999cb Privacy Policy

1. Definitions

In this Privacy Policy, the following definitions apply:

• "999cb", "We", "Us", or "Our" refers to the operator of the 999cb online casino and sports betting platform at 999cb.org.
• "Platform" means the 999cb website, all associated pages, account systems, and any tools or services accessible through 999cb.org.
• "Player", "User", "You", or "Your" refers to any individual who accesses the 999cb Platform, creates an account, or interacts with our services in any capacity.
• "Personal Data" means any information relating to an identified or identifiable natural person that 999cb processes in the course of providing its services.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, or transfer.
• "KYC" means Know Your Customer identity verification procedures required by 999cb to confirm player identity and age before processing withdrawals.

2. Personal Data We Collect

999cb collects the following categories of Personal Data from players:

2.1 Registration Data

When you create a 999cb account, we collect your full legal name, date of birth, email address, Pakistani mobile number, and the username and password you select. This information is required to create and maintain your account and cannot be omitted.

2.2 Identity Verification (KYC) Data

To process withdrawals and comply with anti-fraud and anti-money laundering obligations, 999cb collects copies of government-issued identity documents — typically a Pakistani Computerised National Identity Card (CNIC) — and may additionally request proof of residential address or evidence of source of funds. This data is collected and stored in accordance with applicable regulatory requirements.

2.3 Financial Data

999cb collects information related to your payment transactions, including deposit and withdrawal amounts, dates, payment method references (e.g., JazzCash account identifiers, Easypaisa references, bank account details, and USDT wallet addresses), and transaction identifiers. 999cb does not store complete debit or credit card numbers on its own servers.

2.4 Transactional & Gaming Data

999cb maintains records of all wagers placed, game sessions played, sports bets made, outcomes, and account balance changes. This data is used for account administration, dispute resolution, regulatory compliance, and fraud prevention.

2.5 Technical & Device Data

When you access the 999cb Platform, we automatically collect IP address, browser type and version, operating system, device type, screen resolution, session duration, and pages visited. This data helps us maintain platform security, optimise performance, and detect anomalous access patterns.

2.6 Communications Data

If you contact 999cb support via email or any other channel, we retain records of those communications — including the content of messages, timestamps, and any attachments — for customer service quality assurance and dispute resolution purposes.

2.7 Responsible Gaming Data

Where you use 999cb's responsible gaming tools — including deposit limits, self-exclusion requests, or cooling-off periods — we record this information to enforce the restrictions you have set and to support safe gambling practices.

3. How We Collect Personal Data

999cb collects Personal Data through the following means:

• Directly from you — when you complete the registration form, submit KYC documentation, make deposits or withdrawals, contact support, or interact with any feature of the 999cb Platform.
• Automatically — through server logs, session tracking technology, and cookies when you access or browse the 999cb website.
• From third-party payment providers — including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT payment processors, who provide transaction confirmation data to 999cb to facilitate deposits and withdrawals.
• From identity verification services — where 999cb uses third-party KYC verification providers to confirm the authenticity of identity documents submitted by players.

4. Purposes of Processing

999cb processes Personal Data for the following specific purposes:

• Creating and administering your 999cb player account, including registration, login authentication, and account settings management.
• Processing deposits and withdrawals via JazzCash, Easypaisa, and other supported payment methods in PKR.
• Verifying player identity and age in compliance with KYC obligations, ensuring only players aged 18 and above access the platform.
• Detecting, investigating, and preventing fraud, collusion, money laundering, and other prohibited conduct on the 999cb platform.
• Providing customer support, resolving disputes, and responding to account queries submitted by Pakistani players.
• Administering bonuses, promotions, and responsible gaming tools including deposit limits and self-exclusion requests.
• Maintaining platform security, detecting unauthorised access attempts, and protecting the integrity of the 999cb betting and casino environment.
• Complying with applicable legal, regulatory, and reporting obligations.
• Sending transactional communications related to your account — such as deposit confirmations, withdrawal notifications, and security alerts.
• Sending marketing communications about 999cb promotions where you have given explicit consent and not subsequently withdrawn it.
• Analysing aggregated, anonymised usage data to improve the 999cb platform, game offering, and payment experience for Pakistani players.

5. Legal Basis for Processing

999cb processes your Personal Data on the following legal bases:

• Contractual necessity — processing required to create and administer your 999cb account and to deliver the services you have registered for, including payment processing and game access.
• Legal obligation — processing required to comply with KYC, anti-money laundering, and other applicable legal requirements, including retention of transaction records for the periods prescribed by law.
• Legitimate interests — processing carried out for fraud prevention, platform security, dispute resolution, and service improvement, where such processing does not override your fundamental privacy rights.
• Consent — processing for direct marketing communications, where your prior consent has been obtained and can be withdrawn at any time by contacting 999cb support.

