PP999 Privacy Policy – How We Protect Your Data in Pakistan

PP999 (referred to as "pp999", "we", "us" or "our" throughout this policy) operates the online betting and gaming platform accessible at pp999.link. We are committed to protecting the personal data of every player who uses our platform and to being fully transparent about how that data is handled.

This Privacy Policy explains what personal data pp999 collects from players and visitors, the purposes for which we use it, the circumstances under which we may share it with third parties, and the rights you hold as a data subject. It applies to all data processing activities connected to the pp999 platform — including account registration, deposits and withdrawals, sports and casino betting, customer support interactions, and promotional communications.

By registering an account on pp999 or by continuing to use the platform after this policy has been brought to your attention, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside pp999's Terms and Conditions, which govern your use of the platform as a whole.

If you have any questions about how pp999 handles your personal data, you can reach our data team at any time by emailing support@pp999.link with the subject line "Privacy Enquiry".

PP999 collects only the personal data that is necessary to operate the platform, comply with regulatory obligations, and provide you with a safe and enjoyable experience. We do not collect data for the sake of it. Below is a breakdown of the categories of data we hold.

PP999 does not collect sensitive data such as religious beliefs, political opinions, health data or biometric data. The only exception is where identity verification requires a photograph of your CNIC or face for age and identity confirmation — this data is processed securely and is not used for any other purpose.

PP999 collects personal data through the following channels:

• Directly from you: When you register an account, complete a KYC verification request, make a deposit or withdrawal, place a bet, play a casino game, contact our support team, or respond to a promotional offer.
• Automatically: When you access the pp999 platform, certain technical and usage data is collected automatically through cookies, server logs and analytics tools. This includes your IP address, device information and behavioural data about how you use the site.
• From payment processors: When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, pp999 receives a confirmation reference and basic transaction details from the payment provider. We never receive your full bank PIN, wallet password or card CVV.
• From identity verification partners: During KYC, pp999 may use a third-party identity verification service to cross-check the details you provide. These services are bound by strict data protection agreements with pp999.
• From fraud prevention services: PP999 uses third-party fraud detection tools that may process technical data about your device and session to flag suspicious activity. This data is used solely for security purposes.

PP999 uses personal data for the following specific purposes. We process only the minimum data necessary for each purpose.

• Operating your account: To create and maintain your pp999 account, verify your identity, process deposits and withdrawals in PKR, settle bets and game sessions, and provide customer support.
• Regulatory compliance (AML/KYC): To meet our obligations under anti-money laundering regulations, which require us to verify player identities and monitor transaction patterns for suspicious activity. This is a legal requirement — pp999 cannot operate without it.
• Platform security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, money laundering and other fraudulent activities that could harm pp999 or other players.
• Improving the platform: To analyse how players use pp999, identify technical problems, test new features, and optimise the overall experience. This analysis is typically done on aggregated or anonymised data wherever possible.
• Responsible gaming: To monitor account activity for patterns that may indicate problem gambling, and to implement responsible gaming tools (deposit limits, session timers, self-exclusion) when requested.
• Marketing communications (where consented): To send promotional emails, SMS messages or in-platform notifications about pp999 bonuses, new games or special offers — only if you have explicitly opted in to receive them.
• Legal obligations: To respond to lawful requests from regulatory or law enforcement authorities, or to enforce pp999's Terms and Conditions.

PP999 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contract with you — most account operations, payment processing, bet settlement and customer support fall under this basis.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements, licensing conditions and responses to lawful authority requests.
• Legitimate interests: Processing carried out for pp999's legitimate business interests, including fraud prevention, platform security, improving the user experience, and responsible gaming monitoring — provided those interests do not override your rights and freedoms.
• Consent: Processing based on your explicit opt-in, most commonly for promotional marketing communications. You can withdraw consent at any time by updating your marketing preferences in account settings or by contacting support.

PP999 does not sell your personal data to third parties, full stop. However, to operate the platform we do need to share certain data with trusted partners and service providers. All third parties who receive data from pp999 are bound by contractual data protection obligations.

