v999 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1.1 This Privacy Policy ("Policy") describes how v999 ("v999," "the Platform," "we," "us," "our") collects, processes, stores, shares, and protects the personal data of individuals ("you," "Player," "User") who register for, access, or use any service provided through the v999 platform at v999.site.

1.2 This Policy applies to all v999 services including but not limited to: account registration; identity verification; cricket betting; live casino gaming; slot games; HRG Live; Ocean Lord; deposit and withdrawal transactions; bonus and loyalty programmes; customer support interactions; and platform communications.

1.3 By creating a v999 account or using any v999 service, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use v999 and should close your account.

1.4 This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and v999.

2.1 For the purposes of this Policy, v999 acts as the Data Controller for personal data collected from Players. As Data Controller, v999 determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing is lawful, fair, and transparent.

2.2 v999 operates under an international gaming licence. The specific legal entity acting as Data Controller and the applicable data protection regulatory framework are identified in the licence documentation, which is available to verified account holders upon request via [email protected] or through in-platform live chat.

2.3 Where v999 engages licensed third-party service providers to process data on its behalf — such as payment processors, identity verification services, and analytics providers — those parties act as Data Processors under contractual data processing agreements that bind them to v999's privacy standards and prohibit unauthorised use of your data.

3.1 v999 collects the following categories of personal data from Players, depending on the services accessed:

4.1 Directly from You: The majority of personal data v999 holds is provided directly by you during the account registration process, identity verification submission, payment method setup, customer support interactions, and when you update your account profile.

4.2 Automatically During Platform Use: Technical data is collected automatically when you access and use the v999 platform. This includes your device's IP address, device type, operating system version, browser type, login and logout timestamps, pages accessed, and session duration. This data is collected via server logs and, where cookies are deployed, through cookie-based tracking as described in Section 9.

4.3 From Third-Party Verification Services: Where v999 uses licensed third-party identity verification providers to validate your CNIC or conduct sanctions screening, those providers may return data results to v999 as part of the verification process. v999 does not receive raw data from these providers beyond what is necessary to confirm verification outcomes.

4.4 From Payment Processors: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, or a bank transfer, v999 receives transaction confirmation data from the relevant payment processor. This data is used solely to credit or debit your account balance and maintain transaction records.

5.1 v999 processes personal data only where a lawful basis exists for doing so. The primary lawful bases applicable to v999's data processing activities are:

• Contractual Necessity: Processing required to fulfil the contractual relationship between you and v999 — including account creation, game delivery, payment processing, and customer support. Without this processing, v999 cannot provide its services to you.
• Legal Obligation: Processing required to comply with mandatory legal and regulatory obligations under v999's international gaming licence — including KYC identity verification, anti-money laundering (AML) transaction monitoring, responsible gaming compliance, and regulatory reporting.
• Legitimate Interests: Processing conducted for v999's legitimate operational interests where those interests are not overridden by your fundamental rights. This includes fraud detection and prevention, platform security monitoring, abuse detection, business analytics (in aggregate, anonymised form), and improvement of platform features.
• Consent: Where v999 seeks your consent for a specific processing activity — such as sending promotional communications — that consent constitutes the lawful basis. You may withdraw consent at any time by contacting support or using in-platform preference settings, without affecting the lawfulness of processing based on consent before withdrawal.

6.1 v999 uses the personal data it collects for the following purposes:

