pp999 Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how pp999 ("pp999", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your") who register accounts on, visit, or interact with the pp999 platform accessible at pp999.lat. This Policy forms part of the pp999 Terms & Conditions and should be read alongside those Terms.

By registering a pp999 account or using the platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not consent, you must not register an account or use pp999 services.

pp999 processes personal data only to the extent necessary to operate the platform lawfully, securely, and in accordance with applicable anti-money laundering and responsible gaming obligations. We do not sell personal data to third parties for marketing purposes.

2Personal Data We Collect

pp999 collects personal data through several channels: account registration, KYC verification, payment transactions, platform usage, and customer support interactions. The categories of data collected include:

pp999 does not collect sensitive data beyond that strictly required for KYC and payment verification. We do not collect biometric data beyond CNIC facial image comparison where required by our KYC provider.

3How We Use Your Personal Data

pp999 processes your personal data for the following purposes, each of which has a defined lawful basis:

• Account creation and management – To register your pp999 account, authenticate your identity on login, and maintain your account settings;
• Platform operation – To deliver game content, process bets, calculate results, and manage your PKR wallet balance;
• KYC and age verification – To confirm your identity and age (18+) as required under responsible gaming obligations and anti-money laundering compliance;
• Payment processing – To process deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah, and to facilitate PKR withdrawals to verified accounts;
• Fraud prevention and security – To detect and prevent unauthorised account access, multi-accounting, bonus abuse, and financial fraud;
• Regulatory compliance – To meet anti-money laundering, counter-terrorist financing, and responsible gaming reporting obligations;
• Customer support – To respond to your support queries and resolve complaints;
• Platform improvement – To analyse aggregated and anonymised usage data to improve platform performance and user experience;
• Responsible gaming monitoring – To identify patterns of behaviour that may indicate problem gambling, in order to proactively offer support tools.

pp999 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight.

4KYC & Identity Verification

4.1 Purpose. Know Your Customer (KYC) verification is a mandatory process conducted by pp999 prior to approving any withdrawal from a player account. KYC is also conducted where transaction volumes or patterns trigger anti-money laundering review thresholds. The purpose of KYC is to confirm the identity of the account holder, verify their age, and confirm that the payment method used is registered in their name.

4.2 Documents Required. Standard KYC on pp999 requires submission of a clear, legible CNIC (Computerised National Identity Card) scan covering both the front and reverse sides. Depending on transaction profile, additional documentation such as proof of income source may be requested.

4.3 Processing. KYC documents submitted to pp999 are reviewed by our compliance team and, where applicable, processed through a third-party identity verification service provider. Such providers are bound by data processing agreements that restrict use of your data to identity verification purposes only.

4.4 Retention. KYC documents are retained for the period specified in Section 8 of this Policy. Retention is required by applicable anti-money laundering regulations even after account closure.

5Payment Data

5.1 Collection. When you make a deposit or withdrawal via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, or Bank Alfalah, pp999 collects the payment reference information necessary to process the transaction and reconcile it with your account balance. pp999 does not store full bank account numbers or mobile wallet PINs.

5.2 Same-Method Verification. pp999 applies a same-method withdrawal policy. The payment reference used for your deposit is verified against the withdrawal destination to confirm ownership. This is a security and anti-money laundering control, not a restriction on your ability to access your funds.

5.3 Third-Party Processors. Payment transactions are processed by third-party payment service providers. These providers operate their own privacy policies governing the data they process. pp999 selects payment providers that implement industry-standard data security controls and is not responsible for their independent data handling practices.

6Cookies & Tracking Technologies

pp999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and collect anonymised usage analytics. The categories of cookies used are:

• Essential cookies – Required for platform function including session management and login state. These cannot be disabled without preventing normal platform use.
• Analytics cookies – Anonymised data on page navigation and feature usage, used solely to improve platform performance. No personally identifiable information is included in analytics data.
• Security cookies – Used to detect and prevent fraud, bot activity, and CSRF attacks.

pp999 does not use third-party advertising cookies or tracking pixels for behavioural advertising. You may configure your browser to block or delete cookies, however doing so may affect your ability to use certain platform features including maintaining an active login session.

