Privacy Policy – Win 999 Online Casino Pakistan

This Privacy Policy describes how Win 999 — the operator of win999-play.com — collects, processes, stores and protects the personal data of players who use the Win 999 platform. It applies to all players who create an account on Win 999, browse the website without registering, or interact with Win 999 through any of its official channels.

By registering a Win 999 account, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the Win 999 Terms and Conditions and Responsible Gaming policy, which together govern your use of the platform.

Win 999 is committed to handling the personal data of Pakistani players with transparency, care and respect. If you have any questions about how your data is handled, the contact details at the end of this document will connect you with our team directly.

Win 999 collects personal data from players through a number of channels — the registration process, ongoing account use, payment transactions, customer support interactions and automatic technical logging. The specific categories of data collected are described in the table below.

Win 999 does not collect sensitive categories of personal data — such as health records, religious beliefs or political opinions — and has no reason to do so. If you are ever asked for such information by someone claiming to represent Win 999, please report it to our support team immediately as it is not a legitimate request.

Win 999 uses the personal data it collects only for legitimate purposes that are directly related to operating the platform and serving Pakistani players. The primary uses are as follows:

• Account management: Creating and maintaining your Win 999 account, verifying your identity and age, processing login requests and managing account security.
• Payment processing: Facilitating deposits and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments; detecting and preventing payment fraud.
• Gaming operations: Running game rounds, calculating and awarding winnings, applying bonuses from the Win 999 Promotions page and maintaining accurate gaming records.
• Legal and compliance obligations: Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements; reporting as required under applicable law; retaining transaction records for the legally mandated period.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling behaviour; enforcing self-exclusion and deposit limits set by the player; contacting players when responsible gaming concerns are identified.
• Customer support: Responding to queries, complaints and account-related requests submitted by Win 999 players.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how Pakistani players use Win 999 and to improve the platform's design, speed and game selection.
• Marketing communications: Sending promotional offers, new game announcements and bonus notifications via SMS or email — only to players who have not opted out of marketing communications.

Win 999 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing your data is necessary to provide the Win 999 service — including account registration, payment processing and game operation — under the contract formed when you accepted the Terms and Conditions.
• Legal obligation: Certain processing activities — such as identity verification, transaction record keeping and AML reporting — are required by applicable law and cannot be opted out of.
• Legitimate interests: Win 999 processes some data — such as technical logs and fraud detection signals — based on its legitimate interest in operating a secure, fair and compliant platform. This processing is balanced against player privacy rights.
• Consent: For marketing communications, Win 999 processes your data on the basis of your consent. You can withdraw this consent at any time by opting out through your account settings or by contacting our support team.

Win 999 does not sell your personal data to third parties. However, operating the platform requires sharing limited data with carefully selected service providers and in specific circumstances required by law. The categories of recipients and the basis for sharing are outlined below:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay and banking institutions that process your deposits and withdrawals in PKR. These parties receive only the data necessary to process the specific transaction.
• Game content providers: Providers of the casino games and sports betting content on Win 999 receive limited technical data (such as session tokens and bet amounts) necessary to deliver the game experience. They are contractually prohibited from using this data for any other purpose.
• Identity verification services: Third-party KYC verification providers that process identity documents submitted during the verification process. All such providers operate under strict data processing agreements.
• Fraud prevention and security services: Tools and services that help Win 999 detect fraudulent transactions, identify suspicious account activity and protect the platform from abuse.
• Regulatory and law enforcement authorities: Win 999 will disclose personal data to government or regulatory authorities when required to do so by applicable law, court order or regulatory obligation. Win 999 will notify affected players where legally permissible.
• Professional advisors: Lawyers, auditors and consultants who advise Win 999 and who are bound by professional confidentiality obligations.

All third parties with whom Win 999 shares personal data are required by contract to process that data securely, to use it only for the specific stated purpose, and to comply with applicable data protection standards. Win 999 does not authorise any third party to use your data for their own marketing purposes.

