999q Privacy Policy

01 Who We Are

999q ("999q", "we", "us", "our") is an online gaming and sports betting platform operating at 999q.pro. 999q serves players primarily across Pakistan — including major cities such as Karachi, Lahore, Islamabad, and Faisalabad — and provides cricket betting, live casino, slots, and instant games accessible via JazzCash, EasyPaisa, and major Pakistani bank transfers in PKR.

For the purposes of this Privacy Policy, 999q acts as the data controller in respect of personal data collected from registered users and visitors to the 999q platform. This means 999q determines the purposes for which and the means by which your personal data is processed.

If you have any questions about how 999q handles your personal data, or if you wish to exercise any of your data subject rights, please contact our dedicated privacy support channel at [email protected]. All privacy-related enquiries are handled by a designated team with a target response time of 48 hours.

02 Data We Collect

999q collects personal data across several categories, each serving a specific and legitimate operational or regulatory purpose. The categories of personal data 999q may collect about you are as follows:

999q does not collect special category data (such as health data, religious beliefs, or political opinions) as a matter of course. Where such data is disclosed voluntarily by a player in the context of a responsible gaming request (for example, disclosing a gambling addiction when requesting self-exclusion), it will be processed solely for the purpose of facilitating the requested player protection measure and will be handled with the highest level of care and confidentiality.

03 How We Collect Your Data

999q collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a 999q account, you provide identity and contact data directly through the registration form.
• KYC Verification: When you submit identity documents (such as your CNIC or passport) in response to a verification request, 999q collects and processes those documents for the sole purpose of completing age and identity verification.
• Deposits and Withdrawals: Financial data is collected when you initiate a transaction through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or another supported payment channel.
• Platform Use: Technical and usage data is collected automatically as you navigate and interact with the 999q platform through standard web analytics and server logging mechanisms.
• Customer Support: Communications data is collected when you contact 999q's support team via live chat, email, or any other support channel.
• Cookies and Tracking: Certain technical data is collected through cookies and similar tracking technologies as described in Section 10 of this policy.
• Third-Party KYC Providers: In some cases, 999q may receive identity verification data from authorised third-party KYC service providers who assist in confirming the authenticity of identity documents you have submitted.

04 Why We Use Your Data

999q uses the personal data it collects for the following specific and legitimate purposes:

• Account Management: To create, maintain, verify, and administer your 999q player account throughout its lifecycle.
• Payment Processing: To process deposits and withdrawals accurately and securely via your chosen PKR payment method, and to maintain accurate financial records in compliance with applicable regulations.
• Age and Identity Verification: To verify that all 999q players meet the mandatory 21+ age requirement and to confirm the identity of players as required by our gaming license conditions.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the 999q platform.
• Regulatory Compliance: To meet all reporting, record-keeping, and disclosure obligations imposed by 999q's gaming license authority and any applicable law.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of interactions for quality assurance and compliance purposes.
• Platform Improvement: To analyse usage patterns and technical data in aggregate to improve the performance, features, and security of the 999q platform.
• Marketing (with consent): To send you personalised promotional communications about relevant 999q offers, PSL betting markets, new game releases, and special bonuses — only where you have opted in to receive such communications.

05 Legal Basis for Processing

999q processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contract Performance: Processing that is necessary for 999q to fulfil its contractual obligations to you as a registered player — including account management, payment processing, and game delivery.
• Legal Obligation: Processing that is required by law or by the terms of 999q's gaming license — including KYC verification, age checks, anti-money-laundering (AML) screening, and regulatory reporting.
• Legitimate Interests: Processing that serves 999q's legitimate interests in operating a secure and fair platform — including fraud prevention, platform security, abuse detection, and aggregated analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes where 999q has obtained your explicit consent — primarily for the sending of promotional and marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

06 Sharing Your Data

999q does not sell, rent, or trade your personal data to third parties for commercial purposes. 999q may share your personal data only in the following strictly defined circumstances:

• Payment Processors: Financial data is shared with payment service providers (such as JazzCash, EasyPaisa, and banking partners) solely to the extent necessary to execute the transaction you have requested. These providers act as independent data controllers under their own privacy policies.
• KYC and Fraud Prevention Providers: Identity verification data may be shared with authorised third-party KYC service providers and fraud detection platforms engaged by 999q to support identity verification and AML compliance obligations.
• Regulatory and Law Enforcement Authorities: 999q is legally obligated to disclose certain player data to its gaming license authority, financial intelligence units, and law enforcement agencies upon valid legal request or where required by applicable law. Such disclosures are made only to the extent legally required.
• Technology and Hosting Partners: Technical data may be accessed by 999q's cloud hosting and infrastructure providers in the course of maintaining platform availability and security. All such providers are bound by data processing agreements consistent with applicable data protection standards.
• Professional Advisers: Legal, audit, and compliance advisers engaged by 999q may access personal data to the minimum extent necessary for the professional services they provide, subject to confidentiality obligations.

All third parties with whom 999q shares personal data are required to implement appropriate technical and organisational security measures and to use the data solely for the purposes for which it was disclosed. 999q does not permit third-party service providers to use player data for their own independent marketing or commercial purposes.

