 999.