• Account Management: Creating and maintaining your v999 account; authenticating your identity at login; resetting credentials; managing account preferences and settings.
• Service Delivery: Processing bets and gaming sessions; crediting winnings to your balance; displaying personalised game history and statistics; enabling access to all platform sections post-login.
• Payment Processing: Processing deposits from and withdrawals to your JazzCash, EasyPaisa, HBL, UBL, Meezan, or USDT accounts; maintaining transaction records; investigating payment discrepancies.
• Identity Verification & KYC: Verifying your identity using CNIC documentation; confirming your age as 21 or above; conducting sanctions and politically exposed persons (PEP) screening as required under our AML obligations.
• Fraud Prevention & Security: Monitoring login patterns for suspicious activity; detecting multi-account behaviour; investigating bonus abuse; identifying and preventing money laundering activity.
• Regulatory Compliance: Maintaining records required by our licensing authority; submitting statutory reports; cooperating with lawful investigations by regulatory bodies or law enforcement agencies.
• Responsible Gaming: Administering deposit limits, session limits, and self-exclusion settings; monitoring gaming behaviour for indicators of problem gambling; contacting Players where responsible gaming concerns are identified.
• Customer Support: Responding to support queries and complaints; maintaining records of support interactions for quality assurance; resolving account and payment disputes.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify usability improvements, performance optimisations, and new feature development priorities.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have consented to receive such communications. See Section 14 for opt-out details.

7.1 v999 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data sharing occurs only in the following defined circumstances:

• Licensed Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive the minimum data necessary to execute your requested transactions. These providers are contractually bound to use your data solely for transaction processing.
• Identity Verification Providers: Licensed KYC and AML service providers receive identity data necessary to conduct verification checks and sanctions screening. These providers operate under strict data processing agreements and regulatory obligations of their own.
• Game Content Providers: Third-party game studios — such as Pragmatic Play, PG Soft, and Jili — may receive pseudonymised session data necessary to deliver game content and record results. These providers do not receive your name, contact details, or financial data.
• Regulatory Authorities & Law Enforcement: v999 will disclose personal data to regulatory authorities, licensing bodies, and law enforcement agencies where required by law, by regulatory mandate, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Professional Advisors: Legal counsel, auditors, and other professional advisors may access personal data where strictly necessary for the provision of professional services to v999, under appropriate confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of v999's business, personal data may be transferred to the acquiring entity. Players will be notified of any such transfer and will have the opportunity to close their account and withdraw funds before the transfer is completed.

8.1 v999 operates under an international gaming licence and may store or process personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions outside Pakistan, v999 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy.

8.2 Safeguards employed for international transfers include: contractual data transfer agreements incorporating standard privacy protection clauses; transfers only to recipients in jurisdictions with adequate data protection frameworks as recognised by v999's licensing authority; and technical security measures applied consistently regardless of storage location.

8.3 By using v999 and accepting this Policy, you consent to the transfer of your personal data to the locations described in this section, subject to the safeguards outlined above.

9.1 v999 uses cookies and similar tracking technologies on its platform. Cookies are small data files placed on your device that enable certain platform functions and help v999 understand how the platform is used.

9.2 v999 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for platform operation — including login session management, security token validation, and load balancing. These cookies cannot be disabled as the platform cannot function without them.
• Functional Cookies: Store your preferences — such as language settings and game lobby view preferences — to improve your experience across sessions.
• Analytics Cookies: Collect anonymised data about how pages are accessed and how features are used, enabling v999 to identify performance issues and improvement opportunities. No personally identifiable information is collected by analytics cookies.
• Security Cookies: Assist in detecting and preventing fraudulent activity, bot access, and suspicious login patterns.

9.3 v999 does not deploy third-party advertising cookies or cross-site tracking technologies. Analytics tools used by v999 are configured to anonymise IP addresses and are not shared with advertising networks.

9.4 You may configure your browser settings to refuse or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use the v999 platform.

10.1 v999 retains personal data for no longer than necessary for the purpose for which it was collected, subject to overriding legal, regulatory, or contractual retention obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of the active account relationship.
• Post-Closure Account Data: Following account closure, identity data, KYC documents, transaction records, and gaming history are retained for a minimum of five (5) years to satisfy AML regulatory requirements and enable resolution of any post-closure disputes.
• Customer Support Records: Support chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Technical / Log Data: Server logs and technical session data are retained for a maximum of twelve (12) months unless a longer retention period is required for an active security investigation.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained for five (5) years from the date of the consent action to demonstrate regulatory compliance.

