Privacy Policy — 9999win
How We Protect Your Personal Data

This Privacy Policy explains how 9999win collects, processes, stores, and protects the personal data of players and visitors to the 9999win platform at https://9999win.cash. We take the privacy of our Pakistani players seriously and are committed to handling personal data with transparency, security, and respect.

By registering an account on 9999win, making a deposit, or using any 9999win service, you confirm that you have read and understood this Privacy Policy. If you do not agree with how 9999win collects and uses personal data as described here, please do not register or continue to use the platform.

9999win operates the online gaming platform at https://9999win.cash and is the data controller responsible for the personal data of all registered players. As data controller, 9999win determines the purposes and means of processing personal data collected through the platform.

For all data protection enquiries, requests to exercise your privacy rights, or concerns about how your personal data is being used, you can contact 9999win directly at support@9999win.cash. We aim to acknowledge all privacy-related requests within 48 hours and provide a substantive response within 15 business days.

9999win collects the minimum personal data necessary to provide a fully functional, safe, and compliant gaming platform for Pakistani players. The categories of personal data we collect are as follows.

Identity Data: Your full legal name as it appears on your Pakistani identity document (CNIC or passport), your date of birth, gender (where provided), and your CNIC number where required for identity verification purposes.

Contact Data: Your Pakistani mobile number and email address. These are used for account communication, security verification (including two-factor authentication), and support correspondence.

Payment Data: The mobile wallet number (Easypaisa, JazzCash, NayaPay, or SadaPay) or bank account details used for deposits and withdrawals. 9999win does not store full card numbers for Visa or Mastercard transactions — these are processed through certified payment gateways that handle card data under their own security standards.

Gaming and Transaction Data: A complete record of all bets placed, games played, deposits made, withdrawals requested, bonuses claimed, and win/loss outcomes on your 9999win account. This record is maintained for account integrity, responsible gaming monitoring, and dispute resolution purposes.

Technical and Device Data: IP addresses, browser type, device type and operating system, session timestamps, and pages visited within the 9999win platform. This data is used for fraud prevention, security monitoring, and understanding how the platform is used so we can improve it.

KYC Verification Documents: Copies of identity documents (CNIC, passport), selfies for liveness verification, and payment account ownership confirmation screenshots. These are collected only when identity verification is required and are stored with the highest level of security applied to any data category on the platform.

9999win collects personal data through three main channels: data you provide directly, data collected automatically through your use of the platform, and data received from third parties.

Data you provide directly: When you register an account, you provide your name, mobile number, and create a password. When you make a deposit or request a withdrawal, you provide payment account details. When verification is requested, you upload identity documents. When you contact support, the content of that communication is recorded.

Data collected automatically: When you visit 9999win and interact with the platform, technical data is collected automatically. This includes your IP address, the type of device and browser you are using, which pages you visit, how long you spend on each, and your session activity within the gaming lobby. This data is collected through server logs and, where applicable, through the use of cookies as described in Section 10 of this policy.

Data from third parties: 9999win may receive limited data from payment providers (such as transaction confirmation data from Easypaisa or JazzCash), from identity verification service providers used to check the authenticity of documents you submit, and from fraud prevention services that help identify unusual account activity patterns.

Every use of personal data by 9999win has a specific, legitimate purpose. Below is a comprehensive explanation of why we process each category of data collected from Pakistani players.

• Account operation: Processing your login credentials, maintaining your account balance in PKR, recording your gaming history, and applying bonuses requires processing of identity, gaming, and payment data.
• Payment processing: Deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard require processing of payment data to initiate and confirm transactions.
• Identity and age verification: 9999win has an obligation to verify that players are who they claim to be and are aged 18 or above. This requires processing identity data and, where requested, KYC documents.
• Fraud prevention and security: Technical data including IP addresses, device fingerprints, and session patterns are analysed to detect and prevent fraudulent account activity, multiple account creation, and unauthorised access attempts.
• Responsible gaming: Gaming data is monitored to identify patterns that may indicate problematic gambling behaviour. This monitoring is in the interest of player welfare and enables 9999win to intervene appropriately.
• Legal and regulatory compliance: Anti-money laundering obligations require 9999win to maintain records of transactions and verify the source of funds above certain thresholds. These legal obligations require retention of certain data for defined periods.
• Customer support: Contact data and communication records are used to respond to your support queries, investigate complaints, and resolve disputes.
• Marketing communications: Where you have given explicit consent, we may use your contact data to send you information about promotions, bonuses, and new products on 9999win. You can withdraw this consent at any time.
• Platform improvement: Aggregated and anonymised technical and gaming data is used to understand how the 9999win platform is used and to make improvements to the user interface, game lobby, payment experience, and support processes.

9999win processes personal data only where there is a lawful basis for doing so. The legal bases applicable to different processing activities are as follows.

Contract performance: The majority of data processing by 9999win is necessary to perform the contract between 9999win and you as a registered player. Operating your account, processing payments, and applying bonus offers are all carried out under this basis.

Legal obligation: Certain data processing — particularly identity verification, transaction record-keeping, and fraud monitoring — is required to comply with applicable anti-money laundering legislation and other regulatory obligations. This processing is carried out regardless of your consent because it is legally required.

Legitimate interests: Technical security monitoring, fraud prevention, and platform improvement based on anonymised usage data are carried out under 9999win's legitimate interest in operating a secure, high-quality platform. In each case, 9999win has assessed that this interest is not overridden by your privacy rights.

