This Privacy Policy ("Policy") explains how 999win ("we", "us", "our") collects, processes, stores, and protects the personal data of players ("you", "your") who use the 999win platform at 999win-vip.com. It applies to all users of our website and mobile platform and should be read alongside our Terms and Conditions. By registering an account or using our services, you confirm that you have read and understood this Policy.
01 Introduction
Privacy is something many platforms treat as a formality — a long document stuffed in the footer that nobody reads. At 999win, we think differently. We believe Pakistani players deserve to know exactly what happens to their information when they use our platform. Not vague promises — actual specifics about what data we hold, why we hold it, and how long we keep it.
This Policy covers everything: the information we collect when you register, the transaction data generated every time you deposit or withdraw in PKR, the technical data your device sends when you load a game, and the communications we exchange when you contact our support team. Nothing is hidden, and nothing is buried in language designed to confuse.
We have written this Policy in plain, straightforward English because we want it to be genuinely useful — not just something you click "I agree" on without reading. If after going through it you still have questions, our support team is available around the clock and will give you a straight answer.
02 Who We Are
999win is an online gaming and betting platform operated specifically for the Pakistani market. We provide casino games, crash games, fishing games, virtual sports, and other gaming services accessible via our website and mobile interface. Our platform supports Pakistani Rupee (PKR) accounts and integrates with local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard.
For the purposes of this Privacy Policy, 999win is the data controller — meaning we are the entity that determines why and how your personal data is processed. If you have any questions about data processing or wish to exercise any of your rights described in this Policy, you can contact us directly at support@999win-vip.com.
03 What Personal Data We Collect
999win collects only the personal data that is genuinely necessary to provide our services and comply with our legal obligations. We do not collect data speculatively or for purposes we cannot justify. The following table sets out what we collect and why:
| Data Category | Specific Data Points | Why We Need It |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality | Account registration, age verification, KYC compliance |
| Contact Data | Mobile number, email address, mailing address | Account communications, withdrawal notifications, support |
| Financial Data | Payment method type, masked account numbers, transaction history | Processing deposits and withdrawals in PKR, fraud prevention |
| Gaming Data | Game sessions, bet amounts, win/loss records, bonus usage | Account management, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security, fraud detection, platform optimisation |
| Communications Data | Support chat transcripts, email correspondence | Service quality, dispute evidence, compliance records |
04 How We Collect Your Data
Personal data at 999win is collected through a small number of clearly defined channels. There is no covert collection happening anywhere on the platform. Here is exactly how your data comes to us:
Directly From You
The majority of your personal data comes directly from you during the natural use of 999win. When you complete the registration form, you provide identity and contact details. When you make a deposit or withdrawal, you provide payment information. When you contact support, you share whatever information is relevant to your query. You are always in control of what you share in these direct interactions.
Automatically During Platform Use
When you load the 999win website or play games on our platform, certain technical information is automatically recorded by our servers. This includes your IP address, the type of device you're using, your browser version, and timestamps of your sessions. This data is used exclusively for security monitoring, fraud prevention, and technical performance optimisation — never for profiling or targeted advertising.
From Payment Providers
When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, our payment processors confirm the transaction status and provide us with masked payment account references. We do not receive your full bank account credentials — only the information necessary to match transactions to your 999win account.
From Identity Verification Services
When KYC verification is required — typically before first withdrawal — 999win may use a third-party identity verification service to confirm the authenticity of documents you submit. These services return a verification result (pass/fail) and a reference number. Your document images are not stored indefinitely on our main platform systems.
05 Why We Use Your Personal Data
999win uses your personal data for a set of clearly defined purposes. We do not use data for purposes beyond what is listed here, and we review our data usage regularly to ensure it remains proportionate and necessary.
- Account Management: Creating, maintaining, and administering your 999win account, including processing logins, managing your PKR balance, and applying bonuses.
- Transaction Processing: Handling deposits in PKR from your chosen payment method and processing withdrawal requests back to your verified account.
- Identity & Age Verification: Confirming that you are who you say you are and that you meet the 18+ age requirement for gaming on 999win.
- Fraud & Security: Monitoring account activity for signs of fraud, collusion, money laundering, or other prohibited conduct as defined in our Terms and Conditions.
- Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and applying any self-exclusion or limit settings you have activated on your 999win account.
- Legal Compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations applicable to gaming platforms.
- Customer Support: Responding to your queries, resolving complaints, and maintaining records of communications for quality assurance and dispute resolution.
- Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve performance, and enhance the player experience on 999win.
- Marketing Communications: Sending you information about promotions, bonuses, and events at 999win — but only where you have consented to receive such communications. You can withdraw this consent at any time.
06 Legal Basis for Processing
Every data processing activity at 999win has a specific legal justification. We do not process personal data on an ad-hoc basis. The following are the legal grounds under which we operate:
Contractual Necessity
Much of our data processing is necessary to fulfil our contract with you — the agreement you entered when you created your 999win account. Processing your identity details, managing your balance, and handling your transactions all fall under this basis. Without this processing, we simply cannot provide the service.
Legal Obligation
Certain processing is mandated by law — primarily KYC/AML obligations that require us to verify player identities, maintain transaction records, and report suspicious activity to relevant authorities where legally required. This processing is non-negotiable and cannot be opted out of.
Legitimate Interests
We process some data — particularly technical/security data — under our legitimate interest in maintaining platform security, preventing fraud, and ensuring a fair environment for all 999win players. We have conducted balancing tests to confirm that these interests do not override your privacy rights.
Consent
For marketing communications and optional analytics cookies, we rely on your explicit consent. You can withdraw consent for marketing communications at any time by contacting support or updating your account preferences. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.
07 Who We Share Your Data With
999win does not sell your personal data. We do not share it with advertisers or data brokers. The only circumstances under which your data is shared with third parties are those described below, and all such sharing is subject to appropriate data protection agreements.
Payment Service Providers
To process your PKR deposits and withdrawals, we share the minimum necessary information with our payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and card networks). These partners are contractually bound to use your data only for transaction processing purposes and to maintain appropriate security standards.
Identity Verification Providers
When KYC verification is required, document details are passed to our verified identity verification partner. This provider operates under a strict data processing agreement with 999win and does not retain your data beyond what is necessary for the verification process.
Game Software Providers
Game providers whose titles appear on 999win may receive certain gameplay data (such as session IDs and bet records) for the purpose of game operation and dispute resolution. These providers do not receive your identity or financial data.
Legal & Regulatory Authorities
Where 999win is legally required to disclose information — such as in response to a valid court order, a law enforcement request, or a regulatory compliance requirement — we will comply with applicable law. We will notify you of such disclosures where we are legally permitted to do so.
08 How Long We Keep Your Data
999win retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by legal and regulatory obligations. The following retention schedule applies:
- Active Account Data: Retained for the full duration of your 999win account being open, plus a minimum of five years after account closure to meet legal and regulatory requirements.
- Transaction Records: Retained for a minimum of seven years from the date of each transaction to meet financial record-keeping and AML compliance requirements.
- KYC Documents: Retained for the period required by applicable law, typically five years after the end of the business relationship.
- Support Communications: Retained for two years from the date of the last communication in each support thread.
- Technical/Log Data: Retained for 12 months, after which it is aggregated and anonymised or deleted.
- Marketing Consent Records: Retained for as long as you hold an account, and for two years after account closure as evidence of your consent history.
When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to you as an individual.
09 How We Protect Your Data
Data security at 999win is not an afterthought — it is a core part of how the platform is built and operated. We implement a combination of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.
Technical Measures
- 256-bit SSL Encryption: All data transmitted between your device and 999win servers is encrypted using industry-standard TLS/SSL protocols.
- Secure Data Storage: Personal data held on 999win servers is stored in encrypted form, with access restricted to authorised personnel only.
- Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for anomalous activity.
- Secure Payment Integration: Payment data is processed through PCI-DSS compliant payment gateways. 999win never stores full card numbers or CVV codes.
Organisational Measures
- Access to personal data is restricted to 999win staff who genuinely need it for their role, under a strict least-privilege policy.
- All staff with access to personal data receive regular training on data protection obligations and security practices.
- Third-party service providers who process data on our behalf are subject to written data processing agreements and are required to maintain equivalent security standards.
- We conduct regular reviews of our security practices and update them in response to emerging threats.