07 International Data Transfers

As an internationally licensed online gaming platform, 999q's data processing infrastructure may involve the transfer of personal data to servers or service providers located outside of Pakistan. Where such transfers occur, 999q takes all reasonable steps to ensure that your data receives an equivalent level of protection to that afforded within Pakistan, including through the use of contractual safeguards with receiving parties.

Players who have questions about the specific international transfer mechanisms used by 999q may submit a request to [email protected] and our data privacy team will provide a response within 30 days.

08 Data Retention

999q retains personal data only for as long as is necessary for the purposes outlined in this Privacy Policy, or as required by applicable law and regulatory obligation. The following general retention periods apply:

• Account Data: Retained for the lifetime of your 999q account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC Documents: Identity verification documents are retained for the duration required by 999q's gaming license authority, which is typically five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction, for dispute resolution and compliance purposes.
• Marketing Data: Where consent to receive marketing communications is withdrawn, marketing preference data is updated immediately and retained solely as a record of the opt-out to prevent future unsolicited contact.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 999q's internal data disposal procedures.

09 Security Measures

999q implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security controls include:

• TLS 1.3 encryption for all data in transit between player devices and 999q servers.
• AES-256 encryption for sensitive data stored at rest, including payment details and identity documents.
• Multi-factor authentication options for player accounts and mandatory multi-factor authentication for all internal 999q administrative access.
• Role-based access controls ensuring that 999q staff can only access personal data to the minimum extent required for their specific job function.
• Regular independent penetration testing and security audits conducted by qualified third-party security firms.
• Continuous automated monitoring of the 999q platform for suspicious activity and potential data breaches.
• Documented incident response procedures enabling 999q to contain, investigate, and notify affected players of any confirmed data breach within a reasonable timeframe.

10 Cookies & Tracking Technologies

999q uses cookies and similar tracking technologies on the 999q platform to support essential platform functionality and to collect technical usage data. The categories of cookies used by 999q are as follows:

• Essential Cookies: These cookies are strictly necessary for the operation of the 999q platform. They enable core functions such as session management, login state, and security token validation. The platform cannot function correctly without these cookies. No consent is required for essential cookies as they are necessary for the delivery of the service you have requested.
• Analytics Cookies: These cookies collect anonymised data about how visitors interact with the 999q platform — including pages visited, session duration, and navigation paths. This data is used in aggregate to improve platform performance and user experience. 999q uses analytics cookies only where you have consented to their use.
• Preference Cookies: These cookies remember your platform settings and preferences — such as language selection and display options — to provide a more personalised experience on return visits.
• Marketing Cookies: Where you have consented, 999q may use cookies to deliver relevant promotional messages about 999q offers. 999q does not use third-party advertising networks or permit external parties to place marketing cookies on the 999q platform.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the 999q platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

11 Your Data Rights

As a 999q player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact 999q's privacy support team at [email protected] with your registered username and a clear description of your request.

• Right of Access: You have the right to request a copy of the personal data 999q holds about you, along with information about how that data is being processed.
• Right to Rectification: You have the right to request correction of any personal data 999q holds about you that is inaccurate or incomplete.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 999q's overriding legal and regulatory retention obligations.
• Right to Restriction: You have the right to request that 999q restricts processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while a correction request is being reviewed.
• Right to Data Portability: Where processing is based on consent or contract performance, you have the right to receive a copy of the personal data you provided to 999q in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and to withdraw consent for processing based on consent, at any time without detriment to your use of the 999q platform.
• Right to Withdraw Marketing Consent: You may opt out of marketing communications at any time via your account dashboard or by contacting support. Opt-outs are processed within 48 hours.

12 Minors & Age Policy

999q operates a strict and non-negotiable 21+ age policy. The 999q platform is not intended for, and must not be used by, any person under the age of 21. 999q does not knowingly collect personal data from individuals under 21 years of age.

As part of the account registration and KYC verification process, 999q verifies the age of all players through identity documentation — including CNIC, passport, or other government-issued identification. Any account found to have been created by or on behalf of a person under 21 will be immediately and permanently closed. Any personal data associated with such an account will be deleted from 999q's systems within a reasonable period following discovery, except where retention is required for fraud investigation or regulatory reporting.

Parents and guardians in Pakistan are strongly encouraged to use parental control software to prevent minors from accessing online gambling websites, including 999q. If you believe a minor has registered or attempted to register on the 999q platform, please report this immediately to [email protected] so that the matter can be investigated and resolved promptly.

13 Changes to This Privacy Policy

999q may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. Where changes are material, 999q will notify registered players via email and/or an on-site notification banner at least seven (7) days before the updated policy takes effect, except where immediate changes are required for legal or regulatory compliance reasons.

The current version of this Privacy Policy is always available at 999q.pro/privacy-policy and will display the effective date and last updated date at the top of the document. Your continued use of the 999q platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you may close your account in accordance with the 999q Terms and Conditions.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy, or to exercise any of your data subject rights, please contact 999q's privacy support team through the following channel:

When submitting a privacy request, please include your registered 999q username and a clear description of your request or concern so that our team can assist you as efficiently as possible. We may request additional information to verify your identity before processing certain data rights requests.