1. Home
  2. Privacy Policy
Data Protection • Privacy Rights • Pakistan
Last updated: 1 January 2025

Privacy Policy — How 999 x Handles Your Personal Data

At 999 x we take your privacy seriously. This Privacy Policy explains in plain, straightforward English what personal information we collect when you use the 999 x platform, why we collect it, how we store it safely, who we share it with, and what rights you have over your own data. Please read it carefully — it matters.

Create Your Account Terms & Conditions
Contents
999 x

Your data stays private — 999 x is built on transparency and trust

Privacy You Can Actually Understand

Most privacy policies are written by lawyers for lawyers. Long sentences, passive voice, paragraphs that seem designed to obscure rather than explain. We've deliberately written the 999 x Privacy Policy differently — in the kind of plain English that a Pakistani player scrolling on their mobile at 11pm can actually follow.

That doesn't mean we've cut corners. Every section of this policy covers what it needs to cover. When we say your data is protected with 256-bit SSL, that's a real technical specification — not marketing language. When we say we don't sell your data to advertisers, that's a binding commitment, not a vague assurance.

If anything in this policy is unclear after you've read it, contact 999 x support at support@999x.im and ask. We'd rather explain something twice than have you uncertain about how your personal information is being handled.

Our Privacy Commitments at a Glance

Six core privacy principles that guide every data decision at 999 x

256-bit SSL Encryption

Every piece of data transmitted between your device and 999 x — login credentials, payment details, personal information — travels through a 256-bit SSL encrypted connection. This is the same standard used by international banks. Your data cannot be intercepted in transit.

Your Data Is Never Sold

999 x does not sell, rent, or trade your personal data to third-party marketing companies, data brokers, or advertisers. The only parties who ever receive your data are those directly involved in providing the 999 x service — and they are bound by strict confidentiality agreements.

Secure Data Storage

All personal data is stored on secure servers with access controls, regular security audits, and intrusion detection systems in place. Access to stored player data within 999 x is limited to staff who specifically need it to perform their role — such as account support, fraud investigation, or payment processing.

Minimum Data Collection

999 x only collects the personal data it genuinely needs to operate the platform, verify your identity, process payments, and comply with legal obligations. We don't collect data speculatively or "just in case it might be useful one day". If a piece of information isn't needed to serve you, we don't collect it.

You Control Your Preferences

You can update your contact preferences, manage cookie settings, and request changes to how your data is used at any time through your account settings or by contacting support. Marketing communications are optional — you can opt out at any point without affecting your ability to use the 999 x platform.

Transparent About Everything

This Privacy Policy is written to be read — not to be buried in a footer link. 999 x notifies players by email when this policy is materially updated. We believe you have a right to know clearly and completely how your data is handled, and we've structured this document to make that as straightforward as possible.

Section 01

About This Privacy Policy

This Privacy Policy applies to the 999 x website at 999x.im and all associated mobile applications and services operated by 999 x ("we", "us", "the platform"). It governs how 999 x collects, uses, stores, shares, and protects the personal data of all registered players and visitors based in Pakistan and internationally.

This policy should be read alongside the 999 x Terms and Conditions and Responsible Gaming policy. Together, these three documents define the full relationship between 999 x and each player who uses the platform.

By registering an account on 999 x, making a deposit, or using any 999 x service, you confirm that you have read this Privacy Policy and consent to the collection and use of your personal data as described within it. If you do not agree with how 999 x handles personal data, you should not register an account or use the platform.

Data Controller: 999 x operates as the data controller for all personal data collected through the 999 x platform. For all data-related enquiries, contact us at support@999x.im with the subject line "Data Privacy Request".

999 x

From Hunza to Karachi — 999 x protects the privacy of every Pakistani player

Why Your Privacy Matters to 999 x

When you play on 999 x, you share things with us — your name, your phone number, your financial transactions. That's a genuine act of trust, and we don't take it lightly. The Pakistani online environment has had real incidents of data misuse by poorly run platforms, and we are very aware of that context.

The data protections 999 x has put in place aren't just compliance requirements — they reflect how we think a platform should operate. Your personal information should only be used to serve you, not to be monetised separately or shared without your knowledge.

