1Who We Are
This Privacy Policy applies to the online gaming and sports betting platform operated under the brand name 999r, accessible at 999r.online. When this policy refers to "999r", "we", "us", or "our", it means the company that operates the 999r platform and holds the applicable gaming licence.
999r acts as the data controller for the personal information you provide when registering, depositing, playing, or contacting us. As data controller, we are responsible for determining the purposes and means of processing your personal data and for ensuring that processing is carried out in accordance with applicable data protection standards.
If you have any questions about who controls your data, how it is used, or how to exercise your rights, the contact details in Section 13 of this policy are always available.
2Personal Data We Collect
The table below summarises each category of personal data 999r collects, with examples of specific data points within each category:
| Category |
Examples |
Required? |
| Identity Data |
Full name, date of birth, CNIC number (when requested for verification) |
Yes – for account registration and verification |
| Contact Data |
Mobile phone number, email address |
Yes – for account login and support communication |
| Financial Data |
Easypaisa/JazzCash wallet number, bank account details (IBAN), card last four digits |
Yes – to process deposits and withdrawals in PKR |
| Transaction Data |
Deposit history, withdrawal history, bet records, game session records, bonus usage |
Yes – for account management, compliance, and dispute resolution |
| Technical Data |
IP address, device type, operating system, browser type, session timestamps |
Automatic – collected during platform use |
| Usage Data |
Pages visited on 999r, features used, time spent in sessions, game preferences |
Automatic – helps us improve the platform experience |
| Communications Data |
Records of live chat conversations, emails sent to support@999r.online |
When you contact 999r support |
| Verification Documents |
Copy of CNIC, proof of payment method ownership |
When requested for identity or payment verification |
We do not collect sensitive personal data such as biometric data, health information, religious beliefs, or political opinions. We do not collect data from children under 18 — see Section 11 for our position on underage access.
3How We Collect Your Data
999r collects personal data through the following channels:
Data You Provide Directly
- Registration: When you create a 999r account, you provide your mobile number, name, and choose a password.
- Deposits and Withdrawals: When you transact through the 999r cashier, you provide payment method details.
- Verification: When 999r requests age or identity verification, you submit documents such as a CNIC copy.
- Support Contacts: When you chat with 999r support or send an email, you provide whatever information you include in that communication.
- Promotions: When you opt into a 999r promotion or refer a friend, you may provide additional information specific to that activity.
Data Collected Automatically
- Cookies and Session Data: 999r uses cookies and similar tracking technologies to maintain your login session and record anonymised usage patterns. See Section 9 for full cookie details.
- Server Logs: Our servers automatically record IP addresses, request timestamps, and technical data associated with each session on 999r.
- Game Platform Data: Game providers integrated into 999r transmit technical data about each game round, including stake, outcome, and session duration.
Data From Third Parties
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank processing partners share transaction confirmation data with 999r to verify deposits and process withdrawals.
- Identity Verification Services: Where 999r uses automated identity verification tools, these services may return a confirmation result and risk score without sharing the full document content with 999r servers.
4Why We Use Your Personal Data
999r uses personal data for the following purposes. Each purpose is matched to a legal basis in Section 5:
- Account Creation and Management: To register your 999r account, maintain your balance in PKR, and enable login and account security features.
- Processing Transactions: To process PKR deposits from your Easypaisa, JazzCash, or bank account, and to send PKR withdrawals to your nominated payment method.
- Identity and Age Verification: To confirm that you are who you say you are, that you are aged 18 or over, and that your payment method belongs to you.
- Fraud Prevention and Security: To detect, investigate, and prevent suspicious activity, fraudulent transactions, money laundering, and misuse of the 999r platform.
- Customer Support: To respond to your enquiries, resolve disputes, and provide help when you contact 999r via live chat or email.
- Regulatory Compliance: To meet our obligations under the gaming licence under which 999r operates, including record-keeping, reporting, and cooperation with regulatory enquiries.
- Responsible Gaming: To monitor for indicators of problem gambling, communicate with players showing signs of concern, and administer self-exclusion and limit requests.
- Platform Improvement: To analyse aggregated usage data and improve the 999r product, fix bugs, and optimise performance for Pakistani mobile users.
- Marketing Communications: To send you promotional offers, bonuses, and news about 999r — only where you have given consent, and only about 999r products and features.
5Legal Bases for Processing
Every use of your personal data by 999r is supported by at least one of the following legal bases:
- Performance of Contract: Processing necessary to provide the services you have signed up for — account management, payment processing, game access, and support.
- Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and gaming licence conditions.
- Legitimate Interests: Processing where 999r has a legitimate operational interest that does not override your rights — including fraud detection, platform security, abuse prevention, and internal analytics.
- Consent: Processing that relies on your active, informed consent — primarily marketing communications. You may withdraw marketing consent at any time by contacting 999r support or updating your account notification settings.
Withdrawing Consent: If you have consented to receive marketing messages from 999r and wish to stop receiving them, contact support@999r.online at any time. Withdrawal of marketing consent does not affect your ability to use your 999r account or the lawfulness of processing that occurred before the withdrawal.
6Who We Share Your Data With
999r does not sell personal data. We share personal data only in the following limited, necessary circumstances:
Service Providers
We work with carefully selected third-party service providers who process data on our behalf under strict contractual data protection obligations. These include:
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners — to execute your financial transactions.
- Game Providers: Evolution Gaming, Pragmatic Play, Spribe, and other licensed studios — to deliver certified games within the 999r platform. These providers receive only the technical and transactional data necessary to operate the game.
- Identity Verification Providers: Third-party services used to verify your identity and age. These providers handle your documents under their own certified security frameworks.
- Customer Support Technology: Live chat platform providers that host and deliver our support chat functionality within 999r.
Regulatory and Legal Disclosure
999r may share personal data with regulators, law enforcement agencies, or courts where required by law or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect safety, or fulfil a legal obligation. We will inform you of such disclosures where legally permitted to do so.
Business Transfers
If 999r undergoes a merger, acquisition, or sale of assets, player data may be transferred to the successor entity. In such circumstances, we will notify registered players and ensure the new entity is bound by equivalent privacy protections.
999r never shares your personal data with third-party advertisers, data brokers, or marketing networks. You will not receive unsolicited marketing from companies who obtained your data via 999r.
7How Long We Keep Your Data
999r does not keep your personal data longer than necessary. The following retention periods apply:
| Data Category |
Retention Period |
Reason |
| Account and identity data |
Duration of account + 5 years after closure |
Legal and regulatory compliance, AML obligations |
| Financial transaction records |
5 years from transaction date |
AML compliance, tax record requirements |
| Bet and game history |
5 years from the date of the activity |
Dispute resolution, regulatory audit |
| Support communications |
3 years from last interaction |
Dispute resolution and service quality |
| Verification documents |
Duration of account + 5 years |
AML and gaming licence obligations |
| Marketing consent records |
Until consent is withdrawn + 1 year |
Evidence of consent basis |
| Technical and usage data |
13 months on a rolling basis |
Platform performance and security monitoring |
| Self-exclusion records |
Permanently retained |
To prevent re-registration during exclusion period and for responsible gaming record keeping |
When the relevant retention period expires, 999r securely deletes the data or anonymises it so that it can no longer be associated with you as an individual.
8Your Privacy Rights
As a 999r player, you have the following rights regarding your personal data. These rights can be exercised by contacting 999r at support@999r.online:
You have the right to request a copy of all personal data 999r holds about you. We will provide this in a structured, readable format within 30 days of receiving your request. We may ask for identity confirmation before fulfilling an access request to protect you against unauthorised data access.
If any personal data 999r holds about you is incorrect or out of date, you have the right to request that we correct it. You can update most account details directly within your 999r account settings. For corrections to data you cannot update yourself, contact our support team.
You may request deletion of your personal data in certain circumstances — for example, if it is no longer needed for the purpose it was collected, or if you withdraw consent and no other legal basis applies. Note that we cannot delete data we are legally required to retain (such as transaction records required for AML compliance). We will explain clearly what can and cannot be deleted and why.
You can ask 999r to restrict processing of your data in certain situations — for instance, while we investigate a dispute about accuracy, or where you need us to retain data for a legal claim even though we would otherwise delete it. When processing is restricted, we will continue to store the data but will not use it for other purposes without your agreement.
Where 999r processes your data on the basis of consent or contract, and the processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format. You may also ask us to transmit it directly to another platform where technically feasible.
You have the right to object to 999r processing your data on the basis of legitimate interests, and to object to direct marketing at any time. Where you object to marketing, we will stop sending marketing communications immediately. Where you object to legitimate-interest processing, we will assess whether our interests override your rights and respond accordingly.
