Data & Privacy

999x Privacy Policy – How We Handle Your Personal Data

At 999x, we take privacy as seriously as we take cricket. This policy explains exactly what data we collect, why we collect it, how long we keep it, and what control you have over it. No buried paragraphs, no confusing jargon — just plain English for Pakistani players who deserve straight answers.

Last Updated: January 2024 Language: English (en-PK) Jurisdiction: Pakistan
999x Privacy Commitments
  • We never sell your personal data to third parties
  • Your payment details are encrypted end-to-end
  • You can request deletion of your account data
  • Marketing emails have a one-click unsubscribe
  • We only collect what we actually need to operate
  • Your CNIC data is stored encrypted and access-controlled
What This Policy Covers

Six Privacy Areas Explained Clearly

A quick map of the major areas this Privacy Policy addresses — so you know exactly where to look for specific information about how 999x handles your data.

Data We Collect

The specific categories of personal data 999x collects at registration, during deposit and withdrawal, through gameplay, and when you contact customer support — including what is optional and what is required to operate your account.

How We Use Your Data

The lawful purposes for which 999x processes your personal information — from operating your account and processing payments to verifying your age and sending you promotions you have opted into.

Who Sees Your Data

Which third parties 999x shares data with — such as payment processors and age verification providers — what they are contractually restricted from doing with it, and the cases where we are legally required to share it.

How We Protect It

The technical and organisational security measures 999x uses to protect your personal and financial data — including encryption standards, access controls, and our incident response process.

Data Retention

How long 999x keeps different types of data, what triggers deletion, and why some data must be retained for a minimum period regardless of account closure — for example transaction records required by financial regulations.

Your Rights

The rights you have over your personal data on 999x — including the right to access, correct, delete, and export your data, how to exercise these rights, and the timeframes within which we will respond to your request.


999x

This Privacy Policy ("Policy") explains how 999x ("we," "us," "the Platform") collects, uses, stores, and protects personal data belonging to users ("you," "the Player") of the 999x website and associated mobile platform. By creating a 999x account or continuing to use the platform, you acknowledge that you have read and understood this Policy. This Policy forms part of our wider Terms and Conditions.

1.About This Policy

999x is committed to protecting the privacy of everyone who uses our platform. This Policy applies to all data collected through the 999x website, mobile applications, customer support interactions, and any other point at which you provide personal information to us. It does not apply to third-party websites or services that may be linked from our platform — those have their own privacy policies and we are not responsible for their practices.

We review and update this Policy regularly to reflect changes in our data practices, applicable regulations, or the services we offer. When material changes are made, we will notify registered 999x players by email and via an in-app notification before the changes take effect. The most current version is always published on this page with the effective date clearly shown at the top.

Plain English: This policy covers all the ways 999x handles your data across the whole platform. We keep it updated and tell you when something important changes.

2.Data We Collect

999x collects personal data through several channels: when you register an account, when you deposit or withdraw funds, when you contact customer support, and automatically as you use the platform. Here is a clear breakdown of what we collect and why.

Data Category Examples When Collected Required?
Identity Data Full name, date of birth, CNIC number Registration / KYC verification Yes
Contact Data Mobile number, email address Registration Yes
Financial Data Easypaisa/JazzCash account reference, bank account IBAN, card last four digits Deposit / Withdrawal Yes
Transaction Data Deposit amounts, withdrawal amounts, bet history, win/loss records Ongoing platform use Yes
Technical Data IP address, device type, browser, operating system, session timestamps Each login / session Yes
Usage Data Pages visited, markets viewed, features used, click patterns Ongoing platform use Optional
Support Data Live chat transcripts, email correspondence, call recordings Customer support interactions Optional
Marketing Preferences Communication opt-in/out status, preferred promotion types Registration / Account settings Optional

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by regulation and with your explicit consent. 999x does not store full card numbers — only a tokenised reference provided by our payment processor is retained on our systems.