Every staff member at 999 x who handles player data is trained on data protection principles. Access to personal data is logged, monitored, and subject to internal audit. A data breach at 999 x would be taken as seriously as any other critical system failure — because it is.

Section 02

What Personal Data 999 x Collects

The personal data 999 x collects falls into three categories: information you provide directly, information generated by your use of the platform, and information received from third-party providers involved in processing your transactions.

Data Category What It Includes When Collected
Identity Data Legal name, date of birth, CNIC or passport number, nationality, gender Registration and KYC verification
Contact Data Mobile number, email address, city and province of residence Registration
Payment Data Easypaisa/JazzCash number, bank account details (masked), transaction history On first deposit and withdrawal
Usage Data Login timestamps, game sessions, bet history, pages visited, session duration Continuously while using the platform
Device Data IP address, device type, operating system, browser type, mobile network On every platform access
Communication Data Support chat logs, emails, messages exchanged with 999 x team When you contact support
KYC Documents Copies of CNIC, passport, or other identity documents submitted for verification On verification request

999 x does not intentionally collect sensitive personal data beyond what is listed above. We do not collect biometric data, medical information, political opinions, or religious beliefs. We do not collect data from social media profiles or any source outside of direct interaction with the 999 x platform.

Section 03

Why 999 x Collects Your Data

Every piece of data 999 x collects has a specific, documented purpose. We do not collect data speculatively. The lawful bases for our data collection are: contract performance (providing the service you signed up for), legal obligation (compliance with anti-money laundering and identity verification requirements), legitimate interest (fraud detection and platform security), and consent (marketing communications and optional analytics).

  • Account Management: Identity and contact data is used to create and manage your 999 x account, verify your identity, and communicate with you about your account status, transactions, and security alerts.
  • Payment Processing: Payment data is used to process deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card networks. Transaction history is maintained for financial record-keeping and dispute resolution.
  • Fraud Detection and Security: Usage and device data help 999 x identify suspicious activity, detect account compromise, prevent bonus abuse, and flag potentially fraudulent transactions before they are processed.
  • Regulatory Compliance: Anti-money laundering (AML) obligations require 999 x to collect and verify identity information and to monitor and report certain transaction patterns. We are legally required to maintain these records for specified retention periods.
  • Platform Improvement: Anonymised usage data helps 999 x understand how players interact with the platform, which games are most popular, where the experience breaks down, and where improvements should be prioritised.
  • Marketing Communications (Consent-Based): With your explicit consent, 999 x may contact you about new promotions, bonuses, game launches, and events. You can withdraw this consent at any time by adjusting your preferences or contacting support.
  • Responsible Gaming: Behavioural data helps 999 x's responsible gaming systems identify patterns that may indicate a player is experiencing gambling-related difficulties, enabling proactive intervention where appropriate.
Section 04

How 999 x Stores and Protects Your Data

The security of your personal data is a technical priority at 999 x, not an afterthought. The following security measures are applied to all personal data stored and transmitted on the platform:

1
Transport Encryption

All data in transit between your device and 999 x servers is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to every interaction — login, deposit, game play, withdrawal request, and support chat.

2
Data at Rest Encryption

Stored personal data — including identity records, payment information, and account history — is encrypted at rest using AES-256 encryption on 999 x servers. Encryption keys are managed separately from the data they protect.

3
Access Controls

Access to player personal data within 999 x is granted on a strict need-to-know basis. Role-based access controls limit which staff can view which categories of data. All access is logged and subject to periodic audit review. Former employees have access revoked immediately upon departure.

4
Regular Security Audits

999 x conducts regular internal security reviews and periodic external penetration testing to identify vulnerabilities before they can be exploited. Security patches are applied on a priority basis when vulnerabilities are identified.

5
Breach Response Plan

In the event of a data breach affecting player information, 999 x has a documented incident response plan. Affected players will be notified promptly by email with details of what was compromised, what 999 x is doing about it, and what steps you should take to protect yourself.

Your role in security: 999 x can protect data at its end — but your account password is your responsibility. Use a strong, unique password for your 999 x account. Enable any two-factor authentication options available. Never share your password. If you think your account has been accessed by someone else, contact 999 x support immediately.

