Privacy Policy – 999sz Gaming Platform

1 Introduction

Welcome to the 999sz Privacy Policy. 999sz operates the online gaming platform at 999sz.pro, including the associated Android app and all related services. This policy explains how we collect, use, store and protect the personal data of players who register and use the platform.

By creating an account on 999sz, you confirm that you have read and understood this Privacy Policy and agree to the collection and use of your data as described here. If you do not agree, please do not register or continue using the platform.

We keep this policy straightforward and in plain language because we believe you have the right to understand exactly what happens with your data. If anything in this document is unclear, you are welcome to contact our support team for clarification at any time.

2 Data We Collect

We collect different categories of personal data depending on how you interact with the 999sz platform. The table below summarises what we collect and why.

3 How We Collect Your Data

We collect your personal data through the following channels:

• Direct registration: Information you provide when you create an account on 999sz, including your name, contact details and date of birth.
• Account activity: Data generated automatically when you log in, play games, make deposits or withdrawals, or interact with platform features.
• Identity verification: Documents you submit when completing KYC verification for withdrawals, such as a copy of your CNIC or passport.
• Payment transactions: Transaction references, wallet numbers and bank details provided when you deposit or withdraw in PKR.
• Support interactions: Information you share with our team through live chat, email or any other support channel.
• Cookies and tracking technologies: Technical data collected automatically when you visit the platform, as described in the Cookies section below.

We do not purchase or obtain personal data about you from social media platforms, data brokers or any other third-party sources for marketing purposes.

4 How We Use Your Data

Your data is used only for the purposes necessary to operate a safe, fair and functional gaming platform. Specifically, we use your data to:

• Create, maintain and manage your 999sz account.
• Verify your identity when required, particularly for withdrawals above the standard threshold.
• Process PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfers and other supported payment methods.
• Detect and prevent fraud, money laundering, account abuse and other prohibited activities.
• Monitor gameplay patterns as part of our responsible gaming obligations, flagging accounts that may be showing signs of problematic behaviour.
• Send you transactional communications about your account, such as deposit confirmations, withdrawal updates and security alerts.
• Respond to your support queries and resolve disputes relating to your account or game rounds.
• Improve platform performance, fix bugs and develop new features based on aggregated usage data.
• Send promotional communications about bonuses and offers where you have not opted out. You can opt out of marketing messages at any time by contacting support.

5 Payment Data

All financial transactions on 999sz are processed in Pakistani Rupees (PKR). We work with trusted local payment networks including JazzCash, Easypaisa, Raast, and standard bank transfer to handle deposits and withdrawals.

When you make a payment, transaction references and account identifiers are passed securely between 999sz and the relevant payment provider. We retain enough information to reconcile transactions, handle disputes and comply with our security obligations, but we do not store sensitive payment credentials such as full card numbers, JazzCash PINs or internet banking passwords.

• Payment data is transmitted over encrypted connections at all times.
• Transaction history is retained for a minimum of five years for security and reconciliation purposes.
• Deposits from payment methods not registered in your own name are not permitted, and any such deposit may be reversed pending investigation.
• If you believe an unauthorised transaction has occurred on your account, contact support immediately so we can place a hold while investigating.

6 Sharing Your Data

We do not sell, rent or trade your personal data to any third party. We share your information only in the limited circumstances listed below, and only to the extent necessary:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the data required to process your PKR transactions. Each of these providers maintains their own privacy and security standards.
• Identity verification providers: Where a third-party KYC service is used to verify your CNIC or passport, the necessary document data is shared with that provider for verification purposes only.
• Technology and infrastructure providers: Our hosting, security monitoring and platform software providers may process technical data about platform usage. These providers are bound by strict data processing agreements.
• Legal and regulatory requirements: We may disclose your data if required to do so by law, court order, or in response to a formal request from a government authority. We will notify you where legally permitted to do so.
• Security investigations: In the event of suspected fraud, account abuse or criminal activity, relevant data may be shared with appropriate investigative parties.