7Data Sharing & Third Parties

pp999 does not sell, rent, or trade your personal data to third parties. Personal data is shared only in the following limited circumstances:

• KYC verification providers – For identity and age confirmation as described in Section 4;
• Payment service providers – To process your deposits and withdrawals as described in Section 5;
• Game providers – Game studios hosting content on pp999 may receive anonymised session identifiers for game integrity and fault resolution purposes. They do not receive your name, CNIC, or contact details;
• Fraud prevention services – Technical identifiers such as IP address and device fingerprint may be shared with fraud prevention services to detect multi-accounting and bonus abuse;
• Legal and regulatory authorities – pp999 will disclose personal data to law enforcement, financial intelligence units, or regulatory bodies where required by applicable law or court order.

All third-party service providers engaged by pp999 are subject to contractual data processing terms that restrict use of personal data to the specified purpose and require implementation of appropriate security measures.

8Data Retention

pp999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and transaction records – Retained for a minimum of five years following account closure, as required by anti-money laundering regulations;
• KYC documents – Retained for a minimum of five years from the date of the last transaction associated with the account;
• Customer support records – Retained for three years from the date of the last support interaction;
• Session and technical logs – Retained for up to 12 months for security and fraud investigation purposes;
• Analytics data – Retained in anonymised and aggregated form for platform improvement purposes with no fixed deletion date.

Following expiry of the applicable retention period, personal data is securely deleted or anonymised.

9Your Data Rights

Subject to applicable law and the conditions of our regulatory obligations, you have the following rights in relation to your personal data held by pp999:

• Right of access – You may request a copy of the personal data pp999 holds about you;
• Right of correction – You may request correction of inaccurate or incomplete personal data;
• Right of deletion – You may request deletion of personal data where it is no longer necessary for the purpose collected, subject to legal retention requirements that override this right;
• Right to restrict processing – You may request that pp999 restricts processing of your data in certain circumstances;
• Right to object – You may object to processing of your data for purposes not strictly required for platform operation or legal compliance;
• Right of portability – You may request a machine-readable copy of personal data you have provided to pp999.

To exercise any of the above rights, contact the pp999 support team using the contact information in Section 13. pp999 will respond to verified data subject requests within 30 days. Note that legal retention obligations under anti-money laundering regulations may prevent full deletion of certain data categories during mandatory retention periods.

10Data Security

pp999 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pp999 servers;
• Encryption of sensitive data fields at rest, including payment references and KYC document stores;
• Role-based access controls restricting staff access to personal data to those with a documented operational need;
• Two-factor authentication options for player account access;
• Regular security testing and vulnerability assessment of platform infrastructure;
• Automated session timeout to limit exposure from unattended authenticated sessions.

While pp999 implements comprehensive security controls, no internet-based system can guarantee absolute security. In the event of a data breach that poses a risk to your rights, pp999 will notify affected individuals within a reasonable timeframe and take immediate remediation steps.

11Children's Privacy

pp999 is strictly for adults aged 18 and above. pp999 does not knowingly collect personal data from individuals under the age of 18. If pp999 becomes aware that personal data has been collected from a minor, that account will be immediately closed, any balance will be returned to the source payment method, and all associated data will be deleted subject to any legal retention obligation. If you believe a minor has registered on pp999, contact support immediately at the details below.

12Policy Amendments

pp999 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered account holders via their registered email address or through a platform notice, no less than 14 days before taking effect except where immediate amendment is required for legal or regulatory compliance. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of pp999 following the effective date of any amendment constitutes acceptance of the revised Policy.

13Contact Us

For all data privacy enquiries, subject access requests, or concerns regarding this Policy, please contact the pp999 team: