This Privacy Policy explains how 999win ("we", "us", "our") collects, uses, stores, and protects the personal data of players who register and use the 999win platform at 999win.lol. It also describes the rights available to you as a data subject and the choices you have regarding your personal information. We are committed to handling your data responsibly, transparently, and in accordance with our obligations under applicable data protection legislation and our international gaming licence requirements.
A plain-language summary of the six core rights every 999win player holds over their personal data. Full legal detail follows in the policy text below.
You may request a full copy of all personal data 999win holds about you at any time. We will provide this information in a structured, commonly used, machine-readable format within 30 days of a verified request.
If any personal data 999win holds about you is inaccurate or incomplete, you have the right to request correction. Account profile details can often be updated directly from your 999win account settings; contact support for KYC document corrections.
You may request deletion of your personal data where 999win no longer has a legitimate basis for retaining it. Note that certain data must be retained for the duration required by our gaming licence and applicable anti-money laundering regulations, even after account closure.
You have the right to object to the processing of your personal data for direct marketing purposes and to request restriction of processing where you contest the accuracy of the data or the legitimacy of the processing activity.
Where processing is carried out by automated means based on your consent or a contractual obligation, you may request that 999win transfer your personal data to another controller in a structured, machine-readable format where technically feasible.
Submit your data rights request to the 999win support team via live chat or email. We will verify your identity before processing any request. All requests are acknowledged within 72 hours and fulfilled within 30 days unless an extension is required by law.
Plain-Language Summary: 999win collects personal data to operate your account, verify your identity, process payments in PKR, prevent fraud, and comply with our gaming licence obligations. We do not sell your data to third parties. You can request access to, correction of, or deletion of your data at any time by contacting our support team. This policy applies to all Pakistani players using the 999win platform from any city.
1.1 For the purposes of this Privacy Policy, the data controller is the operator of the 999win platform, accessible at 999win.lol and all associated subdomains. References to "999win", "we", "us", or "our" in this document refer to this entity in its capacity as the controller of your personal data.
1.2 999win operates under an international gaming licence, which imposes mandatory obligations regarding the collection, verification, and retention of player personal data as part of Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming compliance requirements. These regulatory obligations form a significant part of the legal basis for our data processing activities.
1.3 Our designated data protection contact can be reached at the email address provided in Section 16 of this policy. All formal data protection queries, subject access requests, and complaints should be directed to this contact point.
999win collects the following categories of personal data from players and prospective players:
3.1 Directly from you: The majority of personal data 999win holds is provided directly by you during account registration, KYC verification, payment processing, customer support interactions, and promotional participation.
3.2 Automatically: Technical data — including IP address, device information, session data, and cookies — is collected automatically when you access the 999win platform, regardless of whether you are logged in to an account.
3.3 From third-party verification providers: To fulfil our identity verification and AML compliance obligations, 999win may receive data from third-party KYC verification services and fraud prevention agencies. Data received from these sources is used solely for the verification and compliance purposes for which it was obtained.
3.4 From payment processors: Payment confirmation data — including transaction status, reference numbers, and payment method identifiers — is received from our payment processing partners (including JazzCash, EasyPaisa, and bank transfer processors) to confirm and record completed transactions.
999win processes your personal data under the following legal bases, depending on the nature and purpose of the processing activity:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (Terms & Conditions) |
| Identity verification (KYC) | Legal obligation (gaming licence requirement) |
| Payment processing and withdrawal | Performance of a contract |
| Fraud detection and prevention | Legitimate interests / legal obligation |
| Anti-money laundering compliance | Legal obligation |
| Responsible gaming monitoring | Legal obligation / legitimate interests |
| Marketing communications | Consent (where provided) |
| Platform analytics and improvement | Legitimate interests |
| Customer support | Performance of a contract / legitimate interests |
5.1 999win uses the personal data it collects for the following specific purposes:
What We Do Not Do: 999win does not sell, rent, or otherwise commercially transfer your personal data to any third party for their independent marketing or commercial purposes. Your data is shared only as described in Section 6 of this policy and only to the extent necessary for the stated purpose.
6.1 999win may share your personal data with the following categories of third parties, in each case only to the extent necessary for the specified purpose:
6.2 All third-party data processors engaged by 999win are subject to written data processing agreements that impose data protection standards equivalent to those applied by 999win itself. Third-party processors may not use your data for purposes beyond those specified in the applicable agreement.
