Win999 Privacy Policy — Your Data, Your Rights, Our Responsibility

1 Introduction — Why Privacy Matters at Win999

When you register a Win999 account, deposit PKR through Easypaisa or JazzCash, place a bet on a PSL match or spin a jackpot slot, you are sharing personal information with us. That's not something we take lightly. Pakistani players have every right to know what information Win999 holds about them, why we hold it, how long we keep it, and who — if anyone — we share it with.

Win999 was built specifically for the Pakistani market, and our approach to privacy reflects the trust Pakistani players place in us. We don't collect data we don't need. We don't hold data longer than necessary. We don't sell your information to third-party advertisers. And we invest in the kind of security infrastructure that protects your data the way a responsible platform should.

This policy is written in plain English rather than dense legalese because we want Win999 players — whether they're in Karachi, Lahore, Islamabad, Peshawar or anywhere else in Pakistan — to actually be able to read it and understand what it says. If anything in here is unclear, our support team is available 24/7 at privacy@win999-win.com and will be happy to explain.

Win999 acts as the data controller for all personal data collected through the Win999 platform. This means Win999 is responsible for deciding how and why your data is processed, and for ensuring that processing is carried out lawfully, fairly and transparently.

2 What Personal Data Win999 Collects

Win999 collects personal data through several channels: directly from you when you register, deposit, bet or contact support; automatically through your use of the Win999 platform; and in certain cases from third-party verification services. Here is a full breakdown of what we collect and when:

Registration Data

When you create a Win999 account we collect: your full legal name, date of birth, Pakistani mobile number, email address, and a password (stored in encrypted form — we never store passwords in plain text). This information is required to create and manage your account.

Identity Verification (KYC) Data

Win999 is required by its operating licence to verify the identity of players, particularly before processing withdrawals above certain thresholds. KYC data may include copies of your Pakistani CNIC (Computerised National Identity Card), proof of address documents, and proof of payment method ownership. Win999 stores KYC documents securely with access restricted to authorised compliance personnel only.

Financial & Transaction Data

Every PKR deposit, withdrawal and wager on Win999 generates transaction records. We store details of all financial transactions including payment method type (e.g., Easypaisa, JazzCash), transaction amounts in PKR, transaction timestamps, and relevant reference numbers. We do not store full Easypaisa or JazzCash account credentials on our servers — payment authentication is handled by the respective payment processors.

Gameplay & Betting Data

Win999 logs all gameplay activity including bets placed, games played, session duration, win/loss records, and bonus activity. This data is used for account management, fraud prevention, regulatory compliance and — with your consent — to personalise your Win999 experience.

Device & Technical Data

When you access Win999 we automatically collect certain technical data including: your IP address, device type, operating system version, browser type and version, screen resolution, and connection type. This data is used for security monitoring, fraud detection, and to optimise the Win999 platform for the devices most commonly used by Pakistani players.

3 How Win999 Uses Your Personal Data

Win999 uses your personal data only for specified, legitimate purposes. We do not use your data for purposes that would surprise you or that you would reasonably object to. The specific purposes for which Win999 processes your personal data are:

• Account Management: Creating, maintaining and managing your Win999 account, processing deposits and withdrawals in PKR, settling bets, applying bonuses, and providing you with access to Win999 products and services.
• Identity Verification & KYC Compliance: Verifying your age and identity as required by Win999's operating licence. This is a legal obligation that Win999 cannot waive.
• Fraud Prevention & Security: Monitoring transactions and gameplay for suspicious patterns, investigating potential fraud, preventing money laundering, and protecting Win999 players from account takeover and other security threats.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of communications for quality assurance.
• Regulatory Compliance: Meeting Win999's obligations under its operating licence, including reporting requirements to regulatory authorities where legally required.
• Responsible Gaming: Monitoring gameplay patterns that may indicate problem gambling behaviour and proactively offering responsible gaming tools to players who may benefit from them.
• Platform Improvement: Using aggregated, anonymised data to understand how Pakistani players use Win999, identify areas for improvement, and develop new features that serve players better.
• Marketing Communications (with consent): Sending Win999 promotional offers, free bet alerts, jackpot news and PSL betting promotions to players who have opted in to receive marketing communications. You can opt out at any time.
• Personalisation (with consent): Customising your Win999 experience based on your betting history and preferences — for example, surfacing cricket markets prominently if that's what you mainly bet on.

