999w Privacy Policy

Welcome to the 999w Privacy Policy. This document governs the collection, processing, storage, and use of personal data by 999w ("we", "us", "our") in connection with your use of the 999w online casino and sports betting platform, accessible at 999w.club ("the Platform").

999w takes your privacy seriously. We are fully committed to handling your personal information with transparency, integrity, and care — in accordance with our international gaming licence obligations and applicable data protection standards. This policy is designed to give you a clear and honest picture of our data practices so you can make informed decisions about using our services.

By registering an account with 999w, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy in full. If you do not agree with any part of this policy, you should not use the 999w Platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policy. Together, these documents form the complete framework governing your relationship with 999w.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 999w, the operator of the 999w.club platform. The data controller determines the purposes and means by which your personal data is processed.

As the data controller, 999w is responsible for ensuring that all personal data collected through the Platform is processed lawfully, fairly, and transparently. We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction.

If you have any questions, concerns, or requests relating to the processing of your personal data, please contact our data protection team directly:

999w collects personal data through several channels, including your account registration, use of the Platform, financial transactions, communications with our support team, and your device and browser interactions. The categories of personal data we collect are set out below:

Registration & Identity Data

• Full legal name as it appears on your CNIC or other government-issued identification
• Date of birth (used for mandatory 21+ age verification)
• CNIC number (for KYC identity verification purposes)
• Nationality and country of residence
• Username and encrypted password

Contact Data

• Email address (primary communication channel)
• Pakistani mobile phone number (used for JazzCash/EasyPaisa verification and security alerts)
• Residential address (for address verification during KYC)

Financial & Transaction Data

• JazzCash and EasyPaisa account numbers linked to your profile
• Bank account details (HBL, UBL, Meezan Bank, or other linked accounts)
• Deposit and withdrawal history, including amounts in PKR
• USDT TRC20 wallet addresses where applicable
• Bonus redemption history

Gaming & Behavioural Data

• Betting history across all products (cricket, live casino, slots, esports, bingo, lottery)
• Game session durations, wager sizes, win/loss records
• Responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods)
• Bonus and promotion interactions

Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Platform access timestamps and session logs

Communications Data

• Records of live chat conversations with our support team
• Email correspondence with 999w
• Complaint and dispute records

999w uses the personal data it collects for specific, clearly defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. Our primary uses of personal data are as follows:

999w does not use automated decision-making or profiling in ways that produce significant legal effects on players without human review. Responsible gaming monitoring tools may flag accounts for manual review by our team, but no adverse action is taken solely on the basis of automated processing.

Every instance of personal data processing at 999w is grounded in one or more of the following lawful bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including account management, payment processing, and service delivery.
• Legal obligation: Processing required under our international gaming licence, including KYC verification, anti-money laundering checks, and regulatory reporting to the relevant licensing authority.
• Legitimate interests: Processing carried out to further 999w's legitimate business interests — such as fraud prevention, platform security, and improving the user experience — where those interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for marketing communications and the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

999w does not sell your personal data to third parties. We share personal data only in the specific, limited circumstances described below, and only with parties that provide adequate data protection guarantees:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other payment partners receive only the minimum data necessary to process your transactions.
• KYC and identity verification providers: Third-party identity verification services may receive your CNIC and related documents to assist in completing the verification process under our licence obligations.
• Game content providers: Where third-party game studios supply content to the 999w platform, anonymised session data may be shared for game performance monitoring and compliance purposes.
• Regulatory and licensing authorities: 999w's licensing authority may require access to player data as part of routine compliance audits or specific investigations. We are obligated to comply with such requests.
• Law enforcement and legal proceedings: 999w may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of 999w, our players, or the public.
• Professional advisers: Legal, accounting, and audit firms engaged by 999w may have access to personal data under strict confidentiality obligations in the course of providing professional services.

All third parties with whom 999w shares personal data are contractually required to maintain appropriate data security standards and to use personal data only for the specific purposes for which it was shared.

999w uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain your session, and gather analytical data to improve our services. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable your login session, remember your language preference, and ensure security features work correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how players use the Platform — which pages are visited most, how long sessions last, and where technical errors occur. This data helps us optimise the platform experience for Pakistani players.
• Functional Cookies: Remember your preferences such as display settings and notification preferences, so you do not need to re-set them on each visit.
• Marketing Cookies (Consent Required): Used to deliver relevant promotional content to players who have opted in to marketing communications. These cookies track interaction with bonus offers and promotional banners.