7.1 999win retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods mandated by our gaming licence and applicable law.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Gaming licence / AML obligation |
| KYC identity documents | Duration of account + 5 years post-closure | Legal obligation |
| Transaction records | Duration of account + 5 years post-closure | AML / financial regulation |
| Bet and game history | Duration of account + 2 years post-closure | Legitimate interests / disputes |
| Customer support records | 2 years from last interaction | Legitimate interests |
| Self-exclusion records | Duration of exclusion + 7 years | Legal obligation / player protection |
| Marketing consent records | Until consent withdrawn + 2 years | Legal obligation (consent records) |
7.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised and cannot be re-linked to any individual falls outside the scope of this policy and may be retained indefinitely for analytical purposes.
8.1 The 999win platform uses cookies and similar technologies to enable core functionality, measure platform performance, and (where consent is given) deliver personalised content and promotional materials.
8.2 The following categories of cookies are used on 999win.lol:
8.3 Most browsers allow you to view, manage, and delete cookies through the browser's settings menu. Deleting or blocking strictly necessary cookies will impair your ability to use the 999win platform. Blocking other cookie categories will not affect your ability to access your account or place bets.
9.1 999win implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, 999win will notify you and the applicable supervisory authority within the timeframes required by applicable law. Notifications will be sent to your registered mobile number or via account notification.
10.1 As an internationally licensed gaming operator, 999win may transfer personal data to data processors located in jurisdictions outside your home country of Pakistan. Such transfers occur in connection with IT hosting, KYC verification, payment processing, and game software operation.
10.2 Where personal data is transferred to countries that do not have data protection laws equivalent to those in the jurisdiction of 999win's gaming licence, 999win ensures adequate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses.
11.1 The 999win platform is strictly restricted to individuals aged 21 years or older. 999win does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been submitted by a person under 21, that data will be deleted immediately and the associated account will be permanently suspended.
11.2 Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms including 999win. If you believe a minor has accessed or registered an account at 999win, please contact our support team immediately.
12.1 Subject to applicable law and the retention obligations described in Section 7, you have the following rights in relation to your personal data held by 999win:
12.2 To exercise any of the above rights, please contact the 999win support team via live chat or email (see Section 16). You will be asked to verify your identity before your request is processed. We will acknowledge your request within 72 hours and fulfil it within 30 days, or notify you if an extension is required.
13.1 With your prior consent, 999win may send you marketing communications about promotions, bonuses, new games, and special events — via SMS to your registered Pakistani mobile number, in-platform notifications, and email.
13.2 You may withdraw consent for marketing communications at any time by updating your communication preferences in your 999win account settings, or by contacting the support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect account-essential communications (such as deposit confirmations, withdrawal notifications, or security alerts).
13.3 Even where you have not provided explicit marketing consent, 999win may communicate account-essential information and service notifications to your registered mobile number or account inbox. These communications are necessary for the operation of your account and cannot be opted out of while your account remains active.
14.1 The 999win platform may contain links to third-party websites, including game provider information pages or payment method documentation. These links are provided for informational convenience only. 999win does not operate or control any third-party website and accepts no responsibility for the privacy practices, data handling, or content of any linked third-party site.
14.2 We encourage you to review the privacy policy of any third-party website you visit before providing personal data to that site. The 999win Privacy Policy applies only to data collected through 999win.lol and associated 999win services.
15.1 999win reserves the right to update this Privacy Policy at any time. Where changes are material — that is, where they significantly affect how your personal data is used or your rights in relation to it — we will provide advance notice via in-platform notification and/or SMS to your registered mobile number before the changes take effect.
15.2 The "Last Updated" date at the top of this policy will be revised on each update. Continued use of the 999win platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised policy, you must cease using the platform and close your account.
For all data protection queries, subject access requests, complaints, or general privacy questions relating to your 999win account, please contact us through the following channels:
Please include "Privacy / Data Request" in the subject line of all data-related email correspondence. Include your registered mobile number and a clear description of your request. We will verify your identity before processing any access, rectification, erasure, or portability request.
If you are not satisfied with 999win's response to a data protection complaint, you have the right to escalate the matter to the supervisory authority designated under the jurisdiction of 999win's gaming licence. Details of the applicable supervisory authority will be provided upon request.
Our support team is available around the clock to help with data requests, account questions, or anything else you need. Your privacy at 999win is always our priority.