7 Cookies

The 999sz website and app use cookies and similar technologies to make the platform work properly and to improve your experience. A cookie is a small text file stored on your device when you visit a website. We use the following types:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. You cannot opt out of these without stopping use of the platform.
• Functional cookies: Remember your preferences such as language settings and last-visited game category, so you do not have to set them again on every visit.
• Analytics cookies: Help us understand how players navigate the platform, which games are most popular and where users encounter difficulties. This data is aggregated and anonymised — it does not identify you personally.

We do not use advertising or tracking cookies that follow you across other websites. If you wish to restrict or block cookies, you can do so through your browser settings, though disabling essential cookies will affect your ability to use the platform.

8 Data Security

Keeping your data safe is a core responsibility we take seriously. The security measures we have in place include:

• All data transmitted between your device and the 999sz platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Passwords are stored using one-way hashing. We cannot retrieve your password — only reset it through a verified process.
• Access to personal and financial data within our systems is restricted to authorised personnel on a need-to-know basis.
• Our infrastructure is monitored continuously for suspicious activity, unauthorised access attempts and potential security incidents.
• Regular internal security reviews are conducted to identify and address vulnerabilities before they can be exploited.

While we take all reasonable precautions, no online platform can guarantee absolute security. You play an important role in keeping your account safe — use a strong, unique password, do not share your login credentials, and contact us immediately if you suspect unauthorised access.

9 Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter, in line with our security and operational requirements. Specific retention periods are as follows:

• Account data: Retained for the lifetime of your account and for a minimum of 3 years after account closure, to handle any post-closure queries or disputes.
• Transaction records: Payment and withdrawal history is retained for a minimum of 5 years for security and reconciliation purposes.
• Identity documents: KYC documents are retained for as long as required by our security obligations and deleted securely once no longer needed.
• Support communications: Live chat transcripts and emails are retained for up to 2 years to support dispute resolution and quality improvement.
• Technical and usage logs: System logs are retained for up to 12 months and then purged automatically.

When data reaches the end of its retention period, it is deleted or anonymised securely so that it can no longer be linked to you personally.

10 Your Data Rights

You have the following rights in relation to the personal data that 999sz holds about you. To exercise any of these rights, contact our support team with your request and we will respond within a reasonable timeframe:

• Right to access: You can request a copy of the personal data we hold about you at any time.
• Right to correction: If any of your personal data is inaccurate or out of date, you can ask us to correct it. You can update basic account information directly from within your account settings.
• Right to deletion: You can request that we delete your personal data. We will process such requests subject to our legal obligations — for example, we are required to retain transaction records for a minimum period regardless of a deletion request.
• Right to restrict processing: In certain circumstances you can ask us to stop actively using your data while retaining it on file, for example while a dispute is being resolved.
• Right to data portability: You can ask us to provide your account data in a structured, machine-readable format so you can transfer it elsewhere.
• Right to withdraw consent: Where we rely on your consent to process data — such as for marketing communications — you can withdraw that consent at any time.

11 Minors

The 999sz platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been registered by a minor, the account will be closed immediately and any associated data will be deleted.

If you are a parent or guardian and believe that a person under 18 has registered an account on 999sz, please contact our support team immediately so we can take appropriate action. We take the protection of minors very seriously and will act promptly on any verified report.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable laws, or improvements to our data practices. When we make material changes, we will notify registered players via the email address on file or through a notice displayed on the platform.

The "Last updated" date at the top of this page will always reflect when the most recent revision was made. We encourage you to review this policy periodically. Continued use of the platform after a revised policy has been published means you accept the updated terms.

13 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how 999sz handles your personal data, please get in touch with our support team. We are available 24 hours a day, 7 days a week via live chat on the platform.

You can also reach us by email at [email protected] — this is a display address only; please do not reply to automated system notifications.

For any formal data rights request, please include your registered account name and a brief description of your request so we can handle it as efficiently as possible.