4 Legal Basis for Processing

Win999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of Contract: Processing your registration data, financial transaction data, and gameplay data is necessary to provide you with Win999's services as described in the Terms and Conditions. Without processing this data, Win999 cannot fulfil its contractual obligations to you.
• Legal Obligation: Win999 is required by its operating licence and applicable law to carry out KYC identity verification, maintain transaction records, comply with anti-money laundering requirements, and report certain activities to regulatory authorities. Processing for these purposes is mandatory and cannot be refused by the player.
• Legitimate Interests: Win999 has a legitimate interest in preventing fraud, maintaining platform security, monitoring for problem gambling, and improving the Win999 platform. These interests do not override your privacy rights and Win999 only relies on legitimate interests where the processing is proportionate and expected by players.
• Consent: Where Win999 sends marketing communications or uses personalisation based on your data, we do so on the basis of your explicit consent. You can withdraw consent at any time without affecting your Win999 account or the services available to you.

5 Cookies & Tracking Technologies

Win999 uses cookies and similar tracking technologies on its website and platform. Cookies are small data files stored on your device that help Win999 provide a better, more personalised experience. Here is what we use and why:

Essential Cookies

These cookies are strictly necessary for the Win999 platform to function. They maintain your login session so you don't have to re-authenticate with every page load, store your language and regional preferences, and enable core security features. You cannot opt out of essential cookies without disabling your use of Win999.

Analytics Cookies

Win999 uses analytics tools to understand how players navigate the platform — which pages are most visited, where players drop off during registration, and how different features are used. This data is collected in aggregated, anonymised form and is used solely to improve the Win999 experience for Pakistani players. Analytics cookies can be disabled via your browser settings or Win999's cookie preference centre.

Functional Cookies

Functional cookies remember your preferences — for example, your preferred PKR stake amount, your favourite sports markets, and display settings. These cookies are optional and can be disabled without affecting core Win999 functionality.

Marketing Cookies

With your consent, Win999 may use cookies to track which Win999 promotions you have viewed and to avoid showing you the same offer repeatedly. Win999 does not use marketing cookies to track you across third-party websites. Marketing cookies can be disabled in your Win999 cookie preferences at any time.

You can manage your cookie preferences at any time through your browser settings or through the Win999 cookie preference centre accessible from the footer of the Win999 website. Note that disabling non-essential cookies will not affect your ability to bet, deposit or withdraw on Win999.

6 Sharing Your Personal Data

Win999 does not sell your personal data to third parties. Full stop. We share your data only in the specific circumstances described below, and only to the extent necessary for the stated purpose:

Payment Processors

To process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard, Win999 shares the minimum necessary transaction data with the relevant payment processor. Each payment processor operates under their own privacy policy and is independently regulated. Win999 does not receive or store your full mobile wallet or bank account credentials.

Game Providers

Win999's casino games and jackpot slots are provided by third-party software providers including Pragmatic Play, NetEnt, Microgaming and others. These providers receive anonymised game session data necessary to operate their games but do not receive your personal identification data or financial transaction history.

Regulatory & Law Enforcement Authorities

Win999 is required by its operating licence to report certain activities to relevant regulatory authorities. This includes suspicious transaction reports required under Anti-Money Laundering (AML) regulations and responses to lawful requests from law enforcement agencies. Win999 will comply with all such legal obligations and, where permitted by law, will notify the player.

Sports Integrity Organisations

Win999 cooperates with recognised sports integrity organisations to identify and report suspicious betting patterns that may indicate match fixing or insider betting. Relevant betting data may be shared with such organisations where Win999 has reasonable grounds to suspect sports integrity violations. This sharing is anonymised wherever possible.

Fraud Prevention Services

Win999 may share certain data points with fraud prevention and identity verification services to confirm player identity and detect fraudulent activity. These services operate under strict data processing agreements with Win999 and may not use the shared data for any purpose other than the fraud prevention service provided to Win999.

Business Transfers

In the event of a merger, acquisition or sale of Win999's business assets, player data may be transferred to the acquiring entity as part of the transaction. In such cases, Win999 will notify affected players and ensure the acquiring entity commits to honouring this Privacy Policy.

