999cb Privacy Policy

This Privacy Policy applies to all users of the 999cb platform, accessible at 999cb.bet, including all games, betting markets, promotional pages, and account management features offered thereon. It governs the collection, processing, storage, and disclosure of personal data by 999cb in connection with the operation of the platform and the provision of Services to registered players.

999cb is committed to protecting the privacy of all players, with particular regard to our player base across Pakistan, including users in Karachi, Lahore, Islamabad, Faisalabad, and beyond. We recognise that entrusting us with your personal information requires confidence in our data handling practices, and we take that responsibility seriously.

This Privacy Policy should be read alongside the 999cb Terms and Conditions, which together form the complete legal agreement between you and 999cb. Capitalised terms not defined in this Privacy Policy carry the meaning given to them in the Terms and Conditions.

999cb collects personal data from you in several ways: directly when you register and use the platform, automatically as you interact with the platform, and from third-party sources where permitted by law. The categories of personal data we collect include the following:

Registration & Identity Data

• Full legal name as it appears on your national identity document (CNIC)
• Date of birth (for age verification — all players must be 21 or older)
• Gender
• Residential address, including city and province (e.g. Karachi, Lahore, Rawalpindi)
• Email address
• Mobile phone number
• Username and encrypted account password

Identity Verification (KYC) Data

• Copy of CNIC (front and back) or other government-issued photo identification
• Proof of residential address (utility bill, bank statement dated within 3 months)
• Payment method verification documents (e.g. screenshot of JazzCash or EasyPaisa account in your name, or bank statement confirming account ownership)
• Selfie or live photograph for biometric identity confirmation where required

Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method details (masked card numbers, mobile wallet identifiers)
• Transaction history and account balance records
• Bonus and promotional offer redemption history

Gaming & Betting Activity Data

• Game sessions played, bet amounts, wagering history, and win/loss records
• Sports betting selections and live betting activity
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Session timestamps, pages visited, and click-path data within the platform
• Cookie identifiers and similar tracking technology data (see Section 6)

Communications Data

• Records of communications between you and 999cb support, including live chat transcripts, email correspondence, and any complaint submissions
• Responses to surveys or promotional communications where you choose to participate

999cb uses the personal data we collect for the following purposes. Each purpose is linked to a lawful basis for processing, which is detailed in Section 4 of this Privacy Policy.

999cb processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual Necessity: The majority of data processing activities described in this Privacy Policy are necessary for 999cb to perform its obligations under the Terms and Conditions agreement between 999cb and the player. This includes account registration, payment processing, and the delivery of gaming and betting services.
• Legal Obligation: Certain processing activities — including KYC identity verification, AML monitoring, and regulatory reporting — are required for 999cb to comply with the obligations imposed by its international gaming licence and applicable laws. 999cb has no discretion to opt out of these processing activities.
• Legitimate Interests: 999cb processes certain categories of data — including technical data, fraud detection signals, and platform analytics — on the basis of its legitimate interests in operating a secure, compliant, and commercially viable gaming platform, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where 999cb relies on your consent to process personal data — for example, for the sending of optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. Consent withdrawal does not affect your ability to continue using the 999cb platform.

999cb does not sell, rent, or otherwise transfer your personal data to third parties for their own independent commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each specified purpose:

• Payment Processors: We share transaction-related personal data with approved payment service providers — including mobile wallet operators such as JazzCash and EasyPaisa, and card network processors — to facilitate deposits and withdrawals. These providers process your data as independent data controllers in accordance with their own privacy policies and regulatory obligations.
• KYC & Identity Verification Providers: 999cb uses third-party identity verification services to support the KYC process. These providers receive identity and documentation data solely for the purpose of verification and are contractually bound to confidentiality and data security standards.
• Game Content Providers: Third-party game studios and live dealer operators whose content is available on the 999cb platform may receive anonymised or session-level data to facilitate game delivery, RNG certification, and technical support. They do not receive personally identifiable player data for marketing purposes.
• Regulatory & Law Enforcement Authorities: 999cb will disclose personal data to competent regulatory, governmental, or law enforcement authorities where required to do so by law, by court order, or in connection with our gaming licence obligations. Such disclosures are made without prior notice to the player where legally required.
• Fraud Prevention Services: We share relevant account and behavioural data with fraud prevention and AML screening services to detect and prevent financial crime. These services may cross-reference your data against industry-shared fraud databases.
• IT Infrastructure Providers: 999cb uses cloud hosting, content delivery, and data management service providers to operate the platform. These providers process personal data on our behalf under binding data processing agreements and are not permitted to use your data for their own purposes.

