Privacy Policy — d999 Platform

d999 operates the online gaming platform at d999.games, offering sports betting, live casino, slots, crash games, and other gaming products to eligible Pakistani players. As an internationally licensed gaming operator, d999 is required to comply with data protection obligations under its licensing framework. This Privacy Policy describes how d999 ("we", "us", "our") collects, uses, stores, and protects the personal data of registered players and website visitors ("you", "your").

This policy applies to all personal data collected through the d999 website, mobile browser interface, customer support channels, and any other touchpoint through which you interact with d999. It applies to all players who access d999 from Pakistan, including cities such as Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond.

d999 is committed to handling your personal data with full transparency. We will never sell, rent, or trade your information to third-party marketers. Any data shared with service providers is subject to strict contractual confidentiality obligations.

d999 collects personal data from you directly — when you register an account, make a deposit, place a bet, contact support, or interact with any feature of the platform. We also collect certain technical data automatically when you visit the d999 website. The categories of data we collect are as follows:

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile phone number
• Residential address (city, province, postal code)
• CNIC (Computerised National Identity Card) number where required for KYC verification
• Username and encrypted password

• Payment method details — JazzCash mobile number, EasyPaisa wallet ID, bank account details (HBL, UBL, Meezan Bank), SadaPay wallet ID, or USDT TRC20 wallet address
• Transaction history — deposit amounts, withdrawal amounts, dates, and payment method used
• Bonus eligibility and bonus usage history

d999 does not store full payment card numbers or CVV codes. All payment processing is handled by our licensed payment processing partners using their own PCI-DSS compliant infrastructure.

• Bets placed, game sessions, wager amounts, winnings, and losses
• Sports betting history including cricket markets, PSL bets, and other event markets
• Crash game session records and slot game activity logs
• Account balance history and net gaming activity summaries

• IP address and approximate geolocation derived from IP
• Browser type and version, operating system, and device type
• Session timestamps — login time, session duration, and logout time
• Cookie identifiers and similar tracking technologies (see Section 6)
• Referring URL and pages visited within the d999 platform

When you contact d999 support via live chat or email, we retain a record of that communication including the content of messages, timestamps, and the resolution outcome. This data is used to improve service quality and to maintain a compliance record where required.

d999 uses the personal data it collects for the following specific purposes:

d999 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or being required to do so by law.

d999 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the agreement between d999 and the player — including account management, deposits, withdrawals, and delivery of gaming services.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, age verification requirements, and licensing conditions imposed by d999's international gaming licence authority.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and responsible gaming monitoring — activities that are in the legitimate interests of both d999 and its player base.
• Consent: Processing for optional marketing communications and non-essential cookies, where d999 relies on your explicit opt-in consent. You may withdraw this consent at any time.

d999 does not sell, rent, or trade personal data. Data is shared with third parties only in the following controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners receive only the minimum data required to execute your transaction.
• KYC & Identity Verification Providers: Third-party identity verification services may process your CNIC and identity documents solely to fulfil KYC requirements under our licensing obligations.
• Game Software Providers: Casino and crash game providers may receive anonymised session data necessary to operate the games you access on d999.
• Analytics & Security Tools: Aggregated and anonymised technical data may be processed by platform analytics and fraud detection services to improve platform performance and security.
• Legal Authorities: d999 may be required to disclose personal data to regulatory authorities, law enforcement, or courts if compelled by a valid legal order under the jurisdiction of our gaming licence.

All third-party service providers engaged by d999 are contractually obligated to process your data only for the specified purpose, to maintain adequate security measures, and to comply with applicable data protection standards. d999 conducts due diligence on all vendors before engagement.

d999 uses cookies and similar tracking technologies to enable core platform functionality, maintain your login session, and understand how players use the platform. Cookies are small text files placed on your device when you visit d999.games.