3.How We Use Your Data

999x uses personal data only for specific, legitimate purposes. We do not use your data in ways you would not reasonably expect given the nature of an online betting platform. The main purposes for which 999x processes personal data are:

  • Account management: Creating, maintaining, and securing your 999x account, including password resets and account recovery
  • Age and identity verification: Confirming that you meet the minimum age requirement of 18 years and that your identity matches the account information provided
  • Payment processing: Processing deposits and withdrawals via your chosen payment method, reconciling transactions, and investigating payment disputes
  • Regulatory compliance: Meeting anti-money laundering (AML) and know-your-customer (KYC) obligations, including transaction monitoring and suspicious activity reporting
  • Fraud prevention: Detecting and preventing account fraud, bonus abuse, multiple account creation, and other prohibited conduct outlined in our Terms
  • Responsible gaming: Monitoring player behaviour to identify signs of problem gambling and providing tools and support where appropriate
  • Customer support: Responding to your queries, resolving complaints, and improving our support quality through transcript review
  • Platform improvement: Analysing usage patterns and feedback to improve the 999x platform, fix bugs, and develop new features
  • Marketing (with consent): Sending promotional emails, SMS notifications, and in-app messages about 999x offers and new products — only where you have opted in
999x

4.Legal Basis for Processing

Every time 999x processes your personal data, there is a lawful basis for doing so. We rely on the following legal grounds depending on the purpose of processing:

  • Contract performance: Processing your identity, payment, and transaction data is necessary to fulfil our contractual obligations to you — specifically, operating your account and processing your bets and withdrawals
  • Legal obligation: AML checks, KYC verification, age verification, and transaction reporting are required by applicable regulations and cannot be avoided regardless of consent
  • Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and analytics are processed under our legitimate interest in running a safe and fair platform — balanced against your rights
  • Consent: Marketing communications are sent only where you have given explicit opt-in consent. You can withdraw consent at any time with immediate effect

Plain English: Most of what we do with your data is necessary to run your account safely and legally. We only send you marketing messages if you specifically said yes to receiving them.

5.Data Sharing

999x does not sell, rent, or trade your personal data to any third party for commercial purposes. Full stop. We share data only where it is necessary to operate the platform, comply with the law, or where you have explicitly consented. The categories of third parties we work with and the basis for sharing are outlined below.

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our bank/card processing partners receive the minimum data necessary to process your transactions. They are contractually prohibited from using your data for any purpose other than processing your payment.
  • Age and identity verification providers: Third-party KYC verification services receive your CNIC data and other identity documents solely for the purpose of verifying your eligibility to use the platform. These providers operate under strict data processing agreements.
  • Technology and hosting providers: Cloud infrastructure, cybersecurity, and platform analytics providers may access data as part of providing their services. All providers are vetted, contractually bound, and prohibited from using data for their own purposes.
  • Regulatory and law enforcement authorities: 999x may be required by law to share data with financial regulators, law enforcement, or anti-fraud agencies. We will always comply with lawful requests and, where permitted, notify you if your data has been requested.
  • Responsible gaming organisations: Where a player is self-excluded, 999x may share relevant information with responsible gaming networks to enforce the exclusion across participating platforms.

We never share: Your personal data with advertisers, data brokers, social media platforms, or any party for commercial targeting purposes. If you ever receive an unsolicited communication claiming to be from 999x and asking for personal data, treat it as a scam and contact us immediately.

6.Security Measures

Protecting your personal and financial data is one of the most important operational responsibilities at 999x. We employ multiple layers of technical and organisational security to guard against unauthorised access, loss, alteration, or disclosure of your data.

  • Encryption: All data transmitted between your device and 999x servers is encrypted using TLS 1.3. Data at rest — including identity documents, CNIC data, and financial records — is encrypted using AES-256 standard encryption.
  • Access controls: Personal data is accessible only to 999x staff who need it to perform their role. Access is role-based, logged, and reviewed regularly. Former employees have access revoked immediately upon departure.
  • Payment tokenisation: Full payment account numbers are never stored on 999x systems. Our payment processors return a token reference which is stored in place of the actual account details.
  • Two-factor authentication: 2FA is available to all 999x players and is strongly recommended. It adds a one-time code step to the login process, making account takeover significantly harder.
  • Monitoring and intrusion detection: Our security team monitors systems 24/7 for anomalies, attempted intrusions, and suspicious access patterns. Automated alerts trigger immediate investigation.
  • Incident response: In the unlikely event of a data breach affecting your personal information, 999x will notify you within 72 hours of becoming aware of the breach, describe what data was affected, what steps we have taken, and what you should do to protect yourself.

7.Data Retention

999x keeps personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable law. Retention periods differ by data type:

Data Type Retention Period Reason
Account identity data Account lifetime + 5 years AML regulatory requirement
Transaction records 7 years from transaction date Financial record-keeping obligation
Betting history Account lifetime + 5 years Dispute resolution and compliance
Support transcripts 3 years from last interaction Quality monitoring and dispute resolution
Technical / session data 13 months from collection Security and fraud detection
Marketing preferences Until opt-out + 3 years Proof of consent
Responsible gaming records Account lifetime + 7 years Regulatory obligation and player protection

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to you. Where anonymisation is used rather than deletion, the anonymised data may be retained indefinitely for aggregate analytics purposes — it cannot be used to identify you.

