w999com Privacy Policy — How Your Data Is Protected

01 Introduction

This Privacy Policy describes how w999com ("w999com", "we", "us", "our") collects, uses, stores, protects and discloses personal data obtained from individuals ("you", "the player", "the user") who access or use the w999com platform at w999com.net, including the w999com Casino, Jackpot Slots, sports betting, cockfighting, mobile wallet services and all related features.

w999com is committed to protecting the privacy and personal data of every player — particularly given that our player base spans Pakistan, where mobile-based financial transactions through Easypaisa, JazzCash and other digital payment platforms form the backbone of day-to-day financial activity. We recognise that trust in our data practices is inseparable from trust in w999com as a platform.

This Privacy Policy must be read alongside the w999com Terms & Conditions. By using the w999com platform or by registering a w999com account, you confirm that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree to this Privacy Policy, you must not use the w999com platform.

02 Personal Data We Collect

w999com collects personal data that is necessary for operating your account, processing PKR transactions, verifying your identity, and complying with legal obligations. The categories of data w999com collects are set out below.

w999com does not collect sensitive personal data beyond what is required for KYC compliance and AML obligations. We do not collect biometric data, health data, or political affiliation information.

03 How w999com Uses Your Personal Data

w999com uses the personal data described in Section 2 for the following specific purposes:

• Account operation: Creating and managing your w999com account, authenticating your login, maintaining your PKR balance and transaction history.
• Payment processing: Processing PKR deposits via Easypaisa, JazzCash, SadaPay, Raast and bank transfer; processing PKR withdrawal requests to your registered payment accounts.
• Identity verification (KYC): Verifying your identity and age (18+) in compliance with applicable anti-money laundering and gaming regulations. This includes verifying CNIC details and matching account registration information against payment method ownership.
• Fraud prevention and security: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, and multi-accounting. Your technical data (IP address, device fingerprint) is used in anomaly detection systems.
• Responsible gaming compliance: Monitoring gaming activity to identify patterns indicative of problem gambling; implementing deposit limits, loss limits and self-exclusion requests; maintaining exclusion records.
• Customer support: Responding to your support queries, complaints and account management requests. Support communications are retained to provide continuity of service.
• Legal and regulatory compliance: Meeting AML record-keeping obligations, responding to lawful requests from regulatory or law enforcement authorities, and defending legal claims.
• Platform improvement: Using aggregated, anonymised analytics data to improve the w999com platform, game selection, and user experience for Pakistan players. No individual player is identifiable from these analytics.
• Marketing communications (opted-in only): Sending promotional offers, bonus notifications and w999com news to players who have opted in to receive such communications. You can opt out at any time via account settings or by contacting w999com support.

04 Legal Basis for Processing

w999com processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and w999com — specifically, to operate your account, process PKR payments and provide access to gaming services.
• Legal obligation: Processing is required to comply with applicable legal obligations, including AML record-keeping requirements, KYC verification obligations, and responses to lawful authority requests.
• Legitimate interests: Processing is necessary for w999com's legitimate business interests — including fraud prevention, security monitoring and platform improvement — where these interests are not overridden by your privacy rights.
• Consent: Where w999com processes data based on your consent — for example, marketing communications — you may withdraw that consent at any time without affecting the legality of processing carried out before withdrawal.

05 Data Storage & Security

w999com stores all player personal data under AES-256 encryption at rest. All data in transit between your device and w999com's servers is encrypted using TLS 1.3. w999com's infrastructure implements industry-standard security controls including:

• Access control — only authorised w999com personnel with a legitimate operational need can access player personal data
• Audit logging — all access to personal data is logged and audited
• Intrusion detection — real-time monitoring of network and application layers for anomalous access patterns
• Penetration testing — regular independent security assessments of w999com infrastructure
• Secure credential storage — passwords are never stored in plain text; only cryptographic hashes are retained

In the event of a personal data breach that poses a risk to your rights, w999com will notify affected players via their registered Pakistan mobile number or email address as soon as reasonably practicable, and in any event within the timeframe required by applicable data protection obligations.

06 Data Sharing & Third Parties

w999com does not sell, lease, or trade your personal data to third parties for commercial, marketing or advertising purposes. Full stop. Your PKR transaction history, gaming activity, CNIC details and contact information are not shared with data brokers, advertising networks or any entity for commercial exploitation.

w999com may share your personal data with the following categories of trusted service providers, strictly on a need-to-know basis and under appropriate data processing agreements:

• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, and banking partners (HBL, UBL, MCB) — to process PKR deposits and withdrawals from your w999com account.
• KYC and identity verification providers: Third-party identity verification services that assist w999com in verifying CNIC, passport or other identity documents as required by KYC obligations.
• Game technology providers: Licensed casino game studios whose products are integrated into the w999com Casino lobby — only the minimum session data required for game functionality is shared.
• Fraud prevention and security vendors: Specialist services that assist in detecting multi-accounting, payment fraud and bonus abuse. Data shared is pseudonymised where possible.
• Legal and regulatory authorities: Regulatory bodies, law enforcement agencies and courts where disclosure is required by applicable law or pursuant to a valid legal order.

All third parties who process personal data on behalf of w999com are bound by data processing agreements that impose confidentiality, security and purpose-limitation obligations consistent with this Privacy Policy.