The categories of third parties with whom pp999 may share your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card payment gateways — to process your deposits and withdrawals. These providers receive only the transaction data necessary to execute the payment.
• Identity verification (KYC) providers: Third-party services used to verify the authenticity of identity documents you provide during KYC. These providers are prohibited from using your data for any purpose other than the specific verification task.
• Fraud prevention and security vendors: Services that help pp999 detect account abuse, multi-accounting and suspicious transactions. They receive technical and transactional data for the sole purpose of fraud analysis.
• Game and casino content providers: The developers and operators of individual casino games and slots on pp999 may receive limited gaming session data to facilitate game functionality and audit trails. They do not receive your payment or identity data.
• Customer support tools: Software used to manage live chat, email support and ticketing systems. These tools store communication records to enable efficient support.
• Regulatory and law enforcement authorities: PP999 may be legally required to share data with relevant authorities in response to a lawful order or as part of our regulatory reporting obligations.

Given that the majority of pp999's player base in Pakistan uses mobile wallet services like Easypaisa and JazzCash, payment data security deserves specific attention. Here is exactly how pp999 handles your financial information.

When you make a deposit via Easypaisa or JazzCash, the transaction is processed directly through that provider's secure API. PP999 receives a confirmation token and transaction reference number. We do not at any point receive, store or have access to your mobile wallet PIN, password or OTP.

For IBFT bank transfers, pp999 receives the standard bank transaction reference and sender account details required to match the transfer to your account. Your full account number is not stored in a readable format after the matching process is complete.

For Visa and Mastercard card transactions, payments are processed through a PCI-DSS compliant payment gateway. PP999 never sees or stores your full card number or CVV. The gateway returns only a tokenised reference that pp999 uses to identify the payment method for future transactions if you have enabled saved cards.

All financial data transmitted between your browser or device and the pp999 platform is encrypted using TLS 1.3 (256-bit AES encryption). This is the same standard used by major banks in Pakistan. Your data cannot be intercepted in transit.

PP999 uses cookies and similar tracking technologies on the platform. A cookie is a small file stored on your device that helps the site remember information about your session and preferences. Here is what pp999 uses and why.

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preferences, and ensure the bet slip operates correctly. You cannot opt out of essential cookies without disabling the platform.
• Analytics cookies: PP999 uses privacy-respecting analytics tools to understand how players navigate the platform — which pages are popular, where players drop off, and how long sessions last. This data is aggregated and is not linked to individual identities.
• Functional cookies: These remember preferences you have set — such as which sports market you prefer to see by default or your preferred deposit method — to make your experience more convenient.
• Security cookies: Used by fraud prevention tools to identify suspicious device behaviour patterns. These are classified as essential for platform security.

PP999 does not use advertising cookies or third-party tracking pixels from social media or ad networks. You can manage cookie preferences through your browser settings. Note that disabling functional or analytics cookies does not affect your ability to use the core betting and gaming features of pp999.

PP999 retains personal data only for as long as it is needed for the purposes described in this policy, or for as long as required by applicable laws and regulations.

• Account data and transaction records: Retained for a minimum of 5 years from the date of your last transaction, as required by anti-money laundering regulations. This includes your identity documents, transaction history and KYC records.
• Betting and gaming history: Retained for a minimum of 3 years for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for 2 years from the date of the interaction, or longer if the matter is subject to an unresolved dispute.
• Marketing preference records: Retained for the duration of your account, or until you update your preferences. A record of your opt-out is retained indefinitely to ensure we do not inadvertently re-enrol you.
• Closed accounts: When an account is closed voluntarily, pp999 retains the minimum data required to meet legal obligations for the periods stated above. Non-essential data is deleted within 90 days of account closure.

When personal data is no longer required, pp999 securely destroys it — physical documents by shredding and digital data by cryptographic erasure or secure deletion from all storage systems.

As a player using the pp999 platform, you hold the following rights over your personal data. To exercise any of these rights, email support@pp999.link with the subject line "Data Rights Request" and include your registered mobile number so we can verify your identity.

