At 999r, we understand that your personal data is sensitive and that you have every right to know how it is collected, stored, used, and protected. This Privacy Policy sets out in plain terms exactly what information we gather when you use the 999r platform, why we need it, who we may share it with, and what rights you hold over your own data at every stage of your 999r journey.
These six commitments summarise how 999r treats your personal information. They complement but do not replace the full policy text below.
999r collects only the personal information that is strictly necessary to operate your account, process payments in PKR, verify your identity, and comply with applicable regulatory obligations. We do not harvest data for its own sake or for purposes unrelated to your gaming experience.
All data transmitted between your device and the 999r platform is protected by 256-bit SSL/TLS encryption — the same standard used by major international banks. Passwords are stored using one-way cryptographic hashing and are never stored or transmitted in plain text under any circumstances.
999r does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data belongs to you. The only disclosures 999r makes to third parties are those required to operate the platform — payment processors, KYC providers — and those required by law.
Every category of data 999r collects is listed in this policy along with the specific reason we collect it. There are no hidden data practices. If 999r's data usage changes in a material way, you will be notified before the change takes effect so you can make an informed decision about your account.
You have the right to access, correct, export, and request deletion of your personal data at any time. These rights are not conditional on maintaining an active account. Former 999r players may exercise their data rights by contacting support at any time, subject to legal retention requirements.
999r retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve any outstanding disputes. Specific retention periods for each data category are detailed in Section 9 of this policy.
This Privacy Policy is issued by 999r ("the Company", "we", "us", "our"), the operator of the online casino and sportsbook platform accessible at https://999r.ws. 999r is operated under an international gaming licence and provides its services to English-speaking Pakistani players aged 21 and above.
For the purposes of data protection, 999r acts as the data controller in respect of all personal information collected through the 999r platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection obligations.
This policy applies to all personal data collected from users who visit https://999r.ws, register a 999r account, use any of our gaming or betting services, contact our support team, or otherwise interact with the 999r platform in any capacity.
This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, all of which together govern your relationship with 999r.
999r collects personal data across several categories. The table below summarises each category, specific data points within it, and whether collection is mandatory or optional for using the platform.
| Category | Data Points Collected | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC / passport number, gender | Yes — for KYC verification |
| Contact Data | Pakistani mobile number, email address, city of residence (e.g., Karachi, Lahore, Islamabad) | Yes — for account and communications |
| Financial Data | JazzCash / EasyPaisa account number, HBL / UBL / Meezan Bank account details (last 4 digits only), transaction history | Yes — for deposits and withdrawals |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Automatic — collected via platform |
| Usage Data | Games played, bet amounts, win/loss records, session duration, pages visited, feature usage patterns | Automatic — collected via platform |
| Communications Data | Live chat transcripts, support email content, SMS verification records | Collected when you contact us |
| Marketing Preferences | Opt-in / opt-out status for SMS and email promotions | Optional — based on your choice |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly necessary for age and identity verification under our KYC obligations.
999r collects personal data through the following channels:
Information you provide directly when you register a 999r account, complete our KYC verification process, make a deposit or withdrawal, contact our customer support team via live chat or email, or respond to a survey or promotion. This includes all identity, contact, and financial data you submit.
When you access and use the 999r platform, our systems automatically collect technical and usage data including your IP address, device identifiers, browser characteristics, session data, and a record of your gaming and betting activity. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 7.
In limited circumstances, 999r may receive personal data about you from trusted third-party sources, including:
In each case, 999r receives only the minimum data necessary for the stated purpose and these providers are bound by contractual data protection obligations.
999r processes your personal data for the following specific purposes:
999r processes personal data only where a valid legal basis exists. The primary legal bases on which 999r relies are as follows:
Where 999r relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. To withdraw marketing consent, contact live chat support or email [email protected].
999r does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating the platform and meeting our legal obligations, we may share your data with the following categories of recipient:
To process your deposits and withdrawals, 999r shares necessary financial and identity data with payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers receive only the data required to execute the transaction and are bound by their own data protection obligations and applicable financial regulations.
To fulfil our licensing obligations, 999r works with specialist identity verification providers who process your CNIC or passport data to confirm your identity and age. These providers operate under strict contractual data protection terms and are not permitted to use your data for any purpose other than verification.
999r may share data with fraud prevention and anti-money laundering screening services as part of our regulatory compliance programme. Screening results may affect your ability to access or continue using 999r services where legal obligations require us to act on those results.
999r will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by a valid legal obligation, court order, or regulatory directive. In such cases, 999r will disclose only the minimum data necessary to comply with the relevant requirement.
999r uses trusted technology partners to host the platform, manage databases, and maintain security infrastructure. These providers act as data processors on 999r's behalf and are contractually prohibited from using your data for any purpose beyond providing the specified service to 999r.
