Your privacy matters to us at 999 Win. This policy explains exactly what personal data we collect when you use our platform, why we collect it, how it is stored, and what rights you have over it as a Pakistani player. We have written it in plain English so you actually understand it — not in legal jargon designed to confuse.
Six core promises 999 Win makes to every Pakistani player regarding their personal data
All data transmitted between your device and 999 Win servers is protected by 256-bit SSL encryption — the same standard used by major banks in Pakistan and internationally.
999 Win does not sell, rent or trade your personal information to third-party marketers. Your data is used only to operate and improve your 999 Win experience.
We collect only the data that is genuinely necessary to operate your account, process payments, and meet our legal obligations. Nothing superfluous is stored.
You can request a copy of your data, ask us to correct inaccuracies, or request deletion of your account and associated records — and we will act on those requests within the timeframes set out in this policy.
Personal data is stored on secured servers with restricted access, regular security audits and strict internal access controls. Not every employee can see your data.
In the unlikely event of a data breach affecting your personal information, 999 Win will notify affected players promptly and take immediate steps to contain and remediate the issue.
This table summarises the main categories of data collected at 999 Win, why we collect each type, and the legal basis for doing so. Full details are in the sections below.
| Data Category | Examples | Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Full name, CNIC / passport number, date of birth | Account registration & KYC verification | Legal obligation |
| Contact Data | Mobile number, email address, city | Account communications, support, notifications | Contract performance |
| Financial Data | Payment method type, transaction history, account balance | Processing deposits & withdrawals in PKR | Contract performance |
| Technical Data | IP address, device type, browser, OS version | Platform security, fraud prevention, performance | Legitimate interest |
| Gameplay Data | Games played, bets placed, session duration, wins/losses | Account history, responsible gaming monitoring, compliance | Legal obligation |
| Marketing Data | Promotion preferences, email open rates, opt-in status | Sending relevant offers and bonus notifications | Consent (opt-in only) |
| Cookie Data | Session cookies, preference cookies, analytics identifiers | Platform functionality, analytics, improving user experience | Consent (cookie banner) |
999 Win is an online casino and sports betting platform operated under the domain 999win-khelo.com. We are the data controller for all personal information collected from players who register and use the 999 Win platform. When this Privacy Policy refers to "999 Win," "we," "us" or "our," it means the platform operator responsible for your data.
This Privacy Policy applies to all personal data collected in connection with your use of the 999 Win website, mobile platform, and any related communications we send you. It should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are published on this website.
If you have questions about this policy or about how 999 Win handles your personal data, you can contact our Privacy team at any time using the contact details in Section 13. We will respond to all privacy-related enquiries within 72 hours.
999 Win collects the following categories of personal data from players. We only ever collect data that is necessary for the specific purpose described — we do not collect information speculatively or "just in case."
Identity and Verification Data. When you register an account at 999 Win, we collect your full legal name, date of birth, and national identity information (CNIC number or passport number). This data is collected because we are legally required to verify the identity and age of all players before allowing real-money play or processing any withdrawal. Without this information, we cannot legally operate your account.
Contact Information. We collect your Pakistani mobile number, email address, and optionally your city of residence. This allows us to communicate with you about your account, send transaction confirmations, notify you of promotions you have opted into, and contact you if we identify any suspicious account activity.
Financial and Payment Data. To process deposits and withdrawals in PKR, 999 Win needs to know which payment method you are using (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or bank card). We record transaction amounts, dates and reference numbers. We do not store full card numbers or mobile banking PINs — payment processing is handled by our verified payment partners and their own security systems.
Gameplay and Account Activity Data. We maintain a complete record of all bets placed, games played, wins, losses, session durations and bonus claims on your 999 Win account. This data is necessary for account management, responsible gaming monitoring, dispute resolution, and anti-money-laundering compliance requirements.
Technical Data. When you access 999 Win, our systems automatically collect certain technical information including your IP address, device type, operating system, browser type and version, and general geographic location derived from your IP. This data is used for security purposes, fraud prevention, and to optimise platform performance for your device and connection.
999 Win collects personal data through three main channels:
999 Win uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was collected. The main uses are:
999 Win does not sell your personal data. We do not share your information with third-party advertisers or marketing companies. Your data is shared only in the following limited and necessary circumstances:
Payment Partners. To process your deposits and withdrawals, we share necessary transaction data with our payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and Visa/Mastercard gateway providers). These partners receive only the data required to complete the specific transaction and are contractually prohibited from using it for any other purpose.
Game Studios. The game providers whose titles appear on 999 Win (such as NetEnt, Pragmatic Play, Play'n GO and others) receive your account identifier and gameplay data to deliver the games you play and to maintain the integrity of jackpot pools and game outcomes. They are not provided with your CNIC details or financial data.