To exercise any of these rights, email support@999r.online with the subject line "Data Rights Request" and specify which right you are exercising and for what data. 999r will respond within 30 calendar days. If you are not satisfied with our response, you have the right to escalate to the relevant data protection supervisory authority.
9Cookies and Tracking Technologies
999r uses cookies and similar technologies when you visit and use our platform. Here is a plain explanation of what we use and why:
Essential Cookies
These cookies are necessary for the 999r platform to function. Without them, you cannot log in, maintain a session, or use the cashier. They do not track you across other websites and cannot be disabled without preventing the platform from working.
Performance and Analytics Cookies
These cookies collect anonymised data about how players use the 999r platform — which pages are visited most often, where errors occur, and how long sessions last. This information is used in aggregate to improve the platform. Individual players are not identifiable from this data.
Preference Cookies
These cookies remember your settings and preferences on 999r — for example, your preferred language, notification settings, or last-visited section of the casino lobby. They improve convenience without tracking any personally identifying behaviour.
What We Do Not Use
999r does not use third-party advertising cookies, retargeting pixels, or social media tracking tags. We will not share cookie data with advertising networks. Your browsing behaviour on 999r is not used to serve you advertising on other websites.
Managing Cookies: You can control and delete cookies through your browser settings. Deleting essential cookies will log you out of 999r and require you to log back in. Instructions for managing cookies in the most common browsers are available in your browser's help section.
10Security Measures
999r takes the security of your personal data seriously. The measures in place include:
- Transport Layer Security (TLS/SSL): All data transmitted between your device and 999r servers is encrypted using 256-bit TLS encryption. This prevents interception of login credentials, payment details, and personal data.
- Password Hashing: Your 999r account password is stored as a one-way cryptographic hash. Neither 999r staff nor administrators can read your password. If you forget it, it must be reset — it cannot be retrieved.
- Access Controls: Internal access to player data within 999r is restricted to staff who have a legitimate operational need. Access is logged and audited. No staff member has unrestricted access to the full player database.
- Secure Data Storage: Personal data is stored on secured servers with physical and logical access controls, regular vulnerability assessments, and intrusion detection monitoring.
- Third-Party Security: All third-party service providers who access player data on 999r's behalf are contractually required to maintain security standards equivalent to our own.
Despite these measures, no internet transmission or electronic storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. If you believe your 999r account has been compromised, contact support immediately by changing your password and notifying us via live chat.
11Children and Underage Access
999r is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age declaration, and we may request age verification documents at any time.
If 999r discovers that a player under 18 has registered an account, we will:
- Close the account immediately.
- Return any deposited funds to the originating payment method, minus any winnings which will be forfeited.
- Delete all personal data associated with the account, except any records required to prevent re-registration.
If you are the parent or guardian of a minor and believe they have accessed 999r, please contact us at support@999r.online immediately. We will act on your report without delay. We also recommend using parental control tools available on Pakistani mobile devices and networks to prevent underage access to gaming platforms.
12Changes to This Privacy Policy
999r may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable laws, or improvements in how we communicate our practices to you. When we make changes, we will:
- Update the "Last Updated" date at the top of this page.
- Post a notice on the 999r platform for a reasonable period before the changes take effect.
- For material changes that significantly affect your rights or how we handle your data, notify you directly via the contact details registered on your 999r account.
We recommend checking this Privacy Policy periodically. Continuing to use 999r after updated terms take effect constitutes acceptance of the revised policy. If you do not agree with any changes, you are entitled to close your 999r account before the changes become effective.
13Contact Us & Complaints
For any privacy-related question, data rights request, or concern about how 999r handles your personal information:
- Email: support@999r.online — use the subject line "Privacy" or "Data Rights Request" to ensure prompt routing to the right team.
- Live Chat: Available 24/7 within your logged-in 999r account. Our agents can handle routine privacy enquiries and escalate formal data rights requests to the appropriate team.
- Response Time: 999r aims to acknowledge all privacy enquiries within 48 hours and provide a substantive response within 30 calendar days.
Complaints
If you are not satisfied with how 999r has handled your personal data or responded to a data rights request, you have the right to escalate your complaint to the relevant supervisory authority in the jurisdiction under which 999r is licensed. Contact details for the relevant authority will be provided upon request if you have exhausted the 999r internal complaints process.
For Pakistani players: We encourage you to raise any privacy concern with us directly first — we are committed to resolving issues quickly and fairly. Most matters are resolved within a few business days through our live chat support channel.