PP999 will respond to all data rights requests within 30 days. If a request is complex or voluminous, we will notify you of a reasonable extension. We will never charge a fee for handling a data rights request unless a request is clearly unfounded or repetitive.

PP999 does not knowingly collect or process personal data from any person under the age of 18. The platform is strictly for adults and every registration requires confirmation that the user is 18 or older.

If pp999 discovers that personal data has been collected from someone under 18, we will immediately close the relevant account, delete the data (subject to any legal obligations), return any real-money deposits, and take appropriate steps to prevent a recurrence.

Parents and guardians who believe a minor may have accessed or registered on pp999 should contact us immediately at support@pp999.link. We treat these reports with the highest priority and will investigate and respond within 24 hours.

PP999 sends promotional communications — including bonus offers, new game alerts, tournament invitations and cashback reminders — only to players who have explicitly opted in to receive them. Opt-in is managed through your account settings and during the registration process.

If you have opted in, we may contact you via:

• Email to your registered email address
• SMS to your registered Pakistani mobile number
• In-platform notifications when you are logged in

You can opt out of any or all marketing channels at any time by updating your notification preferences in account settings, by clicking the unsubscribe link at the bottom of any pp999 marketing email, or by contacting support at support@pp999.link. Opt-outs are processed immediately — you will not receive further marketing communications after opting out, though transactional messages about your account (withdrawal confirmations, security alerts, etc.) will continue regardless of your marketing preference.

PP999 does not share your contact details with third-party marketing companies. Any bonus or offer communicated to you comes directly from pp999.

PP999 implements a multi-layered approach to data security. No online platform can guarantee absolute security, but here is what pp999 does to protect your data:

• Transport Layer Security (TLS 1.3): All data exchanged between your browser or mobile device and pp999's servers is encrypted in transit using TLS 1.3 with 256-bit AES encryption — the same standard used by major financial institutions.
• Password hashing: Account passwords are never stored in plain text. PP999 uses bcrypt hashing with a per-user salt so that even if the database were ever compromised, individual passwords could not be extracted.
• Two-factor authentication (2FA): PP999 offers optional 2FA for account logins via OTP sent to your registered mobile number. We strongly recommend enabling this in your account security settings.
• Regular security audits: PP999's technical infrastructure is reviewed by independent security professionals on a regular basis, including penetration testing of the web platform and API endpoints.
• Data minimisation: PP999's internal systems are configured to expose only the minimum data necessary to each employee role. Customer support agents, for example, cannot see your full CNIC number or payment credentials.
• Incident response: PP999 maintains a documented data breach response plan. In the event of a security incident affecting personal data, we will notify affected players and relevant authorities within 72 hours of becoming aware of the breach.

PP999 may update this Privacy Policy from time to time to reflect changes in how we operate, in applicable regulations, or in response to feedback from players. The "Last Updated" date at the top of this page reflects the date of the most recent change.

When we make a material change — one that meaningfully affects your rights or how we use your data — we will notify all registered players via email and/or an in-platform notification at least 14 days before the change takes effect. Minor clarifications or corrections may be made without advance notice.

The most current version of this Privacy Policy is always available at pp999.link/privacy-policy. Continued use of the platform after a notified change takes effect constitutes acceptance of the updated policy. If you do not agree with a change, you may request account closure before the effective date.

If you have any questions about this Privacy Policy, want to exercise your data rights, or want to raise a concern about how pp999 handles your personal data, please get in touch through one of the following channels:

• Email (recommended for data requests): support@pp999.link — use the subject line "Privacy Enquiry" or "Data Rights Request" and include your registered mobile number for faster verification.
• Live Chat: Available 24/7 on the pp999 platform. Live chat is ideal for quick questions — for formal data requests, email is more appropriate.

PP999 acknowledges all privacy-related enquiries within 24 hours and responds substantively within 30 days. Complex requests — such as large-scale data access requests or erasure requests touching on multiple data categories — may take up to 60 days, in which case we will keep you informed of progress throughout.

We take privacy complaints seriously and will always try to resolve them directly. If you feel that pp999 has not adequately addressed a privacy concern, you have the right to raise the matter with the relevant data protection authority in your jurisdiction.