07 Cookies & Tracking Technologies

w999com uses cookies and similar tracking technologies on the w999com website to provide a functional and optimised experience. The categories of cookies used by w999com are:

• Essential cookies: Required for the w999com platform to function — including session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without affecting core platform functionality.
• Functional cookies: Remember your preferences — such as language settings, responsible gaming limit displays and notification configurations — across sessions.
• Analytics cookies: Collect anonymised, aggregated data about how Pakistan players use the w999com platform — which games are most popular, where navigation friction occurs, and how deposit journeys perform. No individual player is identifiable from analytics data.
• Security cookies: Support w999com's fraud detection and anomaly monitoring systems by maintaining a consistent device and session profile across your w999com interactions.

w999com does not use third-party advertising cookies or retargeting pixels that track your browsing activity outside of the w999com platform. You can manage cookie preferences through your browser settings. Disabling essential cookies will impair the functionality of your w999com account.

08 Payment Data & PKR Transactions

w999com treats payment data — including your Easypaisa account number, JazzCash mobile wallet identifier, SadaPay details, Raast ID, and bank account numbers for HBL, UBL or MCB transfers — as particularly sensitive personal data requiring heightened protection.

Payment credentials are never stored in plain text at w999com. Only tokenised or pseudonymised identifiers necessary for PKR transaction processing and withdrawal verification are retained. Full card numbers are never stored by w999com; card transactions are processed through PCI-DSS compliant payment gateway providers.

w999com uses payment data exclusively for: processing your PKR deposits and withdrawals; verifying that payment methods used are registered to the account holder's own identity (consistent with our anti-money laundering obligations); and detecting fraudulent or unauthorised transactions. Payment data is never shared with third parties for marketing or any non-operational purpose.

09 Data Retention

w999com retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active accounts: Personal data associated with an active w999com account is retained for the lifetime of the account plus the applicable legal retention period post-closure.
• Closed accounts: Following account closure, w999com retains identity, financial transaction and gaming activity data for a minimum of five (5) years to satisfy AML record-keeping requirements. After this period, data is securely deleted or anonymised.
• Support communications: Live chat logs and support email threads are retained for two (2) years from the date of the last interaction to provide service continuity and for dispute resolution purposes.
• Self-excluded players: Where a player has requested self-exclusion from w999com, their exclusion record is retained for the full duration of the exclusion period plus five (5) years, to prevent inadvertent re-registration during the exclusion period.
• Technical and analytics data: Anonymised analytics data is retained indefinitely as it no longer constitutes personal data. Individual-level technical data (IP logs, session records) is retained for twelve (12) months.

When data reaches the end of its retention period, w999com will securely delete it from all systems using industry-standard data destruction methods. Backups containing expired data are purged on the next scheduled backup rotation cycle.

10 Exercising Your Data Rights

You may exercise any of the personal data rights described in this Privacy Policy by contacting w999com support via live chat (available 24/7 from within your w999com account) or by email to [email protected] with the subject line "Data Rights Request — [your w999com username]".

w999com will:

• Acknowledge your request within 48 hours of receipt.
• Provide a substantive response — including confirmation of action taken or reasons why the request cannot be fulfilled — within 30 calendar days.
• Not charge a fee for responding to data rights requests, except where requests are manifestly unfounded or excessive in volume.

w999com may need to verify your identity before processing a data rights request — for example, by asking you to confirm details associated with your account or provide a copy of your CNIC. This is to protect against fraudulent data access requests from third parties claiming to act on a player's behalf.

Where a data erasure request is received, w999com will delete personal data that is not subject to a legal retention obligation. Where retention obligations prevent full deletion, w999com will suppress the data from active processing and explain the basis for retention.

11 Children's Privacy

The w999com platform is intended exclusively for individuals aged 18 years and over. w999com does not knowingly collect, store or process personal data from any individual under the age of 18.

If w999com discovers that personal data has been collected from an individual under 18 — for example, as a result of a false age declaration at registration — the account will be immediately suspended, all associated personal data will be securely deleted, and any PKR balance deposited may be returned to the payment source following identity verification.

If you are a parent or guardian and believe your child has registered a w999com account, please contact w999com support immediately via live chat or at [email protected]. w999com will take immediate action to investigate and close any account found to belong to a minor.

12 Updates to This Privacy Policy

w999com reserves the right to update, amend or replace this Privacy Policy at any time. Updated versions will be published at w999com.net/privacy-policy and will take effect immediately upon publication unless a specific future effective date is stated.

Where material changes are made to this Privacy Policy — for example, changes to the categories of data collected, changes to data sharing arrangements, or changes to retention periods — w999com will notify registered players via their registered Pakistan mobile number (SMS) or email address at least seven (7) days prior to the change taking effect, where reasonably practicable.

Continued use of the w999com platform after the effective date of any Privacy Policy update constitutes your acceptance of the updated policy. If you do not accept an update, you must cease using w999com and may request account closure and data deletion as described in Section 10.

13 Contact & Complaints

For any questions, concerns or complaints regarding this Privacy Policy or w999com's handling of your personal data, please contact w999com's support team:

• Live Chat: Available 24/7 from within your w999com account (fastest response — typically under 5 minutes)
• Email: [email protected] — use the subject line "Privacy Enquiry" or "Privacy Complaint" for priority routing
• Response commitment: All privacy enquiries acknowledged within 48 hours; substantive response within 30 calendar days

If you are not satisfied with w999com's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. w999com will co-operate fully with any such regulatory investigation.

For responsible gaming concerns — including immediate self-exclusion — contact w999com support via live chat at any hour. The w999com Responsible Gaming page provides additional tools, guidance and support resources for Pakistan players. The Frequently Asked Questions page addresses common privacy-related questions in plain English.