The 999cb platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session, to detect fraud, and to gather anonymised analytics about how players use the platform. The following table describes the categories of cookies used by 999cb:

You can manage or disable non-essential cookies at any time through your browser's cookie settings. Please note that disabling certain cookies may affect your ability to use some features of the 999cb platform.

999cb retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as is required by our regulatory and legal obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the lifetime of your 999cb account and for a minimum of five years following permanent account closure, in compliance with gaming licence KYC record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five years from the date of each transaction, in compliance with AML record-keeping obligations.
• Gaming Activity Data: Retained for the lifetime of your account and for a minimum of two years following account closure.
• Support Communications: Retained for up to three years from the date of each communication, or longer where the communication relates to an unresolved complaint or legal claim.
• Marketing Consent Records: Retained for the period during which consent is active, and for one year following consent withdrawal, to maintain evidence of the consent lifecycle.
• Technical and Device Data: Retained for up to 12 months from collection, unless a longer period is required for fraud investigation purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with 999cb's internal data management procedures.

Subject to applicable law and the conditions of our gaming licence, 999cb players have the following rights in relation to their personal data:

• Right of Access: You have the right to request a copy of the personal data 999cb holds about you. We will provide this information within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that changes to KYC-verified data require re-verification.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right does not apply where 999cb is required to retain your data by law or by our gaming licence obligations.
• Right to Restrict Processing: You may request that 999cb restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing on legitimate interests grounds.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where 999cb relies on legitimate interests as its legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by updating your account settings or contacting the 999cb support team.

To exercise any of the above rights, please contact the 999cb support team by email at [email protected] or via the 24/7 live chat available from your account dashboard. We will respond to all data rights requests within a reasonable timeframe and will not charge a fee for standard requests.

999cb implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 999cb platform is encrypted using industry-standard SSL/TLS protocols, ensuring that sensitive information such as login credentials and payment details cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on 999cb's secure servers.
• Access Controls: Access to personal data within 999cb's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with specific operational responsibilities are granted access to player data, and all access is logged and audited.
• Two-Factor Authentication: 999cb offers and encourages the use of two-factor authentication (2FA) for player account login to provide an additional layer of protection against unauthorised account access.
• Regular Security Audits: 999cb's technical infrastructure is subject to regular security assessments and vulnerability testing to identify and remediate potential weaknesses proactively.
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 999cb will notify affected players without undue delay in accordance with applicable notification obligations.

999cb operates under an international gaming licence and may process or store personal data on servers or through service providers located outside of Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that available in Pakistan, 999cb ensures that appropriate safeguards are in place to protect your data.

• Where we transfer personal data to third-party service providers in other countries, we require those providers to be bound by contractual data protection obligations that are substantially equivalent to those applicable to 999cb itself.
• All international data transfers are conducted in compliance with the requirements of our gaming licence and applicable data protection frameworks.
• If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact the 999cb support team.

999cb employs robust age verification procedures as part of the KYC process to confirm that all registered players meet the minimum age requirement of 21 years. These procedures include documentary verification of date of birth during registration and enhanced checks triggered by account activity patterns that may indicate underage use.

If you are a parent or guardian and believe that a minor in your care has registered a 999cb account, please contact our support team immediately at [email protected]. We will investigate and act promptly.

999cb also provides parental control resources and guidance for families concerned about access to online gambling content. We encourage parents and guardians to make use of internet filtering software to restrict access to gambling websites where minors are present in the household.

999cb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or gaming licence requirements. When material changes are made, 999cb will provide advance notice to registered players through one or more of the following channels:

• A prominent notice displayed on the 999cb platform upon login
• An email notification sent to the registered email address on your account
• An in-app notification delivered to your 999cb account dashboard

The "Last Updated" date at the top of this Privacy Policy will always reflect the date on which the most recent version came into effect. Continued use of the 999cb platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you do not agree with any changes to this Privacy Policy, you should cease using the platform and may request closure of your 999cb account in accordance with the account termination provisions in the Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 999cb's personal data handling practices, please contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly from your 999cb account dashboard

999cb aims to respond to all privacy-related enquiries within 48 hours. For data rights requests requiring identity verification, the process may take slightly longer, but we will keep you informed of progress throughout.

For information about responsible gaming tools and resources, including self-exclusion, deposit limits, and support organisations, please visit our dedicated Responsible Gaming page.