6. Data Sharing & Disclosure

999cb does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your data in the following limited circumstances:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT processing partners receive only the transaction data required to process your deposit or withdrawal request.
• KYC verification providers — third-party identity verification services that assist 999cb in confirming the authenticity of documents submitted during the KYC process. These providers are contractually bound to process data solely for verification purposes.
• Technology and infrastructure providers — hosting, cloud storage, security, and analytics partners that support the operation of the 999cb platform under strict data processing agreements.
• Legal and regulatory authorities — where disclosure is required by applicable law, court order, or regulatory investigation. 999cb will comply with lawfully issued requests and will notify affected players where permitted by law to do so.
• Fraud prevention agencies — where 999cb shares data with industry fraud prevention databases to protect the platform and its players from fraudulent actors.

All third parties to whom 999cb discloses Personal Data are contractually required to implement appropriate technical and organisational security measures and to process data only for the purposes specified.

7. International Data Transfers

The 999cb platform serves players primarily in Pakistan. However, some of our technology infrastructure, payment processing partners, and KYC providers may be located in or operate from jurisdictions outside Pakistan. Where Personal Data is transferred internationally, 999cb takes reasonable steps to ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that which we maintain within our own systems. By using the 999cb platform, you acknowledge and consent to the transfer of your Personal Data as described in this section.

8. Data Retention

999cb retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Account data and KYC documents are retained for the duration of your active 999cb account and for a minimum of five years following account closure, in compliance with applicable anti-money laundering retention requirements.
• Transaction and gaming records are retained for a minimum of five years from the date of the relevant transaction.
• Support communications are retained for a minimum of three years from the date of the communication.
• Data held solely on the basis of your consent will be deleted promptly upon withdrawal of that consent, subject to any overriding legal retention obligations.

After applicable retention periods expire, 999cb will securely delete or anonymise Personal Data in accordance with our internal data disposal procedures.

9. Cookies & Tracking Technologies

The 999cb website uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse site usage. The following categories of cookies are used:

• Strictly necessary cookies — required for the 999cb website to function. These include session cookies that maintain your logged-in state and security cookies that protect against CSRF attacks. These cannot be disabled without breaking core platform functionality.
• Functional cookies — store your preferences such as language settings, display options, and responsible gaming tool configurations to improve your experience on return visits to 999cb.
• Analytics cookies — collect aggregated, anonymised data about how visitors use the 999cb platform, which pages are visited most frequently, and where players encounter difficulties. This data is used to improve platform performance and usability.

You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies may prevent you from accessing your 999cb account or using core platform features. 999cb does not use cookies to track your activity on third-party websites.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your Personal Data held by 999cb:

• Right of access — you may request a copy of the Personal Data that 999cb holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete Personal Data. Please note that changes to KYC-verified data will require re-verification.
• Right to erasure — you may request deletion of your Personal Data where it is no longer necessary for the purposes collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to restrict processing — you may request that 999cb restrict the processing of your data in certain circumstances, such as where the accuracy of data is contested.
• Right to data portability — you may request that 999cb provide your Personal Data in a structured, machine-readable format where processing is carried out by automated means on the basis of consent or contract.
• Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing carried out on the basis of legitimate interests, including direct marketing communications.

To exercise any of these rights, please contact 999cb support. The contact email is displayed as plain text in Section 15 below — it is not a clickable link. 999cb will respond to all verifiable requests within 30 calendar days.

11. Security Measures

999cb implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the 999cb Platform.
• Encrypted storage of sensitive account and KYC data on access-controlled servers.
• Multi-factor authentication options available to all 999cb account holders.
• Regular security audits and penetration testing of the 999cb platform infrastructure.
• Strict internal access controls limiting Personal Data access to authorised personnel only, on a need-to-know basis.
• Incident response procedures providing for prompt notification and remediation in the event of a data security incident affecting player data.

No system can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own 999cb login credentials and for notifying 999cb promptly of any suspected unauthorised account access.

12. Minors

The 999cb platform is strictly for users aged 18 and above. 999cb does not knowingly collect Personal Data from individuals under the age of 18. Where 999cb becomes aware that Personal Data has been collected from a minor, such data will be immediately deleted and the associated account closed. Parents and guardians are responsible for ensuring that minors in their household do not access the 999cb platform using the adult's device or account credentials.

13. Third-Party Links

The 999cb platform may contain links to third-party websites or services in navigational or informational contexts. 999cb is not responsible for the privacy practices of any third-party websites and does not endorse or control their data handling practices. Players should review the privacy policies of any third-party sites they visit independently of the 999cb platform.

14. Policy Updates

999cb reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. Material updates will be communicated to registered players via email to their registered address or via a prominent notice on the 999cb platform prior to the changes taking effect. The "Last Updated" date at the top of this page will be revised to reflect the most recent version. Continued use of the 999cb platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, please cease using the platform and request account closure.

15. Contact & Data Enquiries

For all privacy-related enquiries, data subject access requests, or concerns regarding how 999cb handles your Personal Data, please contact the 999cb support team. The 999cb support email is displayed as plain text below — it is not a clickable link:

[email protected]

999cb support is available 24 hours a day, 7 days a week in English for all Pakistani players. Data subject requests will be acknowledged within five business days and substantively responded to within 30 calendar days of receipt, subject to identity verification requirements.