Win 999 uses cookies and similar tracking technologies to deliver a reliable, personalised experience for Pakistani players and to understand how the platform is used. A cookie is a small text file placed on your device by your browser when you visit Win 999. It does not give Win 999 access to your device or other data stored on it.

You can manage cookies through your browser settings at any time. Disabling essential cookies may affect your ability to log into your Win 999 account and use core platform features. Win 999 does not use cookies to track your activity on websites outside of win999-play.com.

Win 999 takes data security seriously. The platform implements a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction.

• SSL/TLS encryption: All data transmitted between your device and Win 999's servers is encrypted using industry-standard Transport Layer Security (TLS). This protects your login credentials, personal information and payment details while in transit.
• Secure data storage: Personal data stored on Win 999's systems is held in encrypted databases on access-controlled servers. Physical and network access to these servers is restricted to authorised personnel only.
• Access controls: Win 999 staff are granted access to player data only on a strict need-to-know basis. Role-based access controls prevent staff from accessing data that is not required for their specific function.
• Security monitoring: Win 999's systems are monitored continuously for unusual activity, intrusion attempts and potential data breaches. Security incidents are investigated and responded to according to a defined incident response protocol.
• Password security: Account passwords are stored in hashed form using a strong cryptographic hashing algorithm — they are never stored in plain text. Win 999 staff cannot retrieve your password; only a password reset is possible.

Win 999 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your active Win 999 account relationship plus a period following account closure, as required by AML and gaming licence obligations.
• Transaction records: Financial transaction records — including deposits, withdrawals and bet history — are retained for a minimum of five years following the transaction date, as commonly required under anti-money-laundering regulations.
• KYC documents: Identity verification documents are retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Support communications: Customer support interaction records are retained for up to three years to allow Win 999 to track issue history and improve service quality.
• Technical logs: Server logs and technical access records are typically retained for 12 months for security investigation purposes.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your account to enable Win 999 to demonstrate compliance.

Once the applicable retention period expires, Win 999 securely deletes or irreversibly anonymises the data so that it can no longer be associated with your identity.

As a player on Win 999, you have a number of rights in relation to the personal data we hold about you. These rights can be exercised by contacting the Win 999 support team through any available channel.

• Right of access: You can request a copy of the personal data Win 999 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to rectification: If any personal data Win 999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support with the corrected information and we will update the records promptly.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data — for example, if the data is no longer necessary for the purpose it was collected. Note that Win 999 may be unable to erase some data where retention is required by law, such as AML transaction records.
• Right to restriction: You can request that Win 999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You can request your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to object: You have the right to object to the processing of your data where Win 999 is relying on legitimate interests as the legal basis. You also have an absolute right to opt out of marketing communications at any time.

Win 999 will respond to all data rights requests within 30 days. If additional time is needed due to the complexity of the request, we will inform you and provide a revised timeline. We do not charge a fee for standard data rights requests.

Win 999 does not knowingly collect personal data from individuals under the age of 18. The platform is designed exclusively for adult players. Age verification is a mandatory step in the Win 999 registration process and is further enforced through KYC document checks.

If Win 999 discovers that personal data has been collected from a person who is under 18, it will immediately close the associated account, delete the data and — where appropriate — report the matter to the relevant authority. If you believe a minor has created an account on Win 999, please contact our support team immediately.

Win 999 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer to Pakistani players. When material changes are made, Win 999 will update the "Last Updated" date shown at the top of this page and may notify registered players by email or in-platform notification.

We recommend checking this page periodically. Your continued use of Win 999 after an update to this policy constitutes acceptance of the revised terms. If you disagree with any update, you may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, want to exercise a data right, or want to raise a concern about how Win 999 handles your personal data, please contact our support team. We are available 24 hours a day, seven days a week.

When submitting a data rights request by email, please include your registered Win 999 mobile number or email address and a brief description of your request so we can locate your account and respond efficiently. Requests are handled confidentially and are not shared with any party outside the Win 999 data protection team.