10.2 At the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

11.1 v999 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your device and v999 servers is protected by TLS/SSL encryption. The v999 platform exclusively uses HTTPS — there is no unsecured HTTP access to any page that handles personal data.
• Encryption at Rest: Personal data and financial transaction records stored on v999 servers are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within v999 is restricted on a need-to-know basis. Staff members access only the data categories required to perform their specific role. Access rights are reviewed and updated whenever roles change.
• OTP Authentication: New-device logins trigger OTP verification via SMS to the Player's registered mobile number, providing a secondary authentication layer that protects accounts even if credentials are compromised.
• Security Monitoring: v999 maintains continuous security monitoring of platform infrastructure to detect and respond to intrusion attempts, unusual access patterns, and potential data breach indicators.
• Incident Response: v999 maintains a documented security incident response procedure. In the event of a data breach, the response team follows a defined escalation and notification process — including notifying affected Players where the breach is likely to result in a high risk to their rights.

11.2 Whilst v999 employs industry-standard security practices, no system is entirely immune from security risks. Players should also take responsibility for securing their own accounts by using strong unique passwords, not sharing credentials, and logging out after sessions on shared devices.

12.1 As a data subject, you hold the following rights in relation to your personal data held by v999. These rights may be subject to limitations where overriding legal obligations — such as AML record-keeping requirements — apply:

12.2 Exercising Your Rights: To exercise any of the rights above, contact v999 support via in-platform live chat or at [email protected]. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days. Complex requests may require an extension of up to a further 60 days, in which case you will be notified of the extended timeframe and the reason for it.

12.3 v999 may request identity verification before processing a rights request to ensure that data is not disclosed to or deleted by an unauthorised party.

13.1 v999 services are strictly restricted to individuals aged 21 and above. v999 does not knowingly collect personal data from persons under the age of 21. Age verification is enforced at the point of account registration and may be reinforced through document-based KYC verification at any stage.

13.2 If v999 becomes aware that personal data has been collected from an individual below the age of 21, the account will be immediately suspended, gaming history will be reviewed, net deposited funds will be returned to the depositing payment method, and all personal data associated with the underage account will be deleted beyond what is necessary to document the incident for regulatory purposes.

13.3 If you believe a person under 21 has registered a v999 account, please contact support immediately via in-platform live chat or at [email protected]. v999 investigates all such reports promptly and treats underage access as a serious compliance matter.

14.1 v999 may send promotional communications — including bonus offers, seasonal promotions, and platform updates — to Players who have provided consent to receive such communications. Consent is collected at registration and may be provided or withdrawn at any time.

14.2 v999 sends marketing communications via SMS to registered Pakistani mobile numbers and via email. All marketing communications include a clear opt-out mechanism. You may also update your marketing preferences at any time through your account settings or by contacting [email protected].

14.3 Opting out of marketing communications does not affect your ability to receive transactional communications — including deposit confirmations, withdrawal notifications, OTP messages, and support responses. These communications are essential to account management and are sent regardless of marketing preferences.

14.4 v999 does not share your contact details with third-party marketing companies. All v999 promotional communications originate from v999 directly.

15.1 v999 reserves the right to amend this Privacy Policy at any time. When material changes are made, v999 will publish the updated Policy on this page with a revised effective date and will notify registered Players via the platform notification system or via SMS/email to their registered contact details.

15.2 Your continued use of v999 following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept changes to this Policy, you should close your account and withdraw any remaining balance before the revised Policy's effective date.

15.3 The version history of this Policy — including prior effective dates and a summary of material changes — is available upon request from the v999 support team.

16.1 For any queries, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by v999, please contact us through the following channels:

• Live Chat: Available 24/7 inside the v999 platform after login. This is the fastest channel for urgent privacy or account access concerns.
• Email: [email protected] — for privacy rights requests, data breach reports, and detailed policy enquiries. Include "Privacy" in your subject line to ensure routing to the appropriate team.

16.2 v999 is committed to resolving privacy concerns directly and promptly. If you raise a concern with us and are not satisfied with our response, you may have the right to lodge a complaint with the data protection supervisory authority applicable under our licensing jurisdiction. Details of the supervisory authority are available upon request.