Consent: Marketing communications are sent only on the basis of explicit consent provided at registration or updated subsequently in your account settings. This consent can be withdrawn at any time without affecting your use of 9999win's gaming services.

9999win shares personal data with third parties in the following limited circumstances only.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive payment data necessary to process your deposits and withdrawals. These providers are bound by their own privacy and security obligations.
• Identity verification providers: Where KYC verification is required, document data may be shared with a certified identity verification service provider for authentication purposes. These providers process data under strict confidentiality agreements with 9999win.
• Fraud prevention services: Anonymised and pseudonymised technical data may be shared with fraud prevention services to cross-reference against known fraud patterns. This sharing is subject to contractual data protection requirements.
• Game software providers: Game providers that supply software to 9999win may receive limited gameplay data necessary to operate their specific game. This data is provided under licence agreements that include confidentiality and data protection provisions.
• Legal and regulatory authorities: Where required by applicable law, a court order, or a legitimate regulatory request, 9999win will disclose personal data to the relevant authority. We will not disclose more data than is required by the specific legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of 9999win's business, player data may be transferred as part of that transaction. In such an event, players will be notified in advance and the acquiring entity will be bound by the terms of this Privacy Policy.

9999win's primary infrastructure is operated to serve Pakistani players. Where technical data is processed or stored on servers outside Pakistan — for example, through internationally hosted cloud infrastructure or third-party service providers — 9999win ensures that appropriate safeguards are in place to protect personal data during and after transfer.

These safeguards include contractual data protection clauses with all third-party processors that handle personal data outside Pakistan, requiring them to apply data protection standards equivalent to those applied by 9999win itself. Personal data transferred internationally is never transferred to a jurisdiction with inadequate data protection standards without the application of appropriate contractual safeguards.

9999win retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal retention obligations. The following table summarises our data retention approach.

• Account and identity data: Retained for the duration of your account plus five years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: All deposit, withdrawal, and gaming transaction records are retained for five years following the transaction date for legal compliance purposes.
• KYC documents: Retained for five years following account closure. Documents that were submitted but did not result in a completed verification are deleted within 90 days of the verification process concluding.
• Technical and session data: Retained for 12 months and then anonymised or deleted. Anonymised data may be retained for longer for platform analytics purposes.
• Support communications: Retained for three years following the resolution of the relevant query or complaint.
• Marketing consent records: Retained for the duration of your account plus one year following account closure, to maintain a record of consent given and withdrawn.

When the applicable retention period expires and there is no ongoing legal reason to retain the data, 9999win will either delete the data or anonymise it so that it can no longer be linked to you as an individual.

9999win uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device when you visit a website. Cookies allow 9999win to recognise your device on subsequent visits, maintain your session when you are logged in, remember your preferences, and collect analytics data about how the platform is used.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent the 9999win platform from functioning correctly — you will not be able to stay logged in or access your balance.

As a 9999win player, you have a number of rights over your personal data. These rights are genuine and exercisable — not theoretical provisions added for compliance appearance. To exercise any of the following rights, contact 9999win at support@9999win.cash with your account username and a clear description of your request.

9999win is an adults-only platform and does not knowingly collect personal data from anyone under the age of 18. If 9999win becomes aware that personal data has been collected from a person under 18, that account will be immediately closed, all data will be deleted, and any deposits will be returned to the original payment source.

Parents and guardians who believe a minor may have created a 9999win account should contact support@9999win.cash immediately. We will investigate and resolve the matter as a priority. We also encourage parents to use device-level parental controls to prevent access to online gambling platforms on shared or children's devices.

9999win applies a multi-layered security approach to protect personal data from unauthorised access, accidental loss, alteration, or disclosure. The key measures in place are as follows.

• Transport encryption: All data transmitted between your device and 9999win's servers is encrypted using 256-bit SSL/TLS. You can verify this by checking for the padlock icon and "https://" in your browser address bar when on 9999win.
• Encrypted data storage: Sensitive personal data — including KYC documents and payment details — is stored in encrypted form on servers that are not directly accessible from the public internet.
• Access controls: Access to personal data within 9999win is restricted to staff who have a specific, documented need to access it for their role. All access is logged and regularly audited.
• Two-factor authentication: 9999win offers and encourages the use of two-factor authentication (2FA) on player accounts. We strongly recommend activating 2FA via your account settings to prevent unauthorised access even if your password is compromised.
• Penetration testing: 9999win's infrastructure is regularly tested by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 9999win maintains a data breach response plan. In the event of a confirmed data security incident, affected players will be notified promptly with full details of what happened and what remediation actions are being taken.

9999win may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable regulations, or improvements to how we operate the platform. When material changes are made, 9999win will notify registered players via the email address associated with their account and will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of 9999win after a policy update constitutes acceptance of the revised policy. If you do not agree with any changes to this policy, you should stop using 9999win and contact support to request account closure and data handling in accordance with your rights under Section 11.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by 9999win, please contact us using the details below. All privacy-related communications are handled by our dedicated player support team and will be responded to within 48 hours.

If you are not satisfied with the response you receive from 9999win to a privacy request or complaint, you have the right to escalate the matter to the relevant data protection authority. We hope this is never necessary — our aim is to resolve all privacy concerns fairly and promptly at the first point of contact.