7 Payment Data & PKR Transaction Privacy

Given that the majority of Win999's Pakistani players use Easypaisa and JazzCash for deposits and withdrawals, this section specifically addresses how Win999 handles Pakistani mobile wallet payment data.

When you initiate an Easypaisa or JazzCash deposit on Win999, the payment flow works as follows: Win999 initiates a payment request with your payment amount in PKR; the payment is authenticated directly on the Easypaisa or JazzCash platform using your mobile wallet PIN or biometric authentication; and Win999 receives a confirmation of successful payment from the payment processor. At no point does Win999 receive or store your Easypaisa or JazzCash account PIN, password or full authentication credentials.

Win999 stores a record of each PKR transaction including: the payment method type used, the transaction amount, the date and time, and a transaction reference number. This information is retained for the period specified in Section 8 of this policy and is used for account reconciliation, dispute resolution, and regulatory compliance purposes.

Win999 will never contact you by phone, SMS or WhatsApp asking for your Easypaisa or JazzCash PIN, password, OTP or any other authentication credential. If you receive any such communication claiming to be from Win999, please do not respond and report it to Win999 support immediately — it is a phishing attempt.

8 Data Retention

Win999 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with Win999's legal and regulatory obligations. The specific retention periods that apply to different categories of Win999 player data are:

Following the expiry of the relevant retention period, Win999 securely deletes or anonymises personal data so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained beyond these periods for statistical and analytical purposes.

Where you request deletion of your data before the end of the standard retention period, Win999 will delete all data that is not subject to a legal or regulatory retention obligation. Data that must be retained for legal or regulatory reasons will be held for the minimum required period and then deleted, and will not be used for any purpose other than compliance with the relevant obligation during that period.

9 Security Measures — How Win999 Protects Your Data

Data security at Win999 isn't an afterthought — it's a foundational requirement that informs how the platform is designed and operated. The specific security measures Win999 has implemented to protect player data include:

• Transport Layer Security (TLS/SSL): All data exchanged between your device and Win999's servers is encrypted using 256-bit TLS encryption. This applies to account login, deposit and withdrawal flows, and all other platform interactions. The Win999 website and platform enforce HTTPS at all times — there is no unencrypted HTTP access.
• Data Encryption at Rest: Financial and sensitive personal data stored in Win999's databases is encrypted using AES-256 encryption. This means that even in the unlikely event of a database being accessed without authorisation, stored data cannot be read without the encryption keys.
• Access Controls: Access to Win999 production systems containing player data is restricted to authorised personnel on a strict need-to-know basis. All access is authenticated via multi-factor authentication (MFA) and all access events are logged for audit purposes. Employees who leave Win999 have access revoked immediately upon departure.
• Password Security: Player passwords are stored using industry-standard one-way cryptographic hashing. Win999 never stores passwords in plain text or in reversibly encrypted form. This means that Win999 support agents cannot see your password — they can only reset it.
• Fraud Detection Systems: Win999 operates continuous automated monitoring for suspicious login patterns, unusual transaction sequences, and account access from new devices or locations. Suspicious activity triggers additional verification requirements before allowing account access or withdrawal processing.
• Regular Security Audits: Win999 undergoes regular third-party security assessments including penetration testing of the Win999 platform. Any vulnerabilities identified are addressed according to their severity level and within defined remediation timeframes.
• Data Breach Response: In the event of a data breach that affects player personal data, Win999 has a documented incident response procedure that includes containment, investigation, regulatory notification (where required), and player notification. Win999 will notify affected players as quickly as possible in the event of a breach affecting their personal data.

10 Your Privacy Rights

Win999 recognises and respects your rights over your personal data. The following rights are available to all Win999 players with respect to their personal data held by Win999:

To exercise any of these rights, please contact Win999's privacy team at privacy@win999-win.com with your request. Please include your Win999 player ID to help us locate your records promptly. Win999 will respond to all data rights requests within 30 days. In complex cases, the response period may be extended by a further 60 days, in which case Win999 will notify you of the extension and the reason.

Win999 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive — for example, a very large number of identical requests submitted in a short period. Where a fee is applied, Win999 will notify you before processing the request.