10 Cookies & Tracking Technologies
999win uses cookies and similar tracking technologies on our website and platform. Cookies are small text files stored on your device that help the platform function correctly and improve your experience. Here is a breakdown of the types of cookies we use:
Strictly Necessary Cookies
These cookies are essential for the 999win platform to function. They manage your login session, maintain your account state across pages, and keep your PKR balance updated in real time. You cannot opt out of these cookies while using 999win — without them, the platform simply does not work.
Authentication Cookies
When you log in to your 999win account, authentication cookies ensure you stay logged in during your session and are the correct account holder making each request. These cookies expire when you log out or close your browser.
Analytics Cookies
With your consent, 999win uses anonymised analytics cookies to understand how players navigate the platform — which pages are visited most, where players encounter friction, and how game loading times can be improved. These cookies do not identify you personally and the data is aggregated before analysis.
Preference Cookies
These cookies remember your platform preferences — such as your last selected game category — to make your return visits more convenient. They are optional and do not affect core platform functionality.
You can manage your cookie preferences through your browser settings or by contacting 999win support. Please note that disabling certain cookies may affect some platform functions.
11 Your Rights Over Your Data
As a 999win player, you have a number of rights regarding the personal data we hold about you. These rights are real and exercisable — they are not just things listed in a policy. To exercise any of them, contact us at support@999win-vip.com and we will respond within a reasonable timeframe.
Right of Access
You have the right to request a copy of all personal data that 999win holds about you. We will provide this in a clear, structured format within a reasonable period of receiving your request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please contact support with the specific details you wish to update.
Right to Erasure
You may request that 999win delete your personal data in certain circumstances — for example, if you close your account and the data is no longer needed. Note that some data must be retained to meet our legal and regulatory obligations even after account closure.
Right to Restrict Processing
In some circumstances you have the right to ask 999win to pause processing of your data — for example, while you contest the accuracy of information we hold. During a restriction period, we will store the data but not use it for other purposes.
Right to Data Portability
Where processing is based on your consent or a contract, you may request a machine-readable copy of your personal data to transfer to another service provider. We will provide this in a commonly used format such as CSV or JSON.
Right to Object
You have the right to object to processing based on legitimate interests, and the right to opt out of marketing communications at any time. Opting out of marketing does not affect your ability to use the 999win platform.
12 Children's Privacy
999win is strictly an adult platform. No person under the age of 18 is permitted to register, use, or access any 999win service. We do not knowingly collect personal data from children. If we discover that an account has been created by or for a person under 18, we will immediately suspend the account, delete the associated personal data, and void any transactions.
If you believe a minor has registered or is using a 999win account, please contact us immediately at support@999win-vip.com. We take this issue very seriously and will investigate promptly. We also encourage parents and guardians to use parental controls and internet filtering tools to prevent underage access to gaming sites.
13 Changes to This Privacy Policy
999win reviews this Privacy Policy regularly and updates it when our data practices change, when legal requirements change, or when we add new services that affect how player data is handled. The "Last Updated" date at the top of this page always reflects the most recent revision.
When we make material changes — changes that significantly affect your rights or how your data is used — we will notify you by email to your registered address and/or via a prominent notice on the 999win platform. We will give you at least 14 days' notice of material changes before they take effect, giving you time to review the updated Policy and decide whether you wish to continue using the platform.
Minor, non-material changes (such as formatting improvements or clarifications that do not change the substance of the Policy) may be made without individual notification, although the "Last Updated" date will always be current. Continued use of 999win after the effective date of any update constitutes acceptance of the revised Policy.
14 Contact Us & Privacy Complaints
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to make a complaint about how 999win has handled your personal data, please get in touch with us. We aim to resolve all privacy queries and complaints promptly and fairly.
Subject line: "Privacy Query" or "Data Rights Request"
Response time: We aim to respond to all privacy-related enquiries within 5 business days.
Support hours: 24/7 in English and Urdu
If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter. 999win takes all privacy complaints seriously and will work with you to reach a resolution. In cases where a complaint cannot be resolved directly, you may have recourse to relevant data protection authorities depending on your jurisdiction.
This Privacy Policy was last updated in January 2025 and supersedes all previous versions of the 999win Privacy Policy.