Win999 Privacy Policy – How We Protect Your Data in Pakistan

1 Introduction

At Win999, we take privacy seriously. We know that Pakistani players entrust us with sensitive personal and financial information, and we do not take that responsibility lightly. This Privacy Policy explains in clear, straightforward language what personal data we collect, why we collect it, how we use and protect it, and what control you have over it.

We are required to collect certain personal data in order to operate a regulated gaming platform and to comply with our legal obligations around identity verification and anti-money-laundering (AML). Beyond those legal obligations, we collect only what is genuinely necessary to provide you with a good experience on Win999. We do not collect data speculatively or to sell to advertisers. We do not build marketing profiles of our players to sell to third parties.

By registering an account and using Win999, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described below. If you do not consent, please do not register an account or use the platform.

2 What Data We Collect

Win999 collects personal data across several categories. Here is a clear breakdown of what we collect and why each category exists:

We collect the minimum data necessary for each purpose listed above. If we ever need to collect additional categories of personal data, this policy will be updated and you will be notified.

3 How We Collect Your Data

Win999 collects personal data through the following means:

• Registration form. When you create a Win999 account, you provide your name, date of birth, mobile number, and preferred payment details.
• Identity verification. When you submit a CNIC copy or selfie for KYC verification, that document and image is processed by our identity verification system.
• Deposits and withdrawals. Your payment wallet details and transaction records are captured when you make financial transactions on the platform.
• Platform usage. Your in-game activity, betting history, and session data are recorded automatically as part of the service being provided.
• Device and browser data. Technical information including your IP address, device model, and browser type is collected automatically when you connect to Win999.
• Customer support interactions. If you contact our support team via chat or email, the content of those communications is retained for quality and dispute resolution purposes.
• Cookies and similar technologies. Win999 uses cookies and local storage to maintain your session, remember preferences, and measure platform performance. See Section 6 for full details.

4 Why We Use Your Data

Every piece of data that Win999 collects has a specific, documented purpose. We use your personal data for the following reasons:

1. Providing the service. Your identity, contact and payment data are necessary to operate your account, process transactions, and deliver the gaming services you have chosen to use at Win999.
2. Identity verification and KYC compliance. As an online gaming platform, Win999 is required to verify the identity and age of all players. We are legally required to retain identity verification records.
3. Anti-money-laundering (AML) monitoring. Financial transaction data is monitored to detect and prevent money laundering. This is a legal obligation and not discretionary.
4. Fraud prevention and account security. Technical and behavioural data is analysed to detect unusual patterns that may indicate fraud, account compromise, or terms violations.
5. Responsible gaming monitoring. Gaming activity data is used to identify patterns that may indicate problem gambling, enabling us to offer timely support or apply responsible gaming tools.
6. Customer support. Account and communication data is used to assist you when you contact our support team.
7. Platform improvement. Aggregated, anonymised usage data is used to understand how players use Win999 and to improve the platform experience.
8. Legal compliance. Where we are required by law or regulatory authority to disclose specific data, we will do so in accordance with that legal obligation.

Win999 does not use personal data for automated decision-making that has a legal or significant effect on you — for example, we do not use algorithms to determine your creditworthiness or to make permanent account decisions without human review.

5 Who We Share Your Data With

Win999 does not sell personal data to any third party, including advertisers, data brokers, or marketing companies. We share data only with parties who need it to help us deliver the service to you, and only to the extent necessary.

We may share your data with the following categories of third parties:

• Payment processors. Easypaisa, JazzCash, NayaPay, SadaPay, bank networks (IBFT), and Visa/Mastercard networks receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable Pakistani financial regulations.
• Identity verification providers. When you submit KYC documents, they may be processed by a third-party identity verification service that checks your CNIC against official records. This service processes your data only for verification purposes and does not retain it beyond that process.
• Technology infrastructure providers. Cloud hosting, content delivery, and platform infrastructure providers may process data on Win999's behalf. All such providers are bound by data processing agreements that restrict their use of your data.
• Responsible gaming support services. If you request referral to responsible gaming support, limited contact information may be shared with support organisations to facilitate that referral.
• Regulatory and law enforcement authorities. Win999 is obligated by law to cooperate with financial intelligence units, law enforcement agencies, and relevant regulatory bodies when legally required to do so. We will not voluntarily disclose your data to government bodies beyond what is legally required.