11 Children's Privacy — 18+ Only

Win999 is strictly an 18+ platform. Win999 does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not use Win999 and must not attempt to create an account.

Win999 carries out age verification checks on all new registrations and prior to processing withdrawals. If Win999 discovers that a player is under 18 years of age, the account will be immediately suspended, all gameplay during the minor's period of access will be voided, any deposited funds will be returned to the originating payment method, and the matter may be referred to appropriate authorities.

If you are a parent or guardian and believe a minor in your care has accessed Win999, please contact us immediately at privacy@win999-win.com or support@win999-win.com. We will investigate and take prompt action. Win999 recommends that parents and guardians use parental control software on devices accessible to children to prevent access to online gambling platforms.

12 Marketing Communications

Win999 sends marketing communications — including promotional offers, free bet alerts, PSL betting tips, jackpot slot promotions and platform updates — only to players who have explicitly opted in to receive such communications. Marketing consent is collected during the registration process and can be updated at any time from your Win999 account settings.

Win999 marketing communications are delivered via the following channels, based on your consent preferences:

• Email to the address registered on your Win999 account
• SMS to your registered Pakistani mobile number
• Push notifications through the Win999 platform or app (if installed)
• Personalised offers displayed within the Win999 platform when you are logged in

You can opt out of any or all Win999 marketing communications at any time by: updating your communication preferences in your Win999 account settings; clicking the unsubscribe link in any Win999 marketing email; replying STOP to any Win999 marketing SMS; or contacting Win999 support at privacy@win999-win.com. Opt-out requests are processed within 2 business days. You may continue to receive transactional communications (deposit confirmations, withdrawal notifications, account security alerts) even after opting out of marketing — these are service communications and are not marketing.

13 International Data Transfers

Win999's core platform infrastructure is operated from data centres in jurisdictions that maintain high standards of data protection. Some of Win999's third-party service providers — including game providers and technical infrastructure partners — may process data in jurisdictions outside Pakistan. Where such international transfers occur, Win999 ensures they are subject to appropriate safeguards.

These safeguards include: data processing agreements with all third-party processors that bind them to process data only for the purposes specified by Win999 and to maintain appropriate security standards; transfer mechanisms that comply with the data protection requirements of Win999's operating jurisdiction; and regular review of third-party data processing arrangements to ensure continued compliance.

Win999 does not transfer player data to jurisdictions that Win999 assesses as providing inadequate data protection without implementing additional contractual safeguards. A full list of third-party processors used by Win999 and their processing locations is available on request from privacy@win999-win.com.

14 Third-Party Links

The Win999 platform may contain links to payment processors' authentication interfaces or to game providers' information pages. These third-party sites and services operate under their own privacy policies, which Win999 has no control over. Win999 recommends that you review the privacy policies of any third-party service you interact with through the Win999 platform.

Win999 is not responsible for the privacy practices of third-party sites or services and this Privacy Policy applies only to data collected and processed directly by Win999. If you have concerns about how a third-party service provider handles your data, please contact that provider directly.

15 Changes to This Privacy Policy

Win999 reviews and updates this Privacy Policy periodically to reflect changes in the platform, applicable law, or Win999's data processing practices. The most current version of this Privacy Policy is always available at win999-win.com/privacy-policy. The "last updated" date at the top of this page indicates when the policy was most recently revised.

For material changes to this Privacy Policy — particularly changes that affect your rights or how Win999 uses your personal data in new ways — Win999 will notify registered players via email or on-platform notification at least 14 days before the changes take effect. For minor editorial or clarifying changes, Win999 will update the policy without prior notification but will update the "last updated" date.

Continued use of Win999 after a revised Privacy Policy takes effect constitutes your acknowledgement of the revised policy. If you do not accept the revised policy, you should stop using Win999 and contact support to close your account, following which your data will be handled in accordance with the data retention obligations described in Section 8.

16 Contact Win999 About Privacy

If you have any questions, concerns or requests related to this Privacy Policy or Win999's handling of your personal data, please contact Win999's privacy team through the following channels:

When contacting Win999 about a privacy matter, please include your Win999 player ID and a clear description of your request or concern. This helps Win999's privacy team locate your records promptly and respond effectively. For data subject access requests, Win999 may need to verify your identity before releasing your data — this is to protect you, not to obstruct your request.