• Essential Cookies: Required for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language settings and display options. These improve your experience but are not strictly necessary.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — which games are most visited, session durations, and error occurrences. Used to improve platform design.
• Marketing Cookies: Only placed with your explicit consent. Used to show relevant d999 content and promotions if you have opted in to marketing communications.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling essential cookies will prevent you from accessing your d999 account. d999 does not use third-party advertising networks or share cookie data with advertisers.

d999 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• TLS 1.2 or higher encryption for all data transmitted between your browser or device and d999 servers
• AES-256 encryption for sensitive data stored at rest on d999 servers
• Bcrypt hashing for all stored account passwords — d999 staff cannot access your password in plain text
• Multi-factor authentication (MFA) available for player accounts to add an additional layer of login security
• Role-based access controls ensuring that d999 staff can only access player data relevant to their specific job function
• Regular third-party security audits and penetration testing of the d999 platform infrastructure
• Incident response procedures in place to detect, contain, and notify affected players of any confirmed data breach

d999 retains personal data for as long as your account remains active and for a defined period thereafter, as required by our international gaming licence and applicable financial regulations. The following retention periods apply:

Where data is no longer required and no legal obligation exists to retain it, d999 will securely delete or anonymise that data so it can no longer be attributed to you as an individual.

As a d999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact d999 support via live chat or email at [email protected]. d999 will respond to all data rights requests within 30 days.

• Right of Access: You may request a full copy of the personal data d999 holds about you at any time. We will provide this in a structured, readable format.
• Right to Rectification: If any personal data held by d999 is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to d999's legal retention obligations — we cannot delete data that we are required to retain under our licensing conditions.
• Right to Restriction: In certain circumstances, you may request that d999 restrict the processing of your data while a dispute is being resolved.
• Right to Data Portability: You may request that d999 provide your personal data in a structured, machine-readable format so you can transfer it to another service provider.
• Right to Object: You may object to d999 processing your data for marketing purposes or profiling at any time. Your objection will be acted upon immediately.
• Right to Withdraw Consent: Where d999 relies on your consent to process data (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

d999 is strictly prohibited to persons under the age of 21. The platform does not knowingly collect, store, or process any personal data belonging to individuals under 21 years of age. Age verification is a mandatory step during account registration and before withdrawals are processed.

If d999 discovers or has reasonable grounds to believe that a registered account belongs to a person under 21, that account will be immediately suspended. All personal data associated with the underage account will be handled in accordance with Section 8 above, and any deposited funds will be returned to the payment method of origin.

Parents and guardians are encouraged to use parental controls and device-level filtering tools to prevent minors from accessing gambling platforms. If you believe a minor in your household has accessed d999, please contact support via live chat immediately.

As an internationally licensed gaming operator, d999 may process and store personal data on servers located outside of Pakistan. Where data is transferred internationally, d999 ensures that appropriate safeguards are in place to protect your information to a standard equivalent to the protections described in this Privacy Policy.

International transfers are carried out only with service providers who have agreed to d999's data processing standards and who maintain adequate security infrastructure. d999 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing additional contractual safeguards.

d999 may send you promotional communications — including information about new games, bonus offers, PSL betting promotions, and platform updates — but only if you have explicitly opted in to receive such communications at the time of registration or through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by d999
• Adjusting your communication preferences in the account settings panel
• Contacting d999 support via live chat or at [email protected] and requesting removal from all marketing lists

Opting out of marketing communications will not affect your ability to use the d999 platform or receive essential transactional messages such as deposit confirmations, withdrawal notifications, and account security alerts.

d999 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, legal obligations, or data processing practices. The current version of this Privacy Policy is always available at d999.games/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

When material changes are made to this Privacy Policy, d999 will notify active account holders via the platform interface or by email prior to the changes taking effect. Continued use of d999 after notification of changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how d999 has handled your personal information, please contact us through the following channels:

• Live Chat: Available 24/7 inside the d999 platform — the fastest route to our support team for all data-related queries
• Email: [email protected] — for formal data rights requests and privacy complaints

d999 will acknowledge all privacy-related emails within 48 hours and will provide a full written response within 30 days. For formal data rights requests (access, erasure, portability), please include your registered account email address and a brief description of your request to help us process it efficiently.

If you are not satisfied with d999's response to a privacy complaint, you have the right to escalate your concern to the supervisory authority of the jurisdiction under which d999 holds its international gaming licence.