Regulatory and Legal Authorities. We may be required to disclose certain player data to government authorities, law enforcement, or regulatory bodies when required to do so by applicable law, court order or regulatory direction. Where we receive such a request, we will share only the minimum data required to satisfy the lawful demand.
Service Providers. We use carefully selected third-party service providers for functions such as email delivery, platform analytics, and fraud detection. These providers access personal data only as necessary to perform the specific service and are bound by strict confidentiality and data protection requirements.
999 Win stores your personal data on secured servers protected by multiple layers of technical and organisational security measures. All data at rest is encrypted. All data in transit between your device and our servers is protected by 256-bit SSL/TLS encryption — the same standard used by commercial banks operating in Pakistan.
Access to personal data within 999 Win is governed by a strict role-based access control system. Only employees and contractors who genuinely require access to specific categories of data in order to perform their job function are granted that access. All access events are logged, monitored and subject to periodic audit.
We conduct regular security assessments of our platform and infrastructure to identify and remediate vulnerabilities. Our development team follows secure coding practices and all significant platform changes go through security review before deployment.
In the unlikely event of a security breach that affects personal data belonging to 999 Win players, we will notify affected players without undue delay and take all reasonable steps to contain the breach, assess its impact, and prevent recurrence.
999 Win uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how players use the site so we can improve it.
We use the following types of cookies:
When you first access 999 Win, a cookie consent banner will appear. You may accept all cookies or manage your preferences to decline non-essential categories. Note that declining certain cookies may affect your platform experience. You can also manage cookies through your browser settings at any time.
999 Win will only send you promotional communications — including bonus offers, jackpot alerts, PSL betting promotions, and seasonal offers — if you have actively opted in to receive them. This consent is collected during registration and can be changed at any time from your account settings.
If you opt in to marketing communications, you may receive messages by email and SMS. We aim to send communications that are genuinely relevant to you based on your game preferences and activity at 999 Win. We do not send mass-blast promotions regardless of relevance.
You can withdraw your marketing consent and unsubscribe from all promotional communications at any time by:
999 Win retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as we are legally required to keep it. Our standard retention periods are:
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised aggregate data (such as overall platform usage statistics) may be retained indefinitely for business analysis purposes.
As a 999 Win player, you have the following rights in relation to your personal data. These are genuine rights and 999 Win will respond to all valid requests within 30 days of receipt:
Request a copy of all personal data 999 Win holds about you. We will provide this in a readable format within 30 days.
Ask us to correct any inaccurate personal data we hold about you. We will verify and update your records promptly.
Request deletion of your personal data in certain circumstances — for example where you have withdrawn consent and there is no other legal basis for us to hold it.
Object to processing of your data carried out on the basis of legitimate interest, including profiling for direct marketing purposes.
Ask us to restrict how we use your data while an accuracy dispute or objection is being resolved, without requiring complete deletion.
Receive a copy of data you provided to us in a structured, machine-readable format — for example your account and gameplay history.
To exercise any of these rights, send your request to support@999win-khelo.com with the subject line "Privacy Rights Request." We will acknowledge your request within 3 working days and complete the action within 30 days. We may ask you to verify your identity before proceeding.
999 Win is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. The age verification process we conduct during KYC is specifically designed to prevent minors from accessing our platform.
If we become aware that a player has provided false age information during registration and is in fact under 18, we will immediately close the account, forfeit all account balances in accordance with our Terms and Conditions, and permanently delete the account data. We will not retain any data relating to a confirmed minor beyond what is necessary for regulatory reporting.
999 Win may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or improvements to how we explain our practices to players. The "last updated" date displayed at the top of this page will always reflect when the most recent revision was made.
When we make material changes to this policy — meaning changes that significantly affect how we use your data or the rights available to you — we will notify registered players by email at least 14 days before the changes take effect. Continued use of the 999 Win platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.
If you disagree with any changes to this Privacy Policy, you may close your account and request deletion of your data as described in Section 10. We will process such requests in line with the retention periods set out in Section 9 and applicable legal requirements.
If you have any questions, concerns or complaints about this Privacy Policy or about how 999 Win handles your personal data, please get in touch with our dedicated privacy contact:
We take all privacy concerns seriously. If after contacting us you feel your concern has not been adequately addressed, you may escalate the matter to the appropriate regulatory authority in your jurisdiction.
This Privacy Policy was last reviewed in January 2025 and represents the complete current statement of 999 Win's data practices. By using the 999 Win platform, you confirm that you have read and understood this policy.
Questions about your data? Email us at support@999win-khelo.com with "Privacy Enquiry" in the subject — we respond within 72 hours.