Section 05

Who 999 x Shares Your Data With

999 x shares personal data only with the parties listed below, and only to the extent necessary for the stated purpose. We do not sell personal data. We do not share data with marketing companies or data brokers. Every third party that receives 999 x player data is bound by a data processing agreement that restricts how they can use it.

  • Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank/card networks receive the financial information necessary to process your deposits and withdrawals. They are data controllers in their own right for the transactions they process and operate under their own privacy policies.
  • Identity Verification Services: When identity verification (KYC) is required, 999 x may use a third-party verification provider to check the authenticity of documents you submit. These providers receive only the data required for verification and are bound by strict confidentiality agreements.
  • Fraud Detection Services: 999 x uses specialist fraud detection technology to identify suspicious activity. These systems may process device data, behavioural patterns, and transaction data to generate risk scores. No personally identifiable information is shared beyond what is necessary for this purpose.
  • Customer Support Systems: The tools used to manage support conversations (live chat and email) are provided by third-party software companies who are contractually prohibited from using 999 x player data for any purpose other than providing the support infrastructure.
  • Law Enforcement and Regulators: 999 x will disclose player data to law enforcement agencies, financial regulators, or other government bodies when required to do so by law, court order, or legitimate regulatory request. 999 x will seek legal advice before complying with any data disclosure request that appears potentially unlawful or overbroad.

If 999 x is involved in a merger, acquisition, or sale of all or part of its assets, player data may be transferred as part of that transaction. Players will be notified by email before their data is transferred and becomes subject to a different privacy policy, with the option to close their account if they do not consent to the transfer.

999 x

Lahore to Peshawar — 999 x protects every player's data with the same standards

What 999 x Will Never Do With Your Data

There are categories of data use that 999 x will never engage in, regardless of any potential commercial benefit. We list them here explicitly so there is no ambiguity:

Sell your personal data to any third party for any purpose
Share your data with advertising networks or data brokers
Use your CNIC or passport for any purpose other than identity verification
Share your phone number or email with marketing companies
Disclose your bet history or financial data to employers, family members, or other private parties without your explicit consent or a valid legal order
Use your data to profile you in ways that are discriminatory or contrary to your interests as a player
Section 06

Cookies and Tracking Technologies

999 x uses cookies and similar tracking technologies on its website and mobile platform. A cookie is a small text file stored on your device when you visit a website. 999 x uses three categories of cookies:

  • Essential Cookies: These are required for the platform to function and cannot be disabled. They include cookies that maintain your login session, remember your currency and language preferences, and protect against cross-site request forgery attacks. No consent is required for essential cookies as they are strictly necessary.
  • Analytics Cookies: These help 999 x understand how players use the platform — which pages are visited most, how long sessions last, where players encounter errors. Analytics data is aggregated and anonymised wherever possible. You can opt out of analytics cookies through the cookie preference centre accessible from the platform footer.
  • Marketing and Retargeting Cookies: These are only placed on your device if you have explicitly consented. 999 x does not use marketing cookies for advertising on third-party websites. If consent-based marketing cookies are used, they are limited to tracking which 999 x promotional content you have viewed, to avoid showing you the same promotion repeatedly.

You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will prevent the 999 x platform from functioning correctly. Disabling analytics or marketing cookies has no effect on your ability to play or access any part of the 999 x service.

Section 07

Your Rights Over Your Personal Data

As a 999 x player, you have specific rights over your personal data. To exercise any of these rights, contact 999 x at support@999x.im with the subject line "Data Rights Request". We will respond within 30 days and may request proof of identity before actioning your request.

Right of Access

You have the right to request a copy of all personal data 999 x holds about you. We will provide this within 30 days of a verified request. The data will be provided in a readable format — not a raw database dump. This is sometimes called a "Subject Access Request" or SAR.

Right to Rectification

If any personal data 999 x holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data — such as your legal name and date of birth — cannot be changed after identity verification without re-submission of documents, to preserve the integrity of our KYC process.

Right to Erasure

You may request that 999 x delete your personal data. Note that 999 x is required by law to retain certain financial and identity records for regulatory compliance purposes — these cannot be deleted on request. Data that is not subject to a legal retention requirement can be deleted upon a verified erasure request. Your account will be permanently closed if an erasure request is granted.