6 Cookies & Tracking Technologies

Win999 uses cookies and similar browser storage technologies to make the platform work properly and to improve your experience. Here is a breakdown of the types of cookies we use:

• Essential cookies. These are required for the platform to function. They maintain your login session, keep your account secure, and enable core features like placing bets and processing payments. These cookies cannot be disabled without breaking the service.
• Preference cookies. These remember your language preference, game settings, and other customisations so you don't have to set them every time you visit.
• Analytics cookies. We use anonymised analytics data to understand how players navigate the platform — which pages are visited most, where users drop off, and how performance varies across device types. This data is aggregated and does not identify individual users.
• Security cookies. Short-lived cookies help us detect and prevent fraud by identifying unusual patterns in how the platform is accessed.

Win999 does not use third-party advertising or retargeting cookies. We do not place tracking pixels for external ad networks on our platform. Your browsing behaviour on Win999 is not shared with advertising platforms.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect the platform's ability to function correctly, but disabling analytics or preference cookies will not affect your ability to play games or make transactions.

7 Data Retention

Win999 retains your personal data for as long as your account is active and for a defined period after account closure. Different categories of data are retained for different durations based on legal requirements and operational necessity:

• Identity and KYC documents are retained for a minimum of five years after account closure, as required by anti-money-laundering regulations.
• Financial transaction records are retained for a minimum of five years to comply with applicable financial record-keeping requirements.
• Gaming activity records are retained for three years after account closure for dispute resolution, responsible gaming analysis, and regulatory audit purposes.
• Account data and communication records are retained for two years after account closure or the last interaction, whichever is later.
• Technical and usage data is typically anonymised or deleted within twelve months of collection.

After the applicable retention period, your data is securely deleted or anonymised. Anonymised data that cannot be linked back to any individual may be retained indefinitely for aggregate analysis purposes.

If you request deletion of your account, Win999 will delete all data that we are not legally required to retain. Data that falls under a statutory retention obligation will be held until that obligation expires and then deleted.

8 How We Protect Your Data

Data security is a technical and operational priority at Win999. We implement the following protections for player data:

• 256-bit SSL/TLS encryption on all connections between your device and the Win999 platform. All data in transit is encrypted and cannot be intercepted in readable form.
• Encrypted data storage. Sensitive data including identity documents, payment information, and passwords are stored in encrypted form. Passwords are stored as irreversible hashes — Win999 staff cannot read your password.
• Segregated data systems. Player financial data is stored in systems that are logically and physically separated from general operational systems, reducing the blast radius of any potential breach.
• Access controls. Internal access to player personal data is restricted to staff who have a documented need for it. All internal access is logged and reviewed.
• Regular security audits. Win999 conducts regular security assessments of its platform and infrastructure to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication (2FA). Players can enable 2FA on their Win999 account for additional login security. We strongly encourage all players to activate this feature.

9 Your Rights

As a Win999 player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting our support team at support@win999-app.com. We will respond to all data rights requests within a reasonable timeframe and at no charge to you.

10 Children's Privacy

Win999 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes mandatory age verification, and any account found to belong to a person under 18 is closed immediately with all deposits returned.

If you believe that a minor has created an account at Win999, please contact our support team immediately at support@win999-app.com. We will investigate and take appropriate action without delay.

Parents and guardians are encouraged to use device-level parental controls to restrict minors from accessing online gaming platforms, including Win999. We support these efforts and will cooperate with any parental inquiry received in good faith.

11 Third-Party Links

The Win999 platform does not contain links to third-party websites. Our navigation, buttons, and all links within the platform direct only to pages within win999-app.com itself. We do not embed third-party widgets, social media buttons, or external content frames that could collect your data without your knowledge.

This means that when you are using Win999, you are not being tracked by or sharing data with external platforms through the Win999 interface. The only third-party data flows are the operational ones described in Section 5 above — payment processors, identity verification, and infrastructure providers — all of which are subject to contractual data protection obligations.

12 Changes to This Policy

Win999 will update this Privacy Policy from time to time as our practices change, as technology evolves, or as legal requirements change. When we make material changes — meaning changes that meaningfully affect how your data is used or your rights in relation to it — we will notify you via the contact details registered on your account before those changes take effect.

Minor editorial clarifications and changes that do not affect the substance of how your data is processed may be made without advance notification. The date at the top of this page always reflects when the policy was last revised.

Continued use of Win999 after a notified policy change has taken effect constitutes your acceptance of the updated policy. If you do not accept a material change, you may close your account before it takes effect by contacting support.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the Win999 team directly. We are committed to responding to all privacy-related enquiries promptly.

• Email: support@win999-app.com
• Live Chat: Available 24/7 within your Win999 account

When contacting us about a data rights request, please include your registered mobile number or account username so we can locate your records efficiently. For sensitive requests such as data deletion, we may ask you to confirm your identity before proceeding.

If you believe that Win999 has mishandled your personal data and you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority or consumer protection body in your jurisdiction.

For questions about your account terms, please read our Terms and Conditions. For responsible gaming support, visit our Responsible Gaming page.