999w does not use any cross-site tracking technologies that share your data with unaffiliated third-party advertising networks.

999w retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements under our licence.
• KYC documents: Retained for a minimum of five years from the date of submission, or longer if required by regulatory obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction for financial audit and regulatory compliance purposes.
• Customer support communications: Retained for two years from the date of the last interaction, unless the communication relates to an active dispute or regulatory matter.
• Technical and device data: Retained for up to 12 months for fraud detection and security purposes, after which it is deleted or fully anonymised.
• Marketing preferences: Retained until you withdraw consent or request deletion, whichever is earlier.

When personal data is no longer required, 999w applies appropriate deletion and anonymisation procedures to ensure that it is securely and irreversibly removed from our systems.

999w implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• TLS/SSL encryption: All data transmitted between your device and the 999w platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at rest: Sensitive personal data including financial information and identity documents is encrypted when stored in our systems.
• Access controls: Personal data is accessible only to authorised 999w personnel on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Two-factor authentication: 999w supports two-factor authentication on player accounts as an additional layer of login security.
• Intrusion detection: Our systems are monitored continuously for suspicious activity, unauthorised access attempts, and potential security threats.
• Regular security audits: 999w conducts periodic security reviews and penetration testing to identify and remediate potential vulnerabilities.

As a data subject, you have the following rights with respect to the personal data that 999w holds about you. These rights may be subject to certain limitations where legal obligations or legitimate interests require us to retain or continue processing your data:

• Right of Access: You may request a copy of the personal data that 999w holds about you, along with information about how it is being processed. We will provide this within 30 days of a valid request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or complete it. Some data corrections may require re-submission of supporting documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right may be limited where retention is required by law.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances — for example, while we verify the accuracy of data you have contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact us at support@999w.club with the subject line "Data Subject Request". We may need to verify your identity before processing your request. We will respond within 30 days; complex requests may require up to 60 days with notification of the extension.

As an internationally licensed online gaming operator, 999w may transfer personal data to, and process it in, countries outside Pakistan. This may occur in connection with our licensing authority, payment processing infrastructure, KYC verification services, and cloud hosting arrangements.

When personal data is transferred internationally, 999w ensures appropriate safeguards are in place, including:

• Transfers to countries with recognised adequate data protection standards
• Standard contractual clauses or equivalent data transfer mechanisms with recipients in other jurisdictions
• Contractual requirements that all international data processors maintain data security standards equivalent to those applied by 999w

999w does not transfer personal data to jurisdictions that do not provide adequate protection without first implementing appropriate safeguards to protect your rights as a data subject.

999w operates a strict minimum age policy of 21 years for all registered players. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21.

Age verification is an integral part of our KYC process. If 999w becomes aware that it has collected personal data from a person under the age of 21, that account will be immediately suspended, all associated data reviewed, and the account closed in accordance with our Terms & Conditions.

999w encourages parents and guardians to use parental control software and to monitor their children's online activity to prevent access to age-restricted gambling platforms.

999w may send you promotional communications about bonuses, new games, PSL cricket betting offers, slot tournaments, and other 999w promotions. We will only send marketing communications where you have opted in to receive them at the time of registration or through your account settings.

Marketing communications may be delivered via:

• Email to your registered email address
• SMS to your registered Pakistani mobile number
• In-platform notifications when you are logged in

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your account settings
• Clicking the unsubscribe link in any marketing email
• Contacting our support team at support@999w.club with the subject line "Unsubscribe"

Opting out of marketing communications will not affect transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are sent regardless of your marketing preferences as they are necessary for the operation of your account.

999w reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the scope of our services. Where changes are material, we will notify registered players by email or via an in-platform notification prior to the changes taking effect.

The current version of this Privacy Policy will always be published on this page with the effective date clearly stated. We encourage you to review this policy periodically to stay informed about how 999w is protecting your personal data.

Your continued use of the 999w Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any update to this policy, you should cease using the Platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 999w, please reach out to our data protection team:

We are committed to resolving all privacy-related queries promptly and fairly. For formal data subject rights requests, please include your full registered name, registered email address, and a clear description of your request to help us process it efficiently.

This Privacy Policy was last updated in January 2026. The version published on this page supersedes all previous versions. 999w is operated under an international gaming licence. All data processing is conducted in accordance with the data protection requirements applicable under that licence.