Right to Restrict Processing

You can request that 999 x stop using your personal data for specific purposes — such as marketing communications — without requesting full deletion. We will implement the restriction within 5 business days of a verified request.

Right to Data Portability

Where 999 x processes your data on the basis of your consent or to perform a contract with you, you have the right to receive that data in a portable, machine-readable format (typically JSON or CSV) so that you can transfer it to another service provider if you choose.

Section 08

How Long 999 x Keeps Your Data

999 x retains personal data for as long as is necessary for the purpose for which it was collected, or for as long as required by legal and regulatory obligations. The following retention periods apply:

  • Account Data: Retained for the duration of your active account plus five years after account closure, to comply with anti-money laundering record-keeping requirements.
  • Transaction Records: All deposit and withdrawal records are retained for a minimum of five years from the date of the transaction, in compliance with financial regulations.
  • KYC Documents: Identity verification documents are retained for five years following account closure or the last completed transaction, whichever is later.
  • Communication Records: Support chat logs and email correspondence are retained for two years to support dispute resolution and service quality review.
  • Anonymised Analytics Data: Anonymised usage statistics that cannot be linked back to any individual player may be retained indefinitely for platform improvement purposes.

When a retention period expires, personal data is securely deleted or permanently anonymised in a manner that prevents reconstruction of the original data.

Section 09

Children's Privacy

999 x does not knowingly collect or process personal data from individuals under the age of 18. The 999 x platform is intended exclusively for adults. Registration on 999 x requires confirmation of being at least 18 years old, and age verification checks are conducted for all players.

If 999 x becomes aware that it has collected personal data from a person under 18, that data will be deleted immediately and the associated account closed. If you are a parent or guardian and believe that a minor has registered on 999 x, please contact us immediately at support@999x.im with the subject line "Underage Account" and we will investigate and act promptly.

Section 10

Changes to This Privacy Policy

999 x may update this Privacy Policy from time to time to reflect changes in how we handle data, changes in the services we offer, or changes in applicable law. The "Last Updated" date at the top of this document will always reflect the most recent revision.

When we make material changes — changes that meaningfully affect how your personal data is collected, used, or shared — we will notify you by email at least 14 days before the changes take effect. Minor updates (such as clarifications that don't change the substance of our commitments) may be made without prior notice.

Continued use of the 999 x platform after the effective date of an updated Privacy Policy constitutes acceptance of the updated policy. If you do not agree with any changes, you should close your account before the changes take effect.

We recommend checking this page periodically. The version history of this policy is available on request from support — so if you want to know what changed between two versions, just ask and we'll summarise the differences clearly.

Section 11

Contact 999 x About Privacy

For all data privacy enquiries — whether you want to exercise a data right, report a concern, ask a question about how your data is handled, or report a suspected data breach affecting your account — contact the 999 x data privacy team using the details below:

Email: support@999x.im — use the subject line "Data Privacy Request" for all privacy-related matters.

Response Time: Privacy enquiries are handled within 30 calendar days. Complex or high-volume access requests may take longer, in which case we will notify you of the extended timeline within the initial 30-day window.

Verification: We will ask you to verify your identity before actioning any data rights request. This is to protect you — we cannot act on a data request made by someone who is not the account holder.

If you believe 999 x has not handled your personal data in accordance with this policy and you are not satisfied with our response to your concern, you have the right to raise the matter with the relevant data protection authority or regulator in your jurisdiction.

Ready to Play on 999 x?

Your privacy is protected from day one. Register your free 999 x account in under two minutes and start playing Pakistan's favourite games with complete confidence that your data is secure.

Register Free Read Our FAQ

Related Documents

Read these alongside the Privacy Policy for a complete picture of how 999 x operates

Terms and Conditions

The full rules governing your use of the 999 x platform — account registration, deposits and withdrawals, bonus terms, prohibited conduct, and dispute resolution. The Terms and this Privacy Policy together form your complete agreement with 999 x.

Responsible Gaming

How 999 x protects players from gaming-related harm. Deposit limits, session controls, self-exclusion tools, and information about recognising and addressing problem gambling. Available to all players at all VIP tiers.

FAQ

Quick, plain-English answers to the questions Pakistani 999 x players ask most often — about accounts, payments, bonuses, games, and privacy. A fast way to find answers before contacting support.