999x

8.Cookies and Tracking Technologies

999x uses cookies and similar tracking technologies to keep you logged in, remember your preferences, measure platform performance, and — with your consent — show you relevant promotions. A cookie is a small text file stored on your device by the platform. You can control cookies through your browser settings at any time.

Cookie Type Purpose Can Be Disabled?
Essential Login sessions, account security, fraud prevention, core platform functions No — required for 999x to function
Analytics Anonymous usage statistics, feature engagement, performance monitoring Yes — opt out via cookie settings
Marketing Tracking promotion views and clicks to measure campaign performance Yes — requires explicit opt-in consent

We do not use cookies to track your browsing activity on other websites. 999x analytics cookies collect only anonymised, aggregated data and cannot be used to identify you as an individual. If you disable analytics cookies, the platform will still function normally — you may just see slightly less personalised content.

9.Your Privacy Rights

As a 999x player, you have meaningful rights over your personal data. These rights are not just formalities — we take them seriously and respond to every request promptly. Here is what you can ask for:

Right to Access

Request a copy of all personal data 999x holds about you, in a readable format.

Right to Rectify

Ask us to correct inaccurate or incomplete data held on your 999x account.

Right to Erasure

Request deletion of your data where we no longer have a lawful reason to retain it.

Right to Portability

Receive your personal data in a structured, machine-readable format to transfer elsewhere.

Right to Object

Object to processing carried out under legitimate interests, including profiling for marketing.

Right to Restrict

Ask 999x to pause processing of your data while a complaint or correction request is resolved.

To exercise any of these rights, contact our privacy team at support@999x.wine with the subject line "Privacy Request" and a description of your request. We will acknowledge within 24 hours and provide a full response within 30 days. For complex requests, this may be extended to 60 days with notification. We may ask you to verify your identity before acting on a data request — this is to protect you, not to obstruct you.

Note on erasure requests: We may be unable to delete certain data — such as transaction records — where retention is required by financial regulations, regardless of your request. Where this is the case, we will tell you clearly which data we are retaining, why, and for how long.

10.Children's Privacy

999x is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If 999x becomes aware that a minor has registered an account or provided personal data, the account will be suspended immediately, all data associated with the account will be deleted, and any funds deposited will be frozen pending investigation.

If you are a parent or guardian and you believe your child may have accessed 999x, please contact us immediately at support@999x.wine. We will treat such reports with urgency and confidentiality.

11.Marketing Communications

999x will only send you promotional emails, SMS messages, or in-app notifications if you have explicitly opted in to receive them during registration or through your account settings. We do not send unsolicited marketing communications.

Every marketing message from 999x includes a clearly visible unsubscribe option. Clicking unsubscribe will remove you from the relevant communication channel immediately — we do not operate opt-out delays. You can also manage all your communication preferences at any time from the Notifications section of your account settings without contacting support.

Opting out of marketing communications does not affect service-related messages such as deposit confirmations, withdrawal notifications, security alerts, or important account notifications — these will continue regardless of your marketing opt-out status.

12.Changes to This Privacy Policy

999x may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When we make material changes — those that affect your rights or how we use your personal data in a meaningful way — we will notify all registered players via email and an in-app notification at least 7 days before the change takes effect.

Minor changes — such as clarifications of existing practices, correction of typographical errors, or contact detail updates — may be made without individual notification, though the revised Policy will always be published on this page with the updated effective date. We encourage you to revisit this page periodically to stay informed about how 999x protects your privacy.

13.Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, you can contact the 999x privacy team through the following channels:

  • Email: support@999x.wine — subject line "Privacy Request" for data rights, or "Privacy Concern" for other matters
  • Live Chat: Available 24/7 from your 999x account dashboard — for urgent privacy matters this is the fastest channel
  • Response times: Acknowledgement within 24 hours; full response within 30 days (up to 60 days for complex requests)

We handle every privacy request with respect and without unnecessary delay. Your trust in 999x depends on us taking privacy seriously, and we are committed to earning and maintaining that trust through transparent, responsible data practices every day.


Your Privacy is Protected at 999x — Ready to Join?

Register your free account in two minutes. Your data is encrypted, never sold, and fully under your control at any time.