999r does not transfer your personal data to countries that do not maintain adequate data protection standards without first implementing appropriate safeguards such as standard contractual clauses or equivalent protections.
The 999r platform uses cookies and similar tracking technologies to enable core platform functionality, improve performance, and — where you have consented — deliver relevant promotional content. The following categories of cookies are in use:
These cookies are essential for the 999r platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. No consent is required for these cookies as they are operationally essential.
With your consent, 999r uses analytics cookies to understand how players navigate and use the platform. This data is aggregated and anonymised before analysis and is used exclusively to improve platform performance and user experience. It is not used for profiling individual players for marketing purposes.
With your explicit consent, 999r may use preference cookies to remember your gaming preferences and display relevant promotions within the platform. These cookies do not track your activity on external websites. You may withdraw consent for marketing cookies at any time through your account settings.
Most browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will impair the functionality of the 999r platform. Disabling analytics or marketing cookies will not affect your ability to use core 999r services. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.
999r implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:
While 999r takes every reasonable precaution to protect your data, no system can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, 999r will notify affected users promptly in accordance with applicable notification obligations.
999r retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity and KYC Documents | 5 years after account closure | Anti-money laundering regulatory requirement |
| Transaction and Financial Records | 5 years after the transaction date | Financial compliance and audit obligations |
| Account and Gaming History | Duration of account + 2 years | Dispute resolution and responsible gaming monitoring |
| Support Communications | 2 years from last interaction | Quality assurance and dispute resolution |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
| Technical and Usage Logs | 13 months from collection | Security monitoring and platform analytics |
| Self-Exclusion Records | Minimum 6 years | Responsible gaming obligations and re-registration prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate statistical analysis without identifying any individual.
As a 999r user, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team:
Request a copy of all personal data 999r holds about you, including the purposes for which it is being processed.
Request correction of any inaccurate or incomplete personal data we hold about you without undue delay.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that 999r limits the processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
Request your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
Object to processing of your data where 999r relies on legitimate interests as the legal basis, including for direct marketing purposes.
To exercise any of the above rights, contact our support team via live chat or email at [email protected]. 999r will respond to all data rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days and will inform you of the extension and the reason for it.
Exercising your data rights will not affect your ability to use the 999r platform unless the right exercised — such as erasure — is incompatible with continued account operation, in which case 999r will explain the implications before proceeding.
The 999r platform is strictly intended for adults aged 21 years and over. 999r does not knowingly collect personal data from individuals under the age of 21 and does not permit minors to register or use the platform in any capacity.
If 999r becomes aware that personal data has been collected from a person under the age of 21, all such data will be immediately and permanently deleted, and the associated account will be closed. Any deposits made to the account will be returned to the originating payment method after the removal of any bonus credits.
If you are a parent or guardian and you believe your child has registered a 999r account or otherwise provided personal data to us, please contact our support team immediately at [email protected] and we will take prompt action.
21+ Strict Enforcement: 999r applies mandatory age verification at registration and reserves the right to request documentary proof of age at any time. Accounts where age verification cannot be confirmed will be suspended pending submission of acceptable identity documents.
The 999r platform may contain references to third-party payment services including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These services have their own independent privacy policies and data handling practices over which 999r has no control. 999r is not responsible for the privacy practices of third-party payment providers and encourages you to review their respective privacy policies before submitting payment information through those services.
999r's privacy obligations extend only to data processed directly by 999r or by data processors acting on our behalf under contractual data protection terms. Any data you provide directly to a third-party payment service is governed exclusively by that provider's own privacy policy.
999r reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, 999r will notify registered users via SMS to their registered Pakistani mobile number and display a prominent notice on the platform at least seven (7) days before the revised policy takes effect.
The revised policy will be published at https://999r.ws/privacy-policy with an updated effective date. Your continued use of the 999r platform after the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the revised policy, you may request account closure before the effective date.
We recommend bookmarking this page and checking it periodically. The "Last Updated" date at the top of this policy will always reflect the most recent revision date so you can tell at a glance whether the policy has changed since your last review.
If you have any questions, concerns, or requests relating to this Privacy Policy or 999r's data handling practices, our dedicated support team is available 24 hours a day, 7 days a week, in both Urdu and English:
When contacting us regarding a data rights request, please include your registered mobile number, a clear description of your request, and — where relevant — the specific data category or processing activity your request relates to. This will help us locate your records accurately and respond as efficiently as possible.
999r is committed to resolving all privacy-related queries promptly and transparently. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the appropriate regulatory or supervisory authority in the jurisdiction applicable to your situation.
Now that you know exactly how 999r protects your data, join thousands of Pakistani players enjoying cricket betting, slots, and live casino games — all in PKR, with JazzCash and EasyPaisa support.
21+ only. T&C apply. Gambling involves financial risk. Please play responsibly. Operated under an international gaming licence.